4fe2d7cb59
Fix HTTP 500 in `/api/v1/emails/check_confirmation` ( #25595 )
1 year ago
683ba5ecb1
Fix rails `rewhere` deprecation warning in directories api controller ( #25625 )
1 year ago
1d622c8033
Add POST /api/v1/conversations/:id/unread ( #25509 )
1 year ago
a5b6f6da80
Change /api/v1/statuses/:id/history to always return at least one item ( #25510 )
1 year ago
602c458ab6
Add finer permission requirements for managing webhooks ( #25463 )
1 year ago
fd23f50243
Fix wrong view being displayed when a webhook fails validation ( #25464 )
1 year ago
b9bc9d0bda
Fix incorrect pagination headers in `/api/v2/admin/accounts` ( #25477 )
1 year ago
f20698000f
Fix always redirecting to onboarding in web UI ( #25396 )
1 year ago
ec59166844
Fix ArgumentError when loading newer Private Mentions ( #25399 )
1 year ago
bca649ba79
Change edit profile page ( #25413 )
1 year ago
39110d1d0a
Fix CAPTCHA page not following design pattern of sign-up flow ( #25395 )
1 year ago
6637ef7852
Add unsubscribe link to e-mails ( #25378 )
1 year ago
4c9406bdb0
Add time zone preference ( #25342 )
1 year ago
75e299f440
Remove unused `redis_info` method Admin::Dashboard ( #25345 )
1 year ago
4eda233e09
Add webhook templating ( #23289 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
1 year ago
bacb674921
Add exclusive lists ( #22048 )
...
Co-authored-by: Liam Cooke <liam@liamcooke.com>
Co-authored-by: John Holdun <john@johnholdun.com>
Co-authored-by: Effy Elden <effy@effy.space>
Co-authored-by: Lina Reyne <git@lina.pizza>
Co-authored-by: Lina <20880695+necropolina@users.noreply.github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
1 year ago
0daf78f903
Add `allow_other_host: true` to backups controller ( #25266 )
1 year ago
8884d1ece0
Add support for importing lists ( #25203 )
1 year ago
e9385e93e9
Add a confirmation screen when suspending a domain ( #25144 )
1 year ago
2b45fecde1
Fix multiple N+1s in ConversationsController ( #25134 )
1 year ago
9017df7178
Remove dead code in Api::V1::FeaturedTagsController ( #25073 )
2 years ago
fea0830614
Remove invalid X-Frame-Options: ALLOWALL ( #25070 )
2 years ago
785e650ab4
Fix uncaught TypeError in POST `/api/v1/featured_tags` ( #25072 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
45d98959ac
Fix uncaught NoMethodError in POST `/api/v1/featured_tags` ( #25063 )
2 years ago
e13d2edd47
Fix “Authorized applications” inefficiently and incorrectly getting last use date ( #25060 )
2 years ago
ce8b5899ae
Fix POST `/api/v1/admin/domain_allows` returning 200 when no domain is specified ( #24958 )
2 years ago
36a77748b4
Order sessions by most-recent to least-recently updated ( #25005 )
2 years ago
45ba9ada34
Fix race condition when reblogging a status ( #25016 )
2 years ago
bec6a1cad4
Add hCaptcha support ( #25019 )
2 years ago
e60414792d
Add polling and automatic redirection to `/start` on email confirmation ( #25013 )
2 years ago
433ab0c9a3
Fix uncaught NoMethodError error in `/api/v1/admin/canonical_email_blocks/test` ( #24947 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
c0ea33e3fc
Make it possible to upload audio and video to Heroku app ( #24866 )
2 years ago
569b39256b
Bump rubocop-rails 2.19.1 with update .rubocop_todo.yml ( #24469 )
2 years ago
d5a185d721
Autofix Rubocop Style/CaseLikeIf ( #23756 )
2 years ago
08fb9d300a
Spec coverage for settings/preferences/* controllers ( #24825 )
2 years ago
668a19a2f3
Fix Performance/DeletePrefix cop ( #24796 )
2 years ago
f1c1dd0118
Rename `with_lock` to `with_redis_lock` to avoid confusion with ActiveRecord's method ( #24741 )
2 years ago
9189e90ff2
Add fallback redirection when getting a webfinger query `LOCAL_DOMAIN@LOCAL_DOMAIN` ( #23600 )
...
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2 years ago
32a030dd74
Rewrite import feature ( #21054 )
2 years ago
6e226f5a32
Fix Rails/ActionOrder cop ( #24692 )
2 years ago
faa336e3f7
Change logged-out WebUI HTML pages to be cached for a few seconds ( #24708 )
2 years ago
1c61869eed
Fix /api/v1/custom_emojis being cached even when unauthenticated API access is disallowed ( #24665 )
2 years ago
b0bf6216e6
Fix /api/v1/instance/domain_blocks being unconditionally cached ( #24662 )
2 years ago
62ab7506d6
Fix /actor needlessly reading session cookie and varying on Signature ( #24664 )
2 years ago
1419f90ef2
Fix some user-independent endpoints potentially reading session cookies ( #24650 )
2 years ago
276c39361b
Fix anonymous visitors getting a session cookie on first visit ( #24584 )
2 years ago
6084461cd0
Change unauthenticated responses to be cached in REST API ( #24348 )
2 years ago
e9a79d46cd
Fix crash when SSO_ACCOUNT_SETTINGS is not defined ( #24628 )
2 years ago
0a5f0a8b20
Remove instance variables from helper usage ( #24203 )
2 years ago
58a1b2e330
Fix caching logic with regards to Accept-Language, Cookie, and Signature ( #24604 )
2 years ago
e98c86050a
Refactor `Cache-Control` and `Vary` definitions ( #24347 )
2 years ago
4db8230194
Add trend management to admin API ( #24257 )
2 years ago
e5c0b16735
Add progress indicator to sign-up flow ( #24545 )
2 years ago
d193bc8c5c
Remove unused methods in 2FA OTP Auth Controller ( #24220 )
2 years ago
9d08b81193
Fix user archive takeouts when using OpenStack Swift ( #24431 )
2 years ago
280fa3b2c0
Fix invalid/expired invites being processed on sign-up ( #24337 )
2 years ago
a9b5598c97
Change user settings to be stored in a more optimal way ( #23630 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
e084b5b82d
Fix user archive takeout when using OpenStack Swift or S3 providers with no ACL support ( #24200 )
2 years ago
0663803348
Move link header setting to after_action ( #24251 )
2 years ago
e633b26f4f
Add allow_other_host in redirects which may go outside app ( #24252 )
2 years ago
2626097869
Fix Rails cache namespace being overriden with `v2` for cached statuses ( #24202 )
2 years ago
7bef11630d
Remove references to non-existent actions ( #24183 )
2 years ago
160f38f03d
Workaround the ActiveRecord / Marshal serialization bug on Ruby 3.2 ( #24142 )
...
Co-authored-by: Jean Boussier <jean.boussier@gmail.com>
2 years ago
d75a1e5054
Link to the Identity provider's account settings from the account settings ( #24100 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
75e5a6e437
Change user backups to use expiring URLs for download when possible ( #24136 )
2 years ago
bd047acc35
Replace `Status#translatable?` with language matrix in separate endpoint ( #24037 )
2 years ago
25d36b6edd
Autofix Rubocop Style/RedundantArgument ( #23798 )
2 years ago
a232a1feb8
Fix misleading error code when receiving invalid WebAuthn credentials ( #23568 )
2 years ago
39c7236649
Redirect users to SLO at the IdP after logging them out of Mastodon. ( #24020 )
2 years ago
d258ec8e3b
Prefer the stored location as after_sign_in_path in Omniauth Callback Controller ( #24073 )
2 years ago
f8bb4d0d6b
Fix server error when failing to follow back followers from `/relationships` ( #23787 )
2 years ago
c2a046ded1
Fix “Remove all followers from the selected domains” being more destructive than it claims ( #23805 )
2 years ago
434770f580
Autofix Rubocop Rails/FindById ( #23762 )
2 years ago
717683d1c3
Autofix Rubocop remaining Layout rules ( #23679 )
2 years ago
aef0051fd0
Enable Rubocop HTTP status rules ( #23717 )
2 years ago
2177daeae9
Autofix Rubocop Style/RedundantBegin ( #23703 )
2 years ago
c38bd17657
Autofix Rubocop Style/TrailingCommaInArguments ( #23694 )
2 years ago
e2a3ebb271
Autofix Rubocop Style/IfUnlessModifier ( #23697 )
2 years ago
a6f77aa28a
Autofix Rubocop Lint/AmbiguousOperatorPrecedence ( #23681 )
2 years ago
d6930b3847
Add API parameter to safeguard unexpect mentions in new posts ( #18350 )
2 years ago
832595d1e7
Remove posts count and last posts from ActivityPub representation of hashtag collections ( #23460 )
2 years ago
f68bb52556
Apply Rubocop Style/NegatedIfElseCondition ( #23451 )
2 years ago
2e652aa81c
Apply Rubocop Performance/RedundantSplitRegexpArgument ( #23443 )
...
* Apply Rubocop Performance/RedundantSplitRegexpArgument
* Update app/controllers/concerns/signature_verification.rb
2 years ago
20a479ff7c
Change `POST /settings/applications/:id` to regenerate token on scopes change ( #23359 )
...
Fixes #23096
2 years ago
21780c0204
Change notifications per page from 15 to 40 in REST API ( #23348 )
2 years ago
68dcbcb7bf
Add more specific error messages to HTTP signature verification ( #21617 )
...
* Return specific error on failure to parse Date header
* Add error message when preferredUsername is not set
* Change error report to be JSON and include more details
* Change error report to differentiate unknown account and failed refresh
* Add tests
2 years ago
343e1fe8e9
Add confirmation screen when handling reports ( #22375 )
...
* Add confirmation screen on moderation actions
* Add flash notice when a report has been processed
* Refactor tests
* Add tests
2 years ago
4b92e59f4f
Add support for editing media description and focus point of already-posted statuses ( #20878 )
...
* Add backend support for editing media attachments of existing posts
* Allow editing media attachments of already-posted toots
* Add tests
2 years ago
b034dc42be
Fix /api/v1/admin/trends/tags using wrong serializer ( #18943 )
...
* Fix /api/v1/admin/trends/tags using wrong serializer
Fix regression from #18641
* Only use `REST::Admin::TagSerializer` when the user can `manage_taxonomies`
* Fix admin trending hashtag component to not link if `id` is unknown
2 years ago
fcc4c9b34a
Change domain block CSV parsing to be more robust and handle more lists ( #21470 )
...
* Change domain block CSV parsing to be more robust and handle more lists
* Add some tests
* Improve domain block import validation and reporting
2 years ago
f33e22ae4c
Allow changing hide_collections setting with the api ( #22790 )
...
* Allow changing hide_collections setting with the api
This is currently only possible with app/controllers/settings/profiles_controller.rb
and is the only difference in the allowed parameter between the two controllers
* Fix the lint issue
* Use normal indent
2 years ago
aefefc74c4
Change referrer-policy to no-referrer application-wide ( #23014 )
2 years ago
18d00055f4
Add dropdown menu item to open admin interface for remote domains ( #21895 )
...
* Allow /admin/instances/:domain to handle IDNs
* Add dropdown menu item to open admin interface for remote domains
2 years ago
42f9693d00
Fix PermalinkRedirector not applying to users with moved accounts ( #22497 )
...
Fixes #22262
2 years ago
8556a649d5
Fix changing domain block severity not undoing individual account effects ( #22135 )
...
* Fix changing domain block severity not undoing individual account effects
Fixes #22133
* Add tests
2 years ago
1b5d207131
Fix single name variables on controller folder ( #20092 )
...
Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>
Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>
Co-authored-by: Effy Elden <effy@effy.space>
2 years ago
623d3d2e32
Change CSP directives on API to be tight and concise ( #20960 )
2 years ago
63b379c2d9
Fix N+1 queries from in NotificationsController ( #21202 )
...
Co-authored-by: Nonexistent <nx@example.org>
2 years ago
441cac758f
Allow adding relays while secure mode & limited federation mode are enabled ( #22324 )
2 years ago
5fb1c3e934
Revoke all authorized applications on password reset ( #21325 )
...
* Clear sessions on password change
* Rename User::clear_sessions to revoke_access for a clearer meaning
* Add reset paassword controller test
* Use User.find instead of User.find_for_authentication for reset password test
* Use redirect and render for better test meaning in reset password
Co-authored-by: Effy Elden <effy@effy.space>
2 years ago
Daniel M Brasil
Matt Jankowski
Claire
Eugen Rochko
Darius Kazemi
Frankie Roberto
zunda
Nick Schonning
Robert R George
Jean byroot Boussier
CSDUMMI
Christian Schmidt
Carl Schwan
David Vega
nametoolong
Effy Elden
Francis Murillo