Boy132
7813b6060c
Make oauth nullable & remove middleware from oauth callback ( #418 )
...
* make oauth nullable
* fix oauth callback middleware
2024-06-18 22:05:08 +02:00
Boy132
5a3c606627
Add OAuth backend ( #386 )
...
* add socialite backend
* fix redirect url
* small cleanup
* fix "oauth" type
* changes from review
2024-06-13 21:06:31 +02:00
Boy132
b1f99ca8a3
Add api for mounts ( #160 )
...
* add application api endpoints for mounts
* run pint
* add mounts resource to api key
* add includes to mount transformer
* forgot delete route for mount itself
* add migration for "r_mounts" column
* add mounts to testcase api key
2024-05-19 08:50:15 -07:00
Lance Pioch
91a3bb969e
Better scrambling to fix #235
2024-05-16 00:23:29 -04:00
Boy132
6bdd1b3ccb
Add api for server transfers ( #153 )
...
* add application api endpoint to start server transfer
* add basics for "cancel transfer" endpoint
* wire up wings cancel
* lint
2024-05-15 07:37:56 -07:00
Boy132
afd9f2eb0e
Add api for database hosts ( #159 )
...
* add application api endpoints for database hosts
* run pint
* forgot to lint this one
* Update app/Http/Controllers/Api/Application/DatabaseHosts/DatabaseHostController.php
Co-authored-by: Devonte W <devnote.dev75@gmail.com>
* Update routes/api-application.php
Co-authored-by: Devonte W <devnote.dev75@gmail.com>
* rename all "databaseHost" to "database_host"
---------
Co-authored-by: Devonte W <devnote.dev75@gmail.com>
2024-05-15 07:37:38 -07:00
Lance Pioch
2beb12c04f
Swap over routes
2024-05-11 20:50:10 -04:00
Lance Pioch
871e93a38c
Add scramble api docs
2024-05-11 17:38:44 -04:00
Lance Pioch
17787fee18
Forbid built in webserver due to unresolvable issues
2024-05-04 13:12:33 -04:00
Lance Pioch
5d2248ab1f
Implement container statuses from wings
2024-04-29 14:29:04 -04:00
Lance Pioch
eb5c304f69
Remove these mount usages
2024-03-28 13:29:24 -04:00
Lance Pioch
0d2e63f590
Better route model binding
2024-03-22 21:32:12 -04:00
Lance Pioch
3d740907db
This is no longer needed
2024-03-20 03:02:35 -04:00
Lance Pioch
b4532d9d10
Use more fluent methods
2024-03-19 16:47:52 -04:00
Lance Pioch
2aa9be62a1
Use route model binding
2024-03-17 20:57:06 -04:00
Lance Pioch
e4cee4d69d
Remove locations
2024-03-14 02:23:30 -04:00
Lance Pioch
a296084d6e
Remove nests
2024-03-14 01:27:50 -04:00
Lance Pioch
c83dd86a41
Switch namespace back to App
2024-03-12 22:39:16 -04:00
Matthew Penner
794248d4d7
routes: fix imports
2022-12-01 11:51:26 -07:00
DaneEveritt
1eee55b27c
Add endpoint needed for recieving and processing activity
2022-07-09 17:45:38 -04:00
DaneEveritt
92c1c162af
Code cleanup for facades
2022-06-18 12:07:32 -04:00
DaneEveritt
2f1c8ae91d
Add basic server activity log view
2022-06-12 15:16:48 -04:00
DaneEveritt
986c375052
Improve support for use of i18next; rely on browser caching to keep things simple
2022-06-11 14:04:09 -04:00
DaneEveritt
03a497fb8a
Use a post request to delete SSH keys, some hashes use slashes which cause 404 errors; closes #4100
2022-05-30 17:28:42 -04:00
DaneEveritt
4213775b5c
Fix mounting behavior to work correctly when adding to a server
2022-05-30 11:33:42 -04:00
DaneEveritt
a5521ecb79
Add support for returning transforming activity logs on the front-end
2022-05-29 20:34:48 -04:00
DaneEveritt
287fd60891
Log activity when modifying account details
2022-05-29 18:48:35 -04:00
DaneEveritt
cbecfff6da
Add activity logging for files
2022-05-29 13:56:39 -04:00
DaneEveritt
8605d175d6
Ensure admin endpoints continue to work
2022-05-22 18:56:22 -04:00
DaneEveritt
e313dff674
Massively simplify API binding logic
...
Changes the API internals to use normal Laravel binding which automatically supports nested-models and can determine their relationships. This removes a lot of confusingly complex internal logic and replaces it with standard Laravel code.
This also removes a deprecated "getModel" method and fully replaces it with a "parameter" method that does stricter type-checking.
2022-05-22 14:10:01 -04:00
DaneEveritt
97280a62a2
Add support for storing SSH keys on user accounts
2022-05-14 17:31:53 -04:00
DaneEveritt
65f27d41a2
Switch to more recent Laravel route definition methods
2022-05-14 15:51:05 -04:00
Dane Everitt
bf9cbe2c6d
Add consistent CSRF token verification to API endpoints; address security concern with non-CSRF protected endpoints
2021-11-16 20:02:18 -08:00
Dane Everitt
45999ba4ee
(security) use POST for logout rather than GET
...
see https://github.com/pterodactyl/panel/security/advisories/GHSA-m49f-hcxp-6hm6
2021-10-23 13:00:21 -07:00
Dane Everitt
22a8b2b3a2
Use more standardized rate limiting in Laravel; apply limits to auth routes
2021-10-23 12:17:16 -07:00
Dane Everitt
5d5e4ca7b1
Add support for locking backups to prevent any accidental deletions
2021-05-03 21:26:09 -07:00
Dane Everitt
1b2c4931ee
Add endpoint logic necessary to reset server states if they get stuck installing/restoring when wings restarts
2021-02-23 21:20:02 -08:00
Dane Everitt
00da092e45
Fix tests
2021-01-30 19:12:22 -08:00
Dane Everitt
663143de0b
Merge branch 'develop' into dane/restore-backups
2021-01-25 19:16:40 -08:00
Dane Everitt
a043071e3c
Update to Laravel 8
...
Co-authored-by: Matthew Penner <me@matthewp.io>
2021-01-23 12:12:54 -08:00
Dane Everitt
e8dcd30e0c
[security] fix resources not properly returning an error when they don't match the server in the URL
...
Prior to this fix certain resources were accessible even when their assigned server was not the same as the server in the URL. This causes the resource server relationship to not match the server variable present on the request.
Due to this failed logic it was possible for users to access resources they should not have been able to access otherwise for some areas of the panel.
2021-01-19 21:19:17 -08:00
Dane Everitt
f24193801a
Add endpoint for triggering restoration completion
2021-01-18 21:14:49 -08:00
Dane Everitt
187df97590
Add UI for restoring backup checkpoint text
2021-01-17 18:25:13 -08:00
Dane Everitt
ddc4c8e54b
Fix route def
2021-01-17 17:57:34 -08:00
Dane Everitt
ff21d83e2d
Add endpoint to get all nodes meeting memory & disk requirements for a server; closes #1012
2021-01-10 13:08:43 -08:00
Dane Everitt
87e9d5e82a
Throttle pulls
2020-12-25 15:09:02 -08:00
Dane Everitt
087c41d5ac
Add endpoint to pull a remote file down
2020-12-24 09:15:03 -08:00
Dane Everitt
5bbb36b3cf
Support updating docker image for a server from the frontend
2020-12-13 11:07:29 -08:00
Dane Everitt
d22456d9ca
Block API access when 2FA is required on account; closes #2791
2020-12-06 13:56:14 -08:00
Matthew Penner
8611ebb2d6
Add /api/client/servers/{server}/files/chmod endpoint
2020-12-04 09:24:06 -07:00
