42414a46b0
fix: address review comments for User class pattern
...
- general.php: add instanceof guard in error handler to prevent calling
isPrivileged() on a plain Document if getResource('user') returns
an unexpected type
- graphql.php: add setUser() calls on request/response in graphql group
init so sensitive field filtering works correctly for GraphQL routes
- api.php: fix session group init type hint from Document to User for
consistency with all other init blocks
https://claude.ai/code/session_01JLPDurUgyj7qViA8JqQFTH
2026-03-26 02:48:02 +00:00
7aff75ae1c
refactor: convert User::isApp() and User::isPrivileged() from static to instance methods
...
All call sites now use $user->isApp() and $user->isPrivileged() instance
syntax instead of static User::isApp() / $user::isPrivileged() calls.
Added setUser() to Request class for consistency with Response.
https://claude.ai/code/session_01JLPDurUgyj7qViA8JqQFTH
2026-03-26 02:47:56 +00:00
82d7926c4b
fix: use User type hint instead of Document for $user parameter
...
PHPStan correctly flagged that Document::isPrivileged() doesn't exist.
Changed type hints from Document $user to User $user in all action
signatures where $user::isPrivileged() is called, since the runtime
instance is always a User (or subclass).
https://claude.ai/code/session_01JLPDurUgyj7qViA8JqQFTH
2026-03-26 02:47:38 +00:00
669f323156
refactor: use $user:: for isPrivileged() to make privilege checks extensible
...
Replace all static User::isPrivileged() calls with $user::isPrivileged()
across the codebase. Since $user is resolved via setDocumentType, this
allows subclasses to override the privilege check without CE needing to
know about downstream-specific roles.
https://claude.ai/code/session_01JLPDurUgyj7qViA8JqQFTH
2026-03-26 02:46:48 +00:00
2d05d608f4
Upgrade utopia-php dependencies and fix namespace changes
...
- Upgrade utopia-php/cli from 0.15 to 0.22
- Upgrade utopia-php/analytics from 0.10 to 0.15
- Upgrade utopia-php/orchestration from 0.9 to 0.19
- Use dev branches for utopia-php/framework and utopia-php/platform
- Remove utopia-php/swoole dependency (merged into framework)
- Migrate Utopia\CLI\Console to Utopia\Console across all files
- Migrate Utopia\Http to Utopia\Http\Http namespace
- Migrate Utopia\Swoole\Files to Utopia\Http\Files (now instance-based)
- Convert static CLI::setResource() calls to instance-based Dependency API
- Fix StatsResources task named parameter mismatch
2026-02-10 10:34:24 +05:30
1eaf5d5ffa
replace app usage with http
2026-02-04 11:22:04 +05:30
5d24b51421
Allow separately enabling graphql introspection
2026-01-19 19:26:17 +13:00
2cfb5ecfd9
Reapply "Merge pull request #11130 from appwrite/feat-auth-instance"
...
This reverts commit 38687bc24e
2026-01-15 04:08:00 +13:00
38687bc24e
Revert "Merge pull request #11130 from appwrite/feat-auth-instance"
...
This reverts commit c12cad80bb2a17429226
2026-01-15 03:48:42 +13:00
5c915ef92f
Reapply "Merge pull request #11099 from appwrite/feat-auth-instance"
...
This reverts commit 321fc8ee70
2026-01-14 19:07:49 +13:00
321fc8ee70
Revert "Merge pull request #11099 from appwrite/feat-auth-instance"
...
This reverts commit a4734a5de715922fb88c
2026-01-14 02:37:17 +13:00
7573ee75a2
Use authorization instance
2026-01-07 20:04:28 +13:00
dc85d44647
Revert "Refactor auth single instance"
2025-12-20 02:54:50 +13:00
13f4aa9a80
Merge remote-tracking branch 'origin/1.8.x' into refactor-auth-single-instance
...
# Conflicts:
# app/controllers/api/account.php
# app/controllers/api/vcs.php
# app/controllers/general.php
# app/controllers/shared/api.php
# app/init/resources.php
# composer.lock
# src/Appwrite/Platform/Modules/Console/Http/Resources/Get.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Update.php
# src/Appwrite/Platform/Modules/Functions/Http/Executions/Create.php
# src/Appwrite/Platform/Workers/Migrations.php
2025-12-18 18:17:41 +13:00
5daacb7161
Refactor Specs task for better code organization
...
- Extract platform, auth counts, and keys into separate methods
- Add getPlatforms(), getAuthCounts(), and getKeys() methods
- Extract SDK platform logic into getSDKPlatformsForRouteSecurity()
- Add PHPDoc comments with proper type hints
- Move constructor to top of class for better readability
2025-12-14 11:21:44 +05:30
5da1f791a5
sync with 1.8.x
2025-11-27 18:17:04 +02:00
f216ea5d65
Merge branch '1.8.x' of github.com:appwrite/appwrite into refactor-auth-single-instance
...
# Conflicts:
# app/controllers/api/account.php
# app/controllers/api/graphql.php
# app/controllers/api/storage.php
# app/controllers/api/teams.php
# app/controllers/general.php
# app/controllers/shared/api.php
# app/controllers/shared/api/auth.php
# app/init/resources.php
# app/realtime.php
# app/worker.php
# composer.lock
# src/Appwrite/Auth/Auth.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Attribute/Decrement.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Attribute/Increment.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Create.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Delete.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Get.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Update.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/Upsert.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Collections/Documents/XList.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Operations/Create.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Update.php
# src/Appwrite/Platform/Modules/Functions/Http/Executions/Create.php
# src/Appwrite/Platform/Modules/Functions/Http/Executions/Get.php
# src/Appwrite/Platform/Modules/Functions/Http/Executions/XList.php
# src/Appwrite/Platform/Modules/Tokens/Http/Tokens/Buckets/Files/Action.php
# src/Appwrite/Utopia/Request.php
# src/Appwrite/Utopia/Response.php
# tests/unit/Auth/AuthTest.php
# tests/unit/Messaging/MessagingChannelsTest.php
2025-11-27 15:50:37 +02:00
4ad249f918
Revert "Revert "Merge pull request #10682 from appwrite/refactor-auth-single-instance""
...
This reverts commit 8765d5650a
2025-11-26 12:05:12 +02:00
8765d5650a
Revert "Merge pull request #10682 from appwrite/refactor-auth-single-instance"
...
This reverts commit 919b01a1b1deb5039352
2025-11-19 16:21:06 +13:00
dff7aa6ce0
format
2025-11-04 07:12:42 +00:00
437d914e90
More refactor and fixes
2025-11-04 06:08:35 +00:00
33f88fa5e0
Refactor authorization handling across multiple modules to use the new getAuthorization() method. Update CHANGES.md to reflect the change in usage worker authorization. Adjust composer.json to specify the correct version for utopia-php/database. Update plugin-api-version in composer.lock.
2025-10-22 16:35:48 +03:00
abcaf6cd73
feat: sdk group attribute
2025-03-31 05:48:17 +00:00
20e87cb82f
Run Linter
2025-01-17 13:39:16 +09:00
95dcb67747
Implement new SDK Class on 1.6.x
2025-01-17 13:31:39 +09:00
8bc37026cd
Revert "Feat adding coroutines"
2024-10-08 20:54:40 +13:00
d14edf4207
reverting: to set coroutines as head
2024-10-01 10:30:47 -04:00
5512340cdd
Revert "Feat eldad4 coroutines"
2024-09-20 12:30:05 -04:00
7d248f29f0
feat: Coroutine graphql wip
2024-06-11 18:08:40 -04:00
e75645334a
test: GraphQL wip
2024-06-10 12:56:29 -04:00
9fc0342cf1
Updated injections
2024-04-23 13:30:20 +02:00
3b70ae4d9f
Fixed formatting
2024-04-22 07:56:36 +02:00
5ce3de4933
Merge remote-tracking branch 'origin/main' into feat-eldad2-coroutines
2024-04-02 02:13:15 +02:00
beda5293b4
Fix format
2024-04-01 13:08:46 +02:00
8ed1da4ea8
Updated getEnv to use system lib
2024-04-01 13:02:47 +02:00
db1674811f
Finish fixing code QL warnings
2024-03-08 13:57:20 +01:00
fc028b953e
fix: formatter
2024-03-08 00:30:23 +01:00
efeb898be1
Import fixes
2024-03-07 15:29:42 +01:00
d3b0b00917
Allow users to disable APIs
2024-03-04 23:12:54 +01:00
12228ccef4
converted desc to sentence case
2023-08-01 20:56:48 +05:30
bfd23665cb
fix: graphql
2023-03-01 18:13:34 +05:30
524a6db72d
Hide get method from SDKs
2022-12-21 20:45:34 +13:00
56a903577f
Remove docs false
2022-12-19 20:51:34 +13:00
11ef344216
Remove get method from SDKs
2022-12-19 19:07:04 +13:00
d107b92748
Remove debug flags on production instead of abuse enabled
2022-12-15 13:44:23 +13:00
64b74d4100
Add alias route to allow for multiple SDK method names
2022-12-15 13:36:47 +13:00
aa7e326ce9
Allow file uploads from explorer
2022-12-13 15:43:29 +13:00
db49e962f4
Use abuse status instead of dev/prod for graphql abuse check
2022-10-28 20:12:11 +13:00
89b4d0026a
Move shutdown hook to graphql controller
2022-10-28 10:04:31 +13:00
e3b5919e40
Review doc fixes
2022-10-25 15:53:15 +13:00
Claude
Chirag Aggarwal
Jake Barnby
shimon
Damodar Lohani
Bradley Schofield
Binyamin Yawitz
Eldad Fux
Matej Bačo
Torsten Dittmann
Khushboo Verma
Dakshi