lly/umami
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,515 Commits 1 Branch 0 Tags
8b9f31c77cf60928636d99952f65ddcfad973786
Commit Graph
38 Commits
Author SHA1 Message Date
Francis Cao 3888ec6f4f Allow legacy stateless tokens that were minted without a password fingerprint. 2026-06-23 13:24:55 -07:00
Francis Cao 9defe7e3e0 Only enforce password-change invalidation for sessions that include a password fingerprint. 2026-06-23 00:27:44 -07:00
Francis Cao 727490269b Invalidate auth sessions after password changes 2026-06-22 23:31:12 -07:00
Francis Cao 2e74b3ebae sanitize logging of sensitive info. 2026-06-22 23:03:01 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Francis Cao 9d477b25b4 Fix share page permissions 2026-04-15 14:55:28 -07:00
Francis Cao 8f55ed9da9 security advisory fixes opened by kolega-ai-dev 2026-01-22 09:24:08 -08:00
Mike Cao fa8d8055df Reformatted files with biome. 2025-11-22 22:42:42 -08:00
Mike Cao 5c9f97182e Removed grant checks. 2025-09-22 13:57:42 -07:00
Mike Cao 9897c725de Updated cloud mode checks. 2025-09-22 13:09:07 -07:00
Mike Cao baba06c692 Added lib/password. Small tweaks. 2025-09-13 09:40:20 -07:00
Mike Cao 303947fe9b Fixed uuid references in schemas. 2025-09-08 15:28:01 -07:00
Mike Cao 0d19e9a247 Fixed outputs. 2025-09-01 16:17:55 -07:00
Mike Cao 56af91950a Updated components build. 2025-09-01 15:59:06 -07:00
Mike Cao 247e14646b Pixel/links development. New validations folder. More refactoring. 2025-08-14 23:48:11 -07:00
Mike Cao bf6c9395c6 Revert Prisma build. 2025-07-12 15:18:01 -07:00
Mike Cao ce1f6c3618 New admin section. 2025-07-08 18:40:47 -07:00
Mike Cao fb7f671b32 Upgraded Prisma v6.10.1. 2025-06-18 22:13:51 -07:00
Mike Cao 49bcbfd7f9 New goals page. Upgraded prisma. 2025-05-31 02:11:18 -07:00
Mike Cao 4d6ec631f7 Updated redis logic. 2025-02-10 21:07:18 -08:00
Mike Cao 8525188e42 Changed import path. 2025-02-05 15:59:59 -08:00
Mike Cao 113022ed17 Imported libraries, removed next-basics. 2025-02-05 13:30:28 -08:00
Mike Cao baa3851fb4 Convert /api/users. 2025-01-21 19:10:34 -08:00
Mike Cao 62a8b29453 Updated redis calls. 2024-12-11 19:43:23 -08:00
Raye Evtuch 0988808b75 Allow team managers to transfer websites to teams 2024-08-04 20:31:53 -05:00
Mike Cao 2832ff9622 Always fetch website directly. 2024-02-19 18:30:44 -08:00
Mike Cao a3f7382673 Added additional logic for handling website transfers. 2024-02-10 23:47:26 -08:00
Mike Cao d99fb09c37 Website transfer. 2024-02-09 19:37:45 -08:00
Brian Cao 5a8543fd25 Add version. 2024-02-01 13:35:34 -08:00
Brian Cao 80883b5ff1 Update api for new teams. 2024-01-26 11:28:16 -08:00
Mike Cao f85393f8df Teams refactor: removed team websites. 2024-01-25 23:20:53 -08:00
Mike Cao 66d7a815fc Fixed websites query. 2023-12-03 22:49:30 -08:00
Brian Cao 467790b67a Open /websites endpoint to view all. 2023-12-03 19:52:40 -08:00
Mike Cao f7dd0464e0 Updated redis calls. 2023-11-27 20:47:35 -08:00
Mike Cao 4dedc57d0a Updated clients. 2023-11-22 18:03:48 -08:00
Brian Cao f794b5674b Update team/website permission check. 2023-08-23 11:26:41 -07:00
Brian Cao 280f6a9113 Add grant to create website/team. 2023-08-22 15:37:22 -07:00
Mike Cao ede658771e Moved code into src folder. Added build for component library. 2023-08-21 02:06:09 -07:00