Andras Bacsai 3cc416a806 Restrict upgrade-status endpoint to authenticated root team members ... - Add auth:sanctum middleware to /api/upgrade-status route - Check user belongs to root team (id 0) before returning status - Return 403 if user is not authorized - Update frontend to send credentials with fetch request - Update OpenAPI docs with 401/403 responses 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>		2025-12-12 21:16:36 +01:00
..
ApplicationsController.php	feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner	2025-12-11 12:12:43 +01:00
CloudProviderTokensController.php	fix: return actual error message from token validation endpoint	2025-12-10 13:22:53 +01:00
DatabasesController.php	Merge pull request #7002 from W8jonas/fix/api-destination-uuid-databases	2025-11-01 13:46:47 +01:00
DeployController.php	Add Retry-After header to 429 rate limit responses	2025-12-11 11:02:29 +01:00
GithubController.php	Changes auto-committed by Conductor	2025-10-16 13:19:05 +02:00
HetznerController.php	feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner	2025-12-11 12:12:43 +01:00
OpenApi.php	feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner	2025-12-11 12:12:43 +01:00
OtherController.php	Restrict upgrade-status endpoint to authenticated root team members	2025-12-12 21:16:36 +01:00
ProjectController.php	fix: missing 422 error code in openapi spec	2025-10-12 14:20:45 +02:00
ResourcesController.php	feat(auth): implement comprehensive authorization checks across API controllers	2025-08-23 18:51:10 +02:00
SecurityController.php	fix: missing 422 error code in openapi spec	2025-10-12 14:20:45 +02:00
ServersController.php	Merge branch 'next' into fix/openapi	2025-10-13 10:42:05 +02:00
ServicesController.php	Refactor: Centralize service application prerequisites	2025-11-28 16:47:09 +01:00
TeamController.php	fix: hide sensitive email change fields in team member responses	2025-09-18 00:40:09 +08:00