Matthew Penner
f631ac1946
Merge branch 'develop' into matthewpi/security-keys-backport
2023-01-17 15:33:53 -07:00
Matthew Penner
5402584508
ui(admin): add "working" React admin ui
2022-12-15 19:06:14 -07:00
Matthew Penner
67bf3e342e
api(application): v2 backport
2022-12-14 17:05:46 -07:00
Matthew Penner
4cd0bee231
yeet
2022-12-14 14:36:07 -07:00
Matthew Penner
794248d4d7
routes: fix imports
2022-12-01 11:51:26 -07:00
Matthew Penner
06f692e649
Add controllers and packages for security keys
2022-10-31 12:18:25 -06:00
DaneEveritt
1eee55b27c
Add endpoint needed for recieving and processing activity
2022-07-09 17:45:38 -04:00
DaneEveritt
92c1c162af
Code cleanup for facades
2022-06-18 12:07:32 -04:00
DaneEveritt
2f1c8ae91d
Add basic server activity log view
2022-06-12 15:16:48 -04:00
DaneEveritt
986c375052
Improve support for use of i18next; rely on browser caching to keep things simple
2022-06-11 14:04:09 -04:00
DaneEveritt
03a497fb8a
Use a post request to delete SSH keys, some hashes use slashes which cause 404 errors; closes #4100
2022-05-30 17:28:42 -04:00
DaneEveritt
4213775b5c
Fix mounting behavior to work correctly when adding to a server
2022-05-30 11:33:42 -04:00
DaneEveritt
a5521ecb79
Add support for returning transforming activity logs on the front-end
2022-05-29 20:34:48 -04:00
DaneEveritt
287fd60891
Log activity when modifying account details
2022-05-29 18:48:35 -04:00
DaneEveritt
cbecfff6da
Add activity logging for files
2022-05-29 13:56:39 -04:00
DaneEveritt
8605d175d6
Ensure admin endpoints continue to work
2022-05-22 18:56:22 -04:00
DaneEveritt
e313dff674
Massively simplify API binding logic
...
Changes the API internals to use normal Laravel binding which automatically supports nested-models and can determine their relationships. This removes a lot of confusingly complex internal logic and replaces it with standard Laravel code.
This also removes a deprecated "getModel" method and fully replaces it with a "parameter" method that does stricter type-checking.
2022-05-22 14:10:01 -04:00
DaneEveritt
97280a62a2
Add support for storing SSH keys on user accounts
2022-05-14 17:31:53 -04:00
DaneEveritt
65f27d41a2
Switch to more recent Laravel route definition methods
2022-05-14 15:51:05 -04:00
Dane Everitt
bf9cbe2c6d
Add consistent CSRF token verification to API endpoints; address security concern with non-CSRF protected endpoints
2021-11-16 20:02:18 -08:00
Dane Everitt
45999ba4ee
(security) use POST for logout rather than GET
...
see https://github.com/pterodactyl/panel/security/advisories/GHSA-m49f-hcxp-6hm6
2021-10-23 13:00:21 -07:00
Dane Everitt
22a8b2b3a2
Use more standardized rate limiting in Laravel; apply limits to auth routes
2021-10-23 12:17:16 -07:00
Dane Everitt
5d5e4ca7b1
Add support for locking backups to prevent any accidental deletions
2021-05-03 21:26:09 -07:00
Dane Everitt
1b2c4931ee
Add endpoint logic necessary to reset server states if they get stuck installing/restoring when wings restarts
2021-02-23 21:20:02 -08:00
Dane Everitt
00da092e45
Fix tests
2021-01-30 19:12:22 -08:00
Dane Everitt
663143de0b
Merge branch 'develop' into dane/restore-backups
2021-01-25 19:16:40 -08:00
Dane Everitt
a043071e3c
Update to Laravel 8
...
Co-authored-by: Matthew Penner <me@matthewp.io>
2021-01-23 12:12:54 -08:00
Dane Everitt
e8dcd30e0c
[security] fix resources not properly returning an error when they don't match the server in the URL
...
Prior to this fix certain resources were accessible even when their assigned server was not the same as the server in the URL. This causes the resource server relationship to not match the server variable present on the request.
Due to this failed logic it was possible for users to access resources they should not have been able to access otherwise for some areas of the panel.
2021-01-19 21:19:17 -08:00
Dane Everitt
f24193801a
Add endpoint for triggering restoration completion
2021-01-18 21:14:49 -08:00
Dane Everitt
187df97590
Add UI for restoring backup checkpoint text
2021-01-17 18:25:13 -08:00
Dane Everitt
ddc4c8e54b
Fix route def
2021-01-17 17:57:34 -08:00
Dane Everitt
ff21d83e2d
Add endpoint to get all nodes meeting memory & disk requirements for a server; closes #1012
2021-01-10 13:08:43 -08:00
Dane Everitt
87e9d5e82a
Throttle pulls
2020-12-25 15:09:02 -08:00
Dane Everitt
087c41d5ac
Add endpoint to pull a remote file down
2020-12-24 09:15:03 -08:00
Dane Everitt
5bbb36b3cf
Support updating docker image for a server from the frontend
2020-12-13 11:07:29 -08:00
Dane Everitt
d22456d9ca
Block API access when 2FA is required on account; closes #2791
2020-12-06 13:56:14 -08:00
Matthew Penner
8611ebb2d6
Add /api/client/servers/{server}/files/chmod endpoint
2020-12-04 09:24:06 -07:00
Matthew Penner
85af073438
Switch to s3 multipart uploads for backups
2020-11-01 15:27:43 -07:00
Dane Everitt
c6bd7ff661
Improve logic handle auto-allocation of ports for a server
2020-10-31 14:58:15 -07:00
Dane Everitt
665a4dd8a4
Merge branch 'develop' into develop
2020-10-31 13:47:12 -07:00
Dane Everitt
c1ee0ac4f8
Add support for executing a scheduled task right now
2020-10-14 20:38:59 -07:00
Caleb
8f8bd0be83
Added Automatic Allocations
...
Known issues:
- Port range to auto create is hard coded
- React interface is still a WIP.
2020-09-28 11:50:34 -04:00
Dane Everitt
3c7ffaaadb
Remove all references of packs from the Panel
2020-09-13 11:13:37 -07:00
Dane Everitt
179885b546
Add endpoint to return startup variables; send back modified startup when a variable is edited
2020-08-25 19:22:17 -07:00
Dane Everitt
54f9c5f187
Merge branch 'develop' into feature/file-uploads
2020-08-22 18:33:09 -07:00
Dane Everitt
91cdbd6c2e
Support modifying startup variables for servers
2020-08-22 18:13:59 -07:00
Dane Everitt
61e9771333
Code cleanup for subuser API endpoints; closes #2247
2020-08-19 20:21:12 -07:00
Dane Everitt
b52fc0b4d9
Fix recaptcha handling during login & password reset flows; closes #2064
2020-08-01 21:08:35 -07:00
Dane Everitt
1a6669aa5c
Add endpoint support for decompressing files
2020-07-14 21:16:49 -07:00
Matthew Penner
1d2acbd5b4
Get basic file upload functionality working
2020-07-12 16:42:32 -06:00
