Commit Graph

132 Commits

Author SHA1 Message Date
saparatayev 70ead6e42e fix:login not worked - auth configs has to be set 2021-09-04 10:59:34 +05:00
saparatayev 65af9bb8e0 timzone settings 2021-08-30 17:47:27 +05:00
saparatayev 44c7f8cb64 fix 3 database.php 2021-08-20 15:51:44 +05:00
saparatayev 1d41c57398 fix 2 database.php 2021-08-20 15:38:37 +05:00
saparatayev e117b5aa84 fix database.php file 2021-08-20 15:36:36 +05:00
saparatayev ce4893d65e added env file 2021-08-19 15:19:09 +05:00
saparatayev 5ffda7d0fb fix timezone bugs 2021-07-23 12:14:20 +05:00
saparatayev 3c6557d9b8 sending messages 2021-06-29 17:03:18 +05:00
merdan 25d8b45b27 first initial commit 2021-06-04 11:26:26 +05:00
Alwin Drenth 675a90daa1
Improve configuration files (#5544)
* Improve config indentation

* Add missing new lines in config

* Add trailing comma to cms configuration file
2021-03-24 16:55:28 +11:00
Samuel Georges 848e99b59b Pump the gas on trusted hosts
Although a nice idea, this is an overreach of the platform's area of concern and we will come up with a better solution for it soon
2021-03-06 08:42:02 +11:00
Ben Thomson 555ab61f23
Add app.trustedHosts config and force host checks on password reset (#5423)
Add app.trustedHosts config and force host checks on backend password reset.

Related: f29865ae3d
2021-01-04 12:35:47 -06:00
Ayumi df4c2cf86e
Default session.same_site to Lax (#5293) 2020-10-12 12:10:17 -06:00
Jukka d4ac1595ad
Update auth.php (#5289)
typo fix
2020-09-29 11:56:51 -06:00
Luke Towers 444069da00 Finished implement imageWidth & imageHeight filters 2020-08-21 13:39:45 -06:00
Luke Towers ca386e2dd1 tweak to default config for resized disk 2020-08-14 15:46:06 -06:00
Luke Towers b4dd25534e Merge branch 'develop' into wip/image-resizing 2020-08-09 04:26:48 -06:00
Luke Towers f56d1eebe8 Further work on the new resizing functionality 2020-08-06 18:18:28 -06:00
Luke Towers 1aab58d1e4 Merge branch 'develop' into wip/laravel-6 2020-07-19 01:35:37 -06:00
Luke Towers 5a5208bd0b Document caveat with uploaded file URL generation when installing October in a subfolder
Fixes #5204
2020-07-19 01:08:01 -06:00
Ben Thomson 4fb4e318f1
Add "develop.allowDeepSymlinks" configuration option.
Refs: https://github.com/octobercms/library/pull/491
2020-07-14 12:25:35 +08:00
Luke Towers e7b6917ad5
Update config/app.php 2020-06-22 21:58:08 -06:00
Ben Thomson 0317ecec3c
Add app.loadDiscoveredPackages config item
Refs: https://github.com/octobercms/library/pull/492
2020-06-23 10:40:36 +08:00
Ben Thomson 8c61985114 Merge branch 'develop' into wip/laravel-6 2020-03-16 17:13:42 +08:00
Marc Jauvin 6c391b5e82
Add config for throttling login attempts into Backend (#4974) 2020-03-11 10:57:19 +08:00
Samuel Georges f7ef665af3 Set default logging to single, remove dusk config 2020-02-27 20:07:41 +11:00
Ben Thomson 3591f38cd4 Add `predis` client as default in config 2020-02-27 16:39:25 +08:00
Ben Thomson a5db9e3257 Add new supported filesystems to config 2020-02-26 16:56:40 +08:00
Ben Thomson 65c3a88179
[Laravel 6] Add support for Laravel Dusk tests (#4919) 2020-02-03 12:21:04 +08:00
Luke Towers f700e236d1
Merge branch 'develop' into wip/laravel-6 2020-01-27 12:06:45 -06:00
Luke Towers a04494e63d Add warning message to app.locale config 2020-01-27 12:04:52 -06:00
Ben Thomson 6aeb079f8b Add support for Postmark mail transport configuration 2020-01-23 12:28:17 +08:00
Ben Thomson 12f5c1794e
Use default October log path for system logs 2020-01-21 08:29:48 +08:00
Ben Thomson 86351cec7f Revert "Add Composer scripts"
This reverts commit a1cfc2aa58.
2020-01-20 16:14:00 +08:00
Ben Thomson a1cfc2aa58 Add Composer scripts 2020-01-20 16:08:15 +08:00
Ben Thomson b2d2d34c10
Fix code quality errors 2020-01-20 12:40:10 +08:00
Ben Thomson 5d3d4ad0b2
Merge branch 'develop' into wip/laravel-5.9 2020-01-18 21:00:40 +08:00
Samuel Georges e3b42b2f10 Make cms.backendForceSecure an explicit setting
This no longer hinges on app.debug because it creates confusion for devops engineers. This is based on three independent reports coming from app environments that use a reverse proxy. The engineer will follow the proper security instructions by disabling debug mode, which in turn creates an infinite redirect loop when opening the back-end area, only to leave them scratching their heads

Ultimately it is the web server configuration's job to handle the enforcement of HTTPS, the app no longer enforces it as a strong opinion, but we still keep the setting available as a convenient security check for standard environments that do not use a reverse proxy
2020-01-18 18:05:26 +11:00
Samuel Georges 160ae441ff Shorten default string length
- Introduce varcharmax config item, this default eventually should be increased to 255, when MySQL 5.6 support is dropped
- Config item can be kept to retain legacy support
- Only apply to mysql driver, previously was impacting other drivers
- Source true config values, previously was sourcing hard coded "mysql" connection values
2019-12-29 11:43:27 +11:00
Samuel Georges bbed527ecc Supply engine as default config
This is currently supplied by the blueprint. This commit is a proactive step to move to config instead. Consider removing from this from blueprints in later years:

$table->engine = 'InnoDB';
2019-12-29 10:14:49 +11:00
Ayumi 56eab50260 Documented session.http_only (#4743)
Credit to @ayumi-cloud
2019-12-14 11:14:23 -06:00
Ben Thomson 7e3136564f
Merge branch 'develop' into wip/laravel-5.9 2019-11-21 23:18:25 +08:00
Samuel Georges 8da798a5cd Remove XSRF cookie
This was a contentious change is generally a bad idea to blanket all requests with a dependant cookie. We will try something else.

Revert enableXsrfCookies setting. Fixes UX issue introduced where the token expires. This should be replaced by a CSRF policy that determines whether this is needed on the front end.
2019-11-04 09:06:05 +11:00
Luke Towers 76db3355e6 Merge branch 'develop' of https://github.com/octobercms/october into develop 2019-10-30 08:09:07 -06:00
Luke Towers 959b85f56c Add cms.enableXsrfCookies config value (default true) to configure whether or not the XSRF cookie is automatically sent or if CSRF tokens are solely relied on.
Related: https://github.com/octobercms/october/pull/4701#issuecomment-547773385 & https://github.com/laravel/framework/pull/24726
2019-10-30 08:08:54 -06:00
Jan Boech cc9b48975d Typo in "Automatically run migrations on login" (#4727)
Credit to @najbo.
2019-10-30 16:57:47 +08:00
Ben Thomson 6099312c0d
Disable CSRF in unit tests 2019-10-07 14:13:02 +08:00
Burak Özdemir 64d02b77cc Added Mailgun endpoint to services config (#4667)
Fixes #3846. Credit to @ozdemirburak.
2019-10-06 19:27:10 -06:00
morph85 811b431474 Added support for SparkPost mail configuration (#4151)
Credit to @morph85
2019-09-25 10:28:17 -06:00
Luke Towers 02d894f52b Fix use of Storage::url() for local disks that haven't been configured correctly. Fixes #4581 2019-09-02 12:33:36 -06:00