rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
coolify/app/Http/Controllers/Api
History
Andras Bacsai 5019c8db92 fix(api): use explicit team ID for S3 storage lookup in backup endpoints 
Replace `ownedByCurrentTeam()` (session-based) with `ownedByCurrentTeamAPI($teamId)`
(explicit team ID) when resolving S3 storage in create_backup and update_backup.
Session-based team resolution is unreliable in API context where auth is token-based.

Add `S3Storage::ownedByCurrentTeamAPI(int $teamId)` scope and update feature tests
to use real model instances instead of Mockery mocks.
2026-04-19 15:26:47 +02:00
..
ApplicationsController.php feat(applications): add DELETE endpoint for preview deployments by PR id 2026-04-17 13:29:11 +02:00
CloudProviderTokensController.php fix(docs): remove incorrect uuid format in openapi spec (#7419) 2026-01-04 16:16:19 +01:00
DatabasesController.php fix(api): use explicit team ID for S3 storage lookup in backup endpoints 2026-04-19 15:26:47 +02:00
DeployController.php feat(deployments): support Docker image tags for preview deployments 2026-03-30 13:35:35 +02:00
GithubController.php fix: add URL validation for GitHub source api_url and html_url fields 2026-03-26 13:45:33 +01:00
HetznerController.php refactor(team): make server limit methods accept optional team parameter 2026-03-23 21:56:50 +01:00
OpenApi.php feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner 2025-12-11 12:12:43 +01:00
OtherController.php refactor(api): validate and throttle feedback endpoint 2026-04-19 14:41:47 +02:00
ProjectController.php fix(models): replace forceFill/forceCreate with fill/create and add fillable guards 2026-03-31 13:45:31 +02:00
ResourcesController.php feat(auth): implement comprehensive authorization checks across API controllers 2025-08-23 18:51:10 +02:00
ScheduledTasksController.php fix(api): improve scheduled tasks validation and delete logic 2026-02-18 14:30:44 +01:00
SecurityController.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
ServersController.php fix(validation): use int|string for Livewire numeric properties and remove nullable from API rules 2026-03-29 02:24:36 +05:30
ServicesController.php Merge remote-tracking branch 'origin/next' into jean/organize-service-ui 2026-04-14 10:52:01 +02:00
TeamController.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00