dblythy
38ed96ace5
fix: depreciate allowClientClassCreation defaulting to true ( #7925 )
2022-05-07 21:08:59 +02:00
Antoine Cormouls
68b15c298e
refactor: replace internal GraphQL array classes to object style ( #7788 )
2022-05-06 02:09:09 +02:00
dblythy
3fb6b2b4ab
ci: fix flaky tests for Apple Game Center authentication ( #7958 )
2022-05-01 04:26:08 +02:00
dblythy
b1e5565b22
fix: custom database options are not passed to MongoDB GridFS ( #7911 )
2022-05-01 04:21:40 +02:00
Antoine Cormouls
a169663304
refactor: add missing schema definitions ( #7917 )
2022-05-01 04:21:33 +02:00
dblythy
041197fb4c
perf: reduce database operations when using the constant parameter in Cloud Function validation ( #7892 )
2022-05-01 04:17:14 +02:00
dblythy
19900fcdf8
fix: return correct response when revert is used in beforeSave ( #7839 )
2022-05-01 02:39:56 +02:00
Manuel
af4a0417a9
fix: authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter (GHSA-qf8x-vqjv-92gr) ( #7962 )
2022-05-01 02:28:16 +02:00
Manuel
0d6f9e951d
fix: sensitive keyword detection may produce false positives ( #7881 )
2022-03-24 02:54:07 +01:00
dblythy
443a509905
feat: improved LiveQuery error logging with additional information ( #7837 )
2022-03-23 02:11:39 +01:00
Manuel Trezza
1593575a87
build: release
2022-03-18 15:17:12 +01:00
Manuel
0c1b75fcbe
Merge branch 'beta' into build-release-beta-19837863611
2022-03-15 00:56:54 +01:00
Manuel
e569f402b1
fix: security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) ( #7844 )
2022-03-12 14:47:23 +01:00
Manuel
971adb5438
fix: security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) ( #7843 )
2022-03-12 13:49:57 +01:00
Antoine Cormouls
f88aa2a62a
feat: upgrade to MongoDB Node.js driver 4.x for MongoDB 5.0 support ( #7794 )
...
BREAKING CHANGE: The MongoDB GridStore adapter has been removed. By default, Parse Server already uses GridFS, so if you do not manually use the GridStore adapter, you can ignore this change.
2022-02-06 18:30:36 +01:00
yog27ray
315290d161
feat: add Cloud Code context to ParseObject.fetch ( #7779 )
2022-01-25 12:40:22 +01:00
Manuel
3b92fa1ca9
fix: schema cache not cleared in some cases ( #7771 )
2022-01-13 03:04:49 +01:00
ThornWu
5af6e5dfaa
fix: schema cache not cleared in some cases ( #7678 )
2022-01-13 02:03:33 +01:00
Corey
a5ffb95022
refactor: remove deprecated url.parse() method ( #7751 )
2022-01-06 15:26:00 +01:00
Corey
0c3feaaa17
feat: add Idempotency to Postgres ( #7750 )
2022-01-02 19:25:53 +01:00
Corey
5e363eae44
refactor: remove unnecessary error checking in PostgresAdapter ( #7761 )
2022-01-02 18:43:12 +01:00
Corey
caf4a2341f
feat: support postgresql protocol in database URI ( #7757 )
2022-01-02 15:25:43 +01:00
Corey
16b1b2a197
feat: support relativeTime query constraint on Postgres ( #7747 )
2022-01-02 01:10:54 +01:00
Ben Devore
6a6248b6cb
fix: adding or modifying a nested property requires addField permissions ( #7679 )
2021-12-07 00:52:59 +01:00
Manuel
8ee0445c0a
fix: unable to use objectId size higher than 19 on GraphQL API ( #7722 )
2021-11-27 13:36:49 +01:00
Antoine Cormouls
ed86c80772
fix: unable to use objectId size higher than 19 on GraphQL API ( #7627 )
2021-11-27 12:27:08 +01:00
Corey
c789f6c979
refactor: test moved to correct test group ( #7717 )
2021-11-25 19:16:46 +01:00
Manuel
200d4ba9a5
revert: refactor: allow ES import for cloud string if package type is module ( #7691 )
...
This reverts commit 0225340ccb .
2021-11-10 16:49:47 +01:00
Manuel
b64640c570
revert: refactor: allow ES import for cloud string if package type is module
...
This reverts commit 0225340ccb .
2021-11-10 16:26:20 +01:00
Samuel Denis-D'Ortun
25d5c30be2
feat: add user-defined schema and migrations ( #7418 )
2021-11-01 14:28:49 +01:00
Corey
090350a7a0
feat: add support for Postgres 14 ( #7644 )
2021-10-31 20:49:03 +01:00
Kingtous
174886e385
fix: combined and query with relational query condition returns incorrect results ( #7593 )
2021-10-29 19:03:50 +02:00
Antoine Cormouls
626fad2e71
fix: setting a field to null does not delete it via GraphQL API ( #7649 )
...
BREAKING CHANGE: To delete a field via the GraphQL API, the field value has to be set to `null`. Previously, setting a field value to `null` would save a null value in the database, which was not according to the [GraphQL specs](https://spec.graphql.org/June2018/#sec-Null-Value ). To delete a file field use `file: null`, the previous way of using `file: { file: null }` has become obsolete.
2021-10-27 01:33:48 +02:00
dblythy
12eb6c823b
refactor: replace hardcoded error codes with references ( #7546 )
2021-10-18 20:19:47 +02:00
Antoine Cormouls
68057c49f3
refactor: minor changes to remove mongo deprecation warnings ( #7626 )
2021-10-17 21:16:24 +02:00
Antoine Cormouls
85ef7217b0
feat: alphabetical graphql api, fix internal reassign, enhanced Graphql schema cache system ( #7344 )
2021-10-11 14:51:28 +02:00
dblythy
ab1dddd406
fix: add deprecation warning for Parse.Cloud.httpRequest ( #7595 )
2021-10-09 05:04:12 +02:00
dblythy
68a3a87501
fix: set objects in afterFind triggers ( #7311 )
2021-10-09 02:34:09 +02:00
dblythy
caee281bc5
fix: allow LiveQuery on Parse.Session ( #7554 )
2021-10-08 17:24:33 +02:00
dblythy
484c2e81ca
fix: improve security by deprecating creating users with public access by default ( #7319 )
2021-10-08 05:24:20 +02:00
dblythy
834ae366f9
Merge pull request from GHSA-7pr3-p5fm-8r9x
...
* fix: strip sessionToken on _User LiveQuery
* delete authData
* add changelog
* Update package.json
* Update CHANGELOG.md
* add changes
* Update ParseLiveQuery.spec.js
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com >
2021-09-30 04:52:12 +02:00
dblythy
8ed94421e6
fix: add support for descending sorting of full text search ( #7496 )
2021-09-15 16:15:08 +02:00
dblythy
0225340ccb
refactor: allow ES import for cloud string if package type is module ( #7560 )
...
* allow module import for Parse Cloud
* Update .babelrc
* catch esm error
* Update ParseServer.js
* add tests
* Update CHANGELOG.md
* Update CloudCode.spec.js
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com >
2021-09-14 14:10:37 +02:00
Lukáš Smilek
b185fad695
Additional explication for expireInactiveSessions in ParseServerOptions ( #7552 )
...
* Update docs.js
Additional explication for `expireInactiveSessions`
* Update index.js
Additional explication for `expireInactiveSessions`
* Update docs.js
correcting spelling error
* Update index.js
correcting spelling error
* Update Definitions.js
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com >
2021-09-10 15:49:20 +02:00
Corey
24e9bdc639
ci: Fix docker image pushing to Docker Hub ( #7548 )
...
* add actions file
* nit
* add multi-platform
* add buildx
* reduce platforms
* remove arm7
* add back arm7
* add missing archs
* remove failing image
* add back in linux/s390x
* switch image name to parse-server
* remove failing images
* nit spelling
* Nit
* add comment about nightly builds
2021-09-07 14:35:03 +02:00
Manuel
24188a39a7
refactor: remove restricted session field ( #7543 )
...
* add issue bot for prs
* Update CHANGELOG.md
* Update issue-bot.yml
* remove session restriction artifacts
* Update CHANGELOG.md
* Update CHANGELOG.md
2021-09-04 03:03:46 +02:00
Manuel
27832453e2
refactor: clean code ( #7542 )
...
* add issue bot for prs
* Update CHANGELOG.md
* Update issue-bot.yml
* reformat code
2021-09-03 01:23:15 +02:00
Antonio Davi Macedo Coelho de Castro
308668c894
Merge pull request from GHSA-xqp8-w826-hh6x
...
* Added a test case that triggers the query parameter crash
* rest.js: validate the explain parameter to keep the nodejs driver from throwing an uncatchable exception and crashing the server (see https://jira.mongodb.org/browse/NODE-3463 )
RestQuery.js: Check whether explain mode is enabled not by "!== true", but by the "!" operator. explain can have string values.
Added tests that validate correct behaviour on different explain values
* Refactor the new tests
* Simplify the new tests
Also do a sanity check on the explain results
* Test refactor
* Exclude queryPlannerExtended as it is not supported by the testing environment
Simplifies the tests
* Restrict the changes to mongodb
Moved the verification of the explain value from rest.js to MongoStorageAdapter.js
Also restricted the relevant unit tests to mongodb
* Added changelog entry
* reformat changelog entry
* Update CHANGELOG.md
Co-authored-by: Kartal Kaan Bozdoğan <kartalkaanbozdogan@gmail.com >
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com >
2021-09-02 12:46:48 +02:00
Antonio Davi Macedo Coelho de Castro
fc0fef5922
Merge pull request from GHSA-23r4-5mxp-c7g5 ( #7497 )
...
* Merge pull request from GHSA-23r4-5mxp-c7g5
* add anonymous login security fix
* add changelog entry
* update changelog
* Update package.json (#7498 )
* Update package-lock.json (#7499 )
Co-authored-by: Corey <coreyearleon@icloud.com >
2021-08-18 19:03:54 +02:00
Raschid J.F. Rafeally
8fddac39bf
feat(AggregateRouter): support native mongodb syntax in aggregation pipelines ( #7339 )
2021-08-12 19:14:04 +02:00