coolify/app/Http
Andras Bacsai 9a2c432c79 fix(api): expose sensitive fields for privileged tokens
Privileged API tokens can read hidden resource fields in environment and
resource responses, including instance-admin team tokens with team_id 0.

Configuration hashes now include hidden environment variable values so
secret edits trigger restart detection.
2026-07-07 12:53:34 +02:00
..
Controllers fix(api): expose sensitive fields for privileged tokens 2026-07-07 12:53:34 +02:00
Middleware fix(api): expose sensitive fields for privileged tokens 2026-07-07 12:53:34 +02:00
Kernel.php feat(mcp): add per-team server toggle 2026-06-25 11:42:19 +02:00