Jake Barnby
36bd7a4667
(fix): Address code review security and correctness findings
...
- Remove var_dump debug calls leaking API keys to stdout
- Stop embedding secret keys in HTML data attributes on upgrades
- Strip sensitive fields from sessionStorage install lock
- Quote hostPath in Docker Compose YAML template
- Remove stack traces from client-facing error responses
- Strip sessionSecret and traces from Status endpoint response
- Fix undefined $input variable (should be $userInput) in CLI install
- Add backtick escaping in .env template to prevent shell injection
- Add 2-hour timeout to isInstallationComplete infinite loop
- Escape user-supplied startCommand in shell strings
- Add LOCK_EX to progress file writes
- Fix typo in Upgrade.php error message
- Remove unused variable in V21 response filter
- Remove dead code in applyLockPayload after sessionStorage sanitization
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-11 14:58:57 +13:00
Matej Bačo
c20dfc7063
PR simplification
2026-03-09 11:51:32 +01:00
Matej Bačo
248b3c8b32
Revert "Revert "Features with schema changes""
2026-03-04 14:31:27 +01:00
Matej Bačo
f8b31e7db7
Revert "Features with schema changes"
2026-03-04 14:31:05 +01:00
Matej Bačo
1f5fd919c9
Merge branch '1.8.x' into feat-1.8.x-new-schema
2026-03-04 14:13:01 +01:00
loks0n
20f248a6ae
refactor: consolidate SiteRequestCompleted into RequestCompleted with optional deployment
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 19:36:48 +00:00
loks0n
b45ff6b646
refactor: replace queueForExecutions with Bus event bus
...
Introduce a generic event bus (Utopia\Bus) with typed events, listener
base class, Span instrumentation, and coroutine dispatch. Replace all
direct queueForExecutions and inline execution usage calls with
ExecutionCompleted event and dedicated listeners (Log, Usage).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 19:36:48 +00:00
eldadfux
d7c8b9d43a
Better error message when a function fail instead of general_unknown
2026-02-26 10:24:46 +01:00
Chirag Aggarwal
b2f4c4227e
Merge branch '1.8.x' into fix/cli-static-setresource
2026-02-11 12:10:35 +05:30
Chirag Aggarwal
2d05d608f4
Upgrade utopia-php dependencies and fix namespace changes
...
- Upgrade utopia-php/cli from 0.15 to 0.22
- Upgrade utopia-php/analytics from 0.10 to 0.15
- Upgrade utopia-php/orchestration from 0.9 to 0.19
- Use dev branches for utopia-php/framework and utopia-php/platform
- Remove utopia-php/swoole dependency (merged into framework)
- Migrate Utopia\CLI\Console to Utopia\Console across all files
- Migrate Utopia\Http to Utopia\Http\Http namespace
- Migrate Utopia\Swoole\Files to Utopia\Http\Files (now instance-based)
- Convert static CLI::setResource() calls to instance-based Dependency API
- Fix StatsResources task named parameter mismatch
2026-02-10 10:34:24 +05:30
loks0n
b432918385
feat: worker executions
2026-02-09 20:20:44 +00:00
Chirag Aggarwal
a520a67da8
fix: disable execution document writes for nyc region
...
Temporarily skip all execution createDocument and updateDocument calls
in the Functions worker when _APP_REGION is set to 'nyc' to reduce
database load. Marked with TODO comments for removal.
2026-02-07 21:19:00 +05:30
Chirag Aggarwal
6c4394947f
Fix Safe PHP deprecation warnings
2026-02-03 10:11:12 +05:30
Jake Barnby
7ab3debb10
Format
2026-01-15 16:37:09 +13:00
Jake Barnby
c083e1ce74
Throw AppwriteException so handler can unwrap
2026-01-15 16:31:37 +13:00
Jake Barnby
2cfb5ecfd9
Reapply "Merge pull request #11130 from appwrite/feat-auth-instance"
...
This reverts commit 38687bc24e .
2026-01-15 04:08:00 +13:00
Jake Barnby
38687bc24e
Revert "Merge pull request #11130 from appwrite/feat-auth-instance"
...
This reverts commit c12cad80bb , reversing
changes made to 2a17429226 .
# Conflicts:
# composer.lock
2026-01-15 03:48:42 +13:00
Chirag Aggarwal
6c866be9f3
Fix execution status not updating if usage stats trigger fails
...
Move the execution document update inside the finally block and wrap
it in try-catch to ensure the execution record is always updated,
even if queueForStatsUsage->trigger() throws an exception.
2026-01-14 16:12:51 +05:30
Jake Barnby
5c915ef92f
Reapply "Merge pull request #11099 from appwrite/feat-auth-instance"
...
This reverts commit 321fc8ee70 .
2026-01-14 19:07:49 +13:00
Jake Barnby
321fc8ee70
Revert "Merge pull request #11099 from appwrite/feat-auth-instance"
...
This reverts commit a4734a5de7 , reversing
changes made to 15922fb88c .
# Conflicts:
# composer.lock
2026-01-14 02:37:17 +13:00
Jake Barnby
7573ee75a2
Use authorization instance
2026-01-07 20:04:28 +13:00
Matej Bačo
c4c260f3cf
Add dual read for specs
2026-01-02 16:34:05 +01:00
Matej Bačo
51e03353dd
Merge branch '1.8.x' into feat-1.8.x-new-schema
2025-12-31 15:13:35 +01:00
fogelito
417bb22790
use Query::contains
2025-12-29 11:55:21 +02:00
fogelito
774e3af61c
skip variables subquery
2025-12-29 10:20:32 +02:00
Jake Barnby
dc85d44647
Revert "Refactor auth single instance"
2025-12-20 02:54:50 +13:00
Jake Barnby
13f4aa9a80
Merge remote-tracking branch 'origin/1.8.x' into refactor-auth-single-instance
...
# Conflicts:
# app/controllers/api/account.php
# app/controllers/api/vcs.php
# app/controllers/general.php
# app/controllers/shared/api.php
# app/init/resources.php
# composer.lock
# src/Appwrite/Platform/Modules/Console/Http/Resources/Get.php
# src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Update.php
# src/Appwrite/Platform/Modules/Functions/Http/Executions/Create.php
# src/Appwrite/Platform/Workers/Migrations.php
2025-12-18 18:17:41 +13:00
loks0n
3c3aa6d416
fix: fallback platform
2025-12-16 22:56:11 +00:00
loks0n
f765eb92e7
feat: cors service
2025-12-11 09:01:31 +00:00
shimon
4ad249f918
Revert "Revert "Merge pull request #10682 from appwrite/refactor-auth-single-instance""
...
This reverts commit 8765d5650a .
2025-11-26 12:05:12 +02:00
Matej Bačo
d99a52741d
Merge branch 'feat-1.8.x-new-schema' into feat-custom-start-commands
2025-11-24 15:41:52 +01:00
Matej Bačo
62173b8f61
WIP: Separate specifications
2025-11-20 13:56:54 +01:00
Matej Bačo
f907f76eb5
Custom start command implementation
2025-11-19 15:27:54 +01:00
Jake Barnby
8765d5650a
Revert "Merge pull request #10682 from appwrite/refactor-auth-single-instance"
...
This reverts commit 919b01a1b1 , reversing
changes made to deb5039352 .
2025-11-19 16:21:06 +13:00
shimon
0904881de8
Refactor authorization handling to ensure consistent usage of the Authorization class across various modules, enhancing code maintainability and clarity. Update method signatures to include authorization as a parameter where necessary.
2025-11-02 18:11:56 +02:00
Khushboo Verma
a81d980334
Resolve merge conflicts
2025-08-27 12:54:22 +05:30
Khushboo Verma
aac98b2ec7
Update function domain test
2025-08-26 18:56:26 +05:30
Khushboo Verma
8df305576c
Add execution id and log id to response headers
2025-08-26 18:34:43 +05:30
Khushboo Verma
1458505201
Address PR comments
2025-08-26 12:55:51 +05:30
Khushboo Verma
2876fad322
Merge branch '1.7.x' into feat-extend-function-headers
2025-08-25 12:50:59 +05:30
Khushboo Verma
bc47ac7caa
Truncate logs and errors from beginning
2025-08-21 12:49:31 +05:30
Khushboo Verma
1bd6b6452c
Fix PR changes
2025-08-20 18:53:55 +05:30
Mayank Agarwal
7e292813bc
Truncate logs in function worker
2025-08-20 18:43:32 +05:30
Khushboo Verma
ed16808930
Add executionId and client IP to execution headers
2025-08-20 16:35:40 +05:30
Matej Bačo
23bc39254c
Increase dynamic API key expiration
2025-08-15 12:29:34 +02:00
Matej Bačo
f07abce6f8
Merge branch '1.7.x' into feat-use-first-class-callable-syntax
2025-06-25 16:46:30 +02:00
Jake Barnby
89f0c28e26
Merge remote-tracking branch 'origin/1.7.x' into 1.8.x
...
# Conflicts:
# .coderabbit.yaml
2025-06-16 11:37:50 -04:00
loks0n
9196ae7908
feat: tar support
2025-06-16 10:44:15 +01:00
Khushboo Verma
6530d31e7a
Use ->action(...))
2025-06-04 14:07:43 +05:30
Jake Barnby
3158c15111
Merge remote-tracking branch 'origin/1.7.x' into 1.8.x
...
# Conflicts:
# app/controllers/api/functions.php
# app/controllers/api/project.php
# app/controllers/api/proxy.php
# app/controllers/api/storage.php
# app/controllers/api/vcs.php
# app/controllers/general.php
# app/controllers/shared/api.php
# app/init/database/filters.php
# composer.json
# composer.lock
# src/Appwrite/Migration/Migration.php
# src/Appwrite/Migration/Version/V15.php
# src/Appwrite/Migration/Version/V16.php
# src/Appwrite/Migration/Version/V17.php
# src/Appwrite/Migration/Version/V18.php
# src/Appwrite/Migration/Version/V19.php
# src/Appwrite/Migration/Version/V20.php
# src/Appwrite/Migration/Version/V21.php
# src/Appwrite/Platform/Tasks/Migrate.php
# src/Appwrite/Platform/Workers/Builds.php
# src/Appwrite/Platform/Workers/Deletes.php
# src/Appwrite/Platform/Workers/Functions.php
# src/Appwrite/Platform/Workers/StatsResources.php
# src/Appwrite/Platform/Workers/StatsUsage.php
2025-05-27 13:36:23 +12:00