Andrey Antukh
d6dc0fe1a7
🐛 Fix raw file data download on dbg pannel ( #8847 )
2026-03-31 14:36:43 +02:00
Andrey Antukh
264cd0aaac
Merge remote-tracking branch 'origin/main' into staging
2026-03-30 12:29:07 +02:00
Andrey Antukh
0dfa62a5b6
🐛 Improve error reporting on request parsing failures ( #8805 )
...
Include request URI and status in frontend handle-response error data,
and add request path/context to backend IOException handler logs and
response body. Previously these errors had no identifying information
about which endpoint or request caused the failure.
2026-03-26 15:42:49 +01:00
Andrey Antukh
fbf1240998
⚡ Add several optimizations for fonts zip download
...
Mainly prevent hold the whole zip in memory and uses an
unified response type, leavin frontend fetching the blob
data from the assets/storage subsystem.
2026-02-16 10:14:50 +01:00
Andrey Antukh
4a7b89a1da
Merge pull request #8327 from penpot/niwinz-develop-rlimit-notifications
...
✨ Add proper mattermost notifications for rlimit rejects
2026-02-13 17:11:54 +01:00
Andrey Antukh
12bc3ac9ed
✨ Update default cors headers
2026-02-13 13:17:08 +01:00
Andrey Antukh
d80ba1856a
✨ Add several improvements to frontend error reporting
...
* ✨ Add major improvement on error handling
* ✨ Add the ability to store frontend reports
* 📎 Add PR feedback changes
2026-02-04 12:45:38 +01:00
Pablo Alba
4ca82821c1
🐛 Fix shared keys init should be by keywords (2) ( #8230 )
2026-01-28 13:41:37 +01:00
Andrey Antukh
f5996a7235
♻️ Make several improvements to management API authentication
2026-01-27 15:14:32 +01:00
Andrey Antukh
0ab126748f
💄 Add format rule for code comments ( #8211 )
...
* 💄 Add format rule for code comments
* ⬆️ Update linter and formatter on devenv
2026-01-27 15:07:18 +01:00
Andrey Antukh
bcaf76d055
✨ Make the virtual clock by profile and not global
...
And make it affect only RPC/HTTP requests and not worker
tasks.
2026-01-09 12:58:44 +01:00
Andrey Antukh
ce234fbeda
✨ Allow get thumbnails for deleted files
2025-12-22 20:16:41 +01:00
Andrey Antukh
88dcf9d1fe
🐛 Mark rpc calls as authenticated when shared key is used ( #7901 )
2025-12-22 12:18:36 +01:00
Andrey Antukh
4fddf3d986
♻️ Make management key derivable from secret key
...
Still preserves the ability to set management
2025-11-20 12:20:13 +01:00
Andrey Antukh
f71f491590
🐛 Fix incorrect bearer token decoding
2025-11-20 12:20:13 +01:00
Andrey Antukh
a487dfe004
✨ Add better approach for cookie token decoding
...
Remove unnecesary decoding for old tokens and add key identifier
and versioning to cookie tokens for handle future changes.
2025-11-19 07:47:52 +01:00
Andrey Antukh
ce2d3d1652
🐛 Fix incorrect handling of session renewal
...
A regression introduced in the prev auth refactor.
2025-11-18 20:35:16 +01:00
Andrey Antukh
363b4e3778
♻️ Make the SSO code more modular ( #7575 )
...
* 📎 Disable by default social auth on devenv
* 🎉 Add the ability to import profile picture from SSO provider
* 📎 Add srepl helper for insert custom sso config
* 🎉 Add custom SSO auth flow
2025-11-12 12:49:10 +01:00
Andrey Antukh
28cf67e7ff
🎉 Add management RPC API ( #7700 )
...
* 🎉 Add management RPC API
And refactor internal http auth flow
* 📎 Adjust final url namings
* 📚 Update changelog
2025-11-10 17:10:59 +01:00
Andrey Antukh
49721c0bcd
✨ Add better logging context report on worker runner
2025-11-04 12:44:38 +01:00
Andrey Antukh
e0dd8247d4
Merge branch 'main' into staging
2025-10-15 11:25:36 +02:00
Andrey Antukh
25521b18ff
✨ Make the restriction errors report as warning to logging
2025-10-14 19:04:02 +02:00
Andrey Antukh
5717708b56
♻️ Refactor file storage
...
Make it more scallable and make it easily extensible
2025-10-13 12:24:05 +02:00
Andrey Antukh
0aadc3b6b3
✨ Add management shared key authentication
2025-10-13 11:49:58 +02:00
Andrey Antukh
cea0143327
✨ Add extra tenant validation for virtual clock dbg pannel
2025-10-07 18:21:13 +02:00
Andrey Antukh
2c1a8b59ba
✨ Add client header check middleware
...
As an additional csrf protection for API requests
2025-10-07 12:47:14 +02:00
Andrey Antukh
47d9c6f282
✨ Add sec-fetch metadata middleware support
2025-10-07 12:47:14 +02:00
Andrey Antukh
14d53c224f
🔥 Remove unused auth-data cookie asignation
2025-10-07 12:47:12 +02:00
Alejandro Alonso
e0f9bbb23f
Merge pull request #7432 from penpot/niwinz-develop-virtual-clock
...
🎉 Add virtual clock support
2025-10-07 12:27:49 +02:00
Andrey Antukh
61d9b57bc7
♻️ Refactor internal tokens API
...
Mainly make it receive the whol cfg/system instead only props. This
makes the api more flexible for a future extending without the need
to change the api again.
2025-10-07 12:08:00 +02:00
Andrey Antukh
bd63598185
🎉 Add virtual clock implementation
2025-10-07 12:08:00 +02:00
Andrey Antukh
683db071d6
Merge remote-tracking branch 'origin/staging' into develop
2025-10-06 12:09:57 +02:00
Andrey Antukh
b72704e54b
✨ Set explicit no-buffering for sse responses
2025-10-06 09:19:48 +02:00
Andrey Antukh
c1058c7fdb
♻️ Add minor refactor for internal concurrency model
...
Replace general usage of virtual threads with platform threads
and use virtual threads for lightweight procs such that websocket
connections. This decision is made mainly because virtual threads
does not appear on thread dumps in an easy way so debugging issues
becomes very difficult.
The threads requirement of penpot for serving http requests
is not very big so having so this decision does not really affects
the resource usage.
2025-09-26 14:35:06 +02:00
Andrey Antukh
45be4769d7
Merge remote-tracking branch 'origin/staging' into develop
2025-08-27 13:19:06 +02:00
Andrey Antukh
a114e9adb0
✨ Add logging for management update-customer method
2025-08-27 12:02:39 +02:00
Andrey Antukh
5fed5fa158
✨ Add transactions support on management api
2025-08-27 12:00:03 +02:00
Andrey Antukh
ad0ef82ffc
🎉 Add management http api
2025-08-25 10:53:12 +02:00
Andrey Antukh
17ec360720
⚡ Add several missing type hints for avoid reflection and autoboxing
2025-08-18 13:03:10 +02:00
Andrey Antukh
283eb0419c
♻️ Refactor time related namespaces
...
Mainly removes the custom app.util.time namespace
from frontend and backend and normalize all to use
the app.common.time namespace
2025-08-01 11:20:01 +02:00
Andrey Antukh
4effd375a9
✨ Add several improvements to admin pannel
2025-07-23 08:33:33 +02:00
Andrey Antukh
fa72bb4adf
✨ Add several improvements to admin pannel
2025-07-22 10:06:29 +02:00
Andrey Antukh
cf274099c4
✨ Improve events/sse internal API
...
For make code cleaner and more evident for a quick view
2025-05-18 17:30:41 +02:00
Andrey Antukh
bf76f328c8
✨ Remove duplicate error logging on sse response
2025-05-18 17:30:41 +02:00
Andrey Antukh
a209966427
🐛 Don't use schema uuid parsing function on websocket ns
2025-04-17 09:20:34 +02:00
Andrey Antukh
bc957893f4
⚡ Make feature resolved on team load
...
That simplifies features retrieval to simple get
2025-04-07 07:50:40 +02:00
Andrey Antukh
4d4a04e9aa
✨ Add minor enhacement for error reporting
2025-04-01 20:43:55 +02:00
Andrey Antukh
b4f6177be7
🐛 Move team srepl helpers back to main from helpers ( #5955 )
2025-02-25 14:56:58 +01:00
Elena Torró
ab7781b4fa
✨ Add dbg panel to enable a team feature flag ( #5940 )
...
* ✨ Add dbg panel to enable and disable team feature flags
* 📎 Rename debug to skip-check and do not parse & cast the feature value
2025-02-25 10:09:43 +01:00
Andrey Antukh
3074fc9ab5
♻️ Remove deprecated with-atomic and refactor tx-run! ( #5915 )
...
* ♻️ Remove deprecated with-atomic and refactor tx-run!
* ✨ Do not hold open connection for the whole clone-template operation
2025-02-24 11:15:44 +01:00