snipe
0d745ad10f
Added view composer forn sidebar counts, removed sidebar middleware
2026-05-29 01:30:34 +01:00
snipe
19f70656ee
Move API singletons from SettingServiceProvider into middleware
2026-05-13 22:20:46 +01:00
Brady Wetherington
c7afcf0bef
Fix returning to intended URL on 2-factor success (or enrollment success)
2026-04-27 14:59:32 +01:00
snipe
a88ad35b68
Added token name and ID
2026-04-09 19:35:09 +01:00
snipe
6e60f59265
Changed the name because reasons
2026-04-09 19:24:11 +01:00
snipe
a866bfafcd
Oh ffs pint
2026-04-09 19:23:29 +01:00
snipe
97d1677568
Check for bearer token in header
2026-04-09 19:23:21 +01:00
snipe
f4562db0c0
Pint
2026-04-09 19:19:56 +01:00
snipe
a616da3e5c
Moved to an API-only header
2026-04-09 19:19:50 +01:00
snipe
a895566b02
Pint fixes
2026-04-09 19:09:32 +01:00
snipe
5d75765aae
Optionally log the user’s ID in the header
2026-04-09 19:09:21 +01:00
snipe
ec6caf9b59
Apply pint to Middleware directory
2026-03-13 16:53:11 +00:00
snipe
0204414196
Handle /setup link colors via middleware
2025-12-05 10:55:49 +00:00
snipe
6a99132e76
More tweaks
2025-12-02 13:29:12 +00:00
snipe
6b87c90e02
Use scope for assets for show in sidebar
...
Signed-off-by: snipe <snipe@snipe.net >
2025-09-08 13:33:19 +01:00
snipe
9253d894d3
Removed XSS-Protection header
...
@see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection#security_considerations
Signed-off-by: snipe <snipe@snipe.net >
2025-08-18 13:30:53 +01:00
snipe
7bc4127e8c
Removed dupe header
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-27 15:01:54 +01:00
snipe
06158cc413
Add timestamp header
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-27 14:58:57 +01:00
snipe
cb49e7c9a6
Updated comments
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-27 14:32:47 +01:00
snipe
1822027a8f
Extend the built-in ThrottleRequests middleware from Laravel
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-27 14:04:24 +01:00
snipe
f2b10eeee8
Re-do the initial change :(
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-27 13:00:32 +01:00
snipe
b3813a7121
Refactorered limiting headers
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-26 13:48:50 +01:00
snipe
293648582a
Improvements to API headers
...
Signed-off-by: snipe <snipe@snipe.net >
2025-05-26 10:52:14 +01:00
snipe
4d9e85026a
Fixed #15439 - check database on healthcheck
...
Signed-off-by: snipe <snipe@snipe.net >
2024-10-02 15:36:01 +01:00
snipe
09abcb44bb
Remove cookie serialization
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-22 13:49:47 +01:00
snipe
eed253bd2f
Use app helped instead of facade
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-13 15:15:18 +01:00
snipe
498a443230
Derp
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-11 12:01:06 +01:00
snipe
34b49ef079
Fixed typo
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-11 11:59:47 +01:00
snipe
e98823f7fa
Added 403 to sad panda page
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-05 11:54:49 +01:00
snipe
ae9085b11f
Modernize use statements, switch to auth()
...
Signed-off-by: snipe <snipe@snipe.net >
2024-07-04 20:49:22 +01:00
snipe
9a0db72eb4
More strings
...
Signed-off-by: snipe <snipe@snipe.net >
2024-06-20 15:40:38 +01:00
snipe
69cf697aa3
Added 2fa translation string
...
Signed-off-by: snipe <snipe@snipe.net >
2024-06-20 15:20:52 +01:00
snipe
fb233c0aa4
Cleaned up facade names and references
...
Signed-off-by: snipe <snipe@snipe.net >
2024-05-29 12:38:15 +01:00
Brady Wetherington
f633dbba64
Merge branch 'develop' into snipeit_v7_laravel10
2024-05-20 12:55:29 +01:00
snipe
ca1555d962
Fixed #14664 - allow additional urls in env for CSP
...
Signed-off-by: snipe <snipe@snipe.net >
2024-05-16 22:19:18 +01:00
Jeremy Price
2adc4ffa96
Fix memory-hog query in AssetCountForSidebar middleware
...
https://github.com/snipe/snipe-it/pull/14702/files introduced a bug
where instead of doing a quick `select count(*)` of assets, it did a `select *` of
assets, moving the count from the database to the PHP process.
This caused OOM issues in memory-constrained environments with lots of
assets, and also presented a speed issue even when memory limited were
increased.
Additionally, given this populates the sidebar, this was likely an issue
on every page load that included the sidebar.
The fix is simply removing the `all()->`, ending up with Asset::count(),
which yields the desired `select count(*)` DB query.
2024-05-10 12:54:40 -07:00
Tobias Regnery
b2a5d86e30
Fixes #14701 - wrong total asset count
...
The total asset count in the sidenav shows the ready to deploy count instead of the total count.
Fix this by adjusting the query to all assets. Also respect the setting for archived assets.
Add a default value for total assets, since we are now using the settings-variable, which is not available during the setup process.
While at it, move the block for total assets before the ready to deploy assets to match the ordering of the sidenav.
Signed-off-by: Tobias Regnery <tobias.regnery@gmail.com >
2024-05-08 09:34:35 +02:00
snipe
4f12c86e74
Fixes #14692 - set default variables for sidebar totals
...
Signed-off-by: snipe <snipe@snipe.net >
2024-05-07 08:34:22 +01:00
Brady Wetherington
5b02a43957
Merge branch 'develop' into snipeit_v7_laravel10
2024-05-06 18:44:03 +01:00
snipe
4224bc0c43
Removed extra settings param
...
Signed-off-by: snipe <snipe@snipe.net >
2024-05-02 12:36:57 +01:00
snipe
860764a436
Use totals for sidebar
...
Signed-off-by: snipe <snipe@snipe.net >
2024-04-26 19:12:21 +01:00
snipe
2117f61e8c
More view sharing for sidebar
...
Signed-off-by: snipe <snipe@snipe.net >
2024-04-26 19:01:15 +01:00
snipe
dfaf01e8aa
Updated asset counters
...
Signed-off-by: snipe <snipe@snipe.net >
2024-04-26 14:02:47 +01:00
Brady Wetherington
65e21faa3e
Merge branch 'develop' into snipeit_v7_laravel10
...
Hopefully, last merge?
2024-04-02 20:34:04 +01:00
Brady Wetherington
a2e70dd6b2
Fix [sc-25008] - correct and improve legacy language warnings
...
The legacy language warning was misfiring when a user's language
didn't match the APP_LOCALE from .env.
Additionally, we weren't properly warning when the legacy-language
came from Settings or from the user themselves. Both of which should
be impossible but still probably not a bad idea to warn on it, anyways
2024-03-08 14:04:21 +00:00
snipe
19e0fb7955
Reverting CSP change
...
Signed-off-by: snipe <snipe@snipe.net >
2024-03-01 12:25:14 +00:00
snipe
93e69ab0c6
Removed unsafe-inline and unsafe-eval
...
Signed-off-by: snipe <snipe@snipe.net >
2024-03-01 11:44:49 +00:00
Brady Wetherington
f734e196e5
Merge branch 'develop' into snipeit_v7_laravel10
2024-01-08 18:57:55 +00:00
snipe
a5947b8109
Added warning in middleware
...
Signed-off-by: snipe <snipe@snipe.net >
2023-12-19 20:34:45 +00:00
snipe
db138479aa
Updated locale middleware for mapping
...
Signed-off-by: snipe <snipe@snipe.net >
2023-12-19 17:43:22 +00:00