parse-community-parse-server

Adapters/Auth

fix: Server-Side Request Forgery (SSRF) in Instagram auth adapter [GHSA-3f5f-xgrj-97pf](https://github.com/parse-community/parse-server/security/advisories/GHSA-3f5f-xgrj-97pf ) (#9988 )

2025-12-16 02:24:37 +01:00

cloud

…

configs

…

dependencies

…

support

refactor: Add a few lint rules to test files in /spec (#9815 )

2025-07-04 20:24:08 +02:00

.babelrc

feat: Add TypeScript support (#9550 )

2025-01-30 01:45:35 +01:00

AccountLockoutPolicy.spec.js

fix: Remove username from email verification and password reset process (#8488 )

2025-03-02 02:32:43 +01:00

AdaptableController.spec.js

…

AdapterLoader.spec.js

feat: Upgrade to @parse/push-adapter 8.1.0 (#9938 )

2025-12-12 21:46:17 +01:00

AggregateRouter.spec.js

…

Analytics.spec.js

…

AudienceRouter.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

Auth.spec.js

fix: Using Parse Server option extendSessionOnUse does not correctly clear memory and functions as a debounce instead of a throttle (#8683 )

2025-03-06 01:34:52 +01:00

AuthenticationAdapters.spec.js

fix: JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2 )) (#10072 )

2026-02-23 22:01:47 +00:00

AuthenticationAdaptersV2.spec.js

fix: Unlinking auth provider triggers auth data validation (#10045 )

2026-02-12 02:28:48 +00:00

batch.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

buildConfigDefinitions.spec.js

feat: Add event information to verifyUserEmails, preventLoginWithUnverifiedEmail to identify invoking signup / login action and auth provider (#9963 )

2026-02-06 03:48:35 +00:00

CacheController.spec.js

…

CLI.spec.js

refactor: Upgrade to commander 13.0.0 (#9574 )

2025-01-29 06:04:54 +01:00

Client.spec.js

…

ClientSDK.spec.js

…

CloudCode.spec.js

feat: Add support for custom HTTP status code and headers to Cloud Function response with Express-style syntax (#9980 )

2025-12-14 15:24:51 +01:00

CloudCode.Validator.spec.js

test: Add more test IDs (#9285 )

2024-08-16 21:21:56 +02:00

CloudCodeLogger.spec.js

fix: Error in afterSave trigger for Parse.Role due to name field (#9883 )

2025-10-22 14:12:51 +02:00

cryptoUtils.spec.js

…

DatabaseController.spec.js

fix: Indexes _email_verify_token for email verification and _perishable_token password reset are not created automatically (#9893 )

2025-11-01 13:52:23 +01:00

defaultGraphQLTypes.spec.js

…

DefinedSchemas.spec.js

feat: Add option keepUnknownIndexes to retain indexes which are not specified in schema (#9857 )

2025-10-03 14:35:34 +02:00

Deprecator.spec.js

feat: Add Parse.File.url validation with config fileUpload.allowedFileUrlDomains against SSRF attacks (#10044 )

2026-02-07 17:03:39 +00:00

EmailVerificationToken.spec.js

feat: Add event information to verifyUserEmails, preventLoginWithUnverifiedEmail to identify invoking signup / login action and auth provider (#9963 )

2026-02-06 03:48:35 +00:00

EnableExpressErrorHandler.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

eslint.config.js

fix: Indexes _email_verify_token for email verification and _perishable_token password reset are not created automatically (#9893 )

2025-11-01 13:52:23 +01:00

EventEmitterPubSub.spec.js

…

features.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

FilesController.spec.js

feat: Add support for asynchronous invocation of FilesAdapter.getFileLocation (#9271 )

2024-08-27 17:09:19 +02:00

FileUrlValidator.spec.js

feat: Add Parse.File.url validation with config fileUpload.allowedFileUrlDomains against SSRF attacks (#10044 )

2026-02-07 17:03:39 +00:00

graphQLObjectsQueries.js

…

GridFSBucketStorageAdapter.spec.js

feat: Add support for streaming file upload via Buffer, Readable, ReadableStream (#10065 )

2026-02-21 03:31:16 +00:00

helper.js

feat: Upgrade to @parse/push-adapter 8.1.0 (#9938 )

2025-12-12 21:46:17 +01:00

HTTPRequest.spec.js

feat: Upgrade to express 5.0.1 (#9530 )

2025-03-03 22:11:42 +01:00

Idempotency.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

index.spec.js

fix: JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](https://github.com/parse-community/parse-server/security/advisories/GHSA-4q3h-vp4r-prv2 )) (#10072 )

2026-02-23 22:01:47 +00:00

InMemoryCache.spec.js

…

InMemoryCacheAdapter.spec.js

…

InstallationsRouter.spec.js

…

JobSchedule.spec.js

…

LdapAuth.spec.js

…

Logger.spec.js

…

LoggerController.spec.js

…

LogsRouter.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

Middlewares.spec.js

feat: Add dynamic master key by setting Parse Server option masterKey to a function (#9582 )

2025-02-12 22:23:18 +01:00

MongoSchemaCollectionAdapter.spec.js

feat: Add default ACL (#8701 )

2025-03-24 15:15:27 +01:00

MongoStorageAdapter.spec.js

fix: MongoDB timeout errors unhandled and potentially revealing internal data (#10020 )

2026-01-25 00:15:01 +01:00

MongoTransform.spec.js

fix: Queries with object field authData.provider.id are incorrectly transformed to _auth_data_provider.id for custom classes (#9932 )

2025-11-17 17:47:39 +01:00

NullCacheAdapter.spec.js

…

OAuth1.spec.js

…

PagesRouter.spec.js

fix: Remove obsolete Parse Server option pages.enableRouter (#10070 )

2026-02-21 17:31:04 +00:00

Parse.Push.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

ParseACL.spec.js

fix: Default ACL overwrites custom ACL on Parse.Object update (#10061 )

2026-02-14 01:56:42 +00:00

ParseAPI.spec.js

feat: Deprecation DEPPS10: Encode Parse.Object in Cloud Function and remove option encodeParseObjectInCloudFunction (#9973 )

2025-12-12 20:46:35 +01:00

ParseCloudCodePublisher.spec.js

…

ParseConfigKey.spec.js

feat: Add support for more MongoDB driver options (#9911 )

2025-11-07 21:41:59 +01:00

ParseFile.spec.js

feat: Add support for Parse.File.setDirectory() with master key to save file in directory (#10076 )

2026-02-26 00:32:29 +00:00

ParseGeoPoint.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

ParseGlobalConfig.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

ParseGraphQLClassNameTransformer.spec.js

…

ParseGraphQLController.spec.js

…

ParseGraphQLSchema.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

ParseGraphQLServer.spec.js

fix: GraphQL introspection disabled in NODE_ENV=production even with master key (#10071 )

2026-02-23 14:32:12 +00:00

ParseHooks.spec.js

feat: Upgrade to express 5.0.1 (#9530 )

2025-03-03 22:11:42 +01:00

ParseInstallation.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

ParseLiveQuery.spec.js

refactor: Add a few lint rules to test files in /spec (#9815 )

2025-07-04 20:24:08 +02:00

ParseLiveQueryRedis.spec.js

…

ParseLiveQueryServer.spec.js

feat: Upgrade to @parse/push-adapter 8.1.0 (#9938 )

2025-12-12 21:46:17 +01:00

ParseObject.spec.js

fix: Security upgrade to parse 7.0.1 (#9877 )

2025-10-15 18:39:37 +02:00

ParsePolygon.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

ParsePubSub.spec.js

…

ParseQuery.Aggregate.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

ParseQuery.Comment.spec.js

fix: Security upgrade to parse 7.0.1 (#9877 )

2025-10-15 18:39:37 +02:00

ParseQuery.FullTextSearch.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

ParseQuery.hint.spec.js

feat: Increase required minimum MongoDB version to 7.0.16 (#9971 )

2025-12-12 18:51:39 +01:00

ParseQuery.spec.js

feat: Deprecation DEPPS12: Database option allowPublicExplain defaults to false (#9975 )

2025-12-12 21:07:07 +01:00

ParseRelation.spec.js

fix: Security upgrade to parse 7.0.1 (#9877 )

2025-10-15 18:39:37 +02:00

ParseRole.spec.js

fix: Error in afterSave trigger for Parse.Role due to name field (#9883 )

2025-10-22 14:12:51 +02:00

parsers.spec.js

feat: Add event information to verifyUserEmails, preventLoginWithUnverifiedEmail to identify invoking signup / login action and auth provider (#9963 )

2026-02-06 03:48:35 +00:00

ParseServer.spec.js

fix: MongoDB timeout errors unhandled and potentially revealing internal data (#10020 )

2026-01-25 00:15:01 +01:00

ParseServerRESTController.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

ParseSession.spec.js

…

ParseUser.spec.js

fix: Parse.Query.select('authData') for _User class doesn't return auth data (#10055 )

2026-02-12 20:45:41 +00:00

ParseWebSocket.spec.js

…

ParseWebSocketServer.spec.js

…

PasswordPolicy.spec.js

feat: Deprecation DEPPS11: Replace PublicAPIRouter with PagesRouter (#9974 )

2025-12-12 20:55:39 +01:00

PointerPermissions.spec.js

test: Add more test IDs (#9285 )

2024-08-16 21:21:56 +02:00

PostgresConfigParser.spec.js

…

PostgresInitOptions.spec.js

…

PostgresStorageAdapter.spec.js

…

PromiseRouter.spec.js

…

ProtectedFields.spec.js

…

PurchaseValidation.spec.js

refactor: Bump to jasmine 5.6.0 (#9453 )

2025-03-11 21:34:14 +01:00

PushController.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

PushQueue.spec.js

…

PushRouter.spec.js

…

PushWorker.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

QueryTools.spec.js

…

RateLimit.spec.js

feat: Update route patterns to use path-to-regexp v8 syntax (#9942 )

2025-12-12 19:36:27 +01:00

ReadPreferenceOption.spec.js

…

RedisCacheAdapter.spec.js

…

RedisPubSub.spec.js

refactor: Bump redis from 4.7.0 to 5.10.0 (#9994 )

2026-01-17 22:09:44 +01:00

RegexVulnerabilities.spec.js

feat: Deprecation DEPPS11: Replace PublicAPIRouter with PagesRouter (#9974 )

2025-12-12 20:55:39 +01:00

rest.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

RestQuery.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

RevocableSessionsUpgrade.spec.js

refactor: Bump to jasmine 5.6.0 (#9453 )

2025-03-11 21:34:14 +01:00

Schema.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

SchemaPerformance.spec.js

fix: Parse Server doesn't shutdown gracefully (#9634 )

2025-03-27 21:38:51 +01:00

schemas.spec.js

feat: Log more debug info when failing to set duplicate value for field with unique values (#9919 )

2025-12-14 16:39:17 +01:00

SecurityCheck.spec.js

…

SecurityCheckGroups.spec.js

feat: Deprecation DEPPS113: Config option enableInsecureAuthAdapters defaults to false (#9982 )

2025-12-14 01:24:00 +01:00

SessionTokenCache.spec.js

…

Subscription.spec.js

…

Uniqueness.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00

UserController.spec.js

ci: Fix flaky sendVerificationEmail tests (#9692 )

2025-04-15 17:25:42 +01:00

UserPII.spec.js

refactor: Bump to jasmine 5.6.0 (#9453 )

2025-03-11 21:34:14 +01:00

Utils.spec.js

feat: Add support for streaming file upload via Buffer, Readable, ReadableStream (#10065 )

2026-02-21 03:31:16 +00:00

ValidationAndPasswordsReset.spec.js

feat: Add event information to verifyUserEmails, preventLoginWithUnverifiedEmail to identify invoking signup / login action and auth provider (#9963 )

2026-02-06 03:48:35 +00:00

VerifyUserPassword.spec.js

…

vulnerabilities.spec.js

fix: Server internal error details leaking in error messages returned to clients (#9937 )

2025-11-23 13:51:42 +01:00

WinstonLoggerAdapter.spec.js

ci: Fix test exclusion list in combination with other exclusions (#9277 )

2024-08-13 22:13:19 +02:00