caa73a6ad4
perf(storage): stream cached preview responses
2026-05-08 15:55:20 +04:00
8f68a59a79
Apply suggestions from code review
...
Co-authored-by: Matej Bačo <matejbaco2000@gmail.com >
2026-05-03 19:51:56 +02:00
6051b8150c
Apply suggestions from code review
...
Co-authored-by: Matej Bačo <matejbaco2000@gmail.com >
2026-05-03 19:51:10 +02:00
4e20e382d2
Add deprecated function scopes
2026-05-03 19:49:13 +02:00
413930a15e
Add Rust starter function template runtime
2026-05-02 12:19:07 +05:30
fbbab0f7e1
Merge pull request #12181 from appwrite/set-global-collection
...
Set global collection
2026-04-30 12:49:00 +03:00
d98bd8c972
Remove line
2026-04-30 10:44:21 +03:00
c0bba74eee
set setGlobalCollections logs
2026-04-30 10:36:12 +03:00
337d47b1d9
fix(locale): add Spanish session alert translations
2026-04-30 09:33:08 +02:00
f03cc847f8
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into set-global-collection
...
# Conflicts:
# composer.lock
2026-04-29 17:07:32 +03:00
6088fd55c8
Merge pull request #12138 from appwrite/feat-out-of-order-chunk-uploads
2026-04-29 18:04:57 +04:00
8eed06678b
formatting
2026-04-29 15:54:05 +03:00
7a9a2899ff
setGlobalCollections
2026-04-29 15:41:56 +03:00
32ebfc6cb8
Fix backwards compatibility
2026-04-29 14:14:49 +02:00
e1b8f5bf98
review improvements
2026-04-29 14:04:54 +02:00
4d86e67006
Fix missing scopes for tables
2026-04-29 14:03:44 +02:00
e010bf25d5
Fix formatting
2026-04-29 13:57:16 +02:00
aaf91f3816
Improve scopes quality
2026-04-29 13:52:13 +02:00
dfbf45f4cc
Merge branch '1.9.x' into feat-out-of-order-chunk-uploads
2026-04-29 15:03:33 +04:00
8ab26aab44
Merge pull request #12171 from appwrite/migration-refractor
...
Refactor migrations API to module style
2026-04-29 21:44:19 +12:00
fd42b8fa64
Merge pull request #12175 from appwrite/feat-console-key-scopes-endpoint
...
Feat: Console key scopes endpoint
2026-04-29 11:17:49 +02:00
e75fc5b859
Add list scopes endpoint for Console
2026-04-29 10:08:31 +02:00
57b8305144
Merge pull request #12134 from appwrite/fix-realtime-span-exporter
...
added a guard to skip double import
2026-04-29 20:02:04 +12:00
aca11ed073
Merge pull request #12170 from appwrite/feat-create-dynamic-keys
...
Feat: create dynamic keys
2026-04-29 09:58:22 +02:00
dae9cbcf45
Merge pull request #12070 from appwrite/realtime-action-channels
...
Realtime action channels
2026-04-29 10:49:13 +05:30
c1f61b22aa
Merge branch '1.9.x' into feat-create-dynamic-keys
2026-04-28 17:18:36 +02:00
980762fc3e
Rename from dynamic key to ephemeral key (api keys)
2026-04-28 17:18:06 +02:00
cd851bff24
Merge branch '1.9.x' into migration-refractor
2026-04-28 20:32:54 +05:30
3f5dcc81fd
Refactor migrations API to module style
2026-04-28 15:57:41 +01:00
b2ce95a0cd
Dynamic key backwards compatibility
2026-04-28 16:14:10 +02:00
ed9b47f6ce
Migrate project jwt to dynamic api key
2026-04-28 15:57:37 +02:00
67d24d3ef1
Merge branch '1.9.x' into feat/impersonation-query-params
2026-04-28 19:11:14 +05:30
87ed7c3817
feat: add query param fallback for all impersonation params and simplify tests
2026-04-28 19:10:55 +05:30
8f176166c9
Re-introduce project JWT endpoint
2026-04-28 15:31:10 +02:00
a0ef145b92
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into feat-out-of-order-chunk-uploads
2026-04-28 17:10:56 +04:00
cb4cff120b
Add Keycloak oauth support
2026-04-28 10:54:13 +02:00
49e6a38e7f
Add fusionauth oauth
2026-04-28 10:43:16 +02:00
bda823ac0e
chore: format
2026-04-28 13:38:00 +05:30
5afc8f462d
fix: allow same-site in CSRF guard to support Console on subdomains
2026-04-28 13:26:13 +05:30
d25707346f
Add console oauth endpoint
2026-04-28 09:47:27 +02:00
a3f6cf4645
fix: restrict CSRF guard to same-origin only, drop same-site
2026-04-28 13:00:18 +05:30
5465be6301
fix: make CSRF guard fail-closed by requiring explicit same-origin Sec-Fetch-Site
2026-04-28 12:27:57 +05:30
46a457bfa3
fix: block impersonateUserId query param on cross-site requests to prevent CSRF
2026-04-28 12:10:51 +05:30
4c989f99c3
fix: cast impersonateUserId query param to string to prevent array injection
2026-04-28 12:05:02 +05:30
8f1d73a6cb
chore: clarify intentional header-only restriction for email/phone impersonation
2026-04-28 12:02:00 +05:30
01b5fa8ecb
fix: restrict impersonation query param fallback to userId only
...
Remove query param fallback for impersonateEmail and impersonatePhone
to avoid PII exposure in server logs, browser history, and Referer
headers. Only impersonateUserId (an opaque internal ID) is safe to
pass via URL query param.
2026-04-28 11:58:25 +05:30
d73b7a70d8
feat: add query param fallback for impersonation headers
...
Allow impersonation to be specified via URL query params
(?impersonateUserId, ?impersonateEmail, ?impersonatePhone) as a
fallback to the existing headers, enabling Console to embed
impersonation in direct file/image URLs where headers cannot be set.
2026-04-28 11:44:39 +05:30
f71a2dfddc
changed the condition to app edition for the loading of the span
2026-04-28 11:07:16 +05:30
b28b851bb2
microsoft oauth endpoint
2026-04-27 15:49:44 +02:00
49d2db65e6
feat: support out-of-order chunked uploads
...
- Add APP_LIMIT_UPLOAD_CHUNK_SIZE constant (5MB) matching official SDKs
- Replace dynamic chunk calculation with fixed 5MB chunk math in all upload endpoints
- Remove -1 last-chunk sentinel that broke when last chunk arrived first
- Fix duplicate-retry guards: return existing resource instead of erroring for chunked uploads
- Add out-of-order e2e tests for Storage, Functions, and Sites
- Upgrade utopia-php/storage to 2.0.0 for device-level out-of-order assembly support
2026-04-27 17:15:00 +04:00
Torsten Dittmann
Matej Bačo
Matej Bačo
Chirag Aggarwal
Shmuel Fogel
frubio
Jake Barnby
ArnabChatterjee20k
premtsd-code
Harsh Mahajan
harsh mahajan
ArnabChatterjee20k