dokploy

mirror of https://github.com/dokploy/dokploy.git synced 2026-06-14 03:19:49 +00:00

Files

T

Mauricio Siu 018e2b153e fix: add cross-org ownership checks to cluster, deployment, backup, and WebSocket endpoints

Prevents owner/admin users of one organization from accessing servers,
destinations, and Docker Swarm join tokens belonging to other organizations
by validating organizationId on all endpoints that accept serverId or
destinationId as direct input.

- cluster: validate serverId org on getNodes, addWorker, addManager, removeWorker
- deployment: validate serverId org on allByServer
- backup: validate destinationId + serverId org on listBackupFiles
- volume-backups: validate destinationId + serverId org on restoreVolumeBackupWithLogs
- wss: validate server org on docker-container-logs, docker-container-terminal,
  listen-deployment, and terminal WebSocket handlers
- auth: fix TypeScript type for API key metadata parsing

2026-04-24 12:44:42 -06:00

scripts

…

src

fix: add cross-org ownership checks to cluster, deployment, backup, and WebSocket endpoints

2026-04-24 12:44:42 -06:00

auth-schema2.ts

stlye: format and lint

2026-03-30 09:34:27 +11:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00