596498896e
Remove unnecessary scopes from temp key, add settings-key docs
2026-02-12 22:06:28 +00:00
2b7d915578
Restore blank lines after action closure openings
2026-02-12 21:43:39 +00:00
d9772e29cc
Remove stray blank lines from projects.php endpoints
2026-02-12 21:34:14 +00:00
455c292313
Remove redundant scope checks, make targetProjectId mandatory
2026-02-12 20:53:29 +00:00
97fb4cb4b6
Restrict migration console key with targetProjectId enforcement
...
- Short-lived JWT (120s TTL) for console key
- No APPS scope merge when targetProjectId is set in Key.php
- Generalized route restriction: migration keys only work on routes with matching :projectId param
- Remove per-endpoint migrationKey labels and targetProjectId checks
2026-02-12 20:39:05 +00:00
0cee469d73
Pass all source project API key scopes to console key
2026-02-12 18:30:59 +00:00
ba723de735
Add settings-key endpoint, move console key generation to source
2026-02-12 18:23:44 +00:00
6565f2ff91
Derive console API key scopes from project API key
...
Instead of hardcoding scopes in the console key, read them from the
project API key. Added platforms.read and keys.read to the project
key, and the console key now receives only scopes that the project
key already has.
2026-02-12 17:54:42 +00:00
06c6fac915
Add targetProjectId to console API key for project-scoped access
...
The console key with projectId='console' grants access to all projects'
platforms and keys. targetProjectId restricts it to only the migration
source project, enforced at the 4 read endpoints (listKeys, getKey,
listPlatforms, getPlatform).
2026-02-12 17:43:28 +00:00
3a813d8554
Revert targetProjectId scoping from console API key
...
The same-instance guard is sufficient security — targetProjectId
added unnecessary complexity since projectId already exists in the JWT.
2026-02-12 17:37:55 +00:00
e6d4f4e3a1
Scope console API key to target project via targetProjectId claim
2026-02-12 17:06:06 +00:00
d1170836b8
Only generate consoleApiKey for same-instance migrations
2026-02-12 16:40:20 +00:00
86ea75026f
Guard consoleApiKey to same-instance migrations only
...
Revert controller to original form without console API key generation
to avoid leaking JWT to untrusted remote endpoints. In the worker,
only set consoleApiKey when the source endpoint matches the local
endpoint, ensuring the locally-signed JWT is never sent cross-instance.
2026-02-12 16:30:57 +00:00
4350bda137
Use console API key for report endpoint instead of dbForPlatform
2026-02-12 15:49:08 +00:00
01958a0f4e
Move settings migration to source adapter via console API key
2026-02-12 15:26:29 +00:00
b338ed9a2c
Pass source document permissions to migrated resources
2026-02-12 12:39:52 +00:00
5a557e5602
Fix resourceType from 'project' to 'projects' for key queries
2026-02-12 12:35:20 +00:00
ed9d64b25f
Use unique IDs for migrated platforms and keys
...
Source and destination share dbForPlatform, so reusing the source
document IDs causes duplicate key errors.
2026-02-12 12:24:45 +00:00
28061ccb21
Move platform/key migration from source adapter to worker level
...
Settings (platforms, keys) live in dbForPlatform. Instead of passing
dbForPlatform to the source adapter, the worker reads from the source
project directly and writes via the destination adapter.
2026-02-12 12:19:00 +00:00
854a4aca82
Add platform and key counts to migration report endpoint
2026-02-12 11:50:56 +00:00
29111e5dea
Add platform and key migration support
...
Wire dbForPlatform and projectInternalId to migration source/destination.
Point migration dependency to dev branch with settings support.
2026-02-12 10:24:13 +00:00
6944fa7520
Merge pull request #11302 from appwrite/feat-team-sequence
...
Feat: team sequence
2026-02-12 10:14:36 +01:00
2bad5d8918
Merge pull request #11309 from appwrite/fix/static-files-worker-init
...
Fix static asset 404s by initializing Files per worker
2026-02-12 13:42:29 +05:30
886528bb29
Merge pull request #11306 from appwrite/feat/messaging-spans
2026-02-12 13:13:35 +05:30
086cf07c9c
avoid tasks
2026-02-12 12:57:40 +05:30
96ceab1a52
Fix static file loading by initializing Files per worker
2026-02-12 12:33:58 +05:30
d931003453
Merge pull request #11291 from appwrite/feat-project-status
2026-02-12 06:08:16 +00:00
7361b01a7d
Merge pull request #11255 from appwrite/feat-update-base
2026-02-12 06:05:54 +00:00
a486085322
feat: messaging spans
2026-02-12 09:36:58 +05:30
40b8b539e8
Update lock
2026-02-12 12:26:19 +13:00
ce4e99d643
Merge remote-tracking branch 'origin/1.8.x' into feat-update-base
...
# Conflicts:
# composer.json
2026-02-12 12:20:04 +13:00
b625bdb189
Formatting fix
2026-02-11 17:25:44 +01:00
5ac58e7723
Implement team sequence
2026-02-11 17:25:17 +01:00
efc1a5376b
Merge remote-tracking branch 'origin/1.8.x' into feat-project-status
2026-02-11 13:34:57 +00:00
435af97db1
Merge pull request #11297 from appwrite/fix/origin-validator-type-error
...
fix: Fix TypeError in Origin validator when array is passed
2026-02-11 18:20:32 +05:30
781512cf88
Merge pull request #11295 from appwrite/release-cli-13.3.2
...
chore: release cli 13.3.2
2026-02-11 18:11:59 +05:30
1a966741f4
(fix): Fix TypeError in Origin validator when array is passed
...
Move type check before assignment to prevent TypeError when non-string
value (like array) is passed to Origin::isValid(). The property
\$this->origin is typed as string, so assigning an array before
the is_string() check caused the error.
2026-02-11 18:01:18 +05:30
bb56c9a91e
Merge branch '1.8.x' into release-cli-13.3.2
2026-02-11 17:24:38 +05:30
942b90cb2a
Merge pull request #11283 from appwrite/fix/cli-static-setresource
...
Upgrade utopia-php dependencies and fix namespace changes
2026-02-11 17:16:54 +05:30
351cd569cf
Merge pull request #11296 from appwrite/chore/add-php-retry-tests-workflow
...
chore(ci): add php-retry for all tests in tests workflow
2026-02-11 16:57:00 +05:30
b243404a71
chore(ci): add PR comment permissions to retry jobs
2026-02-11 16:53:25 +05:30
dcb759e3fe
chore(ci): restore retry job metadata inputs
2026-02-11 16:49:59 +05:30
5371aa6820
chore(ci): add php-retry to tests workflow
2026-02-11 16:30:29 +05:30
f7f97cdb33
chore: release cli 13.3.2
2026-02-11 16:16:59 +05:30
61c5374134
remove orchestration
2026-02-11 16:04:20 +05:30
45f4b1e8ad
Merge branch '1.8.x' into fix/cli-static-setresource
2026-02-11 16:04:14 +05:30
465d21badd
Merge pull request #11293 from appwrite/feat-pg-adapter
2026-02-11 10:15:58 +00:00
a2dc62d4e5
fix
2026-02-11 15:20:30 +05:30
686a6f9474
Merge branch '1.8.x' into feat-update-base
2026-02-11 08:35:50 +00:00
308609a0a2
Merge branch '1.8.x' into feat-pg-adapter
2026-02-11 08:34:45 +00:00
Prem Palanisamy
Matej Bačo
Chirag Aggarwal
Jake Barnby
loks0n
Matej Bačo
Damodar Lohani