-
-
- @if ($server->proxySet())
-
-
- @endif
+@php
+ $serverPageItems = [
+ [
+ 'label' => 'Configuration',
+ 'route' => 'server.show',
+ 'active' => request()->routeIs('server.show', 'server.advanced', 'server.private-key', 'server.cloud-provider-token', 'server.ca-certificate', 'server.cloudflare-tunnel', 'server.docker-cleanup', 'server.destinations', 'server.log-drains', 'server.metrics', 'server.swarm', 'server.delete'),
+ ],
+ [
+ 'label' => 'Proxy',
+ 'route' => 'server.proxy',
+ 'active' => request()->routeIs('server.proxy', 'server.proxy.*'),
+ 'visible' => ! $server->isSwarmWorker() && ! $server->settings->is_build_server,
+ ],
+ [
+ 'label' => 'Sentinel',
+ 'route' => 'server.sentinel',
+ 'active' => request()->routeIs('server.sentinel', 'server.sentinel.*'),
+ 'visible' => $server->isFunctional() && ! $server->isSwarm() && ! $server->settings->is_build_server && auth()->user()?->can('viewSentinel', $server),
+ ],
+ [
+ 'label' => 'Resources',
+ 'route' => 'server.resources',
+ 'active' => request()->routeIs('server.resources'),
+ ],
+ [
+ 'label' => 'Terminal',
+ 'route' => 'server.command',
+ 'active' => request()->routeIs('server.command'),
+ 'navigate' => false,
+ 'visible' => auth()->user()?->can('canAccessTerminal'),
+ ],
+ [
+ 'label' => 'Security',
+ 'route' => 'server.security.patches',
+ 'active' => request()->routeIs('server.security.patches'),
+ 'visible' => auth()->user()?->can('update', $server),
+ ],
+ ];
+ $proxyMenuItems = [
+ [
+ 'label' => 'Configuration',
+ 'route' => 'server.proxy',
+ 'active' => request()->routeIs('server.proxy'),
+ ],
+ [
+ 'label' => 'Dynamic Configurations',
+ 'route' => 'server.proxy.dynamic-confs',
+ 'active' => request()->routeIs('server.proxy.dynamic-confs'),
+ 'visible' => $server->proxySet(),
+ ],
+ [
+ 'label' => 'Logs',
+ 'route' => 'server.proxy.logs',
+ 'active' => request()->routeIs('server.proxy.logs'),
+ 'visible' => $server->proxySet(),
+ 'navigate' => false,
+ ],
+ ];
+
+ $serverPageItems = array_values(array_filter(
+ $serverPageItems,
+ fn (array $item): bool => $item['visible'] ?? true,
+ ));
+ $proxyMenuItems = array_values(array_filter(
+ $proxyMenuItems,
+ fn (array $item): bool => $item['visible'] ?? true,
+ ));
+ $activeProxyMenuItem = collect($proxyMenuItems)->firstWhere('active', true) ?? $proxyMenuItems[0];
+ $activeProxyMenuValue = (($activeProxyMenuItem['navigate'] ?? true) ? 'navigate' : 'location').'|proxy|'.route($activeProxyMenuItem['route'], $parameters);
+@endphp
+
+
+
+
+
+
+
+
diff --git a/resources/views/components/server/sidebar-security.blade.php b/resources/views/components/server/sidebar-security.blade.php
index e61d23c89..9e1071854 100644
--- a/resources/views/components/server/sidebar-security.blade.php
+++ b/resources/views/components/server/sidebar-security.blade.php
@@ -1,10 +1,127 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
...and many more at [GitHub Sponsors](https://github.com/sponsors/coollabsio)
From b0f0f7d8d03e6e5e3a6a3d0d98eb5825042cbe0f Mon Sep 17 00:00:00 2001
From: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
Date: Wed, 8 Jul 2026 09:42:52 +0200
Subject: [PATCH 2/2] feat: harden auth flows and server mobile navigation
Add normalized email identity rate limiting for registration and forgot-password requests, and refresh Sentinel status from restart broadcasts.
Rework server sidebars and navbar for mobile menus and active status visibility.
---
app/Actions/Fortify/CreateNewUser.php | 53 ++++
app/Livewire/Server/Navbar.php | 10 +
app/Providers/FortifyServiceProvider.php | 14 +-
bootstrap/helpers/email.php | 20 ++
.../resources/breadcrumbs.blade.php | 2 +-
.../components/server/sidebar-proxy.blade.php | 153 +++++++++--
.../server/sidebar-security.blade.php | 135 +++++++++-
.../server/sidebar-sentinel.blade.php | 127 ++++++++-
.../views/components/server/sidebar.blade.php | 245 ++++++++++++++----
.../application/configuration.blade.php | 2 +-
.../project/database/configuration.blade.php | 2 +-
.../project/service/configuration.blade.php | 2 +-
.../service/database-backups.blade.php | 2 +-
.../livewire/project/service/index.blade.php | 2 +-
.../views/livewire/server/advanced.blade.php | 4 +-
.../server/ca-certificate/show.blade.php | 2 +-
.../views/livewire/server/charts.blade.php | 2 +-
.../cloud-provider-token/show.blade.php | 2 +-
.../server/cloudflare-tunnel.blade.php | 2 +-
.../views/livewire/server/delete.blade.php | 2 +-
.../livewire/server/destinations.blade.php | 2 +-
.../livewire/server/docker-cleanup.blade.php | 2 +-
.../livewire/server/log-drains.blade.php | 2 +-
.../views/livewire/server/navbar.blade.php | 79 +++++-
.../server/private-key/show.blade.php | 2 +-
.../proxy/dynamic-configurations.blade.php | 2 +-
.../livewire/server/proxy/logs.blade.php | 2 +-
.../livewire/server/proxy/show.blade.php | 2 +-
.../views/livewire/server/resources.blade.php | 2 +-
.../server/security/patches.blade.php | 2 +-
.../server/security/terminal-access.blade.php | 4 +-
.../livewire/server/sentinel/logs.blade.php | 2 +-
.../livewire/server/sentinel/show.blade.php | 2 +-
.../views/livewire/server/show.blade.php | 2 +-
.../views/livewire/server/swarm.blade.php | 2 +-
tests/Feature/ForgotPasswordRateLimitTest.php | 48 ++++
tests/Feature/MobileResourceMenuTest.php | 103 ++++++++
tests/Feature/RegistrationRateLimitTest.php | 72 +++++
.../Feature/SentinelPushDeduplicationTest.php | 13 +-
.../ServerNavbarStatusVisibilityTest.php | 29 +++
tests/Unit/EmailIdentityHelperTest.php | 16 ++
tests/Unit/ServerHeaderLayoutTest.php | 19 ++
42 files changed, 1064 insertions(+), 128 deletions(-)
create mode 100644 bootstrap/helpers/email.php
create mode 100644 tests/Feature/ForgotPasswordRateLimitTest.php
create mode 100644 tests/Feature/RegistrationRateLimitTest.php
create mode 100644 tests/Unit/EmailIdentityHelperTest.php
create mode 100644 tests/Unit/ServerHeaderLayoutTest.php
diff --git a/app/Actions/Fortify/CreateNewUser.php b/app/Actions/Fortify/CreateNewUser.php
index cddf66389..44a03c17d 100644
--- a/app/Actions/Fortify/CreateNewUser.php
+++ b/app/Actions/Fortify/CreateNewUser.php
@@ -4,7 +4,9 @@
use App\Models\Team;
use App\Models\User;
+use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\RateLimiter;
use Illuminate\Support\Facades\Validator;
use Illuminate\Validation\Rule;
use Illuminate\Validation\Rules\Password;
@@ -12,6 +14,16 @@
class CreateNewUser implements CreatesNewUsers
{
+ private const REGISTRATION_IP_MAX_ATTEMPTS = 3;
+
+ private const REGISTRATION_IP_DECAY_SECONDS = 600;
+
+ private const REGISTRATION_EMAIL_IDENTITY_MAX_ATTEMPTS = 3;
+
+ private const REGISTRATION_EMAIL_IDENTITY_DECAY_SECONDS = 3600;
+
+ public function __construct(private readonly Request $request) {}
+
/**
* Validate and create a newly registered user.
*
@@ -23,6 +35,9 @@ public function create(array $input): User
if (! $settings->is_registration_enabled) {
abort(403);
}
+
+ $this->ensureRegistrationIsNotRateLimited($input);
+
Validator::make($input, [
'name' => ['required', 'string', 'max:255'],
'email' => [
@@ -72,4 +87,42 @@ public function create(array $input): User
return $user;
}
+
+ /**
+ * @param array