pixelfed

Commit Graph

Author	SHA1	Message	Date
Your Name	53759e3ad6	Prevent deletion of personal access OAuth client Fixes #6630 (partial — deletion causing broken PAT) If a user deletes the OAuth client that serves as the personal access client, all PAT creation breaks for the entire instance with a 500 error. Changes: - Add custom OAuthClientController@destroy that checks if the client has the personal_access grant type before allowing deletion - Returns 403 with a clear error message if deletion is blocked - Add confirmation dialog before client deletion in the frontend - Add error handling to show server error messages to the user This prevents accidental destruction of the PAT infrastructure.	1 month ago

Author

SHA1

Message

Date

Your Name

53759e3ad6

Prevent deletion of personal access OAuth client

Fixes #6630 (partial — deletion causing broken PAT)

If a user deletes the OAuth client that serves as the personal access
client, all PAT creation breaks for the entire instance with a 500 error.

Changes:
- Add custom OAuthClientController@destroy that checks if the client
  has the personal_access grant type before allowing deletion
- Returns 403 with a clear error message if deletion is blocked
- Add confirmation dialog before client deletion in the frontend
- Add error handling to show server error messages to the user

This prevents accidental destruction of the PAT infrastructure.

1 Commits (93553670e5a5dab60e32b5cbbf6595cfa830f06a)