Andras Bacsai 9a2c432c79 fix(api): expose sensitive fields for privileged tokens ... Privileged API tokens can read hidden resource fields in environment and resource responses, including instance-admin team tokens with team_id 0. Configuration hashes now include hidden environment variable values so secret edits trigger restart detection.		2026-07-07 12:53:34 +02:00
..
ApiAbility.php	Merge remote-tracking branch 'origin/next' into audit-policies	2026-05-11 21:13:57 +02:00
ApiAllowed.php	refactor(dns-validation): rename DNS validation functions for consistency and clarity, and remove unused code	2025-09-09 09:00:35 +02:00
ApiSensitiveData.php	fix(api): expose sensitive fields for privileged tokens	2026-07-07 12:53:34 +02:00
Authenticate.php	init of v4 🌮	2023-03-17 15:33:48 +01:00
CanAccessTerminal.php	refactor(auth): simplify access control logic in CanAccessTerminal and ServerPolicy by allowing all users to perform actions	2025-08-28 10:48:24 +02:00
CanCreateResources.php	fix: align resource creation permissions	2026-06-29 15:57:17 +02:00
CanUpdateResource.php	fix: improve team resource route handling	2026-07-02 13:05:27 +02:00
CheckForcePasswordReset.php	chore: prepare for PR	2026-02-24 10:17:16 +01:00
DecideWhatToDoWithUser.php	fix(team): improve team retrieval and session handling for users	2025-12-28 14:50:59 +01:00
EncryptCookies.php	init of v4 🌮	2023-03-17 15:33:48 +01:00
EnsureMcpEnabled.php	feat(mcp): add MCP server with read-only tools for Coolify resources	2026-04-29 10:30:43 +02:00
EnsureTeamMcpEnabled.php	feat(mcp): add per-team server toggle	2026-06-25 11:42:19 +02:00
EnsureTokenBelongsToCurrentTeamMember.php	fix(api): validate token team context	2026-06-01 15:17:55 +02:00
PreventRequestsDuringMaintenance.php	Fix styling	2024-06-10 20:43:34 +00:00
RedirectIfAuthenticated.php	Fix styling	2024-06-10 20:43:34 +00:00
TrimStrings.php	init of v4 🌮	2023-03-17 15:33:48 +01:00
TrustHosts.php	fix(subscription): harden quantity updates and proxy trust behavior	2026-03-03 12:28:16 +01:00
TrustProxies.php	fix(subscription): harden quantity updates and proxy trust behavior	2026-03-03 12:28:16 +01:00
ValidateSignature.php	init of v4 🌮	2023-03-17 15:33:48 +01:00
VerifyCsrfToken.php	fix(webhooks): exclude webhook routes from CSRF protection (#6200)	2025-07-18 19:04:08 +02:00