Donal McBreen 13e2c74929 Restrict bearer token authentication to JSON requests ...

Bearer tokens are for API/SDK/CLI access — they should only
authenticate JSON requests.

2026-04-01 08:55:04 +01:00

..

account

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

boards

Add JSON response format to entropy endpoints (#2673)

2026-03-10 11:31:00 -04:00

cards

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

columns

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

concerns

Restrict bearer token authentication to JSON requests

2026-04-01 08:55:04 +01:00

events

More robust implementation to prevent method injection attacks

2025-11-21 10:38:16 +01:00

filters

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

my

Rename create_options to registration_options

2026-03-25 17:26:49 +01:00

notifications

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

prompts

Omit inactive users from board mention picker

2026-02-03 18:42:15 -05:00

public

Filter draft cards from public closed column (#2667)

2026-03-05 20:31:41 -05:00

searches

Remove anemic concern

2025-11-03 15:27:12 +01:00

sessions

Rename request options to authentication options

2026-03-25 17:26:49 +01:00

signups

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

users

Wrap params coverage nits (#2681)

2026-03-09 21:53:43 -07:00

webhooks

Add JSON response format to webhooks (#2671)

2026-03-09 17:33:30 -04:00

admin_controller.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

application_controller.rb

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

boards_controller.rb

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

cards_controller.rb

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

client_configurations_controller.rb

Implement ClientConfigurationsController for mobile client path config.

2026-02-24 11:25:07 +01:00

events_controller.rb

Remove unnecessary filtering code

2025-10-03 10:56:34 +02:00

filters_controller.rb

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

join_codes_controller.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller.rb

Ensure the flash notice passes through the redirect

2025-12-20 18:04:56 -06:00

notifications_controller.rb

Lower the number of returned unread notifications

2025-12-10 09:23:52 +01:00

pwa_controller.rb

Fix authentication on "untenanted" controllers

2025-11-17 09:11:47 -05:00

qr_codes_controller.rb

Add padding to QR code images

2026-01-29 09:57:52 +01:00

searches_controller.rb

Add JSON response format for full SDK/CLI coverage (#2675)

2026-03-09 11:39:49 -07:00

sessions_controller.rb

Rename request options to authentication options

2026-03-25 17:26:49 +01:00

signups_controller.rb

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

tags_controller.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller.rb

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00

webhooks_controller.rb

Add explicit wrap_parameters to all controllers (#2680)

2026-03-09 21:47:05 -07:00