rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
coolify/app/Http/Middleware
History
Andras Bacsai c924655999 feat(auth): restrict sensitive data visibility for team members 
Hide database passwords, connection URLs, and debug logs from team members:
- Database components: hide passwords and connection URLs for members
- Deployment UI: gate debug log toggle behind update permission
- Debug logs: prevent members from viewing debug output
- Storage/services: hide sensitive credentials from members

Members can still view non-sensitive configuration while admins retain full access to all data.
2026-02-27 22:42:48 +01:00
..
ApiAbility.php feat(auth): restrict sensitive data visibility for team members 2026-02-27 22:42:48 +01:00
ApiAllowed.php refactor(dns-validation): rename DNS validation functions for consistency and clarity, and remove unused code 2025-09-09 09:00:35 +02:00
ApiSensitiveData.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Authenticate.php init of v4 🌮 2023-03-17 15:33:48 +01:00
CanAccessTerminal.php refactor(auth): simplify access control logic in CanAccessTerminal and ServerPolicy by allowing all users to perform actions 2025-08-28 10:48:24 +02:00
CanCreateResources.php feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
CanUpdateResource.php feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
CheckForcePasswordReset.php chore: prepare for PR 2026-02-24 10:17:16 +01:00
DecideWhatToDoWithUser.php fix(team): improve team retrieval and session handling for users 2025-12-28 14:50:59 +01:00
EncryptCookies.php init of v4 🌮 2023-03-17 15:33:48 +01:00
PreventRequestsDuringMaintenance.php Fix styling 2024-06-10 20:43:34 +00:00
RedirectIfAuthenticated.php Fix styling 2024-06-10 20:43:34 +00:00
TrimStrings.php init of v4 🌮 2023-03-17 15:33:48 +01:00
TrustHosts.php Changes auto-committed by Conductor 2025-10-20 12:59:57 +02:00
TrustProxies.php Fix styling 2024-06-10 20:43:34 +00:00
ValidateSignature.php init of v4 🌮 2023-03-17 15:33:48 +01:00
VerifyCsrfToken.php fix(webhooks): exclude webhook routes from CSRF protection (#6200) 2025-07-18 19:04:08 +02:00