fogelito
5aa3696b8b
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into joins2
2026-04-09 08:17:30 +03:00
Damodar Lohani and GitHub
20f80ac067
Merge pull request #11580 from appwrite/feat-audit-user-type-distinction
...
feat: distinguish user types in audit logs
2026-04-09 06:55:43 +05:45
fogelito
97d4c18df3
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into joins2
...
# Conflicts:
# composer.lock
2026-04-08 18:58:25 +03:00
Harsh Mahajan
929bdcef25
Merge branch '1.9.x' into feat-x-oauth2-provider
2026-04-08 17:55:00 +05:30
Harsh Mahajan
3f725c6be9
changes
2026-04-08 17:44:49 +05:30
fogelito
89537774e7
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into joins3
...
# Conflicts:
# app/init/resources.php
# composer.json
# composer.lock
2026-04-08 11:27:05 +03:00
Matej Bačo
a8c2491fbb
Fix platform scopes
2026-04-08 10:17:48 +02:00
Matej Bačo
388cec1737
Merge branch '1.9.x' into feat-public-project-keys
2026-04-08 10:16:22 +02:00
Matej Bačo
96a84a8fd7
Merge branch '1.9.x' into feat-public-project-keys
2026-04-08 09:45:15 +02:00
Matej Bačo
cea242c66f
Merge branch '1.9.x' into feat-public-platform-api
2026-04-08 09:29:54 +02:00
Matej Bačo
2307d637fb
Revert new patch version
2026-04-08 09:10:02 +02:00
loks0n and Claude Sonnet 4.6
7781d377ae
fix: persist session before purging user cache in email/password login
...
Swap the order of createDocument('sessions') and purgeCachedDocument('users')
in the email/password session creation flow. Previously, the cache was purged
before the session was written, opening a race window in Swoole's async
environment where a concurrent account.get() could re-cache the user with no
sessions, causing sessionVerify to fail with a 401. This matches the correct
ordering already used by the token-based flows (magic URL, OTP, phone).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-07 21:44:24 +01:00
Matej Bačo
3e4e7fc0cd
Merge branch '1.9.x' into feat-public-platform-api
2026-04-07 14:08:00 +02:00
Matej Bačo
d66813d3cf
Fix tests + QA fixes
2026-04-07 12:07:21 +02:00
Chirag Aggarwal
92abfb31aa
fix null route guard placement
2026-04-07 14:40:18 +05:30
Chirag Aggarwal
399c37d943
fix console null route handling
2026-04-07 14:33:43 +05:30
Matej Bačo
331fcee710
Merge branch '1.9.x' into feat-public-platform-api
2026-04-07 10:43:11 +02:00
Damodar Lohani and GitHub
ed1680837d
Merge branch '1.9.x' into feat-audit-user-type-distinction
2026-04-07 14:11:22 +05:45
fogelito
dd9d7174d5
Fix validation class
2026-04-06 19:47:05 +03:00
fogelito
66cd5d73db
Update 1.9.x
2026-04-06 18:05:38 +03:00
fogelito
c45803b942
Merge branch '1.9.x' of https://github.com/appwrite/appwrite into joins3
...
# Conflicts:
# app/controllers/api/migrations.php
# composer.json
# composer.lock
# tests/e2e/Services/Databases/DatabasesBase.php
2026-04-06 17:44:45 +03:00
Chirag Aggarwal
b74d4d45f9
Merge request-scoped cookie resources
2026-04-06 13:21:33 +05:30
Chirag Aggarwal
59a773e9a0
Document migration host local-domain handling
2026-04-06 12:47:06 +05:30
Chirag Aggarwal
e3053bb83d
Remove dead cookie config defaults
2026-04-06 12:44:48 +05:30
Chirag Aggarwal
1f7fc4bd40
Use request-scoped domain verification
2026-04-06 12:43:05 +05:30
Chirag Aggarwal
d1b59ff3f3
Remove unused cookie domain locals
2026-04-06 12:30:48 +05:30
Chirag Aggarwal
221b52bac0
Add request-scoped cookie domain resource
2026-04-06 12:30:25 +05:30
Chirag Aggarwal
b8ed30db55
Fix CORS header override for analyze
2026-04-06 12:23:50 +05:30
Chirag Aggarwal and GitHub
be56317bf2
Merge branch '1.9.x' into feat/migrate-di-container
2026-04-06 12:13:31 +05:30
Chirag Aggarwal and GitHub
2dce141d17
Merge pull request #11798 from appwrite/codex/request-response-no-static-state
...
Remove request and response static state
2026-04-06 11:03:15 +05:30
Chirag Aggarwal
b8eb0810c2
Make response sensitive mode instance-scoped
2026-04-06 10:24:32 +05:30
Chirag Aggarwal
cb74a5756a
Remove request and response static state
2026-04-06 10:20:18 +05:30
Damodar Lohani and Claude Opus 4.6
ba25849871
fix: resolve cors safely in error handler to avoid cascading failures
...
- Remove cors from inject chain; resolve via getResource() inside
try-catch so DB failures don't cascade when resolving the cors
resource dependency chain (cors -> allowedHostnames -> rule -> DB)
- Use override:true on addHeader to prevent duplicate CORS headers
when init() already set them before the exception was thrown
- Degrades gracefully: if cors resolution fails, error response is
sent without CORS headers (same behavior as before this PR)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 02:59:08 +00:00
Damodar Lohani and Claude Opus 4.6
44f3bbae03
fix: add CORS headers to error responses
...
The Http::error() handler was missing CORS headers, causing browsers to
block error responses (e.g. 403 PROJECT_PAUSED) with a generic CORS
error instead of showing the actual error message. This injects the cors
resource into the error handler and adds CORS headers before sending the
error response, matching the pattern already used in Http::init().
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 01:40:07 +00:00
Chirag Aggarwal
412d09b801
remove unrelated changes
2026-04-05 20:06:13 +05:30
Damodar Lohani and GitHub
f6484294da
Merge branch '1.9.x' into feat-audit-user-type-distinction
2026-04-05 08:04:38 +05:45
Chirag Aggarwal
094fe90499
Merge remote-tracking branch 'origin/1.9.x' into feat/migrate-di-container
...
# Conflicts:
# app/worker.php
2026-04-02 16:37:58 +05:30
Matej Bačo
7c50bbc500
Merge branch '1.9.x' into feat-disposable-emails
2026-04-02 11:05:19 +02:00
Chirag Aggarwal
4a905a6ac9
Merge branch '1.9.x' into feat/migrate-di-container
...
Resolve conflicts keeping DI container migration (container->set pattern)
while incorporating 1.9.x fixes: PHPStan unused variable cleanup in
GraphQL Resolvers, (int) casts in Builds.php, and phpstan-baseline removal.
2026-04-02 11:17:32 +05:30
Claude
2d34301834
fix: add missing userType field to legacy log endpoints
...
The users.php and messaging.php legacy controllers were missing the
userType field in their log output, creating an inconsistency with the
new audit user type distinction feature. Also adds missing mode field
to users.php logs endpoint.
https://claude.ai/code/session_01J9gKXwbHoLggsGwJi6KUnM
2026-04-02 01:13:01 +00:00
Chirag Aggarwal
33f8e35b62
chore: remove phpstan baseline
2026-04-01 23:01:11 +05:30
Matej Bačo
c1dde09070
Merge branch '1.9.x' into feat-disposable-emails
2026-04-01 15:14:10 +02:00
Matej Bačo
b554243447
Merge branch '1.9.x' into feat-public-platform-api
2026-04-01 13:35:46 +02:00
Chirag Aggarwal
789870b545
fix: preserve multi-value headers like Set-Cookie instead of comma-joining
...
addHeader() already accumulates multiple values for the same key into an
array internally, so calling it once per value is the correct approach.
Comma-joining violates RFC 6265 for Set-Cookie headers.
2026-04-01 15:43:14 +05:30
Chirag Aggarwal
c9f7b7f0d9
fix: address PR review findings from code review
...
- Add Console::error() fallback in Bus::dispatch() so listener failures
are visible even without telemetry (C1/M7)
- Remove duplicate $max/$sleep assignments in createDatabase (M1)
- Remove duplicate @param in Event::generateEvents docblock (M2)
- Remove unused $plan parameter from plan resource factory (M3)
- Fix inconsistent indentation in certificate init block (L2)
- Add explicit return null in session resource factory (M6)
2026-04-01 15:42:15 +05:30
Chirag Aggarwal
fb26da5df1
analyze fixes
2026-04-01 15:15:48 +05:30
Chirag Aggarwal
eb8455bd76
revert
2026-04-01 14:29:20 +05:30
Damodar Lohani and GitHub
e250b413f0
Merge branch '1.9.x' into feat-audit-user-type-distinction
2026-04-01 12:58:09 +05:45
Harsh Mahajan and GitHub
8ccfb1aebb
Merge branch '1.9.x' into feat-x-oauth2-provider
2026-04-01 12:17:05 +05:30
Harsh Mahajan
9da4f19d4f
fix: pkce flow
2026-04-01 12:11:40 +05:30