Mir Arif Hasan
904a1b0405
chore: security patch for the dependency chain v2025.11.0 ( #5590 )
...
Bump dependencies and account for breaking changes.
---------
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-11-24 14:21:29 +05:30
Harshit Chandra
453b5fc088
feat: add configurable session cookie name ( #5425 )
...
Added support for overriding the default session cookie name using the `INFRA.SESSION_COOKIE_NAME` config or the `SESSION_COOKIE_NAME` environment variable. This helps compatibility with proxies or load balancers that cannot handle cookie names containing dots.
---
Co-authored-by: mirarifhasan <arif.ishan05@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-28 13:45:08 +05:30
Abhishek3880
dd8744f292
chore(backend): cleanup code quality issues ( #5466 )
...
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-27 21:13:43 +05:30
Mir Arif Hasan
cd084ebbb3
fix: ensure graceful shutdown and container stop when stopApp is called ( #5494 )
...
* fix: graceful shutdown handling for backend app
* chore: add startup delay to health check script
2025-10-21 19:39:39 +06:00
Mir Arif Hasan
a7440d58cd
fix: maintain incremental orderIndex for collections and requests ( #5338 )
...
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-08-27 13:33:27 +05:30
Léopold Jacquot
f430caa1c0
fix: correctly resolve client IP behind proxies ( #5323 )
2025-08-18 21:52:17 +05:30
Mir Arif Hasan
f5aee59448
chore: change session config ( #5289 )
2025-07-29 14:32:57 +05:30
Mir Arif Hasan
0b7d31a20c
feature: reduce .env usage and move configurations to admin dashboard ( #5194 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-07-28 16:46:30 +05:30
Mir Arif Hasan
37671ac9e7
chore(backend): prevent clear text transmission of sensitive cookie ( #5274 )
2025-07-28 16:18:38 +05:30
Binayak Bhattacharjee
9b0e1af92d
chore(backend): configure CORS for development and production environments ( #4430 )
...
Co-authored-by: mirarifhasan <arif.ishan05@gmail.com>
2025-05-14 12:29:24 +05:30
Mir Arif Hasan
46e5792965
chore: hoppscotch-backend code formatting, minor lint fixes, and refactoring ( #5061 )
...
* chore: prettier formatting applied
* chore: added some lint fixed
* fix: few lint errors
* chore: prisma and pubsub are now global module
* chore: add encapsulation consistency in service files
* chore: made a cast function private
* chore: cast function made private
* refactor: module imports
* refactor: posthog spelling
2025-05-09 15:37:20 +06:00
Mir Arif Hasan
783d911f8d
HSB-462 feat: infra token module and sh apis ( #4191 )
...
* feat: infra token module added
* feat: infra token guard added
* feat: token prefix removed
* feat: get pending invites api added
* docs: swagger doc added for get user invites api
* feat: delete user invitation api added
* feat: get users api added
* feat: update user api added
* feat: update admin status api added
* feat: create invitation api added
* chore: swagger doc update for create user invite
* feat: interceptor added to track last used on
* feat: change db schema
* chore: readonly tag added
* feat: get user by id api added
* fix: return type of a function
* feat: controller name change
* chore: improve token extractino
* chore: added email validation logic
---------
Co-authored-by: Balu Babu <balub997@gmail.com>
2024-07-29 12:36:18 +05:30
Mir Arif Hasan
54d8378ccf
fix: improve smtp email validation and fix enableAndDisableSSO mutation ( #3689 )
...
Co-authored-by: Balu Babu <balub997@gmail.com>
2023-12-22 20:37:15 +05:30
Mir Arif Hasan
6abc0e6071
HBE-326 feature: server configuration through GraphQL API ( #3591 )
...
* feat: restart cmd added in aio service
* feat: nestjs config package added
* test: fix all broken test case
* feat: infra config module add with get-update-reset functionality
* test: fix test case failure
* feat: update infra configs mutation added
* feat: utilise ConfigService in util functions
* chore: remove saml stuff
* feat: removed saml stuffs
* fix: config service precedence
* fix: mailer module init with right env value
* feat: added mutations and query
* feat: add query infra-configs
* fix: mailer module init issue
* chore: smtp url validation added
* fix: all sso disabling is handled
* fix: pnpm i without db connection
* fix: allowedAuthProviders and enableAndDisableSSO
* fix: validateSMTPUrl check
* feat: get api added for fetch provider list
* feat: feedback resolve
* chore: update code comments
* fix: uppercase issue of VITE_ALLOWED_AUTH_PROVIDERS
* chore: update lockfile
* fix: add validation checks for MAILER_ADDRESS_FROM
* test: fix test case
* chore: feedback resolve
* chore: renamed an enum
* chore: app shutdown way changed
---------
Co-authored-by: Andrew Bastin <andrewbastin.k@gmail.com>
2023-12-12 16:42:58 +06:00
Andrew Bastin
0e70c28324
feat: dynamically select which auth providers for your instance of hoppscotch (be implementation)
2023-08-03 20:12:54 +05:30
Andrew Bastin
15424903ed
fix: stop logging DATABASE_URL in logs
2023-06-04 23:33:32 -04:00
Balu Babu
2435436580
chore: changes origins to view whitelisted origins in backend ( #70 )
2023-04-06 14:04:04 +05:30
Balu Babu
a779ba5c0e
hotfix: adding dynamic redirection in self-host auth system (HBE-173) ( #40 )
...
* chore: completed base auth implementation with redirectUrl
* chore: completed base auth fix with redirect_uri
* chore: added whitelist based redirection
* chore: added a env variable for session secret in main.ts
* chore: removed migrations folder from prisma directory
2023-03-14 19:19:22 +05:30
Andrew Bastin
65719b560b
feat: introduce gql schema sdl generation to the backend ( #35 )
...
* feat: introduce gql schema sdl generation to the backend
* chore: update gql-codegen consumers to get schema from generated sdl
* chore: hoppscotch-backend generates gql sdl on postinstall
* fix: add back missed part of generate-gql-sdl script
* chore: updated generate sdl script to hardcode whitelisted domains
* chore: add prisma generate on postinstall script
---------
Co-authored-by: ankitsridhar16 <ankit.sridhar16@gmail.com>
2023-03-13 18:52:50 +05:30
Balu Babu
a6d6589811
chore: removed SIGNED_COOKIE_SECRET from cookieParser in main.ts and .env.example files
2023-02-08 14:18:39 +05:30
Balu Babu
a1be3a3e77
chore: added nestjs version into auth module
2023-02-01 19:19:39 +05:30
Balu Babu
a8d50223aa
refactor: changed auth module to work with signed cookies
2023-01-30 06:31:10 +05:30
Balu Babu
a6ad86bd59
chore: replaced hardcoded values with env variables in app.module.ts, main.ts and utils.ts
2023-01-20 07:56:19 +05:30
Balu Babu
fc284fd0a2
feat: magic-link auth complete
2023-01-10 16:06:42 +05:30
Balu Babu
c5466edf71
chore: cleaned up hopp-backend package and modified docker and docker-compose files
2022-12-08 22:19:14 +05:30
ankitsridhar16
333dbba393
chore: added docker files for bringing the container up
2022-12-06 13:18:02 +05:30
ankitsridhar16
75219d457a
feat: added hoppscotch-backend as a package
2022-12-05 12:36:11 +05:30