Commit graph

17 commits

Author SHA1 Message Date
Andras Bacsai
b3256d4df1 fix(security): harden model assignment and sensitive data handling
Restrict mass-assignable attributes across user/team/redis models and
switch privileged root/team creation paths to forceFill/forceCreate.

Encrypt legacy ClickHouse admin passwords via migration and cast the
correct ClickHouse password field as encrypted.

Tighten API and runtime exposure by removing sensitive team fields from
responses and sanitizing Git/compose error messages.

Expand security-focused feature coverage for command-injection and mass
assignment protections.
2026-03-29 20:56:04 +02:00
Andras Bacsai
9c3345318a fix(user): ensure email attributes are stored in lowercase for consistency and prevent case-related issues 2025-09-05 17:44:34 +02:00
Andras Bacsai
63cff9e399 fix: lower case emails only 2024-11-03 15:30:45 +01:00
Jeremy Angele
6842904cb5 Remove deprecated fortify password policy and add a stricter one 2024-10-28 21:57:00 +01:00
Andras Bacsai
83549965ca Refactor instanceSettings() function for improved code readability 2024-10-01 10:37:40 +02:00
Thijmen
d86274cc37 Fix styling 2024-06-10 20:43:34 +00:00
Andras Bacsai
165f0a3d4a feat: add email verification for cloud 2023-10-09 14:20:55 +02:00
Andras Bacsai
f2228cec7b testing php storm code cleanup and styling 2023-08-08 11:51:36 +02:00
Andras Bacsai
98d057a2ac remove Logs:: 2023-07-26 13:33:48 +02:00
Andras Bacsai
3f3036961e test 2023-06-13 15:59:25 +02:00
Andras Bacsai
b097842d01 roles 2023-06-09 15:55:21 +02:00
Andras Bacsai
4156ba8908 fix instanceSettings 2023-05-16 17:09:50 +02:00
Andras Bacsai
50316c9cf6 settings view 2023-04-25 10:06:45 +02:00
Andras Bacsai
ff5ff7f310 Add root team + localhost (coolify host) in prod seeder 2023-04-14 12:54:29 +02:00
Andras Bacsai
1905ed0dc6 fix registration 2023-04-13 17:17:30 +02:00
Andras Bacsai
408236b6b1 wip 2023-04-13 15:48:27 +02:00
Andras Bacsai
e47d493776 Add users, teams, authentication, profile/login/register/navbar views 2023-03-24 14:54:17 +01:00