Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,602 Commits 1,269 Branches 495 Tags
feat-platform-key-migration
Commit Graph
31602 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Prem Palanisamy 1e2a6b5b2f Merge 1.8.x into feat-platform-key-migration 2026-02-13 06:32:10 +00:00
Jake BarnbyandGitHub 77fd2c1f24 Merge pull request #11311 from appwrite/check-client-queries-strings 2026-02-13 06:29:10 +00:00
fogelito 17ae01c70c Merge branch '1.8.x' of https://github.com/appwrite/appwrite into check-client-queries-strings 2026-02-13 07:55:10 +02:00
Luke B. SilverandGitHub 16537996e8 Merge pull request #11315 from appwrite/refactor-ci 
refactor: ci
 2026-02-13 01:44:31 +00:00
loks0nandClaude Opus 4.6 78e63085cf Update PHPStan 1.8→1.12, pin composer images to 2.8 
PHPStan 1.8 triggers deprecation warnings on the PHP version shipped
with composer:2.8. Upgrading to 1.12 resolves the compatibility issue.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-13 01:16:35 +00:00
loks0nandClaude Opus 4.6 4326600751 Refactor CI workflows: add COMPOSE_FILE env, add build targets, bump action versions, pin composer 
- Add COMPOSE_FILE=docker-compose.yml to tests, benchmark, and sdk-preview to prevent loading overrides in CI
- Add target: development to tests/benchmark builds, target: production to pr-scan/nightly builds
- Bump actions/checkout v4→v6, docker/build-push-action v4/v5→v6, actions/upload-artifact v4→v6, actions/github-script v7→v8
- Pin composer images to 2.8 in linter and static-analysis workflows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-13 00:56:03 +00:00
Prem Palanisamy 50cf415359 Fix targetProjectId check: use route path values instead of request params 2026-02-12 22:39:11 +00:00
Prem Palanisamy 4d46879497 Fix settings-key endpoint: use migrations.read scope and hardcode console JWT scopes 2026-02-12 22:26:56 +00:00
Prem Palanisamy ad4fdea0a3 Restore blank line after action closure in report endpoint 2026-02-12 22:08:46 +00:00
Prem Palanisamy 596498896e Remove unnecessary scopes from temp key, add settings-key docs 2026-02-12 22:06:28 +00:00
Prem Palanisamy 2b7d915578 Restore blank lines after action closure openings 2026-02-12 21:43:39 +00:00
Prem Palanisamy d9772e29cc Remove stray blank lines from projects.php endpoints 2026-02-12 21:34:14 +00:00
Prem Palanisamy 455c292313 Remove redundant scope checks, make targetProjectId mandatory 2026-02-12 20:53:29 +00:00
Prem Palanisamy 97fb4cb4b6 Restrict migration console key with targetProjectId enforcement 
- Short-lived JWT (120s TTL) for console key
- No APPS scope merge when targetProjectId is set in Key.php
- Generalized route restriction: migration keys only work on routes with matching :projectId param
- Remove per-endpoint migrationKey labels and targetProjectId checks
 2026-02-12 20:39:05 +00:00
Prem Palanisamy 0cee469d73 Pass all source project API key scopes to console key 2026-02-12 18:30:59 +00:00
Prem Palanisamy ba723de735 Add settings-key endpoint, move console key generation to source 2026-02-12 18:23:44 +00:00
Prem Palanisamy 6565f2ff91 Derive console API key scopes from project API key 
Instead of hardcoding scopes in the console key, read them from the
project API key. Added platforms.read and keys.read to the project
key, and the console key now receives only scopes that the project
key already has.
 2026-02-12 17:54:42 +00:00
Prem Palanisamy 06c6fac915 Add targetProjectId to console API key for project-scoped access 
The console key with projectId='console' grants access to all projects'
platforms and keys. targetProjectId restricts it to only the migration
source project, enforced at the 4 read endpoints (listKeys, getKey,
listPlatforms, getPlatform).
 2026-02-12 17:43:28 +00:00
Prem Palanisamy 3a813d8554 Revert targetProjectId scoping from console API key 
The same-instance guard is sufficient security — targetProjectId
added unnecessary complexity since projectId already exists in the JWT.
 2026-02-12 17:37:55 +00:00
Prem Palanisamy e6d4f4e3a1 Scope console API key to target project via targetProjectId claim 2026-02-12 17:06:06 +00:00
Prem Palanisamy d1170836b8 Only generate consoleApiKey for same-instance migrations 2026-02-12 16:40:20 +00:00
Prem Palanisamy 86ea75026f Guard consoleApiKey to same-instance migrations only 
Revert controller to original form without console API key generation
to avoid leaking JWT to untrusted remote endpoints. In the worker,
only set consoleApiKey when the source endpoint matches the local
endpoint, ensuring the locally-signed JWT is never sent cross-instance.
 2026-02-12 16:30:57 +00:00
Prem Palanisamy 4350bda137 Use console API key for report endpoint instead of dbForPlatform 2026-02-12 15:49:08 +00:00
Prem Palanisamy 01958a0f4e Move settings migration to source adapter via console API key 2026-02-12 15:26:29 +00:00
fogelito b2aa2cc247 typo 2026-02-12 16:36:37 +02:00
fogelito 5756b58d4d $tableId 2026-02-12 15:59:34 +02:00
fogelito 2cb98a87c8 tablesdb 2026-02-12 15:58:39 +02:00
fogelito ecd575aec3 Merge branch '1.8.x' of https://github.com/appwrite/appwrite into check-client-queries-strings 2026-02-12 15:55:12 +02:00
fogelito db6a3342c0 fix tests 2026-02-12 15:52:39 +02:00
Prem Palanisamy b338ed9a2c Pass source document permissions to migrated resources 2026-02-12 12:39:52 +00:00
Prem Palanisamy 5a557e5602 Fix resourceType from 'project' to 'projects' for key queries 2026-02-12 12:35:20 +00:00
Chirag AggarwalandGitHub afbad9db0f Merge pull request #11285 from appwrite/release-agent-skills 
feat: appwrite agent skills
 2026-02-12 18:00:48 +05:30
Prem Palanisamy ed9d64b25f Use unique IDs for migrated platforms and keys 
Source and destination share dbForPlatform, so reusing the source
document IDs causes duplicate key errors.
 2026-02-12 12:24:45 +00:00
Prem Palanisamy 28061ccb21 Move platform/key migration from source adapter to worker level 
Settings (platforms, keys) live in dbForPlatform. Instead of passing
dbForPlatform to the source adapter, the worker reads from the source
project directly and writes via the destination adapter.
 2026-02-12 12:19:00 +00:00
Chirag Aggarwal eb5d7875e4 composer 2026-02-12 17:39:44 +05:30
Chirag Aggarwal 8645a17323 Merge branch '1.8.x' into release-agent-skills 2026-02-12 17:39:33 +05:30
Chirag Aggarwal efaf44c677 changes 2026-02-12 17:24:16 +05:30
Prem Palanisamy 854a4aca82 Add platform and key counts to migration report endpoint 2026-02-12 11:50:56 +00:00
fogelito fc03476246 fix to String 2026-02-12 13:50:22 +02:00
fogelito c7965e931f fix testConsoleAvailabilityEndpoint 2026-02-12 13:13:05 +02:00
fogelito 536f09e5b8 fix rules 2026-02-12 13:10:53 +02:00
Prem Palanisamy 29111e5dea Add platform and key migration support 
Wire dbForPlatform and projectInternalId to migration source/destination.
Point migration dependency to dev branch with settings support.
 2026-02-12 10:24:13 +00:00
fogelito baa97e199e Merge branch '1.8.x' of https://github.com/appwrite/appwrite into check-client-queries-strings 2026-02-12 12:20:41 +02:00
fogelito 4ef8222294 Check strings 2026-02-12 12:18:03 +02:00
Chirag AggarwalandGitHub a4a062afb4 Merge pull request #11307 from appwrite/sync-specs-and-release-sdks 
chore: release sdks to fix createMembership roles param
 2026-02-12 15:33:21 +05:30
Matej BačoandGitHub 6944fa7520 Merge pull request #11302 from appwrite/feat-team-sequence 
Feat: team sequence
 2026-02-12 10:14:36 +01:00
Chirag AggarwalandGitHub 2bad5d8918 Merge pull request #11309 from appwrite/fix/static-files-worker-init 
Fix static asset 404s by initializing Files per worker
 2026-02-12 13:42:29 +05:30
Chirag AggarwalandGitHub 886528bb29 Merge pull request #11306 from appwrite/feat/messaging-spans 2026-02-12 13:13:35 +05:30
Chirag Aggarwal 086cf07c9c avoid tasks 2026-02-12 12:57:40 +05:30
Chirag Aggarwal 96ceab1a52 Fix static file loading by initializing Files per worker 2026-02-12 12:33:58 +05:30