Harsh Mahajan
929bdcef25
Merge branch '1.9.x' into feat-x-oauth2-provider
2026-04-08 17:55:00 +05:30
Harsh Mahajan
3f725c6be9
changes
2026-04-08 17:44:49 +05:30
Matej Bačo
a8c2491fbb
Fix platform scopes
2026-04-08 10:17:48 +02:00
Matej Bačo
388cec1737
Merge branch '1.9.x' into feat-public-project-keys
2026-04-08 10:16:22 +02:00
Matej Bačo and GitHub
1f93184c42
Merge pull request #11615 from appwrite/feat-public-platform-api
...
Feat: public platform API
2026-04-08 10:08:10 +02:00
Matej Bačo
eef2a7abdf
Fix scopes
2026-04-08 10:01:52 +02:00
Matej Bačo
96a84a8fd7
Merge branch '1.9.x' into feat-public-project-keys
2026-04-08 09:45:15 +02:00
Matej Bačo
cea242c66f
Merge branch '1.9.x' into feat-public-platform-api
2026-04-08 09:29:54 +02:00
Matej Bačo
ce4eb563b3
AI review fixes
2026-04-08 09:29:12 +02:00
Matej Bačo
2307d637fb
Revert new patch version
2026-04-08 09:10:02 +02:00
premtsd-code and GitHub
c4c56283e5
Merge branch '1.9.x' into bump-database-version2
2026-04-08 10:33:58 +05:30
loks0n and Claude Sonnet 4.6
7781d377ae
fix: persist session before purging user cache in email/password login
...
Swap the order of createDocument('sessions') and purgeCachedDocument('users')
in the email/password session creation flow. Previously, the cache was purged
before the session was written, opening a race window in Swoole's async
environment where a concurrent account.get() could re-cache the user with no
sessions, causing sessionVerify to fail with a 401. This matches the correct
ordering already used by the token-based flows (magic URL, OTP, phone).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-07 21:44:24 +01:00
Prem Palanisamy
d7d20ccb29
Remove (int) cast from setTenant in getDatabasesDB same-pool branch
2026-04-07 15:35:20 +01:00
Prem Palanisamy
35a72c4f08
Remove (int) cast from setTenant in separate-pool branches
2026-04-07 13:10:16 +01:00
Matej Bačo
3e4e7fc0cd
Merge branch '1.9.x' into feat-public-platform-api
2026-04-07 14:08:00 +02:00
Prem Palanisamy
4260324153
Merge branch '1.9.x' into bump-database-version2
...
Resolve merge conflicts in app/init/resources.php and app/worker.php
caused by the DI container migration (Http::setResource/Server::setResource
to $container->set). Port separate-pool shared tables logic for
getDatabasesDB to the new file locations (request.php and message.php)
with the correct $databaseDSN->getParam('namespace') fix.
2026-04-07 11:25:06 +01:00
Matej Bačo
d66813d3cf
Fix tests + QA fixes
2026-04-07 12:07:21 +02:00
Chirag Aggarwal
92abfb31aa
fix null route guard placement
2026-04-07 14:40:18 +05:30
Chirag Aggarwal
399c37d943
fix console null route handling
2026-04-07 14:33:43 +05:30
Matej Bačo
331fcee710
Merge branch '1.9.x' into feat-public-platform-api
2026-04-07 10:43:11 +02:00
premtsd-code and GitHub
77ceb15d7d
Merge branch '1.9.x' into bump-database-version2
2026-04-06 15:44:40 +05:30
Chirag Aggarwal
b74d4d45f9
Merge request-scoped cookie resources
2026-04-06 13:21:33 +05:30
Chirag Aggarwal
59a773e9a0
Document migration host local-domain handling
2026-04-06 12:47:06 +05:30
Chirag Aggarwal
e3053bb83d
Remove dead cookie config defaults
2026-04-06 12:44:48 +05:30
Chirag Aggarwal
1f7fc4bd40
Use request-scoped domain verification
2026-04-06 12:43:05 +05:30
Chirag Aggarwal
d1b59ff3f3
Remove unused cookie domain locals
2026-04-06 12:30:48 +05:30
Chirag Aggarwal
221b52bac0
Add request-scoped cookie domain resource
2026-04-06 12:30:25 +05:30
Chirag Aggarwal
b8ed30db55
Fix CORS header override for analyze
2026-04-06 12:23:50 +05:30
Chirag Aggarwal and GitHub
be56317bf2
Merge branch '1.9.x' into feat/migrate-di-container
2026-04-06 12:13:31 +05:30
Chirag Aggarwal and GitHub
2dce141d17
Merge pull request #11798 from appwrite/codex/request-response-no-static-state
...
Remove request and response static state
2026-04-06 11:03:15 +05:30
Chirag Aggarwal
b8eb0810c2
Make response sensitive mode instance-scoped
2026-04-06 10:24:32 +05:30
Chirag Aggarwal
cb74a5756a
Remove request and response static state
2026-04-06 10:20:18 +05:30
Damodar Lohani and Claude Opus 4.6
ba25849871
fix: resolve cors safely in error handler to avoid cascading failures
...
- Remove cors from inject chain; resolve via getResource() inside
try-catch so DB failures don't cascade when resolving the cors
resource dependency chain (cors -> allowedHostnames -> rule -> DB)
- Use override:true on addHeader to prevent duplicate CORS headers
when init() already set them before the exception was thrown
- Degrades gracefully: if cors resolution fails, error response is
sent without CORS headers (same behavior as before this PR)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 02:59:08 +00:00
Damodar Lohani and Claude Opus 4.6
44f3bbae03
fix: add CORS headers to error responses
...
The Http::error() handler was missing CORS headers, causing browsers to
block error responses (e.g. 403 PROJECT_PAUSED) with a generic CORS
error instead of showing the actual error message. This injects the cors
resource into the error handler and adds CORS headers before sending the
error response, matching the pattern already used in Http::init().
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 01:40:07 +00:00
Chirag Aggarwal and GitHub
dffcfe8ee4
Merge branch '1.9.x' into feat/migrate-di-container
2026-04-05 21:16:30 +05:30
Chirag Aggarwal
452440f3c0
fix: use released cli container support
2026-04-05 21:03:17 +05:30
Chirag Aggarwal
412d09b801
remove unrelated changes
2026-04-05 20:06:13 +05:30
Chirag Aggarwal
66e68aea14
fix: fail specs when docs are missing
2026-04-05 19:37:29 +05:30
Chirag Aggarwal
094fe90499
Merge remote-tracking branch 'origin/1.9.x' into feat/migrate-di-container
...
# Conflicts:
# app/worker.php
2026-04-02 16:37:58 +05:30
Matej Bačo
90e705f8c5
Improve docs
2026-04-02 12:26:03 +02:00
Matej Bačo
7c50bbc500
Merge branch '1.9.x' into feat-disposable-emails
2026-04-02 11:05:19 +02:00
Prem Palanisamy
a071c715bc
Merge remote-tracking branch 'origin/1.9.x' into bump-database-version2
2026-04-02 10:10:03 +02:00
Chirag Aggarwal
e576cd5082
Merge branch '1.9.x' into feat/migrate-di-container
2026-04-02 13:32:31 +05:30
Chirag Aggarwal
30befc6a60
fix: remove strict pool size exception
2026-04-02 11:41:35 +05:30
Chirag Aggarwal
d13644a47a
fix: make pool sizing runtime-aware
2026-04-02 11:38:19 +05:30
Chirag Aggarwal
4a905a6ac9
Merge branch '1.9.x' into feat/migrate-di-container
...
Resolve conflicts keeping DI container migration (container->set pattern)
while incorporating 1.9.x fixes: PHPStan unused variable cleanup in
GraphQL Resolvers, (int) casts in Builds.php, and phpstan-baseline removal.
2026-04-02 11:17:32 +05:30
Chirag Aggarwal
1900492aad
Merge branch '1.9.x' into feat-smtp-messaging-adapter
2026-04-02 10:58:09 +05:30
Chirag Aggarwal
77b4f8b7a0
style: apply formatter
2026-04-02 08:23:51 +05:30
Prem Palanisamy
25d9891f2b
fix: use email probe in JSON export test, format fixes, add requireAdapter skips to Databases VectorsDB/DocumentsDB tests
2026-04-02 04:39:56 +02:00
Prem Palanisamy
8c9f9c6f58
fix: inherit project shared tables for separate pools, skip cross-engine migration tests
2026-04-02 02:05:10 +02:00