Donal McBreen 13e2c74929 Restrict bearer token authentication to JSON requests ...

Bearer tokens are for API/SDK/CLI access — they should only
authenticate JSON requests.

2026-04-01 08:55:04 +01:00

..

authentication

Use same constant for fake magic links

2025-12-19 19:21:58 +01:00

authentication.rb

Restrict bearer token authentication to JSON requests

2026-04-01 08:55:04 +01:00

authorization.rb

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

block_search_engine_indexing.rb

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

board_scoped.rb

Ensure only admins/creators can publish boards

2025-11-12 11:48:35 +01:00

card_scoped.rb

Add hotkeys for triaging cards in columns

2025-12-19 14:33:47 -06:00

column_scoped.rb

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

current_request.rb

Aesthetics

2025-10-29 13:37:14 +01:00

current_timezone.rb

Mark for upstreaming

2025-10-29 13:41:11 +01:00

day_timelines_scoped.rb

Support filter by collection in different screens

2025-08-21 14:19:13 +02:00

filter_scoped.rb

Refactor: Replace reverse_merge with with_defaults for improved readability

2025-12-14 14:22:06 -03:00

request_forgery_protection.rb

Remove redundant insecure context CSRF check

2026-02-18 14:06:46 -05:00

routing_headers.rb

Add routing header to see who served request

2025-11-17 09:12:41 -05:00

set_platform.rb

Use x_user_agent cookie for platform detection in Hotwire Native

2026-03-10 15:34:05 +00:00

turbo_flash.rb

Prefer templates for turbo streams in all but the very simplest cases

2025-11-02 20:20:01 +01:00

view_transitions.rb

We need to upstream this fix to turbo-rails

2025-10-29 13:47:51 +01:00