Merged
Conversation
- Added functionality to add, edit, and remove trusted origins for SSO callbacks. - Introduced new API mutations for managing trusted origins. - Enhanced the SSO settings UI to include a dialog for managing trusted origins, with appropriate state handling and user feedback via toast notifications.
…riptions - Updated the Stripe API response to return only the monthly and annual subscription products. - Enhanced the product listing logic to filter out unnecessary products, improving data handling in the application.
Feat/add trusted origins sso
…in configuration - Enhanced error handling in the addDomainToCompose function to provide more descriptive messages when a domain's service name is missing or when the service does not exist in the compose configuration. This improves debugging and user feedback.
…ming-service-domain-still-bound-to-old-service-name fix(docker): improve error messages for missing service names in doma…
…on info - Updated the server version display to conditionally show the release tag when it is either "canary" or "feature", enhancing clarity for users.
…snt-work-but-states-success fix(update-server): display release tag conditionally in server versi…
- Implemented a function to convert IDNs to ASCII punycode format, ensuring compatibility with Traefik requirements. - Added tests to verify the conversion of IDNs and the handling of ASCII domains in router configurations.
- Added tests to verify the conversion of Russian Cyrillic domains and subdomains with IDN TLDs to punycode format, ensuring proper handling in router configurations. - Confirmed that non-ASCII parts are correctly converted while ASCII parts remain unchanged.
feat(traefik): add support for internationalized domain names (IDN)
- Updated the account linking configuration to include trusted providers fetched from the database, enhancing flexibility in managing SSO integrations.
…mically feat(auth): dynamically add trusted providers for account linking
`docker stack rm` was chained after `cd` with `&&`, so if the compose directory didn't exist the stack removal command never executed. This left orphaned Docker services with occupied ports after deletion via the API. Also removed a duplicate `execAsync` call that always ran outside the `if/else` block regardless of `compose.serverId`. Fixes #3691
Co-authored-by: Siumauricio <47042324+Siumauricio@users.noreply.github.com>
- Added support for editing existing OIDC providers, allowing users to update issuer, domains, client settings, and scopes. - Introduced a new query to fetch OIDC provider details for editing. - Updated the UI to reflect changes in the registration dialog based on whether the user is adding or editing a provider. - Improved error handling for domain conflicts during updates.
- Implemented a new function to verify if an environment has active services before allowing its deletion. This prevents accidental deletion of environments that are still in use.
…-all-the-services-werent-deleted feat(environment): add service check before environment deletion
chore: add DevContainer
- Introduced support for Microsoft Teams notifications, including the ability to create, update, and test connections for Teams notifications. - Updated the notification schema to include Teams as a notification type. - Added Teams icon and UI components for handling Teams notifications in the dashboard. - Implemented backend logic for creating and updating Teams notifications, along with necessary database schema changes. - Enhanced existing notification functionalities to support Teams notifications across various events (e.g., build success, failure, database backups).
…vider feat(notifications): add Microsoft Teams integration for notifications
…bhooks feat: add support for Soft Serve webhooks
…r handling - Updated the deployment deletion process to include error handling for non-existent deployments. - Refactored the command execution to handle both remote and local execution based on server availability. - Simplified the logic for determining deletable deployments in the ShowDeployments component.
…ations and composes - Renamed and consolidated the functions for clearing old deployments to a single method, `clearOldDeployments`, which now accepts an ID and type (application or compose). - Updated the logic to filter deployments based on status and type, improving code maintainability and reducing redundancy.
…ove cloud check - Removed the cloud check from the ClearDeployments component, simplifying the logic. - Updated the clearOldDeployments function to accept appName and serverId, enhancing its flexibility. - Adjusted the return values in the application and compose routers to return a boolean instead of a detailed message, improving consistency.
feat(deployments): add ability to delete old deployments
feat(auth): add autocomplete for 2FA OTP input
…te path traversal logic
… validation - Updated the unzipDrop function to remove the symlink entry check and replace it with a more general validation for dangerous node entries. - Adjusted the associated test to reflect the change in error messaging.
…function - Introduced a new test suite to validate that the unzipDrop function prevents writing outside the application directory, specifically addressing potential sandbox escape vulnerabilities. - Implemented setup and teardown logic to ensure a clean test environment for each test run.
…gh-Path-Traversal feat(tests): add unit tests for readValidDirectory function to valida…
…ner-logs - Introduced tests for isValidTail, isValidSince, isValidSearch, and isValidContainerId functions to ensure proper validation and security against command injection. - Updated docker-container-logs to utilize these validation functions, enhancing input handling for WebSocket connections.
…haracters - Updated the regex in the isValidSearch function to limit valid characters, improving input validation and security against potential injection attacks.
- Enhanced the isValidSearch function to restrict allowed characters to alphanumeric, space, dot, underscore, and hyphen, preventing command injection vulnerabilities. - Updated unit tests to reflect the new validation rules and ensure comprehensive coverage against potential injection attacks.
…r-container-logs-Endpoint feat(tests): add unit tests for validation functions in docker-contai…
…validation - Replaced user data fetching with a dedicated query for trusted origins in SSO settings. - Updated mutation functions to utilize the new trusted origins query. - Introduced a new service function to validate enterprise licenses based on organization ownership. - Enhanced SSO router to ensure trusted origins are managed by the organization owner. - Added callback URL for email sign-in in the home page.
- Eliminated the getTrustedOrigins query from the user router to streamline the API and improve code maintainability.
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
…r ID retrieval - Removed the unused import of the organization schema. - Introduced a new import for the getOrganizationOwnerId function to enhance license validation logic.
refactor(sso): update trusted origins handling and introduce license …
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR promotes changes from
canarytomainfor version v0.27.1.🔍 Changes Include:
✅ Pre-merge Checklist: