Andras Bacsai 61b10664c4 refactor(security): remove published APP_KEY request blocking middleware ...

Drop the RejectPublishedAppKey middleware and its registration in the
HTTP kernel, so requests are no longer refused with a 503 when APP_KEY
or APP_PREVIOUS_KEYS matches a key shipped in the repository.

Rename PublishedAppKeyTest to DecryptWithoutClassesTest and keep only
the checks that Sentinel tokens and team channel payloads are decrypted
without unserializing objects.

2026-11-08 18:24:02 +01:00

..

AddServerTimingHeaders.php

…

ApiAbility.php

v4.7 (#12478)

2026-11-06 14:25:02 +01:00

ApiAllowed.php

chore: merge main into next (#12351)

2026-10-27 22:25:43 +01:00

ApiIpAllowed.php

chore: merge main into next (#12351)

2026-10-27 22:25:43 +01:00

ApiSensitiveData.php

…

Authenticate.php

…

CanAccessTerminal.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

CanCreateResources.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

CanUpdateResource.php

…

CheckForcePasswordReset.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

ConfigurePasskeys.php

feat(auth): add passkey sign-in

2026-10-13 04:01:40 +00:00

DecideWhatToDoWithUser.php

…

EncryptCookies.php

fix(realtime): keep Reverb handshake under its size limit with large cookie headers

2026-11-06 11:01:06 +01:00

EnsureMcpEnabled.php

…

EnsureTeamMcpEnabled.php

…

EnsureTeamWideAccess.php

fix(access): enforce member grants on more actions

2026-10-30 16:11:10 +01:00

EnsureTokenBelongsToCurrentTeamMember.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

KeepConcurrentTeamSwitch.php

chore: merge main into release/v4.5 (#12192)

2026-10-18 23:43:20 +02:00

PreventRequestsDuringMaintenance.php

…

RedirectIfAuthenticated.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

RequirePassword.php

…

RequireTeamTwoFactor.php

chore: merge main into next (#12344)

2026-10-27 20:25:53 +01:00

ThrottleFailedApiRequests.php

fix(api): throttle API clients that keep failing and notify the token's team

2026-11-05 23:38:37 +01:00

TrimStrings.php

fix(env): keep the trailing newline of multiline environment variables

2026-11-03 20:30:59 +01:00

TrustProxies.php

…

UseSessionTeamApiToken.php

feat(canvas): add interactive resource views and team avatars (#12160)

2026-10-14 09:28:10 +02:00

ValidateSignature.php

…

VerifyCsrfToken.php

…