Juanfran
0182f239ae
✨ Add Nitrate bulk profile creation endpoint ( #10491 )
...
Add a Nitrate-only management RPC method to create active Penpot profiles in
bulk through the existing shared-key protected management API.
2026-07-03 09:45:44 +02:00
Pablo Alba
6e61e3304b
✨ Add and endpoint for nitrate to check the SSO configuration for an organization ( #10432 )
2026-06-26 11:38:18 +02:00
Juanfran
d328cb4a9e
✨ Enable org owners to view organization teams ( #10388 )
2026-06-25 13:07:20 +02:00
Pablo Alba
2a5b6a69ad
✨ Send warning for email about nitrate orgs with sso ( #10413 )
2026-06-25 09:53:07 +02:00
Pablo Alba
8fa15f240f
✨ Check for nitrate sso on move team to another organization ( #10379 )
2026-06-24 10:02:13 +02:00
Pablo Alba
b984e7bbe8
✨ Add nitrate sso wards to organization navigation
2026-06-19 12:03:21 +02:00
Marina López
785ab53f8c
✨ Cancel subscription when user deletes account
2026-06-18 12:09:12 +02:00
Marina López
fc3a95765d
✨ Add expired subscription banner
2026-06-02 10:26:56 +02:00
Juanfran
4c8b33691a
✨ Use shared org-avatar component in delete account modal
...
Render owned organizations in the delete-account modal with the same
org-avatar* component used across the dashboard, so logo and avatar
background are shown consistently and initials are extracted via
d/get-initials instead of a raw first-character substring.
Extends the get-owned-organizations-summary endpoint and the underlying
nitrate API schema to carry :avatar-bg-url and :logo-id, deriving
:custom-photo from logo-id with the public uri, matching the pattern
already used by set-team-org-api.
2026-05-28 11:01:08 +02:00
Pablo Alba
dac98c0625
✨ Add nitrate add team members permission
2026-05-23 17:18:27 +02:00
Juanfran
e6848170c8
🎉 Show dedicated screen when Nitrate is unavailable
2026-05-21 14:47:32 +02:00
Pablo Alba
ead9bd9ccc
🐛 Make nitrate calls skip ssrf-check
2026-05-20 10:13:23 +02:00
Juanfran
8e86416b0b
✨ Cascade owned organization deletion on account removal
2026-05-18 16:05:08 +02:00
Andrey Antukh
60c718eba1
Merge remote-tracking branch 'origin/staging' into develop
2026-05-10 09:20:27 +02:00
Andrey Antukh
10a23a6869
Merge remote-tracking branch 'origin/main' into staging
2026-05-10 09:16:41 +02:00
Pablo Alba
f3c2c0bee2
✨ Change team organization structure on state
2026-05-08 11:18:26 +02:00
Andrey Antukh
279231240d
🐛 Harden outbound HTTP requests against SSRF and restrict assets handlers ( #9390 )
...
* ⬆️ Update root deps
* 🐛 Harden outbound HTTP requests against SSRF and restrict unauthenticated asset access
- Add app.util.ssrf URL/host validator that resolves hostnames and blocks
loopback, link-local, site-local, cloud metadata, and operator-supplied CIDRs
- Add app.media.sanitize image EOF truncator that strips trailing data after
PNG IEND, JPEG EOI, GIF trailer, and WebP RIFF markers
- Disable HTTP client auto-redirect; add req-with-redirects! helper that
revalidates every redirect hop against the SSRF blocklist
- Wire SSRF validation and EOF sanitization into media/download-image
- Validate webhook URLs and OIDC profile picture URLs against SSRF
- Restrict /assets/by-id to require authentication for non-public buckets
(profile) while keeping public access for file-media-object,
file-object-thumbnail, team-font-variant, and file-data-fragment
- Add config knobs: ssrf-protection-enabled, ssrf-allowed-hosts,
ssrf-extra-blocked-cidrs
Signed-off-by: Andrey Antukh <niwi@niwi.nz>
---------
Signed-off-by: Andrey Antukh <niwi@niwi.nz>
2026-05-08 09:18:22 +02:00
María Valderrama
7c5fa038c1
✨ Add Nitrate advanced permissions delete ( #9416 )
...
* ✨ Add Nitrate advanced permissions delete
* 📎 Code review
2026-05-07 21:14:30 +02:00
Marina López
6ad83d24c9
✨ Add nitrate manual cancel subscription
2026-05-06 11:04:35 +02:00
María Valderrama
4ddabaebff
✨ Add Nitrate's advanced permissions
...
* ✨ Add Nitrate's advanced permissions
* 📎 Code review
2026-05-06 10:13:17 +02:00
María Valderrama
e22a03e7e8
✨ Subscribe to nitrate with an activation code
...
* ✨ Subscribe to nitrate with an activation code
* 📎 Code review
2026-04-29 12:42:25 +02:00
Pablo Alba
b8f1b6e0c3
✨ Add nitrate api notify-user-orgs-deletion
2026-04-28 19:47:28 +02:00
Pablo Alba
700f3e9c10
✨ MR changes
2026-04-24 17:19:41 +02:00
Pablo Alba
debfe5490f
🐛 Fix switching a team nitrate organization lose the background
2026-04-24 17:19:41 +02:00
María Valderrama
b67394199b
✨ Add the ability to upload organization profile image
...
* ✨ Upload org logo
* 📎 Code review
* 📎 Code review 2
* 📎 Code review 3
2026-04-22 09:37:09 +02:00
Pablo Alba
ad974f4047
💄 Unify naming on nitrate-api
2026-04-22 09:31:09 +02:00
Pablo Alba
cd320c0cd6
✨ On profile deletion, remove the user from nitrate too
2026-04-21 15:44:37 +02:00
Pablo Alba
a206d57443
✨ Add team to a nitrate organization
2026-04-17 11:38:52 +02:00
Pablo Alba
39f4c13493
✨ Add nitrate remove team from org
2026-04-16 11:46:05 +02:00
Pablo Alba
ac472c615a
🐛 Fix nitrate invitations org ux review
2026-04-16 11:18:11 +02:00
Juanfran
f5591ed22e
🐛 Forward email when adding user to Nitrate organization
2026-04-15 13:28:39 +02:00
Pablo Alba
3c639f41c4
✨ Add option to leave a nitrate organization
2026-04-07 11:26:57 +02:00
Pablo Alba
4b4b99a949
✨ Add response to nitrate request when nitrate is down ( #8722 )
2026-03-26 17:25:07 +01:00
Pablo Alba
1af2521f64
✨ Add create default team org for nitrate on adding an user to a team
2026-03-26 13:17:05 +01:00
Marina López
6fa0c5ceaa
✨ Add organization avatar
2026-03-26 10:54:55 +01:00
María Valderrama
9c3fbc59b9
🐛 Fix visibility of go to nitrate cc option
2026-03-20 13:42:45 +01:00
Pablo Alba
acc383ba31
✨ Improve nitrate module JSON handling and error management
2026-03-17 09:59:02 +01:00
Pablo Alba
8cb5c23a29
🐛 Fix nitrate url
2026-03-16 13:35:15 +01:00
Pablo Alba
8f35e451e6
✨ Add notification for nitrate when creating a team inside an organization ( #8639 )
2026-03-16 10:36:32 +01:00
Pablo Alba
08845ad2d4
✨ Add organization selection for nitrate ( #8619 )
2026-03-13 09:16:12 +01:00
Pablo Alba
3141f67cd7
✨ Add subscription info for nitrate
2026-03-10 14:55:12 +01:00
Pablo Alba
c27f874e74
✨ Show subscription type nitrate
2026-02-26 09:09:48 +01:00
Pablo Alba
90288e32d5
✨ Show different info on nitrate dialog by connectivity
2026-02-20 10:19:25 +01:00
Andrey Antukh
50a4cf8b99
📎 Adapt nitrate module to auth changes
2026-01-27 15:14:32 +01:00
Pablo Alba
d5abc52dac
🎉 Add first integration with nitrate ( #7803 )
...
* 🐛 Display missing selected tokens set info (#8098 )
* 🐛 Display missing selected tokens set info
* ✨ Add integration tests to verify current active set
* 🎉 Integration with nitrate platform
* 🐛 Fix nitrate get-teams returns deleted teams
* ✨ Add nitrate to tmux devenv
* ✨ Add retry and validation to nitrate module
* ✨ Add photoUrl to profile on nitrate authenticate
* ✨ Move nitrate url to an env variable
* ♻️ Change Nitrate organization-id schema to text
* ♻️ Cleanup unused imports
* 🔧 Add control-center to nginx
* ✨ Add create org link
* 🔧 Fix nginx entrypoint
* 🐛 Fix control-center proxy pass
* 🎉 Add nitrate licence check
* Revert "✨ Add nitrate to tmux devenv"
This reverts commit dc6f6c458995dac55cab7be365ced0972760a058.
* ✨ Add feature flag check
* 🐛 Rename licences for licenses
* ✨ MR changes
* ✨ MR changes 2
* 📎 Add the ability to have local config on start backend
* 📎 Add FIXME comment
---------
Co-authored-by: Xaviju <xavier.julian@kaleidos.net>
Co-authored-by: Juanfran <juanfran.ag@gmail.com>
Co-authored-by: Yamila Moreno <yamila.moreno@kaleidos.net>
Co-authored-by: Marina López <marina.lopez.yap@gmail.com>
Co-authored-by: Andrey Antukh <niwi@niwi.nz>
2026-01-27 10:04:53 +01:00
