Mauricio Siu 071d9eacee fix(security): enforce org-scope on git provider read endpoints ... The .one / getRepositories / getBranches / testConnection handlers for github, gitlab, gitea and bitbucket resolved a provider by bare id under protectedProcedure and returned the full row (OAuth tokens, app private keys, webhook secrets) with no organization or entitlement check, letting any authenticated user read another org's git-provider credentials (IDOR). Adds assertGitProviderAccess() in the git-provider service (rejects cross-org with NOT_FOUND and non-entitled same-org with FORBIDDEN, reusing the existing getAccessibleGitProviderIds entitlement logic) and calls it in every read handler before returning secret-bearing data. Closes GHSA-66r5-5m5f-57vg		2026-07-19 20:55:53 -06:00
..
scripts	fix(server): update build paths	2024-10-26 15:48:30 -06:00
src	fix(security): enforce org-scope on git provider read endpoints	2026-07-19 20:55:53 -06:00
auth-schema2.ts	feat(scim): implement SCIM 2.0 user provisioning support	2026-07-08 14:06:22 -06:00
auth-schema.ts	Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.	2025-11-08 13:54:32 -06:00
esbuild.config.ts	Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.	2025-08-16 20:18:08 -06:00
package.json	feat(scim): implement SCIM 2.0 user provisioning support	2026-07-08 14:06:22 -06:00
tsconfig.json	chore(dependencies): update ai-sdk packages and other dependencies	2026-02-16 12:50:34 -06:00
tsconfig.server.json	Reapply "Merge branch 'canary' into kucherenko/canary"	2025-03-02 00:30:02 -06:00
tsconfig.server.no-decl.json	[autofix.ci] apply automated fixes	2026-02-16 18:51:10 +00:00