Andras BacsaiandClaude Opus 5.5 f75ffd329f fix(auth): let OAuth-only users enable 2FA without a password confirmation ...

Users with a linked OAuth identity or no password cannot confirm a
password they do not know. The password.confirm middleware now follows
User::requiresPasswordConfirmation(), like destructive actions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-02 16:01:10 +02:00

..

AddServerTimingHeaders.php

feat(ui): Shadow UI redesign, domain management, and DNS autoconfigure (#11119)

2026-08-03 23:11:54 +02:00

ApiAbility.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-05-11 21:13:57 +02:00

ApiAllowed.php

refactor(dns-validation): rename DNS validation functions for consistency and clarity, and remove unused code

2025-09-09 09:00:35 +02:00

ApiSensitiveData.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

Authenticate.php

init of v4 🌮

2023-03-17 15:33:48 +01:00

CanAccessTerminal.php

refactor(auth): simplify access control logic in CanAccessTerminal and ServerPolicy by allowing all users to perform actions

2025-08-28 10:48:24 +02:00

CanCreateResources.php

fix: align resource creation permissions

2026-06-29 15:57:17 +02:00

CanUpdateResource.php

feat(auth): authorize sqlite databases with the database policy

2026-09-24 19:03:42 +02:00

CheckForcePasswordReset.php

chore: prepare for PR

2026-02-24 10:17:16 +01:00

DecideWhatToDoWithUser.php

refactor(auth): remove OAuth re-authentication for destructive actions

2026-09-30 21:37:02 +02:00

EncryptCookies.php

init of v4 🌮

2023-03-17 15:33:48 +01:00

EnsureMcpEnabled.php

feat(mcp): add MCP server with read-only tools for Coolify resources

2026-04-29 10:30:43 +02:00

EnsureTeamMcpEnabled.php

feat(mcp): add per-team server toggle

2026-06-25 11:42:19 +02:00

EnsureTokenBelongsToCurrentTeamMember.php

feat(mcp): add resource diagnostics and deployment controls (#11000)

2026-08-03 23:08:11 +02:00

PreventRequestsDuringMaintenance.php

Fix styling

2024-06-10 20:43:34 +00:00

RedirectIfAuthenticated.php

Fix styling

2024-06-10 20:43:34 +00:00

RequirePassword.php

fix(auth): let OAuth-only users enable 2FA without a password confirmation

2026-10-02 16:01:10 +02:00

TrimStrings.php

init of v4 🌮

2023-03-17 15:33:48 +01:00

TrustProxies.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

ValidateSignature.php

init of v4 🌮

2023-03-17 15:33:48 +01:00

VerifyCsrfToken.php

fix(webhooks): exclude webhook routes from CSRF protection (#6200)

2025-07-18 19:04:08 +02:00