From fac61a65bd8ac7e61a2d05ef5a65f234ea14f589 Mon Sep 17 00:00:00 2001 From: shuhaib s <95394061+shuhaib-aot@users.noreply.github.com> Date: Sun, 6 Jul 2025 22:35:44 -0700 Subject: [PATCH 1/6] Update VERSION --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 2d88a61bac..e3ef0b4568 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -v7.1.0 +v7.2.0-alpha From 313019e066f98ae943844cb36fe927f28a6fa829 Mon Sep 17 00:00:00 2001 From: abilpraju-aot Date: Tue, 9 Sep 2025 23:51:19 -0700 Subject: [PATCH 2/6] bugfix/FWF-5328 [bugfix] fixed ananymous issue --- src/middleware/handleFormsList.js | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/middleware/handleFormsList.js b/src/middleware/handleFormsList.js index 53ba0984f8..020913f4b7 100644 --- a/src/middleware/handleFormsList.js +++ b/src/middleware/handleFormsList.js @@ -37,10 +37,15 @@ module.exports = function (router) { } if(process.env.MULTI_TENANCY_ENABLED == "true" && !req.isAdmin){ - if(!req.token?.tenantKey){ + // For anonymous users (no token), skip tenant key check for form submissions + // Only enforce tenant key for authenticated users + if(req.token && !req.token.tenantKey){ return res.sendStatus(401); } - req.query.tenantKey = req.token.tenantKey + // Only set tenantKey if token exists and has tenantKey + if(req.token?.tenantKey){ + req.query.tenantKey = req.token.tenantKey + } } // Merge any additional query parameters req.query = { ...query, ...req.query }; From d30b38c16de05a9daa9d0ae18d366adb7a23f557 Mon Sep 17 00:00:00 2001 From: arun s Date: Wed, 8 Oct 2025 16:56:10 +0530 Subject: [PATCH 3/6] VERSION Update from 7.1.0 to 7.3.0 --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 2d88a61bac..6a82e3d1e7 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -v7.1.0 +v7.3.0 From 525a33d71c4885f31c9ecd5c706bbf37373c6ed0 Mon Sep 17 00:00:00 2001 From: Abil P Raju <83952803+abilpraju-aot@users.noreply.github.com> Date: Wed, 8 Oct 2025 04:30:08 -0700 Subject: [PATCH 4/6] Update formsflow-forms-ChangeLog.md --- formsflow-forms-ChangeLog.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/formsflow-forms-ChangeLog.md b/formsflow-forms-ChangeLog.md index f7cc6f3a55..2195f92055 100644 --- a/formsflow-forms-ChangeLog.md +++ b/formsflow-forms-ChangeLog.md @@ -9,7 +9,9 @@ - `Untested Features`: Newly introduced features or components that are yet to be thoroughly tested. - `Upcoming Features`: Planned features or enhancements that will be available in future releases. - `Known Issues`: Existing issues or problems that are acknowledged and will be addressed in subsequent updates. - +# Version 7.3.0 +### Fixed +- Fixed the tenant key handling for authenticated vs anonymous users. # Version 7.1.0 ### Added - Added FORMIO_JWT_EXPIRE env for handling token expire time From 92dee2eaaf6edf71094ad86c1bd1ba822ad87439 Mon Sep 17 00:00:00 2001 From: Abil P Raju <83952803+abilpraju-aot@users.noreply.github.com> Date: Wed, 8 Oct 2025 04:42:22 -0700 Subject: [PATCH 5/6] Update formsflow-forms-ChangeLog.md --- formsflow-forms-ChangeLog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/formsflow-forms-ChangeLog.md b/formsflow-forms-ChangeLog.md index 2195f92055..bfcf39f51f 100644 --- a/formsflow-forms-ChangeLog.md +++ b/formsflow-forms-ChangeLog.md @@ -11,7 +11,7 @@ - `Known Issues`: Existing issues or problems that are acknowledged and will be addressed in subsequent updates. # Version 7.3.0 ### Fixed -- Fixed the tenant key handling for authenticated vs anonymous users. +- Fixed tenant key handling for authenticated vs anonymous users [FWF-5328]. # Version 7.1.0 ### Added - Added FORMIO_JWT_EXPIRE env for handling token expire time From 9650865d675bffbac936012f695c139601f11c8f Mon Sep 17 00:00:00 2001 From: Arun S Date: Wed, 8 Oct 2025 19:37:43 +0530 Subject: [PATCH 6/6] Release version update to 7.3.0 from 7.2.0-alpha --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index e3ef0b4568..6a82e3d1e7 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -v7.2.0-alpha +v7.3.0