Commit Graph
36 Commits
Author SHA1 Message Date
3b6edcdd8e Chore: Add generic type params and update our baselines (#12566)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-13 14:12:59 -07:00
shamoonandGitHub 51e721733f Enhancement: validate and sanitize uploaded logos (#12551) 2026-04-10 11:50:58 -07:00
shamoon d3ac75741f Update serialisers.py 2026-03-18 07:09:51 -07:00
shamoon 4d4f30b5f8 Security: validate outbound llm URLs and block internal endpoints 2026-03-16 22:58:16 -07:00
shamoonandGitHub e940764fe0 Feature: Paperless AI (#10319) 2026-01-13 16:24:42 +00:00
Trenton HandGitHub d9a596d67a Fix: Expanded SVG validation whitelist and additional checks (#11590) 2025-12-12 20:04:04 +00:00
shamoonandGitHub 2a9d1fce0d Chore: include password validation on user edit (#11308) 2025-11-07 11:20:27 -08:00
shamoonandGitHub 521fd1c957 Fix: fix app logo validation with no file (#10599) 2025-08-17 07:19:50 -07:00
shamoonandGitHub b1c406680f Merge commit from fork
* Security: prevent XSS with storage path template rendering

* Security: prevent XSS svg uploads

* Security: force attachment disposition for logo

* Add suggestions from code review

* Improve SVG validation with allowlist for tags and attributes
2025-08-16 07:34:00 -07:00
shamoonandGitHub 73f0f1212d Fixhancement: better handle removed social apps in profile (#9876) 2025-05-11 19:55:33 +00:00
shamoonandGitHub 6a5be992c0 Enhancement: add barcode frontend config (#9742) 2025-05-11 19:44:06 +00:00
shamoonandGitHub 1dc80f04cb Feature: openapi spec, full api browser (#8948) 2025-02-10 16:43:07 +00:00
shamoonandGitHub 6f29d64325 Fix: allow empty email in profile (#9012) 2025-02-03 11:59:45 -08:00
shamoonandGitHub 79956d6a7b Enhancement: require totp code for obtain auth token (#8936) 2025-01-29 15:23:44 +00:00
shamoonandGitHub e94a92ed59 Feature: two-factor authentication (#8012) 2024-11-18 18:34:46 +00:00
shamoonandGitHub 0d49314593 Fix: exclude admin perms from group permissions serializer (#6608) 2024-05-07 14:39:31 +00:00
shamoon 7281c110c6 Fix: exclude admin perms from frontend 2024-04-13 20:12:54 -07:00
c508be6ecd Feature: OIDC & social authentication (#5190)
---------

Co-authored-by: Moritz Pflanzer <moritz@chickadee-engineering.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
2024-02-08 16:15:38 +00:00
shamoonandGitHub 2a6e79acc8 Feature: app branding (#5357) 2024-01-13 19:57:25 +00:00
shamoon b0aeec4c43 Fix: Coerce language app config field to None if empty 2024-01-10 13:21:51 -08:00
a12e1fae72 Fix: Don't require the JSON user arguments field (#5320)
* Allows new user args field to be null

* Coerce empty string to None for user_args JSONField

---------

Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
2024-01-08 13:14:36 -08:00
Trenton HandGitHub ea47af7034 Fixes the user arguments json field decoding (#5307) 2024-01-07 14:17:51 -08:00
061f33fb05 Feature: Allow setting backend configuration settings via the UI (#5126)
* Saving some start on this

* At least partially working for the tesseract parser

* Problems with migration testing need to figure out

* Work around that error

* Fixes max m_pixels

* Moving the settings to main paperless application

* Starting some consumer options

* More fixes and work

* Fixes these last tests

* Fix max_length on OcrSettings.mode field

* Fix all fields on Common & Ocr settings serializers

* Umbrellla config view

* Revert "Umbrellla config view"

This reverts commit fbaf9f4be30f89afeb509099180158a3406416a5.

* Updates to use a single configuration object for all settings

* Squashed commit of the following:

commit 8a0a49dd57
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 23:02:47 2023 -0800

    Fix formatting

commit 66b2d90c50
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 22:36:35 2023 -0800

    Refactor frontend data models

commit 5723bd8dd8
Author: Adam Bogdał <adam@bogdal.pl>
Date:   Wed Dec 20 01:17:43 2023 +0100

    Fix: speed up admin panel for installs with a large number of documents (#5052)

commit 9b08ce1761
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 15:18:51 2023 -0800

    Update PULL_REQUEST_TEMPLATE.md

commit a6248bec2d
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 15:02:05 2023 -0800

    Chore: Update Angular to v17 (#4980)

commit b1f6f52486
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 13:53:56 2023 -0800

    Fix: Dont allow null custom_fields property via API (#5063)

commit 638d9970fd
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 13:43:50 2023 -0800

    Enhancement: symmetric document links (#4907)

commit 5e8de4c1da
Author: shamoon <4887959+shamoon@users.noreply.github.com>
Date:   Tue Dec 19 12:45:04 2023 -0800

    Enhancement: shared icon & shared by me filter (#4859)

commit 088bad9030
Author: Trenton H <797416+stumpylog@users.noreply.github.com>
Date:   Tue Dec 19 12:04:03 2023 -0800

    Bulk updates all the backend libraries (#5061)

* Saving some work on frontend config

* Very basic but dynamically-generated config form

* Saving work on slightly less ugly frontend config

* JSON validation for user_args field

* Fully dynamic config form

* Adds in some additional validators for a nicer error message

* Cleaning up the testing and coverage more

* Reverts unintentional change

* Adds documentation about the settings and the precedence

* Couple more commenting and style fixes

---------

Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
2023-12-29 15:42:56 -08:00
shamoonandGitHub aff56077a8 Feature: update user profile (#4678) 2023-12-02 08:26:42 -08:00
Trenton H 6f163111ce Upgrades black to v23, upgrades ruff 2023-04-26 09:35:27 -07:00
Trenton H ce41ac9158 Configures ruff as the one stop linter and resolves warnings it raised 2023-04-01 17:03:52 -07:00
shamoon ee7653a8cd Make user_permissions not required 2023-03-01 00:33:01 -08:00
Michael Shamoon f1eecd146d include email + pw for frontend user editing 2023-01-03 08:29:36 -08:00
Michael Shamoon d840308392 fix merge conflict for edit dialog succeeded and pw not required 2023-01-01 17:55:52 -08:00
Michael Shamoon b99422da12 Address CodeQL 2022-12-08 09:31:00 -08:00
Michael Shamoon cf53d0866a Allow create / update password via UI 2022-11-23 00:35:17 -08:00
Michael Shamoon 355efadf87 Inherited permissions 2022-11-15 20:54:57 -08:00
Michael Shamoon f461485aa0 frontend permissions dialogs 2022-11-15 00:44:32 -08:00
Michael Shamoon fdaf9e9b46 Revert "fix: update user permissions and groups, update group permissions"
This reverts commit 57b709824f.
2022-11-13 14:18:44 -08:00
KaaybiandMichael Shamoon 57b709824f fix: update user permissions and groups, update group permissions 2022-11-13 14:02:54 -08:00
KaaybiandMichael Shamoon 4333bd58cf feat: add users and groups API routes 2022-11-12 13:46:50 -08:00