Commit graph

402 commits

Author SHA1 Message Date
abhijeet760
8186f3d061
rest api timeout issue (#15891)
* submodule update: add name field to process event payload

* 🚀 chore: update submodules to latest lts-3.16 after auto-merge (#15894)

Co-authored-by: johnsoncherian <57667706+johnsoncherian@users.noreply.github.com>

* rest api timeout issue

* error standardisation

* Update queryPanelSlice.js

* Bump version to 3.20.147-lts across all components

---------

Co-authored-by: Swathi Hameed <42898362+swathihameed@users.noreply.github.com>
Co-authored-by: Adish M <44204658+adishM98@users.noreply.github.com>
Co-authored-by: johnsoncherian <57667706+johnsoncherian@users.noreply.github.com>
Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-04-17 10:20:53 +05:30
Ganesh Kumar
ace28958c3
Feature: Support for Key pair authentication in Snowflake plugin (#15919)
* Key pair authentication for Snowflake

* key must be in pkcs8 format
2026-04-16 15:08:56 +05:30
Ganesh Kumar
029fee3fbe
Fix : Batch logic for Postgresql GUI mode bulk operations (#15908) 2026-04-15 21:38:25 +05:30
Siddharth Pundir
7d0c386d79
Fix/pgsql optional password ssl auth (#15883) 2026-04-15 21:36:05 +05:30
Adish M
2448f8b2a8
Merge pull request #15900 from ToolJet/fix/ce-redis
Fix: bundle Redis in CE Docker image and fix oracledb plugin lockfile
2026-04-13 23:08:14 +05:30
abhijeet760
60ded3d578
added wallet connectivity to oracle. (#15771)
* added wallet

* slight changes

* added option for both thin and thick mode

* added wallet

* slight changes

* added option for both thin and thick mode

* sentence case

* Connection mode

* Connection fix

* error fix

* bacward compatiblity

* chore: bump version to 3.20.141-lts across all components

---------

Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-04-08 23:13:07 +05:30
Siddharth Pundir
1a75b1d46d
Implemented the list tables and list dataset for the big query (#15806)
* Implemented the list tables and dataset for the big query

* Implemented the list table method
2026-04-08 00:39:12 +05:30
Ganesh Kumar
7403235726
Feat : MySQL gui mode (#15727)
* GUI mode abstraction and GUI mode for postgresql

* CSS Issue and Query response fixes

* GUI Mode for MySQL

* Mysql changes similar to pgsql

* Mysql GUI mode bug fixes

* pagination for tables in mysql gui mode has been reapplied

* styles issues for drop down has been fixed

* Merge branch 'lts-3.16' into feature/mysql-gui-mode

---------

Co-authored-by: Adish M <adish.madhu@gmail.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-04-06 23:36:44 +05:30
Siddharth Pundir
668807c2c9
Mssql entra auth implementation (#15760)
* Mssql entra auth implementation

* migration for sql auth type

* Update index.ts

* automation fix

* Undoing the change

* fixed mssql authdropdown (#15811)

---------

Co-authored-by: Srimaniteja <mani@tooljet.com>
2026-04-02 21:05:27 +05:30
abhijeet760
6350b8994d
Sending raw data as well as utf-8 encoded data (#15781)
* sending raw data as well as utf-8 encoded data

* bump version to 3.20.136-lts across all components

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-31 22:10:36 +05:30
Ganesh Kumar
15e1cb93f9
new operation get dataset info (#15736) 2026-03-30 21:44:55 +05:30
SuvitsonHarrese
8cdab20e2b
Fixed dark icon visibility in data source page (#15332)
* Fixed dark icon visibility in data source page

* Updated logos

---------

Co-authored-by: sahil7303 <sahildewangan73@gmail.com>
2026-03-30 21:44:25 +05:30
Midhun G S
4c14fddc50
Merge pull request #15626 from ToolJet/fix/mongodb-uri-encoding 2026-03-26 17:38:40 +05:30
Sahil Dewangan
fefc7d95d1
fix: form fields prioritize (#15657) 2026-03-26 17:38:09 +05:30
Sahil Dewangan
a1c4b3d60b
refactor: datasource case inconsistencies (#15618) 2026-03-25 20:14:13 +05:30
Ganesh Kumar
d6a9603b7f
Fix : REST API datasource allows for parsing new file picker component files (#15612)
* File base64 data is added to the post request

* Object and Array is converted to string before appending to form data

* bump version to 3.20.130-lts across all components

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-25 20:14:01 +05:30
sahil7303
38c04be99f fix: use safeDecode function 2026-03-24 14:46:26 +05:30
sahil7303
e0e9c49b8c fix(mongodb): resolve double encoding in connection strings 2026-03-24 14:46:26 +05:30
Siddharth Pundir
513062ff6b
fix(mssql): add requestTimeout to connection options to respect statement timeout (#15648) 2026-03-24 01:00:19 +05:30
abhijeet760
1f9e4e5eac
Autofill encoding in postgres (#15617)
* autofill encoding

* link

* index file changed

* ssl

* form priotized

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-23 10:24:58 +05:30
abhijeet760
c001aea36a
list-tables for OPENAPI and pagination and search with list tables for Postgres, mongodb,mssql,mysql (#15440)
* list-tables

* mongodb listcollections

* changed listcollections to tables

* ui changes

* duplicate

* updated invoke method

* minor change

* uichanges

* twitching issue

* bump version to 3.20.126-lts

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-19 21:44:00 +05:30
Midhun G S
78b140ba22
fix: update SMTP plugin to support new nodemailer version and improve type definitions (#15592)
* fix: automated security fixes for frontend dependencies

* chore: update jspdf and related dependencies; fix autoTable reference in generate-file.js

* chore: upgrade jspdf-autotable to version 5.0.7 and adjust related code references

* fix: update SMTP plugin to support new nodemailer version and improve type definitions

- Updated nodemailer dependency from version 6.9.1 to 8.0.2.
- Enhanced type definitions for attachments in QueryOptions.
- Specified Transporter type for nodemailer connections.
- Improved attachment handling by defining a more specific type for filesData function.

* chore: update nodemailer and its types, adjust AppHistoryModule providers and controllers based on import context

* Implement feature X to enhance user experience and fix bug Y in module Z

* chore: update nodemailer to version 8.0.3 and remove @types/nodemailer from dependencies

* chore: update version to 3.20.125-lts across all components

---------

Co-authored-by: adishM98 <adishM98@users.noreply.github.com>
Co-authored-by: johnsoncherian <johnsonc.dev@gmail.com>
2026-03-18 22:20:22 +05:30
Siddharth Pundir
32c4caab12
Graphql revamp (#15551)
* Graphql revamp

* Added query params

* Passing hasdatasource to the sanitize functions

* Design fix

* Fix for right side border for key input

* Resolving the comment
2026-03-18 19:39:16 +05:30
Siddharth Pundir
06985b5b3b
Added pending items for mongo db and mssql (#15499)
* Added pending items for mongo db and mssql

* SSL Bug fix

* Bump version to 3.20.123-lts across all components

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-16 22:04:01 +05:30
Ganesh Kumar
7aa15a0233
Hotfix : REST API datasource CA cert concat issue (#15540)
* fix for concat issue on certificates

* bump version to 3.20.122-lts across all components

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-13 22:51:43 +05:30
Siddharth Pundir
032616d923
Merge pull request #15530 from ToolJet/fix/ssl-toggle-mongo
SSL Toggle for mongo conversion string to boolean
2026-03-12 14:33:14 +05:30
Ganesh Kumar
0a7915470c
Fix : SSL toggle conversion to boolean (#15529)
* hotfix for converting ssl toggle to boolean

* ssl toggle autofill fix for pgsql

* Fix for enable save button for pgsql

* removed validation for SSH

---------

Co-authored-by: Siddharthpl <siddharthpundir73@gmail.com>
2026-03-12 12:08:33 +05:30
Ganesh Kumar
a82232e7c0
Feature: GUI mode for Postgresql and GUI mode abstractions (#15417)
* GUI mode abstraction and GUI mode for postgresql

* CSS Issue and Query response fixes

* GUI mode postgresql and abstracted components enhancement

* Bug fix on delete operation retuns undefined as ouput and big fixes
2026-03-10 21:15:51 +05:30
Midhun G S
45d660672c
Vulnerability - Package upgrades (#15411)
* Refactor code structure for improved readability and maintainability

* Refactor code structure for improved readability and maintainability

* Bump version to 3.20.117-lts across all components
2026-03-09 21:08:20 +05:30
Siddharth Pundir
acc491033a
Feat/pgsql mongo ssh and db improvements (#15367)
* PgSQL ssh implementations and other improvements

* Updated the package.json

* Mongo db ssh implementation and improvements

* Updated the helper text and database label

* Updated the helper text for password

* Fixing the autofetch for the mongo

* Fixing autofetch for the pgsql

* Updated the ssl toggle title

* Updated the common toggle logic

* Bump version to 3.20.114-lts across all components

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-05 20:49:57 +05:30
Rudhra Deep Biswas
a78c539456
AWS V4 Signature REST API (#15370)
* AWS V4 Signature REST API

* package-lock

* UI changes
2026-03-04 19:33:38 +05:30
abhijeet760
3d3fe41983
Db Improvments (#15263)
* DynamicForm Options Ordering

* undo manifest

* autofetch

* improvements

* error standardisation

* ssh tunneling and ordering

* bug fixes

* toggle flip

* helper text

* ui changes

* design changes

* azure design changes

* removed fx button from mysql

* ui changes

---------

Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-03-04 19:32:05 +05:30
Adish M
6ddbb7fedc
feat: implement SSRF protection with URL validation across plugins (#14257)
* feat: implement SSRF protection with URL validation across plugins

* refactor SSRF protection to focus on cloud metadata endpoints and improve configuration options

* remove legacy whitelist functionality and streamline SSRF validation process

* enhance SSRF protection by adding configurable blocked schemes and validation checks

* enhance SSRF protection by integrating configurable options across services

* replace dns.lookup with dns.lookup from dns module for improved clarity

* refactor: enhance SSRF protection by merging request options and improving IP format normalization

* Fix: update comments for clarity and enhance IP normalization in SSRF protection

* enhance SSRF protection by validating URL and applying protection options in GraphqlQueryService

* enhance SSRF protection with detailed validation for redirects and URL schemes
2026-02-23 17:25:13 +05:30
Akshay
8c9d79c012
Fix: Use loadSync for gRPC filesystem proto loading and add lightweight service discovery (#15225)
* fix(grpcv2): use loadSync for filesystem proto loading to prevent server crash

protobufjs has an unfixed bug (protobufjs/protobuf.js#1098) where
async Root.load() calls resolveAll() outside its try-catch in the
finish() callback. When resolveAll() throws (e.g. unresolvable types),
the error becomes an uncaught exception that crashes the Node.js
process — the Promise never resolves/rejects.

Switch from protoLoader.load() to protoLoader.loadSync() for all
filesystem-based proto loading. With loadSync, resolveAll() errors
propagate as normal synchronous throws caught by existing try-catch
blocks. This is consistent with loadProtoFromRemoteUrl() which
already uses loadSync.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat(grpcv2): add filesystem proto discovery with lightweight scanning

Add discoverServiceNames and discoverMethodsForServices to support
two-phase service discovery from filesystem proto files. Uses
protobufjs.parse() for lightweight name scanning (~30KB/file) and
only loads full gRPC definitions for selected services, preventing
OOM on large proto directories.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* feat(DynamicSelector): add multi-select and autoFetch for grpcv2 filesystem services

Add isMulti and autoFetch props to DynamicSelector. autoFetch triggers
service discovery on mount without requiring a manual button click,
and skips cache persistence to avoid false "Unsaved Changes" prompts.
Multi-select renders services as chips with custom styles.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(data-sources): handle non-array elements in resolveKeyValuePair

resolveKeyValuePair assumed all array option elements are sub-arrays
(like metadata key-value pairs). Options like selected_services contain
plain strings, causing arr.map crash during test connection. Guard with
Array.isArray check and fall back to resolveValue for scalar elements.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): require service selection for filesystem mode in query manager

Filesystem mode without selected services would fall back to full
proto discovery (loading every file), defeating the purpose of the
two-phase discovery. Now shows an error asking the user to select
services in the datasource config instead.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): require selected services for filesystem test connection

Test connection in filesystem mode now validates that at least one
service is selected and uses a selected service for the connectivity
check instead of picking an arbitrary one from the proto directory.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): simplify filesystem test connection to validate proto parsing

Test connection for filesystem mode now just validates that proto files
can be parsed and services discovered — no service selection required.
Removes the meaningless waitForReady check which only tested TCP
connectivity without validating anything about the proto definitions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* refactor(grpcv2): remove filesystem branch from discoverServices

Filesystem mode never flows through discoverServices — it uses the
two-phase discoverServiceNames + discoverMethodsForServices path.
Remove the dead branch and add a comment documenting the filesystem
flow for clarity.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs(grpcv2): add comment documenting test connection behavior per mode

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): add TCP connectivity check for filesystem mode test connection

Filesystem mode now falls through to checkFirstServiceConnection (waitForReady)
like reflection and URL modes, instead of returning early after proto parsing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* cleanup(DynamicForm): remove unused snake_case prop aliases for isMulti and autoFetch

No plugin manifest uses is_multi or auto_fetch — the gRPC v2 manifest
(the only consumer of these props) uses camelCase exclusively, and there
is no transformation layer in the pipeline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(DynamicSelector): suppress noAccessError flash during loading

The no-access warning and red border briefly flashed on page reload
because validateSelectedValue ran with an empty array before the
fetch completed. Gate both on !isLoading so they only appear after
data is actually loaded.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(DynamicSelector): skip cache validation for autoFetch on unrelated prop changes

When autoFetch is enabled, cache is never persisted to options (to avoid
"Unsaved Changes"). So every time selectedDataSource changes for
unrelated reasons (e.g. title edit), the cache-checking useEffect finds
no cache and calls validateSelectedValue([]), falsely triggering the
no-access warning. Skip this effect for autoFetch since it has its own
dedicated fetch/validation lifecycle.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): remove QueryResult wrapping from plugin invokeMethod returns

grpcv2 plugin methods (discoverServiceNames, discoverMethodsForServices)
were returning QueryResult-wrapped responses which got double-wrapped by
DataSourcesService.invokeMethod, causing GRPCv2Component to crash with
"servicesData.services.map is not a function" when opening filesystem
proto queries.

Plugin invokeMethod now returns raw data (arrays) instead of QueryResult
objects. The server's invokeMethod always wraps with { status: 'ok', data }
consistently. DynamicSelector adds an Array.isArray guard for plugins
that return raw arrays vs { data: [...] }.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(DynamicSelector): skip access validation for autoFetch fields

autoFetch fields (e.g. gRPC services) are discovered from proto files,
not OAuth-scoped resources — "no access" warnings don't apply.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* refactor(grpcv2): unify service discovery into single getServiceDefinitions entry point

Consolidate discoverServices, discoverServiceNames, and discoverMethodsForServices
into two clear methods: listServices (lightweight name scan for DS config) and
getServiceDefinitions (full method discovery for query editor, all modes).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(grpcv2): prevent OOM on filesystem test connection and query fallback

Filesystem test connection no longer parses proto files — just counts
them with fast-glob and checks TCP connectivity via a raw gRPC client.
Query execution fallback after server restart now uses the lightweight
protobufjs.parse() scanner instead of the heavy protoLoader.loadSync()
path. Removes two dead functions (discoverServicesIndividually,
discoverServicesUsingFilesystem).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: update version to 3.20.95-lts across all components

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-02-17 17:52:48 +05:30
abhijeet760
af09402477
fixed in operation json (#15206) 2026-02-09 22:44:47 +05:30
abhijeet760
3ef6e75ce2
document instead of documents (#15201) 2026-02-09 15:02:19 +05:30
Midhun G S
c8fe500a1d
Migrated aws-sdk v2 to v3 (#15023)
* chore: update bcrypt to version 6.0.0 in package.json

* chore: remove unused devDependencies from package.json

* Refactor code structure for improved readability and maintainability

* Refactor code structure for improved readability and maintainability
2026-02-04 17:27:17 +05:30
gsmithun4
f8daa74171 rebase 2026-01-30 14:40:54 +05:30
Midhun G S
ef998eed20
chore: package upgrades (#15009)
* chore: update bcrypt to version 6.0.0 in package.json

* chore: remove unused devDependencies from package.json

* Implement feature X to enhance user experience and optimize performance
2026-01-22 11:34:05 +05:30
Akshay
25261d70f2
Refactor: gRPC safe proto load (#14233)
* refactor: failsafe gRPC service discovery with file loads

* refactor: search only service names

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-01-19 21:16:16 +05:30
abhijeet760
2e8cced91e
added none based switch case (#14954) 2026-01-19 19:49:47 +05:30
Midhun G S
f68c8e1885
[Vulnerability] package upgrades (#14861)
* chore: update nestjs-otel to version 8.0.1 and add systeminformation override

* remove unused API metrics configuration from OpenTelemetry setup

* fixed ldap flaky case

* Update: Sendgrid package to 8.1.6 (#14833)

* updated sendgrid

* fix: update listBuckets function to use default options for ListBucketsCommand

---------

Co-authored-by: gsmithun4 <gsmithun4@gmail.com>

* Vulnerability Issues (#14834)

* Security Fixes

* set version

* utl harper db

* s3

* marketplace package-lock

* Remove package-lock.json files

* chore: update lerna to version 9.0.3 in package.json

* Implement code changes to enhance functionality and improve performance

* removing options from s3 bucket in markeplace

* supabase build type fixes

---------

Co-authored-by: Adish M <adish.madhu@gmail.com>
Co-authored-by: Yukti Goyal <yuktigoyal02@gmail.com>
Co-authored-by: Adish M <44204658+adishM98@users.noreply.github.com>
Co-authored-by: abhijeet760 <abhijeet@tooljet.com>
Co-authored-by: Rudhra Deep Biswas <98055396+rudeUltra@users.noreply.github.com>
Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
2026-01-08 17:46:51 +05:30
abhijeet760
a0de33c5eb lint errors 2026-01-02 07:53:37 +00:00
abhijeet760
e7a7fbcf49 whitespace change 2025-12-26 13:05:28 +00:00
abhijeet760
19b824e2fa whitespace changes 2025-12-26 12:59:28 +00:00
abhijeet760
3055059063 added list tables for mongo and postgres 2025-12-26 12:10:00 +00:00
gsmithun4
0511d820df Implement feature X to enhance user experience and optimize performance 2025-12-10 18:51:56 +05:30
abhijeet760
b06e9b2b04
Enhance : ClickHouse module updated (#14666)
* updated clickhouse npm

* added_parser_to__tooljet

* updated response structure and removed data migration file

* resolved comments

* removed the fields from manifest.json

* improved error message
2025-12-10 15:16:03 +05:30
Pratush Sinha
861e717248
MongoDB connection with srv support (#14626)
* MongoDB connection with srv support

* design changes and migration

* changes in design

* fix password field is coming disabled.

* change with save button

* changes in the save button and encrypt

* Changes for mongoDb SRV after Code Review

* migration script

* Changes in the UI

* fixed the db issue in connection

* changes comment removed

* SSl issue resolved

* Review changes made

* editing connection string affects only individual fields

* fixed dataSource Saving in imported apps

* fixed imported apps ds save

---------

Co-authored-by: Pratush <pratush@Pratushs-MacBook-Pro.local>
2025-12-10 15:06:10 +05:30
Pratush Sinha
c602b2ccb4
Hotfix: MySQL should reject unauthorised connection only when certificates are provided (#14710)
* Hotfix ] MySQL - Reject Unauthorised SSL connection

* fixed sourceOptions.ssl_certificate ?? 'none'

---------

Co-authored-by: Pratush <pratush@Pratushs-MacBook-Pro.local>
Co-authored-by: Ganesh Kumar <ganesh8056234@gmail.com>
2025-12-05 19:15:47 +05:30