pixelfed

Commit Graph

Author	SHA1	Message	Date
Daniel Supernault	33dce75f2c	Pint app/	1 month ago
Your Name	53759e3ad6	Prevent deletion of personal access OAuth client Fixes #6630 (partial — deletion causing broken PAT) If a user deletes the OAuth client that serves as the personal access client, all PAT creation breaks for the entire instance with a 500 error. Changes: - Add custom OAuthClientController@destroy that checks if the client has the personal_access grant type before allowing deletion - Returns 403 with a clear error message if deletion is blocked - Add confirmation dialog before client deletion in the frontend - Add error handling to show server error messages to the user This prevents accidental destruction of the PAT infrastructure.	1 month ago

Author

SHA1

Message

Date

Daniel Supernault

33dce75f2c

Pint app/

Your Name

53759e3ad6

Prevent deletion of personal access OAuth client

Fixes #6630 (partial — deletion causing broken PAT)

If a user deletes the OAuth client that serves as the personal access
client, all PAT creation breaks for the entire instance with a 500 error.

Changes:
- Add custom OAuthClientController@destroy that checks if the client
  has the personal_access grant type before allowing deletion
- Returns 403 with a clear error message if deletion is blocked
- Add confirmation dialog before client deletion in the frontend
- Add error handling to show server error messages to the user

This prevents accidental destruction of the PAT infrastructure.

2 Commits (2e76709aa442e6f6beafa4f2b48d4fba7afbc9a4)