Mauricio Siu 439eee45ed fix(security): redact SSH private key from server read responses ...

findServerById eagerly loads the sshKey relation (needed for server-side SSH
operations) including the plaintext privateKey. server.one and server.remove
returned that record to the client, exposing the private key to any member
with server:read regardless of canAccessToSSHKeys.

Adds redactServerSshKey() in the server service and applies it to the server.one
and server.remove responses. No client feature consumes the private key (the SSH
key management UI uses the dedicated sshKey router), and server-side callers keep
using findServerById directly, so behaviour is unchanged.

Closes GHSA-w9cp-jqfw-4xj9

2026-07-19 21:14:10 -06:00

..

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix(security): redact SSH private key from server read responses

2026-07-19 21:14:10 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00

esbuild.config.ts

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

package.json

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

tsconfig.json

chore(dependencies): update ai-sdk packages and other dependencies

2026-02-16 12:50:34 -06:00

tsconfig.server.json

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

tsconfig.server.no-decl.json

[autofix.ci] apply automated fixes

2026-02-16 18:51:10 +00:00