Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,602 Commits 1,269 Branches 495 Tags
feat-platform-key-migration
Commit Graph
8699 Commits
Author SHA1 Message Date
Prem Palanisamy 50cf415359 Fix targetProjectId check: use route path values instead of request params 2026-02-12 22:39:11 +00:00
Prem Palanisamy 4d46879497 Fix settings-key endpoint: use migrations.read scope and hardcode console JWT scopes 2026-02-12 22:26:56 +00:00
Prem Palanisamy ad4fdea0a3 Restore blank line after action closure in report endpoint 2026-02-12 22:08:46 +00:00
Prem Palanisamy 2b7d915578 Restore blank lines after action closure openings 2026-02-12 21:43:39 +00:00
Prem Palanisamy d9772e29cc Remove stray blank lines from projects.php endpoints 2026-02-12 21:34:14 +00:00
Prem Palanisamy 455c292313 Remove redundant scope checks, make targetProjectId mandatory 2026-02-12 20:53:29 +00:00
Prem Palanisamy 97fb4cb4b6 Restrict migration console key with targetProjectId enforcement 
- Short-lived JWT (120s TTL) for console key
- No APPS scope merge when targetProjectId is set in Key.php
- Generalized route restriction: migration keys only work on routes with matching :projectId param
- Remove per-endpoint migrationKey labels and targetProjectId checks
 2026-02-12 20:39:05 +00:00
Prem Palanisamy 0cee469d73 Pass all source project API key scopes to console key 2026-02-12 18:30:59 +00:00
Prem Palanisamy ba723de735 Add settings-key endpoint, move console key generation to source 2026-02-12 18:23:44 +00:00
Prem Palanisamy 06c6fac915 Add targetProjectId to console API key for project-scoped access 
The console key with projectId='console' grants access to all projects'
platforms and keys. targetProjectId restricts it to only the migration
source project, enforced at the 4 read endpoints (listKeys, getKey,
listPlatforms, getPlatform).
 2026-02-12 17:43:28 +00:00
Prem Palanisamy 3a813d8554 Revert targetProjectId scoping from console API key 
The same-instance guard is sufficient security — targetProjectId
added unnecessary complexity since projectId already exists in the JWT.
 2026-02-12 17:37:55 +00:00
Prem Palanisamy e6d4f4e3a1 Scope console API key to target project via targetProjectId claim 2026-02-12 17:06:06 +00:00
Prem Palanisamy 86ea75026f Guard consoleApiKey to same-instance migrations only 
Revert controller to original form without console API key generation
to avoid leaking JWT to untrusted remote endpoints. In the worker,
only set consoleApiKey when the source endpoint matches the local
endpoint, ensuring the locally-signed JWT is never sent cross-instance.
 2026-02-12 16:30:57 +00:00
Prem Palanisamy 4350bda137 Use console API key for report endpoint instead of dbForPlatform 2026-02-12 15:49:08 +00:00
Prem Palanisamy 5a557e5602 Fix resourceType from 'project' to 'projects' for key queries 2026-02-12 12:35:20 +00:00
Prem Palanisamy 854a4aca82 Add platform and key counts to migration report endpoint 2026-02-12 11:50:56 +00:00
Jake Barnby ce4e99d643 Merge remote-tracking branch 'origin/1.8.x' into feat-update-base 
# Conflicts:
#	composer.json
 2026-02-12 12:20:04 +13:00
Jake Barnby 686a6f9474 Merge branch '1.8.x' into feat-update-base 2026-02-11 08:35:50 +00:00
Chirag Aggarwal b2f4c4227e Merge branch '1.8.x' into fix/cli-static-setresource 2026-02-11 12:10:35 +05:30
Chirag Aggarwal 161b971f53 Fix oauth redirect custom scheme state 2026-02-11 10:11:04 +05:30
Matej Bačo 51f036491a Merge pull request #11278 from appwrite/feat-list-api-keys-queries 
Feat: queries param on list api keys
 2026-02-10 12:47:00 +01:00
Luke B. Silver 5e974713b7 Merge pull request #11281 from appwrite/feat/worker-executions 
feat: worker executions
 2026-02-10 10:56:30 +00:00
Matej Bačo e2071bd5dd add backwards compatibility 2026-02-10 11:48:29 +01:00
Matej Bačo 0621a32aa6 Fix tests; speed up tests; fix 5xx error 2026-02-10 11:43:22 +01:00
Matej Bačo e1cbbe3943 Merge branch '1.8.x' into feat-list-api-keys-queries 2026-02-10 10:46:56 +01:00
Matej Bačo 226e36db95 Merge pull request #11277 from appwrite/feat-api-key-custom-id 
Feat: custom ID for API keys
 2026-02-10 10:46:00 +01:00
Chirag Aggarwal 99d8eefdcf fix class issue 2026-02-10 12:41:59 +05:30
Chirag Aggarwal 2d05d608f4 Upgrade utopia-php dependencies and fix namespace changes 
- Upgrade utopia-php/cli from 0.15 to 0.22
- Upgrade utopia-php/analytics from 0.10 to 0.15
- Upgrade utopia-php/orchestration from 0.9 to 0.19
- Use dev branches for utopia-php/framework and utopia-php/platform
- Remove utopia-php/swoole dependency (merged into framework)
- Migrate Utopia\CLI\Console to Utopia\Console across all files
- Migrate Utopia\Http to Utopia\Http\Http namespace
- Migrate Utopia\Swoole\Files to Utopia\Http\Files (now instance-based)
- Convert static CLI::setResource() calls to instance-based Dependency API
- Fix StatsResources task named parameter mismatch
 2026-02-10 10:34:24 +05:30
Jake Barnby 50193ebeeb Merge branch '1.8.x' into feat-update-base 2026-02-09 23:31:00 +00:00
loks0n b432918385 feat: worker executions 2026-02-09 20:20:44 +00:00
Matej Bačo a87263a571 Fix failing test 2026-02-09 20:07:33 +01:00
Matej Bačo dafa97879c AI review fixes 2026-02-09 17:12:30 +01:00
Matej Bačo a263afeff1 AI quality fixes 2026-02-09 17:10:00 +01:00
Matej Bačo 29915ddd3b Manual fixes of agent code 2026-02-09 16:58:44 +01:00
Matej Bačo e666dc9504 AI review fixes 2026-02-09 16:42:14 +01:00
Matej Bačo 7bf5f2d360 Fix bug 5xx error 2026-02-09 15:55:35 +01:00
Matej Bačo 6df5556473 Implement queries param to list api keys 2026-02-09 14:58:36 +01:00
Matej Bačo 615aff0714 Allow custom ID for API keys 2026-02-09 14:34:05 +01:00
Matej Bačo 525b929e54 Fix implementation, add tests 2026-02-09 13:57:19 +01:00
Matej Bačo 36c87d109a Fix rule oauth flow 2026-02-09 13:45:18 +01:00
Hemachandar 353b7f2a49 Move VCS auth & callback APIs to Modules (#11274) 
* Move VCS auth & callback APIs to Modules

* lint

* rename
 2026-02-09 15:55:37 +05:30
Hemachandar da7f5b7336 Move VCS repository APIs to Modules (#11259) 
* Move VCS repository APIs to Modules

* add to http

* lint

* strategy fix

* rename to detections
 2026-02-06 15:22:44 +05:30
Jake Barnby 801befeacd Merge branch '1.8.x' into get-cursor-queries 2026-02-06 05:59:48 +00:00
Jake BarnbyandClaude Opus 4.5 d57659c37e Fix header handling for Swoole 6.1.6 compatibility 
- Update utopia-php/migration to 1.5.1 (fixes duplicate header issue)
- Fix content-length header override to replace instead of append
  - Single-value headers (content-length, content-type) must replace existing values
  - Multi-value headers continue to use array semantics

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-06 01:40:59 +13:00
fogelito cb58da7279 Merge branch '1.8.x' of https://github.com/appwrite/appwrite into localhost-endpoint 2026-02-05 12:13:02 +02:00
fogelito d40b1707ba Remove var_dump 2026-02-05 12:09:54 +02:00
fogelito 8600d0e64f Remove var_dump 2026-02-05 12:04:57 +02:00
Hemachandar 657f16031b lint 2026-02-05 15:11:17 +05:30
Hemachandar 107fadfe37 Merge branch '1.8.x' into ser-539-modules 2026-02-05 15:00:52 +05:30
fogelito 12b7f94c1f _APP_MIGRATION_HOST 2026-02-05 10:06:11 +02:00