Lucas Coratger
4456b02280
feat: Add Parse Server option allowPublicExplain to allow Parse.Query.explain without master key ( #9890 )
2025-11-08 17:02:13 +01:00
Manuel
b760733b98
feat: Add MongoDB client event logging via database option logClientEvents ( #9914 )
2025-11-08 15:48:29 +01:00
Manuel
cff451eabd
feat: Add support for more MongoDB driver options ( #9911 )
2025-11-07 21:41:59 +01:00
Manuel
1b661e98c8
feat: Add support for MongoDB driver options serverSelectionTimeoutMS, maxIdleTimeMS, heartbeatFrequencyMS ( #9910 )
2025-11-07 20:11:12 +01:00
Daniel
460a65cf61
feat: Allow option publicServerURL to be set dynamically as asynchronous function ( #9803 )
2025-11-07 19:18:58 +01:00
Manuel
fa245cbb5f
fix: Add problematic MIME types to default value of Parse Server option fileUpload.fileExtensions ( #9902 )
2025-11-05 12:13:30 +01:00
Manuel
ea91aca142
feat: Add options to skip automatic creation of internal database indexes on server start ( #9897 )
2025-11-01 18:22:52 +01:00
Antoine Cormouls
b298cccd9f
feat: Add Parse Server option verifyServerUrl to disable server URL verification on server launch ( #9881 )
2025-10-25 18:01:58 +02:00
Antoine Cormouls
1815b019b5
fix: Warning logged when setting option databaseOptions.disableIndexFieldValidation ( #9880 )
2025-10-16 09:29:02 +02:00
Antoine Cormouls
64f104e5c5
feat: Add request context middleware for config and dependency injection in hooks ( #8480 )
2025-10-14 20:16:31 +02:00
Rahul Lanjewar
89fad468c3
feat: Add option keepUnknownIndexes to retain indexes which are not specified in schema ( #9857 )
2025-10-03 14:35:34 +02:00
Manuel
c58b2eb6eb
fix: Data schema exposed via GraphQL API public introspection (GHSA-48q3-prgv-gm4w) ( #9819 )
2025-07-10 04:25:09 +02:00
Manuel
5ef0440c8e
fix: Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv]( https://github.com/parse-community/parse-server/security/advisories/GHSA-837q-jhwx-cmpv ) ( #9667 )
2025-03-21 10:49:09 +01:00
Daniel
6f1d161a2f
feat: Add dynamic master key by setting Parse Server option masterKey to a function ( #9582 )
2025-02-12 22:23:18 +01:00
Colin Ulin
5966068e96
feat: Add support for MongoDB databaseOptions keys autoSelectFamily, autoSelectFamilyAttemptTimeout ( #9579 )
2025-01-30 01:28:04 +01:00
Colin Ulin
91618fe738
feat: Add support for MongoDB databaseOptions keys minPoolSize, connectTimeoutMS, socketTimeoutMS ( #9522 )
2025-01-28 02:21:40 +01:00
Daniel
5c5ad69b4a
feat: Change default value of Parse Server option encodeParseObjectInCloudFunction to true ( #9527 )
...
BREAKING CHANGE: The default value of Parse Server option `encodeParseObjectInCloudFunction` changes to `true`; the option has been deprecated and will be removed in a future version.
2025-01-12 04:34:52 +01:00
Daniel
7f666292e8
feat: Deprecate PublicAPIRouter in favor of PagesRouter ( #9526 )
2025-01-12 01:59:40 +01:00
Diamond Lewis
0319cee2db
fix: Parse Server option maxLogFiles doesn't recognize day duration literals such as 1d to mean 1 day ( #9215 )
2024-07-18 15:41:59 +02:00
Manuel
77206d8044
fix: Parse Server databaseOptions nested keys incorrectly identified as invalid ( #9213 )
2024-07-17 17:48:33 +02:00
Vivek Joshi
0a054e6b54
fix: Parse Server option extendSessionOnUse not working for session lengths < 24 hours ( #9113 )
2024-05-27 16:33:11 +02:00
Vivek Joshi
8758e6abb9
feat: Prevent Parse Server start in case of unknown option in server configuration ( #8987 )
2024-04-07 15:28:15 +02:00
Daniel
2760381183
fix: Parse Server option fileExtensions default value rejects file extensions that are less than 3 or more than 4 characters long ( #8699 )
2024-03-10 15:11:27 +01:00
Onur
29624e0fae
feat: Deprecation DEPPS5: Config option allowClientClassCreation defaults to false ( #8849 )
...
BREAKING CHANGE: The Parse Server option `allowClientClassCreation` defaults to `false`.
2024-03-05 20:05:54 +01:00
Onur
0cf58eb8d6
feat: Deprecation DEPPS6: Authentication adapters disabled by default ( #8858 )
...
BREAKING CHANGE: Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true`
2024-02-15 01:28:09 +01:00
Onur
e29845f8da
feat: Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false ( #8860 )
...
BREAKING CHANGE: Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter
2024-02-15 01:07:35 +01:00
Onur
4e6a375b51
feat: Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ( #8855 )
...
BREAKING CHANGE: Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'`
2024-02-14 22:54:30 +01:00
Manuel
759731926f
docs: Improve docs for Parse Server options masterKeyIps, maintenanceKeyIps ( #8814 )
2023-11-18 15:41:16 +01:00
Mattia Faraci
09fbeebba8
feat: Add compatibility for MongoDB Atlas Serverless and AWS Amazon DocumentDB with collation options enableCollationCaseComparison, transformEmailToLowercase, transformUsernameToLowercase ( #8805 )
2023-11-13 23:32:47 +01:00
Wes
77bbfb3f18
feat: Allow setting createdAt and updatedAt during Parse.Object creation with maintenance key ( #8696 )
2023-09-29 22:17:48 +02:00
Daniel
4e2000bc56
fix: Server does not start via CLI when auth option is set ( #8666 )
2023-07-04 13:16:55 +02:00
Daniel
068fb9e777
refactor: Add option to convert Parse.Object to instance in Cloud Function payload ( #8646 )
2023-06-23 16:29:54 +02:00
Daniel
44acd6d9ed
feat: Add conditional email verification via dynamic Parse Server options verifyUserEmails, sendUserEmailVerification that now accept functions ( #8425 )
2023-06-20 12:10:25 +02:00
Daniel
03fba97e05
feat: Add zones for rate limiting by ip, user, session, global ( #8508 )
2023-06-09 13:27:56 +02:00
Daniel
82da30842a
feat: Add new Parse Server option preventSignupWithUnverifiedEmail to prevent returning a user without session token on sign-up with unverified email address ( #8451 )
2023-06-07 21:51:53 +02:00
Manuel
a27482c57e
refactor: Add new Parse Server option fileUpload.fileExtensions to restrict file upload by file extension ( #8539 )
2023-05-21 01:31:52 +02:00
Daniel
6f885d36b9
feat: extendSessionOnUse to automatically renew Parse Sessions ( #8505 )
2023-05-17 19:49:25 +02:00
alljinx
2caea310be
feat: Add option to change the log level of logs emitted by Cloud Functions ( #8530 )
2023-05-09 15:03:00 +02:00
Marc Derhammer
4f15539ac2
feat: Allow multiple origins for header Access-Control-Allow-Origin ( #8517 )
2023-05-01 22:25:22 +02:00
Daniel
34833e42ee
feat: Add rate limiting across multiple servers via Redis ( #8394 )
2023-03-06 17:43:15 +01:00
Daniel
b3b76de71b
feat: Add option schemaCacheTtl for schema cache pulling as alternative to enableSchemaHooks ( #8436 )
2023-02-27 01:55:47 +01:00
Daniel
e5d610e5e4
feat: Add Parse Server option resetPasswordSuccessOnInvalidEmail to choose success or error response on password reset with invalid email ( #7551 )
2023-02-24 20:30:48 +01:00
Daniel
f3bcc9365c
feat: Access the internal scope of Parse Server using the new maintenanceKey; the internal scope contains unofficial and undocumented fields (prefixed with underscore _) which are used internally by Parse Server; you may want to manipulate these fields for out-of-band changes such as data migration or correction tasks; changes within the internal scope of Parse Server may happen at any time without notice or changelog entry, it is therefore recommended to look at the source code of Parse Server to understand the effects of manipulating internal fields before using the key; it is discouraged to use the maintenanceKey for routine operations in a production environment; see [access scopes]( https://github.com/parse-community/parse-server#access-scopes ) ( #8212 )
...
BREAKING CHANGE: Fields in the internal scope of Parse Server (prefixed with underscore `_`) are only returned using the new `maintenanceKey`; previously the `masterKey` allowed reading of internal fields; see [access scopes](https://github.com/parse-community/parse-server#access-scopes ) for a comparison of the keys' access permissions (#8212 )
2023-01-08 22:02:12 +01:00
Daniel
6c79f6a69e
feat: Add request rate limiter based on IP address ( #8174 )
2023-01-06 13:39:02 +01:00
Manuel
892040dc2f
fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x]( https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x ) ( #8372 )
...
BREAKING CHANGE: The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option `trustProxy` accordingly if Parse Server runs behind a proxy server, see the express framework's [trust proxy](https://expressjs.com/en/guide/behind-proxies.html ) setting (#8372 )
2023-01-05 14:26:54 +01:00
Daniel
ee7246733d
feat: Upgrade Node Package Manager lock file package-lock.json to version 2 ( #8285 )
...
BREAKING CHANGE: The Node Package Manager lock file `package-lock.json` is upgraded to version 2; while it is backwards with version 1 for the npm installer, consider this if you run any non-npm analysis tools that use the lock file (#8285 )
2022-12-22 13:26:38 +01:00
Daniel
99fcf45e55
feat: Asynchronous initialization of Parse Server ( #8232 )
...
BREAKING CHANGE: This release introduces the asynchronous initialization of Parse Server to prevent mounting Parse Server before being ready to receive request; it changes how Parse Server is imported, initialized and started; it also removes the callback `serverStartComplete`; see the [Parse Server 6 migration guide](https://github.com/parse-community/parse-server/blob/alpha/6.0.0.md ) for more details (#8232 )
2022-12-21 15:30:13 +01:00
alljinx
8f3b694e39
feat: Add option to change the log level of the logs emitted by triggers ( #8328 )
2022-12-07 22:55:45 +01:00
Daniel
ab82635b0d
fix: Parse Server option masterKeyIps does not include localhost by default for IPv6 ( #8322 )
2022-11-25 23:19:14 +01:00
dblythy
ed499e32a2
feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true ( #8283 )
...
BREAKING CHANGE: The Parse Server option `enforcePrivateUsers` is set to `true` by default; in previous releases this option defaults to `false`; this change improves the default security configuration of Parse Server (#8283 )
2022-11-16 22:59:44 +01:00
