Andras Bacsai 3ba4553df5 fix(security): enforce team-scoped project/env lookups in onboarding ...

Use firstOrFail() for team-scoped project and environment lookups across
new-project Livewire flows so missing or cross-team UUIDs fail closed.
Also dispatch an error when boarding selects a non-owned project, and
update IDOR feature tests for the new error/exception behavior.

2026-03-29 15:55:03 +02:00

..

Proxy

Make proxy restart run as background job to prevent localhost lockout

2025-12-03 10:30:12 +01:00

Service

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

Subscription

fix(subscription): prevent duplicate subscriptions with updateOrCreate

2026-03-24 10:52:41 +01:00

ActivityMonitorCrossTeamTest.php

refactor: simplify remote process chain and harden ActivityMonitor

2026-03-26 13:26:16 +01:00

ApiTokenPermissionTest.php

fix(api): require write permission for validation endpoints

2026-03-10 22:11:52 +01:00

ApplicationBuildpackCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

ApplicationHealthCheckApiTest.php

feat(healthchecks): add command health checks with input validation

2026-02-25 11:38:09 +01:00

ApplicationRollbackTest.php

feat(git-import): support custom ssh command for fetch, submodule, and lfs

2026-03-12 13:32:43 +01:00

ApplicationSourceLocalhostKeyTest.php

fix(application-source): support localhost key with id=0

2026-03-09 17:20:33 +01:00

BuildpackSwitchCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

CaCertificateCommandInjectionTest.php

chore: prepare for PR

2026-02-25 12:00:24 +01:00

CheckTraefikVersionJobTest.php

Fix Traefik email notification with clickable server links

2025-12-02 13:08:40 +01:00

CleanupRedisTest.php

fix(CleanupRedisTest): update mock return values for hgetall to reflect job processing state

2025-11-11 23:17:25 +01:00

CleanupUnreachableServersTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

CloudInitScriptTest.php

feat: add cloud-init script support for Hetzner server creation

2025-10-10 19:37:16 +02:00

CloudProviderTokenApiTest.php

feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner

2025-12-11 12:12:43 +01:00

CmdHealthCheckValidationTest.php

fix(health-checks): sanitize and validate CMD healthcheck commands

2026-02-25 11:28:33 +01:00

CommandInjectionSecurityTest.php

fix(validation): allow ampersands and quotes in shell-safe command pattern

2026-03-25 20:27:21 +01:00

ComposePreviewFqdnTest.php

feat(compose-preview): populate fqdn from docker_compose_domains

2026-03-13 17:02:05 +01:00

ConvertArraysTest.php

fix: check if array is associative or not

2024-09-03 17:04:56 +02:00

ConvertContainerEnvsToArray.php

chore(tests): update test environment database name and add new feature test for converting container environment variables to array

2025-05-22 14:30:16 +02:00

ConvertingGitUrlsTest.php

fix: add tests for git url converts

2024-11-12 11:32:18 +01:00

CoolifyTaskRetryTest.php

feat(jobs): improve scheduled tasks with retry logic and queue cleanup

2025-11-10 11:11:18 +01:00

CrossTeamIdorLogsTest.php

Squashed commit from '565g-9j4m-wqmr-cross-team-idor-logs-fix'

2026-03-10 22:11:52 +01:00

CrossTeamIdorServerProjectTest.php

fix(security): enforce team-scoped project/env lookups in onboarding

2026-03-29 15:55:03 +02:00

DatabaseBackupCreationApiTest.php

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

DatabaseBackupJobTest.php

fix(backup): prevent notification failures from affecting backup status

2026-03-25 12:43:47 +01:00

DatabaseEnvironmentVariableApiTest.php

feat(api): add database environment variable management endpoints

2026-03-19 23:29:50 +01:00

DatabaseImportCommandInjectionTest.php

fix(livewire): add Locked attributes and consolidate container name validation

2026-03-25 20:21:39 +01:00

DeletesUserSessionsTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

DeploymentByUuidApiTest.php

fix(api): cast teamId to int in deployment authorization check

2026-03-12 13:25:10 +01:00

DeploymentCancellationApiTest.php

Changes auto-committed by Conductor

2025-10-16 11:01:58 +02:00

DockerCleanupJobTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

DockerCustomCommandsTest.php

chore: prepare for PR

2026-03-01 18:49:40 +01:00

DomainsByServerApiTest.php

fix(api): validate server ownership in domains endpoint and scope activity lookups

2026-03-25 16:20:53 +01:00

EnvironmentVariableBulkCommentApiTest.php

feat(api): support comments in bulk environment variable endpoints

2026-03-19 22:17:55 +01:00

EnvironmentVariableCommentTest.php

fix: update success message logic to only show when changes are made

2025-12-27 15:24:09 +01:00

EnvironmentVariableMassAssignmentTest.php

refactor: add explicit fillable array to EnvironmentVariable model

2025-12-27 15:24:09 +01:00

EnvironmentVariableSharedSpacingTest.php

test: add tests for shared environment variable spacing and resolution

2025-11-27 10:45:39 +01:00

EnvironmentVariableUpdateApiTest.php

fix(api): extract resource UUIDs from route parameters

2026-03-19 21:56:58 +01:00

ExecuteContainerCommandTest.php

test: setup database for upcoming tests

2024-12-04 12:43:52 +01:00

GenerateApplicationNameTest.php

feat(storage): add storage endpoints and UUID support for databases and services

2026-03-23 15:15:02 +01:00

GithubAppsListApiTest.php

Changes auto-committed by Conductor

2025-10-16 13:19:05 +02:00

GithubSourceChangeTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubSourceCreateTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubWebhookTest.php

fix(github-webhook): handle unsupported event types gracefully

2026-03-23 21:33:40 +01:00

HetznerApiTest.php

Fix: Correctly set session for team before creating user token

2025-12-11 11:59:59 +01:00

HetznerServerCreationTest.php

fix: update boarding flow logic to complete onboarding when server is created

2025-10-29 23:06:39 +01:00

IpAllowlistTest.php

chore: prepare for PR

2026-03-03 16:43:29 +01:00

LoginRateLimitIPTest.php

rate limit test

2025-10-28 15:18:28 +01:00

MultilineEnvironmentVariableTest.php

chore: prepare for PR

2026-02-23 14:28:28 +01:00

PreviewEnvVarFallbackTest.php

feat(preview-env): add production variable fallback for docker-compose

2026-03-25 13:26:50 +01:00

PushServerUpdateJobLastOnlineTest.php

chore: prepare for PR

2026-03-10 18:34:37 +01:00

PushServerUpdateJobOptimizationTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

PushServerUpdateJobTest.php

chore: prepare for PR

2026-02-15 13:43:08 +01:00

RealtimeTerminalPackagingTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

ResourceOperationsCrossTenantTest.php

chore: prepare for PR

2026-02-25 11:18:46 +01:00

ScheduledJobManagerShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ScheduledJobManagerStaleLockTest.php

chore: prepare for PR

2026-02-25 12:07:29 +01:00

ScheduledJobMonitoringTest.php

fix(jobs): prevent non-due jobs firing on restart and enrich skip logs with resource links

2026-02-28 18:03:29 +01:00

ScheduledTaskApiTest.php

test(factories): add missing model factories for app test suite

2026-03-03 09:50:05 +01:00

SecureCookieAutoDetectionTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

SentinelTokenValidationTest.php

fix(sentinel): add token validation to prevent command injection

2026-03-10 22:19:19 +01:00

SentinelUpdateCheckIndependenceTest.php

Refactor: Move sentinel update checks to ServerManagerJob and add tests for hourly dispatch

2025-12-04 14:58:18 +01:00

ServerIpUniquenessTest.php

fix(server): improve IP uniqueness validation with team-specific error messages

2026-02-12 08:10:59 +01:00

ServerLimitCheckJobTest.php

fix(server-limit): re-enable force-disabled servers at limit

2026-03-03 17:03:59 +01:00

ServerManagerJobShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ServerMetadataTest.php

feat(server): auto-fetch server metadata after validation

2026-03-13 17:07:50 +01:00

ServerPatchCheckNotificationTest.php

test: fix ServerPatchCheckNotification tests to avoid global state pollution

2025-10-26 21:54:55 +01:00

ServerSettingSentinelRestartTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerSettingWasChangedTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerStorageCheckIndependenceTest.php

Fix: Correct time inconsistency in ServerStorageCheckIndependenceTest

2025-12-03 10:22:09 +01:00

ServiceContainerLabelEscapeApiTest.php

feat(service): add container label escape control to services API

2026-03-13 13:32:58 +01:00

ServiceDatabaseTeamTest.php

fix(service): resolve team lookup via service relationship

2026-02-23 13:23:12 +01:00

ServiceFqdnUpdatePathTest.php

fix: prevent SERVICE_FQDN/SERVICE_URL path duplication on FQDN updates

2025-11-27 10:57:24 +01:00

ServiceMagicVariableOverwriteTest.php

test(magic-variables): add feature tests for SERVICE_URL/FQDN variable handling

2026-03-11 17:15:17 +01:00

SettingsUpdatesAuthorizationTest.php

fix(settings): require instance admin authorization for updates page

2026-03-25 19:33:51 +01:00

SharedVariableComposeResolutionTest.php

fix(parsers): resolve shared variables in compose environment

2026-03-12 13:23:13 +01:00

SharedVariableDevViewTest.php

chore: prepare for PR

2026-03-11 06:36:12 +01:00

StartDatabaseProxyTest.php

fix(proxy): add validation and normalization for database proxy timeout

2026-03-10 09:59:19 +01:00

StartupExecutionCleanupTest.php

feat(Cleanup): implement failure marking for stuck scheduled tasks and database backups during startup

2025-11-11 12:32:52 +01:00

StorageApiTest.php

feat(storage): add storage endpoints and UUID support for databases and services

2026-03-23 15:15:02 +01:00

TeamInvitationCsrfProtectionTest.php

refactor: split invitation endpoint into GET (show) and POST (accept)

2026-03-26 14:30:27 +01:00

TeamInvitationEmailNormalizationTest.php

refactor(ui): improve styling and consistency in environment variable warning and docker cleanup components

2025-09-25 11:45:07 +02:00

TeamInvitationPrivilegeEscalationTest.php

fix: critical privilege escalation in team invitation system

2025-10-15 11:42:25 +02:00

TeamNotificationCheckTest.php

chore: prepare for PR

2026-02-23 13:02:06 +01:00

TeamPolicyTest.php

fix: add authentication context to TeamPolicyTest

2025-10-15 15:08:35 +02:00

TeamServerLimitTest.php

refactor(team): make server limit methods accept optional team parameter

2026-03-23 21:56:50 +01:00

TerminalAuthIpsRouteTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

TerminalAuthRoutesAuthorizationTest.php

fix(terminal): apply authorization middleware to terminal bootstrap routes

2026-03-25 16:56:37 +01:00

TrustHostsMiddlewareTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

TwoFactorChallengeAccessTest.php

chore: prepare for PR

2026-02-24 10:17:16 +01:00

Utf8HandlingTest.php

feat(utf8-handling): implement UTF-8 sanitization for command outputs and enhance error handling in logs processing

2025-06-05 14:27:39 +02:00