vignesh/trypost
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trypost/app/Http/Controllers/Auth
History
Paulo Castellano 6c47bac1b8 fix(members): preserve invited role on accept and surface viewer in role menu 
AcceptInviteController attached invited users with a hardcoded member role,
ignoring the invite's role entirely (a viewer invite joined as member). Use the
invite's role on accept, require role on invite creation (no silent default),
and drop the role from the request/CreateInvite defaults. Add the Viewer option
to the member role dropdown (now iterates all roles), hide the dropdown on the
current user's own row, and require the member's email to confirm removal.
Covered by tests asserting the accepted role matches the invited role for
viewer/admin/member, plus invite role validation.
2026-06-22 14:24:19 -03:00
..
Concerns feat: capture signup UTMs/IP and add GitHub OAuth login 2026-05-04 18:42:25 -03:00
AcceptInviteController.php fix(members): preserve invited role on accept and surface viewer in role menu 2026-06-22 14:24:19 -03:00
AuthenticatedSessionController.php fix: security audit - IDOR, open redirect, authorization, session fixes 2026-03-30 14:58:25 -03:00
BlueskyController.php feat: per-workspace pricing, onboarding, and billing overhaul 2026-06-21 20:40:03 -03:00
DiscordController.php feat(channels): add Discord as a social channel 2026-06-16 14:44:00 -03:00
EmailVerificationNotificationController.php refactor: restructure to Actions, subdomain routes (app/api), API tokens 2026-03-29 19:24:28 -03:00
EmailVerificationPromptController.php refactor: restructure to Actions, subdomain routes (app/api), API tokens 2026-03-29 19:24:28 -03:00
FacebookController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00
GitHubController.php revert: keep one OAuth callback URL per provider 2026-05-04 19:42:13 -03:00
GoogleController.php revert: keep one OAuth callback URL per provider 2026-05-04 19:42:13 -03:00
InstagramController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00
InstagramFacebookController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00
LinkedInController.php fix: address PR review findings 2026-06-22 12:53:13 -03:00
LinkedInPageController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00
MastodonController.php feat: per-workspace pricing, onboarding, and billing overhaul 2026-06-21 20:40:03 -03:00
NewPasswordController.php feat: improvements on invites 2026-01-20 16:53:54 -03:00
PasswordResetLinkController.php feat: improvements on invites 2026-01-20 16:53:54 -03:00
PinterestController.php refactor: remove debug logging from social OAuth controllers 2026-05-14 11:23:40 -03:00
RegisteredUserController.php chore: remove unused Pennant package and dead user-timezone handling 2026-06-22 13:37:38 -03:00
SignupSuccessController.php chore: tracking, gtm and more 2026-03-30 21:32:43 -03:00
SocialController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00
TelegramController.php feat: per-workspace pricing, onboarding, and billing overhaul 2026-06-21 20:40:03 -03:00
ThreadsController.php refactor: address code review for per-workspace pricing 2026-06-21 21:28:47 -03:00
TikTokController.php refactor: remove debug logging from social OAuth controllers 2026-05-14 11:23:40 -03:00
VerifyEmailController.php refactor: restructure to Actions, subdomain routes (app/api), API tokens 2026-03-29 19:24:28 -03:00
XController.php feat: redesign accounts page with multi-account support 2026-04-14 19:48:35 -03:00
YouTubeController.php chore: remove vestigial onboarding OAuth flag and legacy plan env vars 2026-06-22 13:54:42 -03:00