100 Commits
Author SHA1 Message Date
Dave Horton e09933900b 0.9.8 2026-07-20 08:37:29 -04:00
Dave Horton 4f16aa7cab bump version 2026-07-09 07:35:36 -04:00
Dave HortonandClaude Opus 4.5 bff9314622 fix(security): add authorization checks to prevent cross-account access (CWE-639) (#558)
- Add precondition support to decorate.js retrieve function
- Fix google-custom-voices.js typo and add delete precondition
- Check ownership via speech_credential for google-custom-voices
- Add retrieve/delete preconditions to lcr-carrier-set-entries.js
- Add retrieve precondition to sip-gateways.js and smpp-gateways.js
- Add scope check to lcr-routes.js custom GET handler
- Add full authorization to tenants.js for all CRUD operations
- Add scoped query methods to tenant model

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-06-27 15:53:51 -04:00
Dave Horton 001ef66000 bump version 2026-03-31 07:45:25 -04:00
Dave Horton 9875686f92 Fix/carrier entry data (#542)
* protect against invalid carrier data entry

* sec fixes
2026-02-09 10:40:59 -05:00
Dave Horton 8181d56a48 fix schema command 2026-01-16 08:40:49 -05:00
Dave Horton 6341132807 Feat/sql improvements (#536)
* add indexes

* update sql editor file

* upgrade schema

* optimize Applications.retrieveAll

* security fixes

* update gh workflows
2026-01-15 08:45:40 -05:00
Dave Horton 3f1e756467 wip (#529) 2025-12-22 08:28:37 -05:00
Dave Horton 4c86adf1f7 add index on sip_gateways (inbound,voip_carrier_sid) and trunk_type to predefined carriers (#512) 2025-11-11 10:48:14 -05:00
Dave Horton e9d14e9e38 no need to update api_key use date more than once per minute (#506) 2025-10-28 17:18:22 -04:00
Dave Horton 4de66789ef fix db upgrade script (#495) 2025-09-07 10:58:14 -04:00
Dave Horton 9c8bfebd53 update to latest speech-utils 2025-08-17 09:53:33 -04:00
Dave Horton 035458ad3c logging 2025-08-13 20:33:40 -04:00
Dave Horton 6f87204d88 bump version 2025-07-15 11:44:19 -04:00
Dave Horton 819319dbe5 logging 2025-07-01 18:25:54 -04:00
Dave Horton b708f7beb6 update version 2025-05-14 15:39:38 -04:00
Dave Horton 533e202474 update db-helpers 2025-05-13 10:35:00 -04:00
Dave Horton e506fc8b66 fix bug updating application with env vars (#440) 2025-05-13 10:15:55 -04:00
Dave Horton 48e39f37d3 when app url is websocket we still need to send to http schema not ws (#439)
* when app url is websocket we still need to send to http schema not ws

* fix bug from a previous PR
2025-05-08 13:41:36 -04:00
Dave Horton 5a02346c71 #390: correct column name is outbound_sip_proxy (#391) 2025-02-24 15:58:34 -05:00
Dave Horton d81a0167cf scripts for import and export of database 2025-02-12 08:28:43 -05:00
Dave Horton 86d50d94cb optionally send invites to our slack channel on signup (#385) 2025-02-05 00:06:58 -05:00
Dave Horton ad3ec926ee proper version 2025-02-02 17:11:33 -05:00
Dave Horton fab8a391b7 update deps 2025-01-14 10:46:42 -05:00
Dave Horton ce4618523c correct clients.password col name (#373)
* correct clients.password col name

* fix #372
2024-12-28 16:42:32 -05:00
Dave Horton e080118b6a minor logging changes 2024-12-13 10:47:25 -05:00
Dave HortonandHoan Luu Huu 843980c7f6 #361 (#362)
* #361

* fix typo in db upgrade script

---------

Co-authored-by: Hoan Luu Huu <110280845+xquanluu@users.noreply.github.com>
2024-11-26 20:25:25 -05:00
Dave Horton 5c7bac91a8 update to latest speech-utils 2024-10-18 12:29:05 -04:00
Dave Horton 84d83a0a48 playht test failing due to use of incorrect language name en-US (#356) 2024-10-14 20:58:23 -04:00
Dave Horton 4cddbd83a1 update to version of realtime-db with fix for expires (#349) 2024-09-18 08:24:47 -04:00
Dave Horton 6275aac341 bump version 2024-09-04 13:34:52 +01:00
Dave Horton ed71abd675 added private_newtwork_cidr to system_information table (#341)
* added private_newtwork_cidr to system_information table

* db schema upgrade to add system_information.private_network_cidr in 0.9.2

* increase size of system_information.private_network_cidr to varchar(8192)
2024-08-18 12:49:06 -04:00
Dave Horton ffe9cb23eb update speech-utils (#325) 2024-05-28 18:24:57 -04:00
Dave Horton 2436bea6ea add support for LCC updateCall with conferenceParticipantState (#296)
* add support for LCC updateCall with conferenceParticipantState

* wip

* wip
2024-04-22 11:06:08 -04:00
Dave Horton f67abddbd4 bug: attempting to add duplicate dns records on hosted system (#312) 2024-04-19 18:13:27 -04:00
Dave Horton 40de2c5945 option_ping was incorrectly removed, adding back (#305) 2024-04-08 08:56:31 -04:00
Dave Horton 3a299bc3ca update to speech utils with azure 1.36.0 (#303) 2024-04-07 17:45:33 -04:00
Dave Horton 70c9407742 update to speech utils with azure 1.36.0 2024-04-07 12:16:55 -04:00
Dave Horton dba66d58fc back out column addition of -register_use_tls 2024-04-06 13:48:26 -04:00
Dave Horton 0ff3d22faf Revert "feat send options ping for sip gateway (#273)"
This reverts commit a4792a521f.
2024-04-06 13:27:32 -04:00
Dave Horton 3ac9693735 update speech-utils with fixes for deepgram production api and tts streaming 2024-03-24 08:15:00 -04:00
Dave Horton 3ad54a0e72 update to released deepgram tts voices (#299) 2024-03-13 09:16:12 -04:00
Dave Horton 32b317ae68 update to latest speech-utils 2024-02-12 21:11:49 -05:00
Dave Horton 832a4e8032 update db-helpers 2024-01-17 13:24:51 -05:00
Dave Horton f2c635268f #283: fix for db upgrade script 2024-01-10 10:11:47 -05:00
Dave Horton 7d355f2fac enable azure stt through a proxy (#275) 2023-12-18 12:37:10 -05:00
Dave Horton 92d9468570 0.8.5 2023-11-09 12:37:01 -05:00
Dave HortonandQuan HL e6168d0a3c changes to enable/disable direct calling from chrome extension (#253)
* changes to enable/disable direct calling from chrome extension

* changes to db upgrade script

* fix upgrade db script

---------

Co-authored-by: Quan HL <quan.luuhoang8@gmail.com>
2023-11-06 09:37:35 -05:00
Dave Horton a4e767e1e4 more useful logging of dns errors 2023-10-25 14:28:48 -04:00
Dave Horton 7b805130bb Feature/retrieve registered users (#243)
* add GET /Accounts/:sid/RegisteredSipUsers

* fix vulnerabilities
2023-10-22 11:32:59 -04:00
Dave Horton f8720bab9f update to jambonz.cloud for saas 2023-09-20 20:56:18 -04:00
Dave Horton 77363d54d1 #230 - support for option to pad crypto on outdial using srtp (#231) 2023-09-15 13:34:03 -04:00
Dave Horton 042ad9f629 update to jambonz.cloud 2023-08-18 08:41:17 -04:00
Dave Horton de7b74f898 fix exception when receiving webhook with no type (#213) 2023-08-03 19:34:38 -04:00
Dave Horton 8e200251ca slight change to pino logger construction (#206)
* slight change to pino logger construction

* remove console.log in test

* added test logging back in

* test
2023-07-23 11:26:57 -04:00
Dave Horton dcf1895920 db_upgrade: add missing schema change to add sip_gateways.protocol 2023-07-03 13:38:17 +01:00
Dave Horton b4237beeeb minor logging 2023-06-28 09:22:17 +01:00
Dave Horton 0406e42c19 logging 2023-06-25 14:08:15 +01:00
Dave Horton 533cd2f47d minor logging 2023-06-25 14:01:30 +01:00
Dave Horton 742884cc72 fix parens in upgrade script 2023-06-25 13:07:42 +01:00
Dave Horton 9fccfa2a73 bugfix: 0.8.4 schema upgrades were not being applied 2023-06-25 12:58:21 +01:00
Dave Horton 3356b7302a 0.8.4 2023-06-24 20:23:28 +01:00
Dave Horton 71ecf453f8 allow identical phone_numbers to exist from different carriers (#186) 2023-06-14 08:23:08 -04:00
Dave Horton 494f1cf784 update dependencies (#184) 2023-06-09 15:20:35 -04:00
Dave Horton c2065ef787 fix twilio sip gateway addresses, previously had an invalid CIDR 2023-05-31 09:29:05 -04:00
Dave Horton 307787526d bugfix: one account could potentially use speech creds from a different account 2023-05-30 14:58:54 -04:00
Dave Horton cac6e2117d fix typo in prev commit 2023-05-24 09:12:55 -04:00
Dave Horton 6d34d6f886 docker build fix for db-create job 2023-05-24 09:11:36 -04:00
Dave Horton 964afc1660 fix docker build 2023-05-24 09:05:34 -04:00
Dave Horton f3ec847474 fix docker build 2023-05-15 14:07:39 -04:00
Dave Horton cf7ce675f5 fix to db upgrade script 2023-05-15 09:54:34 -04:00
Dave Horton b06032b5f0 0.8.3 2023-05-11 09:24:57 -04:00
Dave Horton f79f96b884 update deps 2023-05-08 13:10:44 -04:00
Dave HortonandQuan HL 02806a109c added schema changes for LCR (#150)
* added schema changes for LCR

* fix FK

* first draft

* force drop table

* add testcases

* swagger updated

* update code

* wip: add service provider LCR

* fix userpermission on lcr

* add lcr.is_active

* remove FK constraints on lcr

* wip

* wip

* wip

* fix: review comments

* fix: final review

* fix: final review

* fix: update database schema

* fix: update database schema

* fix: update database schema

* update schema

* fix: review comments

* lcr_routes.priority should not be unique

* fix review comments

---------

Co-authored-by: Quan HL <quan.luuhoang8@gmail.com>
2023-05-05 20:09:34 -04:00
Dave Horton 077c791e37 update integration test data with new twilio IP range 2023-05-04 13:14:28 -04:00
Dave Horton c97874ed1f add tls_port and wss_port to sbc_addresses, update some deps (#160)
* add tls_port and wss_port to sbc_addresses, update some deps

* add system_information table
2023-05-01 10:45:19 -04:00
Dave Horton 616a0b364d push to docker 2023-04-10 09:40:50 -04:00
Dave Horton 1b764b31e6 update statement for sbc_addresses.last_updated 2023-04-06 09:15:11 -04:00
Dave Horton 84305e30cc add sbc_addresses.last_updated 2023-04-06 07:37:27 -04:00
Dave Horton efe7e22109 increase size of voip_carriers.register_status 2023-04-03 09:50:38 -04:00
Dave Horton 7a67ed704c add voip_carriers.register_status 2023-04-01 19:09:03 -04:00
Dave Hortonandsnyk-bot 57110ede76 fix: Dockerfile to reduce vulnerabilities (#137)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3368756
- https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3368756
- https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-5291792
- https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-5291792

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2023-03-31 07:57:08 -04:00
Dave Horton 39260f0b47 bump version 2023-03-28 14:14:44 -04:00
Dave Horton 409ad68123 fix tests for AWS speech 2023-03-24 08:59:16 -04:00
Dave Horton 17afb7102a update speech-utils with fix for aws tts 2023-03-24 08:19:18 -04:00
Dave Horton 389017a5c4 update to latest speech-utils 2023-03-20 15:37:35 -04:00
Dave Horton c4cc6c51ee eliminate parsing of jwt to support either jwt or api key (#124)
* eliminate parsing of jwt to support either jwt or api key

* fixes for preventing non-authorized changes to users

* update to AWS v3 api
2023-03-14 18:54:56 -04:00
Dave Horton aea7388ba0 refactor of speech-utils (#123) 2023-03-14 10:01:05 -04:00
Dave Horton 3d86292a90 prevent updates to users that would move them to a different account … (#122)
* prevent updates to users that would move them to a different account or service provider, or make them admin users

* bugfix: when updating account as admin user, verify the account sid

* validate account sid when SP user tries to update
2023-03-08 11:38:49 -05:00
Dave Horton 08962fe7ba bugfix: get of speech credential was not returning soniox api_key 2023-03-03 13:49:36 -05:00
Dave Horton e573f6ab06 change property names for custom speech 2023-03-02 15:28:53 -05:00
Dave Horton 4934e2a1ca add support for custom speech api (#121) 2023-03-02 14:13:41 -05:00
Dave Horton d4506fb8fa bump version 2023-02-24 10:05:14 -05:00
Dave Horton 042a2c37dc update dockerfile 2023-02-23 08:21:30 -05:00
Dave Horton f7f3881d70 update to @jambonz/verb-specifications (#109) 2023-02-15 10:15:06 -05:00
Dave Horton a46c24b3aa change applications.app_json to TEXT as it could hold large strings 2023-02-03 16:34:11 -05:00
Dave Horton 642a6615a0 additional db upgrade statements for 0.8 2023-01-10 10:28:46 -05:00
Dave Horton b0f317b545 final fix for proper alter table 2023-01-09 15:53:10 -05:00
Dave Horton 43d991ef1c fix error in db update statement 2023-01-09 15:41:24 -05:00
Dave Horton 5ab1ad9056 fixes to update db script for 0.8.0 2023-01-09 14:51:54 -05:00