Andras Bacsai 81a3bb0f07 fix(api): hide sensitive fields by default ...

Add model-level hidden fields for secrets, tokens, keys, notification
credentials, deployment logs, and environment values. Allow explicit
read:sensitive API access to reveal gated private keys and deployment logs,
and cover the behavior with feature and unit tests.

2026-05-11 21:18:07 +02:00

..

Application.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-05-11 17:34:48 +02:00

ApplicationDeploymentQueue.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

ApplicationPreview.php

refactor(volumes): validate input and escape shell args

2026-04-20 11:27:10 +02:00

ApplicationSetting.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

BaseModel.php

refactor: rename name method to sanitizedName in BaseModel for clarity

2024-12-10 08:50:07 +01:00

CloudInitScript.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

CloudProviderToken.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

DiscordNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

DockerCleanupExecution.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

EmailNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

Environment.php

Merge remote-tracking branch 'origin/next' into pr-7764-shadow/add-shared-server-env

2026-03-31 13:51:06 +02:00

EnvironmentVariable.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-05-11 17:34:48 +02:00

GithubApp.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

GitlabApp.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

InstanceSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

LocalFileVolume.php

fix(service): block UI editing of file volumes exceeding 5 MiB

2026-04-28 22:36:56 +02:00

LocalPersistentVolume.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

OauthSetting.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

PersonalAccessToken.php

…

PrivateKey.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

Project.php

fix(api): hide application compose PR fields

2026-05-11 11:46:05 +02:00

ProjectSetting.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

PushoverNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

S3Storage.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

ScheduledDatabaseBackup.php

fix(backups): enforce retention and clean up stale executions

2026-04-03 11:33:21 +02:00

ScheduledDatabaseBackupExecution.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ScheduledTask.php

refactor(scheduled-task): simplify server() with nullsafe operators and add return type

2026-05-04 12:26:15 +02:00

ScheduledTaskExecution.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

Server.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

ServerSetting.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-04-30 11:30:50 +02:00

Service.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

ServiceApplication.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ServiceDatabase.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SharedEnvironmentVariable.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

SlackNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

SslCertificate.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

StandaloneClickhouse.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneDocker.php

fix(standalone-docker): include keydb, dragonfly, clickhouse in databases()

2026-04-30 15:01:48 +02:00

StandaloneDragonfly.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneKeydb.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneMariadb.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneMongodb.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneMysql.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandalonePostgresql.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

StandaloneRedis.php

fix(api): hide sensitive fields by default, expose via makeVisible for privileged tokens

2026-04-30 11:28:06 +02:00

Subscription.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SwarmDocker.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

Tag.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

Team.php

fix(team): mark servers unreachable when subscription ends

2026-04-15 15:12:29 +02:00

TeamInvitation.php

Update app/Models/TeamInvitation.php

2025-09-25 11:33:32 +02:00

TelegramNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

User.php

refactor(auth): upgrade email verification hash to sha256

2026-04-20 12:09:48 +02:00

UserChangelogRead.php

feat(changelog): implement automated changelog fetching from GitHub and enhance changelog read tracking

2025-08-12 10:07:11 +02:00

WebhookNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00