Commit Graph

26010 Commits

Author SHA1 Message Date
Brian Gough 13f45d23ee Merge pull request #27519 from overleaf/bg-upgrade-form-data-in-monorepo
security update for form-data

GitOrigin-RevId: f25f74b9ca51e978c0a1d0aba70ec7f09d8b1c66
2025-08-04 08:05:20 +00:00
Jakob Ackermann 6fde6c7982 Merge pull request #27522 from overleaf/jpa-reenable-tests
[server-ce] tests: enable disabled tests again

GitOrigin-RevId: 447b95bfc6b369f574a518ea46a264445efc5985
2025-08-04 08:05:13 +00:00
Jakob Ackermann 6a490bfc68 Merge pull request #27579 from overleaf/jpa-saas-e2e-split
[saas-e2e] prepare for running in Jenkins

GitOrigin-RevId: 4d87d8a548849c193c5263a3b4f01202876f43a3
2025-08-04 08:05:08 +00:00
Jakob Ackermann cba0e1562e Merge pull request #27578 from overleaf/jpa-fix-saas-e2e
[saas-e2e] fix all the broken tests

GitOrigin-RevId: 38e16abc5e2c9392b0d9e585b6bef27a51c386f5
2025-08-04 08:05:04 +00:00
Jakob Ackermann 1c5c60eb7e [packer] rework jenkins worker image (#27573)
- Use Makefile for coordinating all the independent tasks
- Pull down lots of other docker images, notably all the images for
  running Server Pro E2E tests
- Run copybara to populate it's caches
- Build Server CE and Server Pro images to populate npm caches
- Build all the monorepo images for SaaS E2E tests
- Restore the latest database backup into the CI local dev-env

GitOrigin-RevId: 821b036d1afaf2f00372dc6d0f82a51b4c3b7cc4
2025-08-04 08:04:59 +00:00
M Fahru a0f6359f60 Merge pull request #27551 from overleaf/kh-fix-failing-webhook-event
[web] prefer metadata over email for invoice.paid events

GitOrigin-RevId: cfb06333b62dfb5018bcdee0f153a812d19ff328
2025-08-01 08:07:10 +00:00
M Fahru 6f2c026aac Merge pull request #27533 from overleaf/mf-change-billing-mode-to-flexible-stripe
[web] Use flexible billing_mode for every new Stripe subscription

GitOrigin-RevId: 827b6e4802ff1d1dd92519bc949717c7d42c59cb
2025-08-01 08:07:06 +00:00
Jakob Ackermann d09f94d1b4 [server-ce] tests: split prefetching (#27566)
GitOrigin-RevId: de0bfb0d3923749b8844a8812d0a45d71ae4fa0e
2025-08-01 08:07:01 +00:00
Antoine Clausse 235823e889 [web] Prevent 6-digits verification on SSO-emails (#27496)
* Rename token -> code

* Add test: don't verify SSO emails through the 6-digits verification

* Add a test on `/user/emails/resend-confirmation-code`

* Rename to `confirmationEmailMiddleware`

* Add `Modules.middleware('confirmationEmailMiddleware')` to `/user/emails/send-confirmation-code`

* Log attempted verifications of SAML emails

GitOrigin-RevId: ccc11831c860b219711cd57bba1a76ac975e71fb
2025-08-01 08:06:47 +00:00
Antoine Clausse 2e8c7e02c9 [web] Add admin permission view-audit-log (#27402)
* Add capability `view-audit-log`

* Fix: Don't fetch `user.auditLog` twice

* Check `view-audit-log` (frontend)

* Check `view-audit-log` (backend)

* Update tests

GitOrigin-RevId: 7e20f2bdc6387144503490f6aba234d967f84913
2025-08-01 08:06:43 +00:00
Antoine Clausse 54d5aaf9f9 [web] Add admin permission modify-feature-override (#27395)
* Add capability `modify-feature-overrides`

* Check `modify-feature-overrides` for create endpoint (frontend)

* Check `modify-feature-overrides` for create endpoint (backend)

* Update tests

* Check `modify-feature-override` for delete endpoint (frontend)

* Check `modify-feature-override` for delete endpoint (backend)

* Update tests

* Fixup test name

Co-authored-by: Andrew Rumble <andrew.rumble@overleaf.com>

---------

Co-authored-by: Andrew Rumble <andrew.rumble@overleaf.com>
GitOrigin-RevId: ebf37e48fed1dd6fda23ca8c7a5baf55af1cde38
2025-08-01 08:06:39 +00:00
Antoine Clausse f4517d9992 [web] Add admin permission create-recurly-account (#27376)
* Add capability `create-recurly-account`

* Check `create-recurly-account` (frontend)

* Check `create-recurly-account` (backend)

* Update tests

GitOrigin-RevId: f4a66937333fbd101cbf0562d768f185f41c88cf
2025-08-01 08:06:31 +00:00
Antoine Clausse 7c12389367 [web] Add admin permission view-user-additional-info (#27335)
* Add capability `view-user-additional-info`

* Check `view-user-additional-info` (frontend)

* Check `view-user-additional-info` (backend)

* Update tests

* Fix prop type

* Add missing `view-user-additional-info` in `product` role

GitOrigin-RevId: b912b98eac1325b74d42079feaf94d0ec99825c1
2025-08-01 08:06:27 +00:00
ilkin-overleaf 239a416f38 Merge pull request #27479 from overleaf/ii-domain-capture-recovery-email
[web] Domain capture recovery email

GitOrigin-RevId: bcff750aff23f8d8f06e4e19dbda1b7be1623035
2025-08-01 08:06:06 +00:00
Alf Eaton 26923c4eb5 Use "*:placeholder" as placeholder label (#27520)
GitOrigin-RevId: eb6566e8cab401675df21a54d0b1035fd6e8a8df
2025-08-01 08:05:58 +00:00
Alf Eaton 42b30b1cb2 Display an error message when the synctex request fails (#27523)
GitOrigin-RevId: 4a57058386ba8b11dee90ef13e374411db54e2cc
2025-08-01 08:05:54 +00:00
Jakob Ackermann 186c76ba9e [web] remove jump-to-location event (#27490)
* [web] remove jump-to-location event

* [web] remove unused imports

GitOrigin-RevId: 2be9405b6c2d3d589184c7c913294b2cbe828250
2025-08-01 08:05:46 +00:00
Mathias Jakobsen 46cff13391 Merge pull request #27329 from overleaf/dp-editor-redesign-beta
Prepare editor redesign for beta release

GitOrigin-RevId: 584c0303f652640669234bd227780ed4f20b76c0
2025-08-01 08:05:42 +00:00
Miguel Serrano 5a3747c5d2 [web] Group audit log link in settings (#27390)
* [web] Group audit log link in settings

Adds a link to access the `/manage/groups/:subscription_id/audit-logs`
endpoint

* [web] Add `group-audit-logs` split test for gradual rollout

GitOrigin-RevId: 60d6c9917ca54ff5e228996e7454a901f0f3b9ca
2025-08-01 08:05:10 +00:00
Miguel Serrano 0832e35196 [web] Add expiration for groupAuditLogEntries collection (#27437)
Set to 2.5 years, same as user/project audit logs

GitOrigin-RevId: d3b7e6d752eda4b224068e7b37276e79b4143464
2025-08-01 08:05:03 +00:00
Miguel Serrano 5ebe8563ed [web] Group settings: audit Log (#27197)
* [web] Group settings: audit Log

User facing audit logs, available to Group Admins.
- `/audit-logs` page
- `/audit-logs/csv` to download all logs

GitOrigin-RevId: 4938c49fdd8e62f5ea278b6c80ed2bd544455b92
2025-08-01 08:04:55 +00:00
Liangjun Song aff9dadd31 Merge pull request #27518 from overleaf/tm-revert-scriptrunner-ensured-secondary
Remove ScriptRunner usage in institution user checks and SSO ID migration scripts

GitOrigin-RevId: 69bf575f879516e8daeb068f6911856c9d6f226c
2025-07-31 08:05:37 +00:00
Jakob Ackermann 33c4b5fced [server-pro] add hotfix 5.5.4 (#27514)
GitOrigin-RevId: f992fce918d2617017fa5af5be3edd9e54a5919d
2025-07-31 08:05:33 +00:00
Jakob Ackermann dd825b3653 [web] download binary files in clsi from filestore via new endpoints (#27505)
* [history-v1] use String.padStart instead of lodash.padStart

* [web] download binary files in clsi from filestore via new endpoints

* [server-ce] tests: Cypress.env() is parsing boolean values

* [server-ce] tests: run history migration as root

GitOrigin-RevId: bdf6c0e542531ccc4b3f13d2ed68ca0d31e580e9
2025-07-31 08:05:28 +00:00
Jakob Ackermann e907c79bae [server-ce] work around npm bug for uninstalling devDependencies (#27512)
Co-authored-by: Brian Gough <brian.gough@overleaf.com>
GitOrigin-RevId: da4c878ae4515672aa67ea77d2d54a08a149e49b
2025-07-31 08:05:23 +00:00
Jakob Ackermann cf55be3a8d [server-ce] run node scripts as www-data user (#27504)
GitOrigin-RevId: 2fbfe1ae33b42a5a9a696be811d122882093cd49
2025-07-31 08:05:15 +00:00
Alf Eaton cc6bb54226 Remove "version" from docker-compose files (#27494)
GitOrigin-RevId: 8d9a0e58e3a9c6c4296e4585115d1b259e26a6cd
2025-07-31 08:05:10 +00:00
M Fahru 8804df2ef3 Merge pull request #27188 from overleaf/mf-admin-stripe-sync-subscription
[web] Make admin able to sync out-of-sync expired Stripe subscription from the admin panel

GitOrigin-RevId: 1198eaa3f58756800ee078f9ff8e1d432ce32ef3
2025-07-30 08:07:47 +00:00
Jakob Ackermann 1318cdb3e6 [server-pro] add missing commit into hotfix 5.5.3 (#27489)
GitOrigin-RevId: a2d337c16eaae96cd9a0d2d2adde922ce43b033f
2025-07-30 08:07:38 +00:00
ilkin-overleaf 42a3af7ca5 Merge pull request #27276 from overleaf/ii-domain-capture-anaylze-saml-response
[web] Domain capture analyze saml response

GitOrigin-RevId: 5a970968bdf14ab6f52d883a390d420b00cb4d8d
2025-07-30 08:07:30 +00:00
ilkin-overleaf 4628e751a8 Merge pull request #27324 from overleaf/ii-domain-capture-disabling-sso
[web] Disable domain capture when disabling SSO

GitOrigin-RevId: 352834fbb3ddf724acc25cc0c59620e7f87ac935
2025-07-30 08:07:26 +00:00
ilkin-overleaf 9a46ddb8e5 Merge pull request #27133 from overleaf/ii-group-sso-config-email-attribute-sso-enabled
[web] Add email attribute to ssoConfig while SSO is enabled

GitOrigin-RevId: 3b670731a5c84fc9e09cd3fcea883879563a9848
2025-07-30 08:07:21 +00:00
ilkin-overleaf 8d1c5958a5 Merge pull request #26902 from overleaf/ii-group-sso-config-email-attribute
[web] Add email attribute to ssoConfig

GitOrigin-RevId: 313ad45987fb408c62ef30575dacaea1041471da
2025-07-30 08:07:16 +00:00
Jakob Ackermann 93c04fe240 [history-v1] extend --report with number of files to check/missing (#27397)
* [history-v1] put logs of back_fill_file_hash script in /var/log/overleaf

* [history-v1] do not leave tmp dir behind when using --report

* [history-v1] extend --report with number of files to check/missing

* [history-v1] move all the options into command line flags

Change default values:
- concurrency to 10
- concurrent batches to 1
- stream high water mark to 1MiB

* [web] find_malformed_filetrees: log progress on stderr

* [history-v1] fix percentage of projects that need back-filling

GitOrigin-RevId: ebd7889840f97b24eda43774ffe7524998fb634b
2025-07-30 08:07:12 +00:00
Brian Gough 3a17c1dc61 Merge pull request #27246 from overleaf/jpa-hotfix-5-5-3
[server-pro] add hotfix 5.5.3

GitOrigin-RevId: 6bd266afb8f5ba622224b6095204ee6801c05a44
2025-07-30 08:07:00 +00:00
Antoine Clausse 060825f3a7 [web] Fixup: Remove unused sendReconfirmation (#27486)
Wrong merge caused this error in https://github.com/overleaf/internal/pull/27423 (37c8fa1)

GitOrigin-RevId: 3b0033f69fc872439c3f2ae37429fb05d9d69af1
2025-07-30 08:06:55 +00:00
Jakob Ackermann 3ae228ff28 Merge pull request #27476 from overleaf/jpa-transfer-all
[web] add script for transferring all of a users projects in Server Pro

GitOrigin-RevId: 3aad2b624e1da2af83fec0715c2e5e08eff43695
2025-07-30 08:06:51 +00:00
Liangjun Song af23ac9ad6 Merge pull request #27291 from overleaf/ls-update-group-plan-display-name
Update group plan display name

GitOrigin-RevId: 7ffd46645f857d102e278833537d86ff6d74fb1c
2025-07-30 08:06:43 +00:00
Antoine Clausse c9c26f7f52 Remove endpoint /user/emails/send-reconfirmation (#27423)
GitOrigin-RevId: bd96d749175248cba83eb07c00dab7e7a9f819da
2025-07-30 08:06:38 +00:00
Antoine Clausse 924aa6db23 [web] Remove the unused endpoint /user/emails/resend_confirmation (#27416)
* Remove the unused endpoint `/user/emails/resend_confirmation`

* Remove exported middleware `resendConfirmationEmail`

* Revert "Remove exported middleware `resendConfirmationEmail`"

This reverts commit 7989bf25465dbc9b68c9d1af0d64d1097a747b55.

GitOrigin-RevId: 8054c6f217a734881093f78599a7b2be29436793
2025-07-30 08:06:33 +00:00
Antoine Clausse f8e643570c [web] Remove the endpoint /user/emails (POST) (#27418)
* Remove `/user/emails` (post)

* Update test

GitOrigin-RevId: 3979820935209ca36fdd8fabc016ad55d4858cef
2025-07-30 08:06:29 +00:00
Alf Eaton b6dc37f641 Fix wrong date in history view when looking at labeled version (#27450)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
GitOrigin-RevId: 87b6f82e3024334d03991db794dd11301918245e
2025-07-30 08:06:13 +00:00
Alf Eaton 14cac4fbef Clamp minimum valid doc position to 0 (#27461)
GitOrigin-RevId: d531e2b5351b41217ccc8385f8f317cce91a840b
2025-07-30 08:06:09 +00:00
Alf Eaton 0ce2d8b0cb Disable Resolve Comment button while comment text is being entered (#27465)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
GitOrigin-RevId: 05a2c522b6cc49237eec859f50bad8759050f9f9
2025-07-30 08:06:04 +00:00
Alexandre Bourdin c90233c01f Merge pull request #27303 from overleaf/dp-go-to-code
Hide go to code button in the new editor logs when it does nothing

GitOrigin-RevId: f08c3fc98bae8116a428a7528291edccd6d4f8c0
2025-07-30 08:05:56 +00:00
Alexandre Bourdin 858c05a292 Merge pull request #27306 from overleaf/dp-uppercase-collaborator-icons
Use uppercase characters for collaborator icons in new editor

GitOrigin-RevId: 185a4d8b26f490f78103af96a556a7227bde7121
2025-07-30 08:05:51 +00:00
Alexandre Bourdin 25a74624dc Merge pull request #27307 from overleaf/dp-lower-synctex-buttons
Lower synctex buttons to avoid clash with role dropdown

GitOrigin-RevId: 27a1e566e68484207bc1a2ffd6f1382350ff81fc
2025-07-30 08:05:47 +00:00
Alexandre Bourdin 2387aeef0e Merge pull request #27365 from overleaf/dp-hide-file-tree-buttons
Hide new editor file tree action buttons when file tree is collapsed

GitOrigin-RevId: 1f75593c8e1b1f6ed0d6054a2987b8fa46edd067
2025-07-30 08:05:42 +00:00
Alexandre Bourdin 712aebff7a Merge pull request #27378 from overleaf/dp-file-tree-no-wrap
Clip file tree heading text when the panel is narrow

GitOrigin-RevId: f5495099f8e2151324ddaa77011bcfda6b5cc1a3
2025-07-30 08:05:38 +00:00
Alexandre Bourdin 447fd0d05d Merge pull request #27367 from overleaf/dp-breadcrumbs-description
Update breadcrumbs and stop-on-first-error setting descriptions

GitOrigin-RevId: 1c3a6e691bcd9fd4bd8b3a247a005f6f7469e8c3
2025-07-30 08:05:33 +00:00