dokploy

mirror of https://github.com/Dokploy/dokploy.git synced 2026-10-15 13:21:11 +00:00

Files

T

Mauricio Siu a42614004f fix: don't leak git provider secrets to non-owner org members

gitlab.one, github.one, gitea.one and bitbucket.one returned the full
DB record (OAuth access/refresh tokens, client secrets, private keys,
webhook secrets, app passwords) to any org member who merely had
access to *use* a shared provider (sharedWithOrganization: true),
not just its owner or an org owner/admin.

Add canViewGitProviderSecrets() and null out the secret fields in
each .one response when the caller isn't the provider owner or an
org owner/admin.

2026-09-01 03:22:52 -06:00

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix: don't leak git provider secrets to non-owner org members

2026-09-01 03:22:52 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.