9bd2b6be86
Make the streaming API also handle websockets (because trying to get the browser EventSource interface to
...
work flawlessly was a nightmare). WARNING: This commit makes the web UI connect to the streaming API instead
of ActionCable like before. This means that if you are upgrading, you should set that up beforehand.
8 years ago
557de8e24c
Update settings to re-use admin layout, one big navigation tree, improve settings forms
8 years ago
0bf8c1b5d8
Do not automatically login after password reset, as it would circumvent two-factor auth (if enabled)
...
Do not require e-mail address changes to be re-confirmed, it's only trouble for no real benefit
8 years ago
9b8670c939
Added optional two-factor authentication
8 years ago
8008b60324
Fix key names in statsd
8 years ago
fd23876e75
Improve StatsD instrumentation
8 years ago
4bd0286045
Fix up timeout, improve contrast on "show more", add responsive style
...
for extremely wide monitors
8 years ago
f80c55b591
Fix error
8 years ago
e161d2acdc
Override Rack::Request to use the same trusted proxy settings as Rails
8 years ago
f748a91ec7
Fix #463 - Fetch and display previews of URLs using OpenGraph tags
8 years ago
86264a950c
Add optional StatsD performance tracking
8 years ago
a898072d76
Add Heroku deployment support
8 years ago
db40fd4641
Change default S3 ACL string used by Paperclip from 'public' (which is invalid) to 'public-read'
8 years ago
f29df16eea
Fix Paperclip timeout setting. Fix bug introduced in #437
8 years ago
438446b397
Add read timeout to paperclip when it's downloading remote images
8 years ago
238233440f
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
8 years ago
7855a9b58b
Don't use rack timeout in any but production environments
8 years ago
9d4f96f440
Removing external hub completely, fix #333 fixing digit-only hashtags,
...
removing web app capability from non-webapp pages
8 years ago
4a167885b2
Fix paperclip config
8 years ago
311f2354cf
Update Paperclip config to allow plugging in Minio instead of AWS
8 years ago
5522606989
Add single user mode
8 years ago
e5e702a976
Adding configurable e-mail blacklist
8 years ago
f6b99b05d3
Do not use expiring links after all
8 years ago
595f592304
Do not autoplay videos, display play button instead. Use expiring links when using S3. Do not keep originals
...
for avatars/headers, resize avatars down to 120x120 instead of 300x300. Set cache headers on S3 stuff, also
make it private (aka only accessible via expiring links to prevent hotlinking)
8 years ago
e20d57a9e6
Fix cloudfront config
8 years ago
b245dc1575
Add Cloudfront support
8 years ago
67db2cd871
Upgrade Paperclip to 5, AWS-SDK to 2, do not generate medium/small versions of avatars
8 years ago
3c1c2b0e06
Adding rack timeout of 30sec, PuSH jobs moved to push queue so they
...
can be processed separately
8 years ago
56b9edd476
Don't rate-limit PuSH endpoints
8 years ago
79075e1303
Fix URLs in inline-rendered XML
8 years ago
4d3cd93221
Fix URLs in ApplicationController.renderer
8 years ago
de5764c372
Fix reset date format when rate limited
8 years ago
30f9e9e624
Remove Neo4J
8 years ago
8ab2fcbb2c
Mini Profiler not working well, remove it
8 years ago
30010a6dbd
Moving some counter queries out of subqueries in the API
8 years ago
0e0b4f9e59
i18n for devise mailer too
8 years ago
1b61e404b4
Localizations for most server-side strings
8 years ago
e71b152d89
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
46191e7071
Adding Emoji One
8 years ago
9da30e31c8
Fix region setting for AWS gem
8 years ago
8f0869876b
Improved configuration from ENV, cleaned up timeline filter methods
...
to be more readable, add extra logging to process feed service
8 years ago
89e887b44a
Fix insecure S3 URLs
8 years ago
54b9a42b3a
Fix URL configuration when S3 is enabled
8 years ago
ec43fb73ed
Improve S3 config
8 years ago
eb6ad973d1
Adding optional S3, fail-mastodon
8 years ago
e7035a4d39
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
ff0eca7337
Restrict access to oauth/applications to admins only
8 years ago
6657414266
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
be98addccc
Improving all forms
8 years ago
02613aef3b
Adding application/jrd+json webfinger resource
8 years ago
Eugen Rochko
Effy Elden