301 Commits

Author	SHA1	Message	Date
Gani Georgiev	dadbca5248	use the original record id in the update manage rule checks	2025-01-03 17:35:21 +02:00
Gani Georgiev	a43f4bf155	reuse the random identifier	2025-01-01 16:41:47 +02:00
Gani Georgiev	3074ed3c5e	fixed comment typos	2024-12-30 21:58:29 +02:00
Gani Georgiev	26cb1cef37	added ServeEvent.InstallerFunc field	2024-12-30 20:30:07 +02:00
Gani Georgiev	a8952cfca2	[#6201] expanded the hidden fields check and allow targetting hidden fields in the List API rule	2024-12-29 17:31:58 +02:00
Gani Georgiev	d34c8ec048	added record.SetRandomPassword() helper and updated oauth2 autogenerated password handling	2024-12-26 13:24:03 +02:00
Gani Georgiev	56f951e5a2	added crons web apis and ui listing	2024-12-25 22:24:24 +02:00
Gani Georgiev	47bd4ca11e	eagerly interrupt waiting for the email alert send in case it takes longer than 15s	2024-12-24 12:13:33 +02:00
Gani Georgiev	39df26ee21	changed store.Store to accept generic key type	2024-12-23 15:44:00 +02:00
Gani Georgiev	f27d9f1dc9	synced with master	2024-12-22 10:24:44 +02:00
Gani Georgiev	f6407b903b	[#6152] skip the default body size limit for the backup endpoint	2024-12-20 13:45:17 +02:00
Gani Georgiev	76b9051011	[#5964] refresh the token key on email change	2024-12-17 11:44:27 +02:00
Gani Georgiev	e51456bce2	[#6073] added poc implementation for the dry submit removal	2024-12-11 18:43:48 +02:00
Gani Georgiev	77ac44a49a	moved the default UI CSP as response header	2024-12-02 13:45:44 +02:00
Gani Georgiev	79f6f4ee60	fixed comment typo	2024-11-28 15:21:19 +02:00
Gani Georgiev	ab7194a639	fixed gzip middleware not applying when serving static files	2024-11-28 13:51:43 +02:00
Gani Georgiev	cb2b27f6ed	updated otp request error message	2024-11-26 19:51:21 +02:00
Gani Georgiev	fab334fca6	updated error messages	2024-11-25 11:28:20 +02:00
Gani Georgiev	73361370f0	added list hidden field filter test	2024-11-24 15:35:42 +02:00
Gani Georgiev	e9ece220d6	added env variables support for the thumbs generation limits	2024-11-23 20:38:30 +02:00
Gani Georgiev	c3b347af4b	added note and tests regarding the shared batch Authorization header	2024-11-23 11:54:25 +02:00
Gani Georgiev	e5800875c2	updated ui/dist and added fallback debug log	2024-11-22 23:30:44 +02:00
Gani Georgiev	2e43518bb4	synced ported cors middleware	2024-11-22 23:19:23 +02:00
Gani Georgiev	305e183f58	added apis.ToApiError alias	2024-11-22 20:44:29 +02:00
Gani Georgiev	5d8a8dd7d8	updated godoc and renamed cors middleware handler	2024-11-21 22:22:58 +02:00
Gani Georgiev	c2e7ab8d41	fixed oauth2 redirect test	2024-11-21 12:11:00 +02:00
Gani Georgiev	7ee6b11e9d	return an error in case of required MFA so that external handlers can react if necessary	2024-11-21 11:12:25 +02:00
Gani Georgiev	d0795bd849	updated tests	2024-11-19 22:37:44 +02:00
Gani Georgiev	08f2190ad1	[#5898] instead of unregister, unset the realtime client auth state on delete of the related auth record	2024-11-19 22:36:32 +02:00
Gani Georgiev	d919d55b5e	allow mixing existing file names and new uploaded files	2024-11-19 17:45:15 +02:00
Gani Georgiev	9fe4f87e5b	added required validator for the TextField.Pattern option in case it is a primary key	2024-11-19 17:21:43 +02:00
Gani Georgiev	52e85a8036	added oauth2 db errors handling and replaced the auth response map with a struct	2024-11-18 21:16:20 +02:00
Gani Georgiev	70df03ffbb	fixed rate limiter rules matching to acount for the Audience field	2024-11-18 14:46:06 +02:00
Gani Georgiev	846136dcfb	restored mfa ErrNoRows check	2024-11-13 20:24:52 +02:00
Gani Georgiev	cc833ad643	updated mfa defaults and errors check	2024-11-13 20:14:27 +02:00
Gani Georgiev	9f606bdeca	otp changes - added sentTo field, allow e.Record to be nil when requesting OTP, etc.	2024-11-13 18:34:43 +02:00
Gani Georgiev	10a5c685ab	removed the dynamic dashboard path option as it could complicate unnecessary too many things (oauth2 redirects, default email templates, etc.)	2024-11-12 12:32:26 +02:00
Gani Georgiev	5e6d4d2126	added rate limit helpers for future use	2024-11-11 14:24:54 +02:00
Gani Georgiev	c38e7c36a6	added throttling on too many failed search attempts	2024-11-11 14:24:38 +02:00
Gani Georgiev	339399b0a4	updated otp manual rate limiter	2024-11-09 12:24:46 +02:00
Gani Georgiev	f6aef4471d	added RateLimitRule.Audience field	2024-11-08 18:04:13 +02:00
Gani Georgiev	1bd0baf328	updated v0.22.x changelog	2024-11-07 13:00:29 +02:00
Gani Georgiev	241a81e1fc	updated installer note	2024-11-06 20:06:34 +02:00
Gani Georgiev	bed45beb13	updated comments and pass the dashboard path into the installer	2024-11-06 19:19:16 +02:00
Gani Georgiev	e4cd6810ab	always register the installer hooks in case the superuser is created by a console command	2024-11-06 14:23:16 +02:00
Gani Georgiev	f38700982c	removed RequestEvent.UnsafeRealIP	2024-11-05 21:49:45 +02:00
Gani Georgiev	9506669095	refactored installer and removed RequireSuperuserAuthOnlyIfAny	2024-11-05 21:12:17 +02:00
Gani Georgiev	4f67dba6cb	[#5800] skip default loadAuthToken middleware if e.Auth is already set	2024-11-05 09:08:52 +02:00
Gani Georgiev	b3d88349d7	updated superusers test tokens with the new id	2024-11-04 15:48:28 +02:00
Gani Georgiev	83d91b3dd5	added realtime topic length validator	2024-11-03 13:14:39 +02:00