Commit graph

14 commits

Author SHA1 Message Date
Adish M
6ddbb7fedc
feat: implement SSRF protection with URL validation across plugins (#14257)
* feat: implement SSRF protection with URL validation across plugins

* refactor SSRF protection to focus on cloud metadata endpoints and improve configuration options

* remove legacy whitelist functionality and streamline SSRF validation process

* enhance SSRF protection by adding configurable blocked schemes and validation checks

* enhance SSRF protection by integrating configurable options across services

* replace dns.lookup with dns.lookup from dns module for improved clarity

* refactor: enhance SSRF protection by merging request options and improving IP format normalization

* Fix: update comments for clarity and enhance IP normalization in SSRF protection

* enhance SSRF protection by validating URL and applying protection options in GraphqlQueryService

* enhance SSRF protection with detailed validation for redirects and URL schemes
2026-02-23 17:25:13 +05:30
Priyansh Rai
59c941bc82
Feat: GoogleSheets 2.0 Marketplace Plugin (#14813)
* Feat: Dynamic Selector (#14685)

* feat: introduce the dynamic-selector abstracted component with support for caching dependent dropdowns

* feat: introduce fx toggle option to enable fx editor in the dynamic-selector component

* feat: set `fxEnabled` prop default to `false` in DynamicSelector.

* fix(DynamicForm): fix fxEnabled prop handling to support snake_case

* refactor: rename variables and clean code

* refactor: rename cache key from `__default` to `nonDependentCache` in DynamicSelector.

* feat: Simplify dynamic selector data handling by removing transformation logic.

* refactor: simplify DynamicSelector error log by removing data source ID.

* fix: Throw an error when multi-user authentication is enabled but no user ID is found.

* refactor: rename iteration variables for improved readability

* perf: memoize composite dependency key calculation using `useMemo` hook.

* refactor: simplify `isFxMode` state initialization by removing dynamic value checks and `useEffect`

* refactor: remove unused `responsePath` prop from `DynamicForm` component

* refactor(DynamicForm): remove unused `rest` prop from `getElementProps`.

* fix(DynamicForm): fix support for snake and camel case props

* feat: Add support for passing arguments when invoking data source methods.

* Feat/googlesheets-v2 plugin (#2)

* GoogleSheets v2

* Changes in Operations

* feat: introduce the dynamic-selector abstracted component with support for caching dependent dropdowns

* feat: introduce fx toggle option to enable fx editor in the dynamic-selector component

* feat: set `fxEnabled` prop default to `false` in DynamicSelector.

* Error Standarization

* fix(DynamicForm): fix fxEnabled prop handling to support snake_case

* refactor: rename variables and clean code

* refactor: rename cache key from `__default` to `nonDependentCache` in DynamicSelector.

* feat: Simplify dynamic selector data handling by removing transformation logic.

* refactor: simplify DynamicSelector error log by removing data source ID.

* fix: Throw an error when multi-user authentication is enabled but no user ID is found.

* refactor: rename iteration variables for improved readability

* perf: memoize composite dependency key calculation using `useMemo` hook.

* refactor: simplify `isFxMode` state initialization by removing dynamic value checks and `useEffect`

* refactor: remove unused `responsePath` prop from `DynamicForm` component

* refactor(DynamicForm): remove unused `rest` prop from `getElementProps`.

* fix(DynamicForm): fix support for snake and camel case props

* feat: Add support for passing arguments when invoking data source methods.

* feat: Integrate the dynamic-selector component to the googlesheetsv2 datasource

---------

Co-authored-by: Pratush Sinha <pratushsinha619@gmail.com>
Co-authored-by: Pratush <pratush@Pratushs-MacBook-Pro.local>

* fix: correct FxButton import path

* Bug fixes

* ui-fixes

* authenticate button

* authenticate button design

* bug fixes

* Pass ENV ID to DyanamicForm

* refresh token fixed

* added helper

* query error from invoke method

* Fix/Googlesheets v2 bug fixes (#15043)

* fix: reduce font size of googlesheets authorize description

* fix: update labels

* fix: replace legacy googlesheets with v2 in commonly used

* fix: address review comments

* save button (#15035)

* save button

* sheet required

* conditional connect

* authUrl Fixes

* authUrl Query Fix

* dependency fixed (#15083)

* chore: bump version to 3.20.80-lts across all modules

---------

Co-authored-by: Pratush Sinha <pratushsinha619@gmail.com>
Co-authored-by: Pratush <pratush@Pratushs-MacBook-Pro.local>
Co-authored-by: Ganesh Kumar <ganesh8056234@gmail.com>
Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
Co-authored-by: abhijeet760 <abhijeet@tooljet.com>
Co-authored-by: Rudhra Deep Biswas <98055396+rudeUltra@users.noreply.github.com>
Co-authored-by: Sahil Dewangan <123866478+sahil7303@users.noreply.github.com>
Co-authored-by: gsmithun4 <gsmithun4@gmail.com>
2026-01-29 22:00:29 +05:30
parthy007
d1f62405a4 fix: configure body correctly for token call
fix: add hubspot in querymanager auth flow
2025-10-23 15:44:51 +05:30
Parth
03505b0174
fix: token headers & client-auth dropdown (#14082) 2025-10-22 15:19:20 +05:30
Priyansh Rai
94e4a13043
Feat: Add Gmail plugin (#13843)
* ee commit

* merge commit

* feat: updated openapi operation component

* updated query operation sepctype

* fix: updated query dropdown style

* feat: config dropdown update

* feat: add Gmail plugin with API integration and initial setup

* refactor: enhance type definitions

* refactor: clean up code and refactor variable names

* fix: update Gmail OAuth scope to allow full access to Gmail

* feat: standardize error handling for Gmail plugin

* fix: include oauth_type handling in Gmail plugin for cloud environment

* fix: update spec_url for Gmail operations

* refactor: remove unused fields in gmail manifest.json

* fix: update Content-Type header to application/x-www-form-urlencoded for token requests

* feat: add environment variable prefix for Gmail in OAuth handling

* fix: remove encryption requirement for client_id in Gmail manifest

* fix: update Gmail plugin to use form data for token requests and simplify response handling

* fix: add Gmail to OAuth data sources in DataSourceManager

* fix: encode path parameters in Gmail plugin URL construction

* fix: add back margin to Client ID label in CommonOAuthFields component

* fix: adjust width of input field in RenderParameterFields for better alignment

* fix: set response type to 'json' in requestOptions for Gmail service

---------

Co-authored-by: Devanshu Gupta <devanshuguptaknp@gmail.com>
2025-09-08 12:20:32 +05:30
Devanshu Gupta
6f572315c1
feat: added hubspot (#13854)
* feat: added hubspot

* fix: updated name

* feat: updated spec url

* fix: added options in manifest

* fix: resolved comments

* fix: added kind

* fix: updated query options check

* fix: kind index
2025-08-21 18:54:05 +05:30
Devanshu Gupta
cb0a87e1a1
Feat/ms graph pre release (#13581)
* ee commit

* merge commit

* feat: updated openapi operation component

* updated query operation sepctype

* fix: updated query dropdown style

* init plugin

* init plugin

* feat: config dropdown update

* feat: added ms plugin

* fix: plugin connection name

* submodule reference updated

* plugin label updated

* added back margin top class

---------

Co-authored-by: Ganesh Kumar <ganesh8056234@gmail.com>
2025-08-11 18:59:49 +05:30
Ganesh Kumar
f46340b477
Enhance: Extract OAuth 2.0 flow for Salesforce & Snowflake (#13529)
* salesforce & snowflake changes added to prerelease

* module import error fixes

* optional parameter for getAuthUrl method
2025-07-23 22:18:50 +05:30
Parth
6dbdfe2f79 Fix: Api call for token generation in client-credentials grant type (#2785) 2024-11-29 00:58:35 +05:30
Devanshu Rastogi
e4196adae1 Enhance: Rest api body to accept raw input instead of raw json. (#2249)
* Enhanced rest api body to accept raw input instead of raw json.

* Changed content type from application/json to text/json and changed copywrite to RAW.

* Changed rest api body toggle label from 'RAW' to 'Raw'.

* Added request label for static REST API data source.

* Fixed issue where GET query failed since body was undefined.

* Integrated json_body to add backward compatibility.

* Removed console logs.

* Added support for 'text/json' type in checkIfContentTypeIsJson function.

* Made changes according to new frontend architecture in v3.

* Fixed request URL field overflow issue.

---------

Co-authored-by: Akshay Sasidharan <akshaysasidharan93@gmail.com>
2024-11-22 12:49:08 +05:30
Akshay Sasidharan
03329abfa6 sync marketplace and tooljet database changes 2024-10-28 23:37:40 +05:30
Akshay Sasidharan
17ff9f540c explictly check for multipart headers for restapi 2023-11-17 12:36:10 +05:30
Akshay
a9f641d0cc
fix plugins redirection on subpath (#8037) 2023-11-01 15:09:41 +05:30
Muhsin Shah C P
80ee7b7cac
[Improvement] Auth flow improvements for RestAPI, OpenAPI & GraphQL (#5324)
* Added access token url headers option to open api

* removing and adding code

* add authentication in GraphQL as RestAPI (#6687)

* add authentication in GraphQL as RestAPI

* fix: remove double header check

---------

Co-authored-by: Jean-Baptiste PIN <jeanbaptiste@idruide.com>

* refactor auth flows for restapi, openapi & graphql

* fix type errors

* remove redundant declarations

* fix openapi build error

* update authUrl for OAuth

* fix oauth check

---------

Co-authored-by: Akshay Sasidharan <akshaysasidharan93@gmail.com>
Co-authored-by: Jean-Baptiste PIN <jibet.pin@gmail.com>
Co-authored-by: Jean-Baptiste PIN <jeanbaptiste@idruide.com>
2023-07-21 15:38:56 +05:30