pterodactyl/panel
1
0
Fork 0
mirror of https://github.com/pterodactyl/panel.git synced 2026-06-12 23:31:53 -05:00
Code Issues Packages Projects Releases 128 Wiki Activity
4,722 Commits 12 Branches 135 Tags
develop
Commit Graph

408 Commits

Author SHA1 Message Date
Dane Everitt
7ffcd63631 Attach a scope(s) to JWTs created by the panel (#5636) 
Necessary for proper token identification on Wings.
 2026-05-23 11:15:36 -07:00
Mackenzie Molloy
7576d0d08e Added support for viewing and deleting of any Application API Keys (#5176) 
This PR closes Issue #5175.

For context, I am aware that Application API Keys are deprecated in
favour of Client API Keys however they are still operational within
Pterodactyl and thus, not fully removed.

Currently in Pterodactyl, as an Admin, you can only view your
Application API Keys on the Admin Panel. In this PR, I made it so all
Application Keys are visible and deletable. The key strings are
obfuscated if the key does not belong to the user viewing.


![image](https://github.com/user-attachments/assets/9edb2533-d99c-4ec3-80cc-25630fd48594)

The reason for adding this is primarily so other admin users can be
aware of and delete another admin user's Application API keys from the
UI. This functionality is useful in the event of a malicious user
compromising an admin account, creating some API Keys to continue their
attacks and the owner of the compromised admin account being unaware of
Application API Keys. In this instance, even after a password reset, the
attack could continue via the Application API without the admin
realising it.

I've tested the creation and deleting of keys along with using keys via
the Application API to ensure no breakages have occurred.

---------

Co-authored-by: DaneEveritt <dane@daneeveritt.com>
 2026-02-11 16:03:35 -08:00
Mackenzie Molloy
238d371352 Feature: Sort Users on Admin/Users by Administrators first (#5098) 2026-01-04 11:12:55 -08:00
Dane Everitt
0917e60a3b Return correct error message when deleting self, add test coverage (#5456) 2025-12-24 16:13:31 -08:00
Dane Everitt
a264791fd4 Update PHP and JS dependencies to latest versions and modernize codebase (#5446) 2025-12-20 15:55:13 -08:00
Matthew Penner
8ca098940a chore: update composer dependencies (#5198) 
Signed-off-by: Matthew Penner <me@matthewp.io>
 2024-10-21 19:18:20 -06:00
Matthew Penner
f671046947 admin: tweaks to validation and rendering 2024-04-10 18:13:25 -06:00
Matthew Penner
1d38b4f0e2 Laravel 10 (#4706) 2023-02-23 12:30:16 -07:00
Matthew Penner
4626118d77 app: fix remaining email config keys 2022-12-12 14:31:49 -07:00
Matthew Penner
df2402b54f Streaming Transfers (#4548) 2022-11-14 18:25:07 -07:00
Lance Pioch
548affba84 Fix linting (#4504) 2022-10-29 17:58:55 -06:00
Lance Pioch
e49ba65709 Fix config key names (#4464) 2022-10-23 18:51:20 -06:00
Matthew Penner
cbcf62086f Upgrade to Laravel 9 (#4413) 
Co-authored-by: DaneEveritt <dane@daneeveritt.com>
 2022-10-14 10:59:20 -06:00
Matthew Penner
815e1e4c4d Ensure server is not in a conflicting state before initiating a transfer (#4403) 2022-10-04 19:57:24 -06:00
Matthew Penner
68e9100e57 admin(eggs): add force_outgoing_ip option (#4323) 
Closes #3841
 2022-09-25 13:24:54 -06:00
DaneEveritt
43156e8d53 Improve error messaging for validation exceptions 2022-06-26 16:31:48 -04:00
DaneEveritt
8771597560 Fix database deletion; closes #4114 
Co-Authored-By: Dawid <minerpl03@gmail.com>
 2022-06-05 13:28:46 -04:00
DaneEveritt
4213775b5c Fix mounting behavior to work correctly when adding to a server 2022-05-30 11:33:42 -04:00
DaneEveritt
c8faf64059 Support naming docker images on eggs; closes #4052 
Bumps PTDL_v1 export images to PTDL_v2, updates the Minecraft specific eggs to use named images.
 2022-05-07 17:45:22 -04:00
DaneEveritt
530558b0f8 Update deprecated JSON response creation and unnecessary middleware 2022-05-04 19:23:01 -04:00
Alex
28f7a809a5 fix: exception localization (#3850) 
resolves #3849
 2022-01-15 08:10:37 -08:00
Dane Everitt
00da092e45 Fix tests 2021-01-30 19:12:22 -08:00
Dane Everitt
0a2c89e9f4 Reeformat with new rules post merge 2021-01-25 19:20:51 -08:00
Dane Everitt
663143de0b Merge branch 'develop' into dane/restore-backups 2021-01-25 19:16:40 -08:00
Dane Everitt
b480a9e4e2 Make php-cs-fixer work in phpstorm 2021-01-23 13:44:35 -08:00
Dane Everitt
c449ca5155 Use more standardized phpcs 2021-01-23 12:33:34 -08:00
Dane Everitt
a043071e3c Update to Laravel 8 
Co-authored-by: Matthew Penner <me@matthewp.io>
 2021-01-23 12:12:54 -08:00
Dane Everitt
a75a347d65 Remove suspended & installing fields, replace with single status field 2021-01-17 15:51:56 -08:00
Dane Everitt
a2548c14ac Fix logic since this accepts arrays now 2020-12-24 10:12:01 -08:00
Matthew Penner
5c5e2e24f1 📯 tRaNsFeR lOgS 📯 2020-12-17 10:35:54 -07:00
Matthew Penner
e6c4a68e4a Update logic for tracking a server's transfer state 2020-12-17 10:35:54 -07:00
Dane Everitt
638ea2e815 Support creating/updating docker images on eggs 2020-12-13 10:13:32 -08:00
Dane Everitt
78c4ac80bc Basic implemention of multiple selectable images for an egg 
The admin side of this is quite ugly when creating/editing a server, but I'm not putting effort into that right now with React Admin soon™
 2020-12-13 09:53:17 -08:00
Dane Everitt
b482632af4 Remove unnecessary calls to Wings to add/remove mounts 2020-11-02 19:58:14 -08:00
Dane Everitt
092c942764 Fix server owner filtering; improve searching for servers; closes #2581 2020-10-25 17:29:57 -07:00
Matthew Penner
66b9169458 Cleanup code in MountController.php, again. 2020-10-17 14:42:08 -06:00
Matthew Penner
050075b835 Cleanup code in MountController.php 2020-10-17 14:37:35 -06:00
Matthew Penner
f7520b721b Deny /etc/pterodactyl as a source path for mounts 2020-10-17 14:29:29 -06:00
Matthew Penner
c52c5d6736 Deny certain paths for mounts 2020-10-17 14:28:02 -06:00
Matthew Penner
3ef3c2a461 Remove commented code 2020-10-12 11:12:23 -06:00
Matthew Penner
abd60ee6f8 Fix 500 error when mounting a mount and fix the actual mount being deleted instead of the relation 2020-10-12 11:11:40 -06:00
Dane Everitt
8697185900 Fix up database creation and handling code for servers; ref #2447 2020-10-11 11:59:46 -07:00
Dane Everitt
7b0f998f0b Return the correct server & subuser counts for user listing; closes #2469 2020-10-10 18:06:42 -07:00
Dane Everitt
1f28fb94e2 Ensure the UUID is set correctly; closes #2450 2020-10-10 17:11:27 -07:00
Dane Everitt
2560163655 Modify how deletion service works (actually fixes #2085); cover changes with test 2020-10-08 21:08:55 -07:00
Dane Everitt
83efb2d7b6 More fixes for broken unit tests 2020-10-05 21:54:29 -07:00
Dane Everitt
0c2bd416ee Fix unit tests for eggs 2020-10-05 21:29:35 -07:00
Dane Everitt
2d56cacbab Don't trigger a 500 error with bad data; closes #2442 
This whole chunk of code needs some cleanup but I'll defer that for the new admin area in the future
 2020-10-03 19:05:04 -07:00
Dane Everitt
99c9682f67 Fix errors with mounts; closes #2374 2020-10-03 12:42:27 -07:00
Dane Everitt
7f9b21e486 Correctly show number of servers a user belongs to; closes #2375 2020-09-22 20:13:54 -07:00