Andras Bacsai 66dc1515d4 fix(security): prevent snapshot replay in API token permission checks ... Never trust Livewire component properties for authorization decisions, as snapshots can be replayed from another user's session. Re-evaluate all permission checks fresh using auth()->user()->can() against current policies to ensure the authenticated user is being authorized, not a replayed copy. - Replace cached canUse* booleans with fresh policy evaluation - Add comprehensive security tests for token creation permissions - Update API authorization tests to verify middleware blocking behavior		2026-02-27 22:58:44 +01:00
..
PrivateKey	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ApiTokens.php	fix(security): prevent snapshot replay in API token permission checks	2026-02-27 22:58:44 +01:00
CloudInitScriptForm.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
CloudInitScripts.php	feat: add cloud-init scripts management UI in Security section	2025-10-11 12:42:09 +02:00
CloudProviderTokenForm.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
CloudProviderTokens.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
CloudTokens.php	init of cloud providers	2025-10-08 20:47:50 +02:00