Commit graph

1336 commits

Author SHA1 Message Date
Sebastian Jambor
b45e686a89 Merge tag 'v4.1.3' into merge-security-fix 2023-07-11 13:07:56 +02:00
Claire
f8930a67a0 Change /api/v1/statuses/:id/history to always return at least one item (#25510) 2023-07-06 13:45:40 +02:00
Claire
e65e3a6d14 Add finer permission requirements for managing webhooks (#25463) 2023-07-06 13:45:40 +02:00
Claire
8acbfc6ab1 Fix wrong view being displayed when a webhook fails validation (#25464) 2023-07-06 13:45:40 +02:00
Daniel M Brasil
fd1ffd72eb Fix incorrect pagination headers in /api/v2/admin/accounts (#25477) 2023-07-06 13:45:40 +02:00
Claire
2779bce9a2 Add fallback redirection when getting a webfinger query LOCAL_DOMAIN@LOCAL_DOMAIN (#23600)
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2023-07-06 13:45:40 +02:00
Claire
1301af60e0 Fix race condition when reblogging a status (#25016) 2023-07-06 13:45:40 +02:00
Claire
b3cbcd7447 Fix “Authorized applications” inefficiently and incorrectly getting last use date (#25060) 2023-07-06 13:45:40 +02:00
Claire
72d96bf17a Remove invalid X-Frame-Options: ALLOWALL (#25070) 2023-07-06 13:45:40 +02:00
Claire
036ac5b5c9 Fix ArgumentError when loading newer Private Mentions (#25399) 2023-07-06 13:45:40 +02:00
Claire
3e1724e972 Fix multiple N+1s in ConversationsController (#25134) 2023-07-06 13:45:40 +02:00
Claire
bc8592627b Fix user archive takeouts when using OpenStack Swift (#24431) 2023-07-06 13:45:40 +02:00
Sebastian Jambor
a7e5d320fe new signup page 2023-04-17 17:54:35 +02:00
Sebastian Jambor
b15ac6379a follow redirects in json-ld proxy 2023-04-17 17:54:35 +02:00
Sebastian Jambor
ed520d497c set cors header 2023-04-17 17:54:35 +02:00
Sebastian Jambor
22cdacd87a use faraday for json ld proxy again to allow for uris with queries 2023-04-17 17:54:35 +02:00
Sebastian Jambor
57f7eb4cd8 add sender to activity log json 2023-04-17 17:54:35 +02:00
Sebastian Jambor
db42b86def replace faraday by net/http to set timeouts 2023-04-17 17:54:35 +02:00
Sebastian Jambor
40f8dbe98f make json-ld endpoint non-blocking 2023-04-17 17:54:35 +02:00
Sebastian Jambor
864d3f4c1b make activity_log endpoint non-blocking 2023-04-17 17:54:35 +02:00
Sebastian Jambor
5a49d96ebf add json ld route 2023-04-17 17:54:15 +02:00
Sebastian Jambor
b75dde9c84 remove unused index route 2023-04-17 17:54:15 +02:00
Sebastian Jambor
18bc2ec7cd increase number of syllables for last name 2023-04-17 17:53:13 +02:00
Sebastian Jambor
a3b8fa244a allow multiple clients for the same id 2023-04-17 17:53:13 +02:00
Sebastian Jambor
3c2ae00cb7 redirect to sign-up after logging out 2023-04-17 17:53:13 +02:00
Sebastian Jambor
ff20304f75 when not logged in, / redirects to sign-up; when logged-in, / redirects to activity_log 2023-04-17 17:53:13 +02:00
Sebastian Jambor
71df2a12e1 one-click sign-up with autogenerated usernames 2023-04-17 17:53:13 +02:00
Sebastian Jambor
e13a05cb83 integrate audience helper 2023-04-17 17:50:35 +02:00
Sebastian Jambor
b0a0f57e82 fix keep-alive 2023-04-17 17:50:35 +02:00
Sebastian Jambor
7222173cc6 starting a test for audience helper 2023-04-17 17:50:35 +02:00
Sebastian Jambor
e97ac728d4 removing debug output 2023-04-17 17:50:35 +02:00
Sebastian Jambor
d81f497970 log outbound events as well 2023-04-17 17:50:35 +02:00
Sebastian Jambor
ddcfbc4745 showing inbound activities in frontend via redis pub/sub 2023-04-17 17:50:35 +02:00
Sebastian Jambor
e17b6aa162 prototyping server sent events 2023-04-17 17:50:35 +02:00
Claire
51572ac615 Fix invalid/expired invites being processed on sign-up (#24337) 2023-04-04 12:41:27 +02:00
Claire
ae64c5b7ec Fix user archive takeout when using OpenStack Swift or S3 providers with no ACL support (#24200) 2023-04-04 12:41:27 +02:00
Eugen Rochko
6db76875fd Change user backups to use expiring URLs for download when possible (#24136) 2023-03-16 22:48:42 +01:00
Claire
8c4ea7d715 Fix misleading error code when receiving invalid WebAuthn credentials (#23568) 2023-03-16 11:45:53 +01:00
Claire
aff3f850de Fix server error when failing to follow back followers from /relationships (#23787) 2023-03-13 18:39:35 +01:00
Claire
0dc342df81 Fix “Remove all followers from the selected domains” being more destructive than it claims (#23805) 2023-03-13 18:36:15 +01:00
Claire
832595d1e7
Remove posts count and last posts from ActivityPub representation of hashtag collections (#23460) 2023-02-08 17:57:25 +01:00
Nick Schonning
f68bb52556
Apply Rubocop Style/NegatedIfElseCondition (#23451) 2023-02-08 07:07:36 +01:00
Nick Schonning
2e652aa81c
Apply Rubocop Performance/RedundantSplitRegexpArgument (#23443)
* Apply Rubocop Performance/RedundantSplitRegexpArgument

* Update app/controllers/concerns/signature_verification.rb
2023-02-08 02:25:20 +01:00
Claire
20a479ff7c
Change POST /settings/applications/:id to regenerate token on scopes change (#23359)
Fixes #23096
2023-02-02 12:03:49 +01:00
Eugen Rochko
21780c0204
Change notifications per page from 15 to 40 in REST API (#23348) 2023-02-01 11:23:54 +01:00
Claire
68dcbcb7bf
Add more specific error messages to HTTP signature verification (#21617)
* Return specific error on failure to parse Date header

* Add error message when preferredUsername is not set

* Change error report to be JSON and include more details

* Change error report to differentiate unknown account and failed refresh

* Add tests
2023-01-18 16:47:56 +01:00
Claire
343e1fe8e9
Add confirmation screen when handling reports (#22375)
* Add confirmation screen on moderation actions

* Add flash notice when a report has been processed

* Refactor tests

* Add tests
2023-01-18 16:40:09 +01:00
Claire
4b92e59f4f
Add support for editing media description and focus point of already-posted statuses (#20878)
* Add backend support for editing media attachments of existing posts

* Allow editing media attachments of already-posted toots

* Add tests
2023-01-18 16:33:55 +01:00
Claire
b034dc42be
Fix /api/v1/admin/trends/tags using wrong serializer (#18943)
* Fix /api/v1/admin/trends/tags using wrong serializer

Fix regression from #18641

* Only use `REST::Admin::TagSerializer` when the user can `manage_taxonomies`

* Fix admin trending hashtag component to not link if `id` is unknown
2023-01-18 16:28:18 +01:00
Claire
fcc4c9b34a
Change domain block CSV parsing to be more robust and handle more lists (#21470)
* Change domain block CSV parsing to be more robust and handle more lists

* Add some tests

* Improve domain block import validation and reporting
2023-01-18 16:20:52 +01:00