Merge pull request pterodactyl#4 from pterodactyl/release/v1.0.1

Release/v1.0.1

Author: alliraine

CHANGELOG.md

@@ -3,6 +3,49 @@ This file is a running track of new features and fixes to each version of the pa
 
 This project follows [Semantic Versioning](http://semver.org) guidelines.
 
+## v1.0.0
+Pterodactyl 1.0 represents the culmination of over two years of work, almost 2,000 commits, endless bug and feature requests, and a dream that
+has been in the making since 2013. 🎉
+
+Due to the sheer size and timeline of this release I've massively truncated the listing below. There are numerous smaller
+bug fixes and changes that would simply be too difficult to keep track of here. Please feel free to browse through the releases
+tab for this repository to see more specific changes that have been made.
+
+### Added
+* Adds a new client-facing API allowing a user to control all aspects of their individual servers, or servers
+which they have been granted access to as a subuser.
+* Adds the ability for backups to be created for a server both manually and via a scheduled task.
+* Adds the ability for users to modify their server allocations on the fly and include notes for each allocation.
+* Adds the ability for users to generate recovery tokens for 2FA protected logins which can be used in place of
+a code should their device be inaccessible.
+* Adds support for transfering servers between Nodes via the Panel.
+* Adds the ability to assign specific CPU cores to a server (CPU Pinning) process.
+* Server owners can now reinstall their assigned server egg automatically with a button on the frontend.
+
+### Changed
+* The entire user frontend has been replaced with a responsive, React backed design implemented using Tailwind CSS.
+* Replaces a large amount of complex daemon authentication logic by funneling most API calls through the Panel, and using
+JSON Web Tokens where necessary to handle one-time direct authentication with Wings.
+* Frontend server listing now includes a toggle to show or hide servers which an administrator has access to, rather
+than always showing all servers on the system when logged into an admin account.
+* We've replaced Ace Editor on the frontend with a better solution to allow lighter builds and more end-user functionality.
+* Server permissions have been overhauled to be both easier to understand in the codebase, and allows plugins to better
+hook into the permission system.
+
+### Removed
+* Removes large swaths of code complexity and confusing interface designs that caused a lot of pain to new developers
+trying to jump into the codebase. We've simplified this to stick to more established Laravel design standards to make
+it easy to parse through the project and make contributions.
+
+## v0.7.19 (Derelict Dermodactylus)
+### Fixed
+* **[Security]** Fixes XSS in the admin area's server owner selection.
+
+## v0.7.18 (Derelict Dermodactylus)
+### Fixed
+* **[Security]** Re-addressed missed endpoint that would not properly limit a user account to 5 API keys.
+* **[Security]** Addresses a Client API vulnerability that would allow a user to list all servers on the system ([`GHSA-6888-7f3w-92jx`](https://github.com/pterodactyl/panel/security/advisories/GHSA-6888-7f3w-92jx))
+
 ## v0.7.17 (Derelict Dermodactylus)
 ### Fixed
 * Limited accounts to 5 API keys at a time.
@@ -301,7 +344,7 @@ the response from the server `GET` endpoint.
 * Nest and Egg listings now show the associated ID in order to make API requests easier.
 * Added star indicators to user listing in Admin CP to indicate users who are set as a root admin.
 * Creating a new node will now requires a SSL connection if the Panel is configured to use SSL as well.
-* Connector error messages due to permissions are now rendered correctly in the UI rather than causing a silent failure.
+* Socketio error messages due to permissions are now rendered correctly in the UI rather than causing a silent failure.
 * File manager now supports mass deletion option for files and folders.
 * Support for CS:GO as a default service option selection.
 * Support for GMOD as a default service option selection.
@@ -431,7 +474,7 @@ the response from the server `GET` endpoint.
 * Changed 2FA login process to be more secure. Previously authentication checking happened on the 2FA post page, now it happens prior and is passed along to the 2FA page to avoid storing any credentials.
 
 ### Added
-* Connector error messages due to permissions are now rendered correctly in the UI rather than causing a silent failure.
+* Socketio error messages due to permissions are now rendered correctly in the UI rather than causing a silent failure.
 
 ## v0.7.0-beta.1 (Derelict Dermodactylus)
 ### Added

README.md

@@ -1,8 +1,10 @@
 [![Logo Image](https://cdn.pterodactyl.io/logos/new/pterodactyl_logo.png)](https://pterodactyl.io)
 
-[![Build status](https://img.shields.io/travis/pterodactyl/panel/develop.svg?style=flat-square)](https://travis-ci.org/pterodactyl/panel)
-[![Codecov](https://img.shields.io/codecov/c/github/pterodactyl/panel/develop.svg?style=flat-square)](https://codecov.io/gh/Pterodactyl/Panel)
-[![Discord](https://img.shields.io/discord/122900397965705216.svg?style=flat-square&label=Discord)](https://pterodactyl.io/discord)
+![GitHub Workflow Status](https://img.shields.io/github/workflow/status/pterodactyl/panel/tests?label=Tests&style=for-the-badge)
+![Discord](https://img.shields.io/discord/122900397965705216?label=Discord&logo=Discord&logoColor=white&style=for-the-badge)
+![GitHub Releases](https://img.shields.io/github/downloads/pterodactyl/panel/latest/total?style=for-the-badge)
+![GitHub Pre-Releases](https://img.shields.io/github/downloads-pre/pterodactyl/panel/v1.0.0-rc.7/total?style=for-the-badge)
+![GitHub contributors](https://img.shields.io/github/contributors/pterodactyl/panel?style=for-the-badge)
 
 # Pterodactyl Panel
 Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Designed with security 
@@ -25,6 +27,7 @@ I would like to extend my sincere thanks to the following sponsors for helping f
 | [**DedicatedMC**](https://dedicatedmc.io/) | DedicatedMC provides Raw Power hosting at affordable pricing, making sure to never compromise on your performance and giving you the best performance money can buy. |
 | [**Skynode**](https://www.skynode.pro/) | Skynode provides blazing fast game servers along with a top-notch user experience. Whatever our clients are looking for, we're able to provide it! |
 | [**XCORE-SERVER.de**](https://xcore-server.de/) | XCORE-SERVER.de offers High-End Servers for hosting and gaming since 2012. Fast, excellent and well-known for eSports Gaming. |
+| [**RoyaleHosting**](https://royalehosting.net/) |  Build your dreams and deploy them with RoyaleHosting’s reliable servers and network. Easy to use, provisioned in a couple of minutes. |
 
 ## Documentation
 * [Panel Documentation](https://pterodactyl.io/panel/1.0/getting_started.html)

app/Console/Commands/Overrides/SeedCommand.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace Pterodactyl\Console\Commands\Overrides;
+
+use Pterodactyl\Console\RequiresDatabaseMigrations;
+use Illuminate\Database\Console\Seeds\SeedCommand as BaseSeedCommand;
+
+class SeedCommand extends BaseSeedCommand
+{
+    use RequiresDatabaseMigrations;
+
+    /**
+     * Block someone from running this seed command if they have not completed the migration
+     * process.
+     *
+     * @return int
+     */
+    public function handle()
+    {
+        if (!$this->hasCompletedMigrations()) {
+            return $this->showMigrationWarning();
+        }
+
+        return parent::handle();
+    }
+}

app/Console/Commands/Overrides/UpCommand.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Pterodactyl\Console\Commands\Overrides;
+
+use Pterodactyl\Console\RequiresDatabaseMigrations;
+use Illuminate\Foundation\Console\UpCommand as BaseUpCommand;
+
+class UpCommand extends BaseUpCommand
+{
+    use RequiresDatabaseMigrations;
+
+    /**
+     * @return bool|int
+     */
+    public function handle()
+    {
+        if (!$this->hasCompletedMigrations()) {
+            return $this->showMigrationWarning();
+        }
+
+        return parent::handle();
+    }
+}

app/Console/RequiresDatabaseMigrations.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace Pterodactyl\Console;
+
+/**
+ * @mixin \Illuminate\Console\Command
+ */
+trait RequiresDatabaseMigrations
+{
+    /**
+     * Checks if the migrations have finished running by comparing the last migration file.
+     *
+     * @return bool
+     */
+    protected function hasCompletedMigrations(): bool
+    {
+        /** @var \Illuminate\Database\Migrations\Migrator $migrator */
+        $migrator = $this->getLaravel()->make('migrator');
+
+        $files = $migrator->getMigrationFiles(database_path('migrations'));
+
+        if (! $migrator->repositoryExists()) {
+            return false;
+        }
+
+        if (array_diff(array_keys($files), $migrator->getRepository()->getRan())) {
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Throw a massive error into the console to hopefully catch the users attention and get
+     * them to properly run the migrations rather than ignoring all of the other previous
+     * errors...
+     *
+     * @return int
+     */
+    protected function showMigrationWarning(): int
+    {
+        $this->getOutput()->writeln("<options=bold>
+| @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ |
+|                                                                              |
+|               Your database has not been properly migrated!                  |
+|                                                                              |
+| @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ |</>
+
+You must run the following command to finish migrating your database:
+
+  <fg=green;options=bold>php artisan migrate --step --force</>
+
+You will not be able to use Pterodactyl Panel as expected without fixing your
+database state by running the command above.
+");
+
+        $this->getOutput()->error("You must correct the error above before continuing.");
+
+        return 1;
+    }
+}

app/Contracts/Repository/DatabaseRepositoryInterface.php

@@ -42,18 +42,6 @@ public function getDatabasesForServer(int $server): Collection;
      */
     public function getDatabasesForHost(int $host, int $count = 25): LengthAwarePaginator;
 
-    /**
-     * Create a new database if it does not already exist on the host with
-     * the provided details.
-     *
-     * @param array $data
-     * @return \Pterodactyl\Models\Database
-     *
-     * @throws \Pterodactyl\Exceptions\Model\DataValidationException
-     * @throws \Pterodactyl\Exceptions\Repository\DuplicateDatabaseNameException
-     */
-    public function createIfNotExists(array $data): Database;
-
     /**
      * Create a new database on a given connection.
      *

app/Contracts/Repository/NodeRepositoryInterface.php

@@ -54,15 +54,4 @@ public function loadNodeAllocations(Node $node, bool $refresh = false): Node;
      * @return \Illuminate\Support\Collection
      */
     public function getNodesForServerCreation(): Collection;
-
-    /**
-     * Return the IDs of all nodes that exist in the provided locations and have the space
-     * available to support the additional disk and memory provided.
-     *
-     * @param array $locations
-     * @param int $disk
-     * @param int $memory
-     * @return \Illuminate\Support\LazyCollection
-     */
-    public function getNodesWithResourceUse(array $locations, int $disk, int $memory): LazyCollection;
 }

app/Exceptions/Handler.php

@@ -17,6 +17,7 @@
 use Symfony\Component\HttpKernel\Exception\HttpException;
 use Pterodactyl\Exceptions\Repository\RecordNotFoundException;
 use Illuminate\Foundation\Exceptions\Handler as ExceptionHandler;
+use Symfony\Component\HttpKernel\Exception\HttpExceptionInterface;
 
 class Handler extends ExceptionHandler
 {
@@ -190,7 +191,7 @@ public function invalidJson($request, ValidationException $exception)
 
                 $converted = self::convertToArray($exception)['errors'][0];
                 $converted['detail'] = $error;
-                $converted['meta'] = is_array($converted['meta']) ? array_merge($converted['meta'], $meta) : $meta;
+                $converted['meta'] = is_array($converted['meta'] ?? null) ? array_merge($converted['meta'], $meta) : $meta;
 
                 $response[] = $converted;
             }
@@ -217,7 +218,9 @@ public static function convertToArray(Throwable $exception, array $override = []
             'status' => method_exists($exception, 'getStatusCode')
                 ? strval($exception->getStatusCode())
                 : ($exception instanceof ValidationException ? '422' : '500'),
-            'detail' => 'An error was encountered while processing this request.',
+            'detail' => $exception instanceof HttpExceptionInterface
+                ? $exception->getMessage()
+                : 'An unexpected error was encountered while processing this request, please try again.',
         ];
 
         if ($exception instanceof ModelNotFoundException || $exception->getPrevious() instanceof ModelNotFoundException) {