5c57f15503
Do not store last visited URL from API controllers ( #1330 )
...
Sign-in redirects you back to last visited URL, but in case of API requests,
this sometimes redirected users to an API URL that, of course, greeted them
with an {"error":"The access token is invalid"}
8 years ago
250beb1971
Revert earlier fix due to new bug reports
8 years ago
42b6d5aca5
Increase max bitrate of converted webms, slightly optimized counter queries
...
(Because postgres can tell that count(*) needs no extra checks, but
counting a specific column requires them)
8 years ago
0cb5a2a0a7
Add digest e-mails
8 years ago
ff8a080d40
Add validation of media attachments, clean up mastodon-own exception classes
8 years ago
b4ec84067a
API now respects ?limit param as long as it's within 2x default limit
8 years ago
4cbca05197
Potentially fix notifications issue
8 years ago
09a477c782
Add "locked" flag to accounts, prevent blocked users from following, force-unfollow blocked users
8 years ago
abeccf6eb2
X-RateLimit-Reset formatted with iso8601
8 years ago
c60df460af
Rename "publish" to "toot" in english locale, fix lightbox showing old image
...
before loading new one, cache notifications API, fix missing follow button
on public profiles
8 years ago
f6a975af8b
More query optimizations
8 years ago
0aeae195cb
Better error message in doorkeeper json response
8 years ago
0a68464995
Performance improvement for notifications API
8 years ago
e71b152d89
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
a6667f7f58
Replace setting custom CORS headers with rack-cors, set it on /oauth/token endpoint
8 years ago
beb36e24fe
API pagination for all collections using Link header
8 years ago
d98b43cf56
Move timelines API from statuses to its own controller, add a check for
...
resources that require a user context vs those that don't (such as public timeline)
/api/v1/statuses/public -> /api/v1/timelines/public
/api/v1/statuses/home -> /api/v1/timelines/home
/api/v1/statuses/mentions -> /api/v1/timelines/mentions
/api/v1/statuses/tag/:tag -> /api/v1/timelines/tag/:tag
8 years ago
e7035a4d39
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
6657414266
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
4470966cd9
Fix #100 - Add "back" button to certain views
...
Also fix reloading of timelines after merge-type events
8 years ago
41aae40927
Fix #16 - Optimize n+1 queries when checking reblogged/favourited values for status lists in API
8 years ago
fe77921e47
Catching more exceptions that slipped through, removing AR logging from
...
production as it's very verbose and not very useful
8 years ago
96ad9b0db1
Meaningful validation errors in API response
8 years ago
7e14eefc81
Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app
...
registration API
8 years ago
0e9c1a297a
Improved error handling for FollowRemoteService
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
10ba09f546
Upgrade to Rails 5.0.0.1
8 years ago
b640f35621
Writing out more tests, fixed some bugs
9 years ago
447cfef62d
Improving feed queries, switching API to doorkeeper authentication
9 years ago
ab6696e855
Adding doorkeeper, adding a REST API
...
POST /api/statuses Params: status (text contents), in_reply_to_id (optional)
GET /api/statuses/:id
POST /api/statuses/:id/reblog
GET /api/accounts/:id
GET /api/accounts/:id/following
GET /api/accounts/:id/followers
POST /api/accounts/:id/follow
POST /api/accounts/:id/unfollow
POST /api/follows Params: uri (e.g. user@domain)
OAuth authentication is currently disabled, but the API can be used with HTTP Auth.
9 years ago
3b4e04dc32
Fixing some bugs, adding pending test examples
9 years ago
Eugen