Commit graph

3806 commits

Author SHA1 Message Date
Akhil Narang
1e5aaac000
fix(oauth): drop keycloak check (#34330)
Not needed anymore

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-10-09 12:10:21 +00:00
Chris Hemmings
fbf07ddf6e
fix: OAuth2 absolute authorize, access token and api urls (#34266)
* fix: OAuth2 absolute authorize, access token and api urls

* fix: add back keycloak check, just use the function instead

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

---------

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
Co-authored-by: Akhil Narang <me@akhilnarang.dev>
2025-10-09 16:47:38 +05:30
Akhil Narang
835fcbd849
chore: use our copy of protected_inplacevar
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-10-03 00:13:55 +05:30
Akhil Narang
bd60a0a156
chore(inplacevar): lint
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-10-03 00:13:55 +05:30
Hanno Schlichting
c02a3bf5ce
feat: add protected_inplacevar function extracted from AccessControl
Extracted from 17a5ceb0ae/src/AccessControl/ZopeGuards.py
2025-10-03 00:13:51 +05:30
Akhil Narang
e13ccc1226
fix: drop duplicate translator role
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-09-30 19:14:22 +05:30
Ejaaz Khan
516f87e632
Merge pull request #34166 from chdecultot/fix-debug-messages
fix: do not show debug message when traceback is disallowed
2025-09-27 17:33:10 +05:30
Charles-Henri Decultot
7b0555b4ae fix: Do not show debug log also for v2 API 2025-09-26 15:51:27 +02:00
Akhil Narang
355d218f8e
Merge pull request #34162 from akhilnarang/bump-ruff
refactor(treewide): bump ruff
2025-09-26 17:44:11 +05:30
Charles-Henri Decultot
1ae276d441 fix: do not show debug message when traceback is disallowed 2025-09-26 13:15:01 +02:00
Akhil Narang
6ca4d4d167
refactor(treewide): ruff format
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-09-26 13:16:43 +05:30
Raffael Meyer
878c089679
fix: special operators in compare util (#34145) 2025-09-25 20:45:29 +02:00
Raffael Meyer
83d221c104
fix: correct type check in sql_like function (#34076) 2025-09-22 12:52:21 +02:00
Akhil Narang
b8afe4b303
fix: set content-type for the responses not handled by werkzeug
I had suggested removing this code, didn't realise it applied to the whole function and not just the else block

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-09-19 15:39:28 +05:30
Saqib Ansari
391f08e63b
feat: active app telemetry (#33755) 2025-09-17 17:30:06 +05:30
Saqib Ansari
ec0a864d35 refactor: simplify send_file parameters 2025-09-17 13:39:45 +05:30
Hussain Nagaria
6644159440
fix: gracefully handle missing from header in email (#33996) 2025-09-16 05:36:26 +00:00
Raffael Meyer
b7b34196bc
fix(Server Script): open docs URL in new tab (#33982) 2025-09-15 10:53:52 +00:00
Raffael Meyer
56676f0eec
fix: add boilerplate for class extensions (#33955)
* fix: add boilerplate for class overrides and extensions

* fix: curly braces

* style: no double comments

* fix: drop override, own section
2025-09-15 11:54:02 +05:30
Akhil Narang
36ccf32ab3
fix: don't try to scan encrypted PDFs
Also fix reversed logic of JS check

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-09-10 15:44:09 +05:30
Hussain Nagaria
268863a2b6
chore: typo in comments (#33929) 2025-09-06 10:35:38 +00:00
Raffael Meyer
3c0a378a41
refactor: prefer list patterns provided by babel (#33857)
* feat: prefer list patterns provided by babel

* test: comma_and, comma_or
2025-09-04 15:17:56 +05:30
Saqib Ansari
ee2c4c20ce feat: use werkzeug send_file to allow range requests 2025-09-03 11:30:19 +05:30
Soham Kulkarni
b7129419ef
Merge pull request #33675 from sokumon/pdf-issue
fix: scan pdfs before uploading
2025-09-02 18:41:13 +05:30
sokumon
5e21a2e2ab fix: relax the logic 2025-09-02 14:54:55 +05:30
mergify[bot]
c7ba132315
Merge branch 'develop' into drive-integration 2025-09-01 06:14:16 +00:00
barredterra
b1c7821911 feat: validate IBAN in backend 2025-08-29 15:21:56 +02:00
sokumon
fd29103149 fix: make the checking more robust 2025-08-29 13:13:19 +05:30
sokumon
ca5831b1a8 fix: better function name, check before writing the file 2025-08-29 13:13:19 +05:30
sokumon
577ba89c28 fix(XSS): verify pdf content before uploading 2025-08-29 13:13:19 +05:30
Hussain Nagaria
b95f850f86
fix: sort file/dir names for fixtures (#33783) 2025-08-25 12:14:02 +00:00
Safwan Samsudeen
03bff35b5e chore: pre-commit 2025-08-25 13:23:32 +05:30
Safwan Samsudeen
6131aa63fd fix: allow all internal urls 2025-08-25 11:00:55 +05:30
Safwan Samsudeen
adc477f255 feat: tweak to allow drive links 2025-08-22 14:54:24 +05:30
Akhil Narang
c0c0cae78a
fix(nestedset): clear user permissions cache when a new doc is created, if applicable
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-08-13 12:54:00 +05:30
Ejaaz Khan
50ff20a12a refactor: only replace month for compatibility 2025-08-06 11:11:24 +05:30
Ejaaz Khan
6cde9a4bcc refactor: fetch time format dynamic 2025-08-05 17:30:14 +05:30
Ejaaz Khan
0e880ac318 feat: format date and datetime fields on export 2025-08-05 17:07:47 +05:30
Akhil Narang
9a94e73489
feat: add in support for _inplacevar_ (#31921)
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-08-01 13:50:43 +05:30
Akhil Narang
3c4dc61b7a
Merge pull request #33437 from vehbiu/develop
fix(utils): convert phone numbers passed into validate_phone_number to strings
2025-07-28 15:43:37 +05:30
Raffael Meyer
4983c3fc34
fix: prevent logout due to empty "Password" field (#29158)
* fix: prevent logout due to empty "Password" field

* fix: validate_api_key_secret

- We don't want get decrypted password to raise a ValidationError
- If api_key, api_secret or doc_secret are empty, we want an AuthenticationError
2025-07-28 10:04:10 +05:30
Vehbi Unal
c6a2e6595a fix(utils): convert phone numbers passed into validate_phone_number to strings 2025-07-24 13:02:55 +00:00
Raffael Meyer
93b4700899
fix: make labels in error message translatable (#33166) 2025-07-23 18:11:51 +05:30
Kitti U. @ Ecosoft
74683428cf
feat: Add hook on print pdf (#33387) 2025-07-23 10:45:39 +05:30
Venkatesh M
96e0f49df4 fix: handle None session.data in maintenance mode (fixes #33258)
- Add null check for session.data in safe_exec.py
- Add null check for session.data in base_template_page.py
- Prevents AttributeError when session.data is None during maintenance mode
2025-07-19 16:02:57 +00:00
Ankush Menat
b94b6ec939 perf!: Compute safe exceptions only once 2025-07-19 19:29:27 +05:30
Ankush Menat
38365beb52 perf: Compute safe utils only once
300us -> 60us for this silly change LOL!
2025-07-19 18:49:24 +05:30
Ankush Menat
17a1244585 perf: Always use cached config for checking safe_exec
It expires in 1min anyway
2025-07-19 18:14:04 +05:30
Ankush Menat
bddc89544d perf: Cache safe_exec compilation 2025-07-19 18:04:29 +05:30
Ankush Menat
afb720e003
refactor: move stuff away from init.py (#33283)
* chore: Drop unused imports

* refactor: split translation utils from init.py

* refactor: move sendmail from init.py

* refactor: move prints to attach_print
2025-07-11 07:18:16 +00:00