Andras Bacsai
43f33d94ad
Merge remote-tracking branch 'origin/next' into audit-policies
...
# Conflicts:
# app/Http/Controllers/Api/SecurityController.php
# app/Http/Controllers/Api/ServersController.php
# app/Livewire/Admin/Index.php
# app/Livewire/Destination/Show.php
# app/Livewire/NavbarDeleteTeam.php
# app/Livewire/Project/Application/Previews.php
# app/Livewire/Project/DeleteProject.php
# app/Livewire/Project/Shared/ResourceOperations.php
# app/Livewire/Server/Resources.php
# app/Livewire/Server/ValidateAndInstall.php
# app/Livewire/Storage/Show.php
# resources/views/livewire/dashboard.blade.php
# resources/views/livewire/project/application/heading.blade.php
# resources/views/livewire/project/database/heading.blade.php
# resources/views/livewire/project/service/heading.blade.php
# resources/views/livewire/project/shared/environment-variable/show.blade.php
# resources/views/livewire/project/shared/scheduled-task/show.blade.php
# tests/Feature/Security/TrustHostsMiddlewareTest.php
2026-04-19 15:19:37 +02:00
Andras Bacsai
e36622fdfb
refactor: scope server and project queries to current team
...
Ensure Server and Project lookups in Livewire components and API
controllers use team-scoped queries (ownedByCurrentTeam / whereTeamId)
instead of unscoped find/where calls. This enforces consistent
multi-tenant isolation across all user-facing code paths.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-28 12:29:08 +01:00
Andras Bacsai
86b05b902a
fix(auth): enforce authorization checks across API and Livewire components
...
- Add authorization checks to API controller endpoints (view, create, update, delete)
- Wrap Livewire component methods with try-catch for consistent error handling
- Add AuthorizesRequests trait to components requiring authorization checks
- Ensure all sensitive operations verify user permissions before execution
- Implement unified error handling with handleError() helper function
2026-02-25 14:20:29 +01:00
Andras Bacsai
ef1abe17b8
refactor(redirect): replace redirect calls with redirectRoute helper for consistency
2025-12-26 13:29:59 +01:00
Andras Bacsai
ae1b0de561
feat(auth): enhance authorization checks in Livewire components for resource management
2025-08-26 10:27:38 +02:00
peaklabs-dev
5a38b21d95
fix project deletion and refactor some code
2024-10-18 13:48:41 +02:00
ayntk-ai
dfd218ec06
fixes here and there
2024-09-02 19:27:21 +02:00
ayntk-ai
b656cabb33
delete project confirmation
2024-08-31 15:07:50 +02:00
ayntk-ai
9136d7acdc
WIP more delete confirmations
2024-08-30 20:00:04 +02:00
Thijmen
d86274cc37
Fix styling
2024-06-10 20:43:34 +00:00
Andras Bacsai
8ff7aeb78b
ui: new modal component
2024-01-31 14:18:59 +01:00
Andras Bacsai
4c3907c296
refactor routes
2024-01-07 16:23:41 +01:00
Andras Bacsai
f03aa57758
fix: routing, switch back to old one
2023-12-27 16:45:01 +01:00
Andras Bacsai
f934dfef33
wip livewire migration
2023-12-07 22:56:55 +01:00
Andras Bacsai
718603e37e
wip: migrate to livewire 3
2023-12-07 19:06:32 +01:00
