Commit Graph
8559 Commits
Author SHA1 Message Date
mr-pmillzandClaude Opus 5.5 4cb620f46b Fix Integration API organization delete (regression of #1376)
DELETE /v1/org/{orgId} on the Integration API always returned
500 "An error occurred..." and left the organization in place, even for a
root API key holding the deleteOrg action. The handler looked up the
caller's ownership with req.user!.userId, but Integration API requests are
authenticated by verifyApiKey, which sets req.apiKey and never req.user,
so the lookup threw "Cannot read properties of undefined (reading
'userId')".

#1376 was fixed in f37eda47 by dropping the user-only permission check;
79cf7c84 later added the owner check to the handler shared by both
routers, reintroducing the failure for API keys.

Keep the owner check for dashboard sessions. For Integration API keys the
route is already restricted by verifyApiKeyIsRoot and
verifyApiKeyHasAction(deleteOrg), so load the organization directly. Both
paths still refuse a billing organization and return the same 404 for an
unknown organization.

Verified against a local SQLite instance with a root key: before the
change, create returned 201 and delete returned 500 with the organization
still present; after it, delete returns 200 and a repeated delete or GET
returns 404. npx tsc --noEmit passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-29 11:09:18 -04:00
Owen c92b2f22ba Update version 2026-09-29 11:02:37 -04:00
Owen e3ce453155 Send disconnect messages if the session is bad 2026-09-29 10:24:59 -04:00
miloschwartz 7a655f7c6e show device code on device authorize screen 2026-09-29 10:08:27 -04:00
Owen 97e0c19276 Add migrations 2026-09-28 20:39:38 -04:00
Owen 393af877c9 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-28 20:34:31 -04:00
Owen d859576835 Merge branch 'site-exit-node' into dev 2026-09-28 20:34:21 -04:00
Owen 397fcbf4c4 Show the right tier in the banner 2026-09-28 11:29:53 -04:00
miloschwartz fa37599819 update mac models 2026-09-28 09:24:49 -04:00
Owen 90848581a1 Push gateway updates to clients 2026-09-25 11:51:38 -04:00
Owen Schwartz 4a20a66791 Merge pull request #3811 from Fra146/feature-badger-headers-config
Add config options and badger options injection
2026-09-25 09:40:05 -04:00
Owen 55e479d25f Fix #3810 2026-09-25 09:30:51 -04:00
Owen e92911e7c8 Use formatEndpoint where appropriate
Fixes fosrl/newt#454
2026-09-24 14:34:54 -04:00
Owen ed28d34945 Support batched relay,unrelay,local,unlocal messages 2026-09-24 11:56:10 -04:00
Owen 97bf58a876 Update to have two different badgers 2026-09-24 10:34:23 -04:00
Owen e68963b852 Add comments about not processing gateway 2026-09-24 09:49:09 -04:00
Owen 021626d382 Send gateway resources downstream like cidr resources to newt 2026-09-24 09:49:09 -04:00
Owen 8ba14c2a8a Dont show the gateway resources in the table 2026-09-24 09:49:09 -04:00
Owen 118120c9ce Create gateway resources in blueprints 2026-09-24 09:49:09 -04:00
Owen 3378125f8e Can create gateway resource 2026-09-24 09:49:09 -04:00
Owen a17b870ed2 Adding gateway resources 2026-09-24 09:49:08 -04:00
Owen 1dace9c9f7 Fix type in SelectedSite type and filter newts only on ssh creation 2026-09-24 09:47:26 -04:00
Owen Schwartz 9aa2adadf6 Merge pull request #3797 from MauryaQbit/fix/ai-gateway-302-api-clients
fix(ai-gateway): return JSON auth error instead of 302 for API clients on inference resources
2026-09-24 09:36:52 -04:00
Fra146 7ad56a8bae Add config options and badger options injection 2026-09-24 11:42:05 +02:00
Owen 29d93a574b Fix optional() type errors 2026-09-23 14:48:05 -04:00
Owen d406cc61b5 Pull jit limit from org 2026-09-23 10:40:21 -04:00
Owen 537649af18 Update install advantech link 2026-09-23 10:39:37 -04:00
Owen 6ec37220d6 Remove default from server
Fixes #3804
2026-09-23 10:33:49 -04:00
Owen 5fd4383396 Show information about how to get more licenses and when you have them 2026-09-22 10:52:39 -04:00
Owen 70f677a277 Don't allow personal and non-personal keys at the same time 2026-09-22 10:40:47 -04:00
Owen d38281b9f7 Update language and add debug 2026-09-22 10:37:52 -04:00
Owen 0de5c763b3 Order by valid until 2026-09-22 09:53:05 -04:00
Owen 0364257e68 Pick key based on tier ranked 2026-09-22 09:45:11 -04:00
Owen 9de91e2f81 Display the quantities again 2026-09-22 09:39:17 -04:00
Owen d134304159 Add alpine install commands 2026-09-22 09:33:43 -04:00
Owen 750f267451 Try to link email to org when creating for first time 2026-09-21 16:25:58 -04:00
Owen 0c752c9c29 Merge branch 'main' into dev 2026-09-21 15:21:12 -04:00
Owen Schwartz 3392120855 Merge pull request #3172 from Gulianrdgd/feature-response-headers
Feature response headers
2026-09-21 15:16:24 -04:00
Owen Schwartz 8fcffe2202 Merge pull request #3590 from shleeable/patch-2
Add guard on resource policy change
2026-09-21 15:05:22 -04:00
Owen Schwartz af1cda6278 Merge pull request #3510 from shubhamsinnh/codex/fix-integration-site-resource
Fix integration API site resource lookup
2026-09-21 15:01:37 -04:00
Owen Schwartz ae34796072 Merge pull request #3585 from moyaqoob/fix-cli-import-style
Normalize CLI command import paths in pangctl entrypoint
2026-09-21 14:55:43 -04:00
Owen Schwartz ee08bc8927 Merge pull request #3599 from shleeable/patch-13
Typo: Update verifyApiKeyAccess to use generated apiKey.apiKeyOrg?.orgId data
2026-09-21 14:36:38 -04:00
Owen Schwartz cf22bd1a13 Merge pull request #3600 from shleeable/patch-14
Typo: Fix error to be correctly related to newt
2026-09-21 14:35:26 -04:00
Owen Schwartz 085e85f652 Merge pull request #3592 from shleeable/patch-6
Typo: eq(sites.orgId, sites.orgId), same same
2026-09-21 14:34:36 -04:00
Owen Schwartz c7222b67b9 Merge pull request #3591 from shleeable/patch-5
Typo: Update exportConnectionAuditLog.ts to use MAX_EXPORT_LIMIT
2026-09-21 14:33:22 -04:00
Owen Schwartz bdb4b0c16d Merge pull request #3500 from Tim5965/patch-6
Update nl-NL.json
2026-09-21 14:29:09 -04:00
Owen Schwartz e5edab546b Merge branch 'main' into patch-6 2026-09-21 14:28:48 -04:00
Dhananjay Maurya 0b3329939b fix(ai-gateway): return JSON auth error instead of 302 for API clients on inference resources 2026-09-21 23:44:15 +05:30
Owen Schwartz 7e188ffae6 Merge pull request #3738 from breken-ai/fix/path-rule-percent-encoding
▚▚ fix(rules): decode percent-encoded PATH rule patterns before matching
2026-09-21 13:55:25 -04:00
Owen Schwartz 74d10acad9 Merge pull request #3704 from Blacks-Army/feat/http-method-rules
Add HTTP method matching to resource rules
2026-09-21 11:44:54 -04:00