Daniel
889dbb5aee
refactor: Upgrade to eslint 9.19.0 ( #9580 )
2025-02-01 15:32:43 +01:00
Daniel
59e46d0aea
feat: Add TypeScript support ( #9550 )
2025-01-30 01:45:35 +01:00
Colin Ulin
5966068e96
feat: Add support for MongoDB databaseOptions keys autoSelectFamily, autoSelectFamilyAttemptTimeout ( #9579 )
2025-01-30 01:28:04 +01:00
Daniel
a68f71b3de
refactor: Upgrade to commander 13.0.0 ( #9574 )
2025-01-29 06:04:54 +01:00
Colin Ulin
91618fe738
feat: Add support for MongoDB databaseOptions keys minPoolSize, connectTimeoutMS, socketTimeoutMS ( #9522 )
2025-01-28 02:21:40 +01:00
Daniel
5c5ad69b4a
feat: Change default value of Parse Server option encodeParseObjectInCloudFunction to true ( #9527 )
...
BREAKING CHANGE: The default value of Parse Server option `encodeParseObjectInCloudFunction` changes to `true`; the option has been deprecated and will be removed in a future version.
2025-01-12 04:34:52 +01:00
Daniel
7f666292e8
feat: Deprecate PublicAPIRouter in favor of PagesRouter ( #9526 )
2025-01-12 01:59:40 +01:00
Daniel
ff7f671c79
fix: Push adapter not loading on some versions of Node 22 ( #9524 )
2025-01-11 19:01:28 +01:00
Antoine Cormouls
7d8603f1c2
refactor: Upgrade to mongodb 6.10.0 ( #9362 )
2024-10-23 21:27:42 +02:00
Antoine Cormouls
3a9442a42f
refactor: Upgrade to mime 4.0.4 ( #9363 )
2024-10-23 20:03:48 +02:00
Mohammad Ali
5f66c6a075
fix: Parse.Query.distinct fails due to invalid aggregate stage 'hint' ( #9295 )
2024-10-22 20:51:58 +02:00
Manuel
dfd5a8edbf
ci: Add lint rule for mandatory curly braces ( #9348 )
2024-10-16 19:57:42 +02:00
Manuel
13ee52f0d1
fix: Custom object ID allows to acquire role privileges ([GHSA-8xq9-g7ch-35hg]( https://github.com/parse-community/parse-server/security/advisories/GHSA-8xq9-g7ch-35hg )) ( #9317 )
2024-10-03 21:17:14 +02:00
Vahid Sane
1a2da4055a
feat: Add support for asynchronous invocation of FilesAdapter.getFileLocation ( #9271 )
2024-08-27 17:09:19 +02:00
Diamond Lewis
90a1e4a200
feat: Add Cloud Code triggers Parse.Cloud.beforeSave and Parse.Cloud.afterSave for Parse Config ( #9232 )
2024-07-20 20:35:41 +02:00
Diamond Lewis
0319cee2db
fix: Parse Server option maxLogFiles doesn't recognize day duration literals such as 1d to mean 1 day ( #9215 )
2024-07-18 15:41:59 +02:00
Diamond Lewis
35cadf9b83
feat: Add atomic operations for Cloud Config parameters ( #9219 )
2024-07-18 02:52:39 +02:00
Diamond Lewis
5fa58fe774
ci: Fix CI not testing with Postgres 16 and flaky test ( #9210 )
2024-07-17 17:51:13 +02:00
Manuel
77206d8044
fix: Parse Server databaseOptions nested keys incorrectly identified as invalid ( #9213 )
2024-07-17 17:48:33 +02:00
Manuel
7778471999
feat: Add Node 22 support ( #9187 )
2024-07-09 12:58:51 +02:00
Diamond Lewis
cf4c8807b9
feat: Add support for dot notation on array fields of Parse Object ( #9115 )
2024-07-08 23:29:58 +02:00
Diamond Lewis
ef1634bf1f
feat: Upgrade to @parse/push-adapter 6.4.0 ( #9182 )
2024-07-08 22:23:57 +02:00
Manuel
284da09f45
fix: Invalid push notification tokens are not cleaned up from database for FCM API v2 ( #9173 )
2024-07-01 21:37:29 +02:00
Manuel
2edf1e4c03
fix: SQL injection when using Parse Server with PostgreSQL; fixes security vulnerability [GHSA-c2hr-cqg6-8j6r]( https://github.com/parse-community/parse-server/security/advisories/GHSA-c2hr-cqg6-8j6r ) ( #9167 )
2024-06-30 03:34:08 +02:00
Rahul Lanjewar
11d3e484df
fix: Live query throws error when constraint notEqualTo is set to null ( #8835 )
2024-06-11 21:31:10 +02:00
Vivek Joshi
0a054e6b54
fix: Parse Server option extendSessionOnUse not working for session lengths < 24 hours ( #9113 )
2024-05-27 16:33:11 +02:00
Chris
9d0bd2badd
fix: Facebook Limited Login not working due to incorrect domain in JWT validation ( #9122 )
2024-05-16 13:54:41 +02:00
Doug Drechsel
eba9dfff7b
ci: Add test support for external database adapter ( #8883 )
2024-05-15 00:48:20 +02:00
Diamond Lewis
5b0efb22ef
fix: Parse.Cloud.startJob and Parse.Push.send not returning status ID when setting Parse Server option directAccess: true ( #8766 )
2024-04-14 21:42:20 +02:00
Vivek Joshi
8758e6abb9
feat: Prevent Parse Server start in case of unknown option in server configuration ( #8987 )
2024-04-07 15:28:15 +02:00
Daniel
c277739623
fix: Rate limiting can fail when using Parse Server option rateLimit.redisUrl with clusters ( #8632 )
2024-03-24 02:17:21 +01:00
Daniel
b07ec15382
feat: Add server security check status security.enableCheck to Features Router ( #8679 )
2024-03-24 01:50:38 +01:00
Diamond Lewis
5f81efb429
feat: Add silent log level for Cloud Code ( #8803 )
2024-03-21 16:19:29 +01:00
Antoine Cormouls
907ad4267c
fix: Required option not handled correctly for special fields (File, GeoPoint, Polygon) on GraphQL API mutations ( #8915 )
2024-03-20 23:32:56 +01:00
Antoine Cormouls
6d4663b47e
refactor: Dry handleAuthData for safer code maintenance in the future ( #9025 )
2024-03-19 22:41:21 +01:00
Manuel
9f6e3429d3
fix: Server crashes on invalid Cloud Function or Cloud Job name; fixes security vulnerability [GHSA-6hh7-46r2-vf29]( https://github.com/parse-community/parse-server/security/advisories/GHSA-6hh7-46r2-vf29 ) ( #9024 )
2024-03-19 17:42:00 +01:00
Daniel
ad4aa83983
feat: Upgrade to Parse JS SDK 5 ( #9022 )
2024-03-17 04:08:52 +01:00
Daniel
720d24e185
fix: CacheAdapter does not connect when using a CacheAdapter with a JSON config ( #8633 )
2024-03-15 17:46:06 +01:00
Daniel
2760381183
fix: Parse Server option fileExtensions default value rejects file extensions that are less than 3 or more than 4 characters long ( #8699 )
2024-03-10 15:11:27 +01:00
Onur
29624e0fae
feat: Deprecation DEPPS5: Config option allowClientClassCreation defaults to false ( #8849 )
...
BREAKING CHANGE: The Parse Server option `allowClientClassCreation` defaults to `false`.
2024-03-05 20:05:54 +01:00
Oussama Meglali
2170962a50
feat: Add support for MongoDB query comment ( #8928 )
2024-03-03 02:27:57 +01:00
Onur
105ae7c8a5
feat: Switch GraphQL server from Yoga v2 to Apollo v4 ( #8959 )
2024-03-02 02:06:47 +01:00
EhsanParsania
a7b5b38418
fix: Deny request if master key is not set in Parse Server option masterKeyIps regardless of ACL and CLP ( #8957 )
...
BREAKING CHANGE: A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class.
2024-03-01 18:37:07 +01:00
Manuel
cbefe770a7
fix: Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2]( https://github.com/parse-community/parse-server/security/advisories/GHSA-6927-3vr9-fxf2 ) which affects Parse Server deployments using a Postgres database ( #8961 )
2024-03-01 16:52:05 +01:00
Manuel
f5d6fc98e7
refactor: Upgrade ldapjs from 2.3.3 to 3.0.7 ( #8947 )
2024-02-26 21:05:10 +01:00
Onur
70c280ca57
feat: Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling ( #8894 )
...
BREAKING CHANGE: Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before.
2024-02-16 00:18:29 +01:00
Onur
0cf58eb8d6
feat: Deprecation DEPPS6: Authentication adapters disabled by default ( #8858 )
...
BREAKING CHANGE: Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true`
2024-02-15 01:28:09 +01:00
Onur
e29845f8da
feat: Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false ( #8860 )
...
BREAKING CHANGE: Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter
2024-02-15 01:07:35 +01:00
Onur
38983e8e9b
feat: Deprecation DEPPS9: LiveQuery fields option is renamed to keys ( #8852 )
...
BREAKING CHANGE: LiveQuery `fields` option is renamed to `keys`
2024-02-15 00:31:15 +01:00
Onur
4e6a375b51
feat: Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ( #8855 )
...
BREAKING CHANGE: Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'`
2024-02-14 22:54:30 +01:00
