f4d7f4c687
Fix #238 - Add "favourites" column
8 years ago
80f186cdf0
Add nice error page for CSRF errors/cookie issue, and fix error page handling altogether
8 years ago
8e0c1914fb
Add tracking of OAuth app that posted a status, extend OAuth apps to have optional website field, add application details to API, show application name and website on detailed status views. Resolves #11
8 years ago
f2667139ad
Adding about/more page with extended information that can be set up by an admin
8 years ago
533448be42
Add extended about page stub
8 years ago
6d98465db2
Extend rails-settings-cached to merge db-saved hash values with defaults
8 years ago
7e7c2bbb0f
Migrate from ledermann/rails-settings to rails-settings-cached which allows global settings
...
with YAML-defined defaults. Add admin page for editing global settings. Add "site_description"
setting that would show as a paragraph on the frontpage
8 years ago
c8bcd413e2
Home column filters
8 years ago
4293e132d1
Persist UI settings, add missing localizations for German
8 years ago
0df070596e
Fix #416 - Generate random unique 14-byte (19 characters) shortcodes
...
for local attachments, use them in URLs. Check status privacy
before redirecting to actual file.
8 years ago
800f6cf6a3
Fix #390 - fix redirect after sign-up (to login page instead of homepage)
8 years ago
6ef2b5d1c7
Fix admin UI not loading JS, make sure to strip "acct:" out of remote account's usernames when authorizing follow
8 years ago
3e6b5d67dd
Fix uri expansion during remote follow
8 years ago
df2f14d2dd
Adding remote follow button
8 years ago
6a20c13009
Add API for retrieving favourites
8 years ago
2bc6e7c96e
Add API for retrieving blocked accounts
8 years ago
4030321d95
Support remote follow request providing URL instead of acct
8 years ago
57f6f80838
Add ability to use remote follow function on other sites
8 years ago
fde1917a54
Add preferences for follow request notification e-mails
8 years ago
cef68b9b1c
Follow requests send e-mail notifications, but are excluded from notifications API
...
Better initial state for unlisted/nsfw toggles
8 years ago
6a54df90c8
Replacing follow requests in the settings area with in-UI column
8 years ago
ef9e827c54
Adding follow requests API
8 years ago
d253b0dec6
Fix #86 - resolve layout breaking on zoom-out on accounts grid
8 years ago
302051ffcb
Add page for authorizing/rejecting follow requests
8 years ago
77cd58545d
Re-enable Webfinger for locked accounts but don't handle "follow" events
...
coming in via Salmon.
Currently no way to prevent remote follows, but they will only receive public
and unlisted posts
8 years ago
238233440f
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
8 years ago
09a477c782
Add "locked" flag to accounts, prevent blocked users from following, force-unfollow blocked users
8 years ago
d417da7d3a
Private visibility on statuses prevents non-followers from seeing those
...
Filters out hidden stream entries from Atom feed
Blocks now generate hidden stream entries, can be used to federate blocks
Private statuses cannot be reblogged (generates generic 422 error for now)
POST /api/v1/statuses now takes visibility=(public|unlisted|private) param instead of unlisted boolean
Statuses JSON now contains visibility=(public|unlisted|private) field
8 years ago
090e3a245d
Fix #249 - use window.location hack to let people login from sandboxed iOS homescreen
8 years ago
b2945b025f
Make unfavouriting async to prevent timeout errors from leaving orphaned records behind
8 years ago
346aae50b0
Adjusting public display of statuses to look similar to logged-in UI,
...
fix #361 with rich OEmbed display via iframe, fix #237 by hiding sensitive
content behind a spoiler on public pages
8 years ago
6d7f3be2f6
Add OEmbed iframe HTML, convert emojis on public pages, increase size of attachment thumbnails
8 years ago
66e08d880c
Improved admin UI
8 years ago
88218c83d5
Add suspend account functionality to admin UI
8 years ago
7752662f97
Add filters for suspended accounts
8 years ago
5522606989
Add single user mode
8 years ago
ca0757a6cf
Add account suspension
8 years ago
68586258ca
Adding more to admin accounts UI
8 years ago
7c81e7e9c7
Fix public tags page
8 years ago
b506010b4f
Add "next" pagination to public profiles
8 years ago
fb61dd14c5
Admin accounts page lists accounts
8 years ago
2d4ce8a867
Fix #248 - Reload all accounts when fetching from cache
8 years ago
8260628fc8
Fix pt translations, improve pre-cache queries, removing will_paginate
...
from accounts/tags because it's a terribly inefficient way to paginate
large sets of data
8 years ago
a8814a19dc
Add basic OEmbed provider API, fix #247
8 years ago
8d4ef0b6c3
Per-status control for unlisted mode, also federation for unlisted mode
...
Fix #233 , fix #268
8 years ago
1bb1ec3b8d
Further abstract caching for includes
8 years ago
329b2a326d
Normalize localizations, add stub for admin/accounts
8 years ago
015cd99f41
Make User#current_sign_in_at actually track when user was last active,
...
by updating it at least every 24h if the user visits the site
8 years ago
bee7aeaea5
Unify collection caching code
8 years ago
d26b8f3cce
Delete statuses asynchronously but provide instant feedback in the API
8 years ago
02da8fdcbe
Fix setting of confirmed=true on successful confirmation
8 years ago
f37efe8e56
Add simple admin overview of PuSH subscriptions
8 years ago
b5ad0eb4ea
Adding embedded PuSH server
8 years ago
abeccf6eb2
X-RateLimit-Reset formatted with iso8601
8 years ago
666eda7256
Remove stale entries from cache results
8 years ago
ea0846645a
Fix #65 - Options to block notifications from people you don't follow/who don't follow you
8 years ago
30f9e9e624
Remove Neo4J
8 years ago
8ab2fcbb2c
Mini Profiler not working well, remove it
8 years ago
cb06801b21
Extract filename obfuscation into module
8 years ago
66a20701b7
Rename media to avoid exposing filename ( fixes #207 )
8 years ago
d78962c1ed
Cache accounts/:id/statuses and single statuses too
8 years ago
65d6191147
Adding sensitive marker to statuses in API
8 years ago
c60df460af
Rename "publish" to "toot" in english locale, fix lightbox showing old image
...
before loading new one, cache notifications API, fix missing follow button
on public profiles
8 years ago
dda6354c76
Implement includes caching for timelines APIs
8 years ago
f6a975af8b
More query optimizations
8 years ago
30010a6dbd
Moving some counter queries out of subqueries in the API
8 years ago
f07b0dc82f
Remove unneeded indices, improve error handling in background workers, don't needlessly reload reblogged status, send Devise e-mails asynchronously
8 years ago
74df3ba1d7
Local accounts can control "silenced" attribute which removes them from public timeline
8 years ago
0aeae195cb
Better error message in doorkeeper json response
8 years ago
0a68464995
Performance improvement for notifications API
8 years ago
4d100a1b36
Remove some n+1 queries from notifications API
8 years ago
83cdfefa7d
Remove orphaned notifications, add scopes param to app create API
8 years ago
80d58c6c04
Desktop notifications
8 years ago
38025dfea3
Adding unified streamable notifications
8 years ago
fbaddca49e
Move Salmon processing to background as well as PuSH
8 years ago
b8e6ca45e5
Add user locale setting
8 years ago
0e956910c3
Adding some localizations
8 years ago
c6f5eb8aa7
Fix #144 - Filter statuses from blocked users out of ancestors/descendants results
8 years ago
e71b152d89
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
a7332acba3
Delegate processing of incoming PuSH data to background workers
8 years ago
19ea717b3c
Fix wrong link header on followers API, wrong link in tabs component, order
...
account results
8 years ago
6206f75837
Add limit to search results
8 years ago
cbfa28b9cc
Use full-text search for autosuggestions
8 years ago
6d9f8ee11e
Improve filtering of public/hashtag timelines, both in backlog and real-time
8 years ago
a6667f7f58
Replace setting custom CORS headers with rack-cors, set it on /oauth/token endpoint
8 years ago
beb36e24fe
API pagination for all collections using Link header
8 years ago
d98b43cf56
Move timelines API from statuses to its own controller, add a check for
...
resources that require a user context vs those that don't (such as public timeline)
/api/v1/statuses/public -> /api/v1/timelines/public
/api/v1/statuses/home -> /api/v1/timelines/home
/api/v1/statuses/mentions -> /api/v1/timelines/mentions
/api/v1/statuses/tag/:tag -> /api/v1/timelines/tag/:tag
8 years ago
814907e870
Fix linking of remote hashtags in UI, add public view of hashtags
8 years ago
cb22dce970
Adding hashtags
8 years ago
082e57fc13
Adding hashtag model
8 years ago
4c3885b952
Allow @username@domain/@username in follow form, prevent duplicate accounts
...
created via remote look-up when domains differ but point to the same resource
8 years ago
7a527c947d
Fix reblogged/favourited caching; add API endpoints for who favd/reblogged status
8 years ago
695f62e49e
Need to disable caching again due to bug in Rabl
8 years ago
e7035a4d39
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
36470feeb2
Fix follow icon changing plus to minus, add terms page stub
8 years ago
95e65d883a
Limit returned followees/followers by API to 40 for now
8 years ago
38cacac4b0
Adding common followers API, fixing fallback query again
8 years ago
cab1211ef7
Fix OAuth authorization redirect
8 years ago
6657414266
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
4470966cd9
Fix #100 - Add "back" button to certain views
...
Also fix reloading of timelines after merge-type events
8 years ago
be98addccc
Improving all forms
8 years ago
683c42724f
Added e-mail edit field to settings, proper format default for webfinger
8 years ago
02613aef3b
Adding application/jrd+json webfinger resource
8 years ago
41aae40927
Fix #16 - Optimize n+1 queries when checking reblogged/favourited values for status lists in API
8 years ago
5860094354
Adding sync of follow relationships to Neo4J, accounts/suggestions API
8 years ago
588cb77e9f
E-mail preferences page
8 years ago
84495615b4
Shorten rendered links (strip protocol and www, truncate to 30 chars), redirect
...
to sign in page after sign up instead of root path which redirects to /about
8 years ago
405f7f0541
No-op for Salmons without body, fail fast if Webfinger does not contain
...
all required resource links (profile page, salmon, atom feed, magic key)
8 years ago
ad2a5cc79f
Stop logging incoming Atom
8 years ago
4f406d89b1
Log incoming Atom from PuSH
8 years ago
102eab0ac9
Public timeline to exclude users you blocked
8 years ago
9bf5a73968
Adding domain blocks
8 years ago
c3f5dfeabb
Adding public timeline
8 years ago
93aa4085a2
Fix #73 - Click on in-UI profile avatar/name to open public profile
8 years ago
10395fd275
Fix #72 - add follow/unfollow button to public profiles
8 years ago
b23c4b488c
Better comparison of "local" domain
8 years ago
c02bdd64a0
Fix sign-in redirecting "back" to a missing image because missing static files hit the raise_not_found method
8 years ago
96cc77ce55
Catch Paperclip errors on /api/v1/media, return early from update profile service if XML given is nil
8 years ago
fe77921e47
Catching more exceptions that slipped through, removing AR logging from
...
production as it's very verbose and not very useful
8 years ago
7b9a4af311
API for blocking and unblocking
8 years ago
2c9e672ee2
Integrating block relationships into the API (read-only for now)
8 years ago
9d59d7b463
Adding a block model and filter mentions from blocked users ( fix #60 )
8 years ago
fc198a8b4c
Adding e-mail confirmations
8 years ago
188c6f326b
Making public pages responsive, removing reblogs/favs counts from them
8 years ago
9fd3d7b6cd
Add since_id param to feeds
8 years ago
a0f85774c4
Redirect after sign in to previous page (unless it's a sign in/up/etc page)
8 years ago
6d7290f47c
Add API for getting info about authenticated user: /api/v1/accounts/verify_credentials
8 years ago
96ad9b0db1
Meaningful validation errors in API response
8 years ago
62b057b085
Adjust client registration API
8 years ago
ef2b50c9ac
Deleting statuses from UI
8 years ago
927333f4f8
Improve code style
8 years ago
e63aebff7a
Adding landing page
8 years ago
4f9b7432dd
Fix #52 - Add API versioning (v1)
8 years ago
7e14eefc81
Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app
...
registration API
8 years ago
693383234c
Improved style of settings page
8 years ago
3f9708edc4
Change output of api/accounts/:id/follow and unfollow to return relationship
...
Track relationship in redux state. Display follow/unfollow and following-back
information on account view (unstyled)
8 years ago
c6d893a71d
Uploading/undoing media modifies status text. Also: status text trimmed before validation
8 years ago
c0e9603c92
Fix #50 - Order ancestors/descendants by tree path
8 years ago
e46abc71ca
Fix notifications in UI, added new API for fetching account relationships
8 years ago
4bec613897
Fix #24 - Thread resolving for remote statuses
...
This is a big one, so let me enumerate:
Accounts as well as stream entry pages now contain Link headers that
reference the Atom feed and Webfinger URL for the former and Atom entry
for the latter. So you only need to HEAD those resources to get that
information, no need to download and parse HTML <link>s.
ProcessFeedService will now queue ThreadResolveWorker for each remote
status that it cannot find otherwise. Furthermore, entries are now
processed in reverse order (from bottom to top) in case a newer entry
references a chronologically previous one.
ThreadResolveWorker uses FetchRemoteStatusService to obtain a status
and attach the child status it was queued for to it.
FetchRemoteStatusService looks up the URL, first with a HEAD, tests
if it's an Atom feed, in which case it processes it directly. Next
for Link headers to the Atom feed, in which case that is fetched
and processed. Lastly if it's HTML, it is checked for <link>s to the Atom
feed, and if such is found, that is fetched and processed. The account for
the status is derived from author/name attribute in the XML and the hostname
in the URL (domain). FollowRemoteAccountService and ProcessFeedService
are used.
This means that potentially threads are resolved recursively until a dead-end
is encountered, however it is performed asynchronously over background jobs,
so it should be ok.
8 years ago
1d2856c2af
Since GNU Social hubs don't seem to return a hub.lease_seconds param in the subscription confirmation request,
...
we'll have to default that value to the GS "minimum" (from their code) which is 24 hours.
8 years ago
246330493b
More debugging for PuSH confirmations
8 years ago
a66d34878c
Add more logging to PuSH callback
8 years ago
608a2bfffc
Upgrade to PubSubHubbub 0.4 (removing verify_token)
8 years ago
059ebbf48d
Separate PuSH subscriptions from following, add mastodon:push:refresh task,
...
respect hub.lease_seconds (fix #46 )
8 years ago
adffc7a495
Fix #43
8 years ago
bd5ad304ba
Adding media controller, 1 webm/compose form allowed, previews generated
8 years ago
0e9c1a297a
Improved error handling for FollowRemoteService
8 years ago
8c0b19012b
Fix #41 , debug #42
8 years ago
5b0cef9781
Setting up preliminary "detailed" routes in the UI, new API end-point for fetching status context
8 years ago
d6a64f45fd
Adding a notification stack for error messages
8 years ago
762157ee4e
Fix for single status pages
8 years ago
85d89b472d
Optimized n+1 queries in accounts Atom and HTML views
...
Added stack trace for SQL queries in development
Removed badly thought out accounts/lookup API
8 years ago
509c18eb13
Fix local follows, 404 in logs
8 years ago
0f4bc56719
Improving production logs, removing n+1 on media attachments in atom,
...
adding attachments display to static views
8 years ago
eec0dc46a6
PostStatusService can attach media to status, ProcessFeedService likewise
8 years ago
ae1fac0062
Add API to upload media attachments
8 years ago
b5ebf99439
Possibly fix issue with stale favourite/reblog information after API call
8 years ago
54ea7f5dfe
Case-insensitive search by usernames
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
bc0692d75b
Removing mini-profiler that doesn't work, formatting timelines a bit better
8 years ago
49520d6e62
Adding React.js, Redux, revamping dashboard
8 years ago
8985f8e66c
Fixing more configuration issues with ActionCable
8 years ago
8459acd123
Fix for force SSL issue with websockets
8 years ago
6426819b6f
Fix tests
8 years ago
6deb9f966e
Live timelines using ActionCable
8 years ago
10ba09f546
Upgrade to Rails 5.0.0.1
8 years ago
ff2cbc0753
Remember me enabled by default
9 years ago
85b00d19b8
Moving Salmon notifications to background processing, fixing mini-profiler
...
behaviour with Turbolinks enabled, optimizing Rabl for production
9 years ago
da4b675aca
Fix favourite handling in ProcessInteractionService
9 years ago
43bb8a25e7
Remember user logins by default
9 years ago
5764d52b04
Fix Sidekiq pooling issues. Remove API docs from homepage, replace with
...
a basic home timeline
9 years ago
e24bfbde1a
Fixing FanOutOnWriteService, fixing Sidekiq not having enough DB connections
...
in the pool, adding a throttle of 60rpm per IP, adding mini profiler, adding
admin status to users
9 years ago
a08e724476
Fix subscriptions:clear task, refactor feeds, refactor streamable activites
...
and atom feed generation to some extent, as well as the way mentions are
stored
9 years ago
9594f0e858
Fix preloading
9 years ago
0f5bbb999c
Pre-loading polymorphic associations for Atom feeds
9 years ago
7e58303a8d
Limit Atom feeds to 20 items by default, add pagination by max_id
...
(But there are no Atom feed pagination elements yet)
9 years ago
082e1cbe5a
Fix default max_id query in paginate_by_max_id
9 years ago
12559b01ea
Add pagination by max_id instead of offset/limit
9 years ago
f14f462eaf
Adding Turbolinks, adding status posting form on homepage
9 years ago
c28971c70c
Fixed the lookup API method
9 years ago
02696a063e
Change default avatar, redirect to home after sign up
9 years ago
9d55529318
Fix text color in dashboard inputs, sanitize remote status content in UI,
...
simplify FanOutOnWriteService, add /api/accounts/lookup method
9 years ago
7e00a21ea6
Small optimizations in Atom feeds
9 years ago
19a259915e
Security update
9 years ago
2ba6537f52
Escape PuSH challenge and change subscriptions and salmon APIs to text/plain
9 years ago
b640f35621
Writing out more tests, fixed some bugs
9 years ago
e14b76c7cb
On following/followers pages, show most recent first
9 years ago
71ae4dd3d2
Adding public following and followers pages, fix #3
9 years ago
c349200761
Removing some unused gems, adding pagination to profiles, fix #10
9 years ago
9a7485d034
Fix typo on /api/accounts/:id/statuses, fix potential case-sensitivity issue
...
when registering incoming status mentions, add Travis CI file
9 years ago
323474c97e
Fix #2 , add rake task for PuSH-unsubscribing from remote users who have no
...
local followers. Remote users' usernames SHOULD be case-sensitive
9 years ago
9cb690c706
Access tokens no longer expire, case-insensitive local username validation, as well as case-insensitive Webfinger look-up
9 years ago
6fec8afc3f
Bind oauth applications to users
9 years ago
3441361568
Adding simple_form, adding profile settings, header image
9 years ago
1aa477ac2f
Customized more doorkeeper views, only logged in users can create oauth apps
9 years ago
aab9f57e36
Adding config for puma, dashboard layout, fixing some queries
9 years ago
447cfef62d
Improving feed queries, switching API to doorkeeper authentication
9 years ago
6c4c84b161
Distrubute statuses as a fan-out-on-write system, with optional precomputing
9 years ago
fe57f6330f
API methods for retrieving home and mentions timelines
9 years ago
f099bc6091
Adding API for favouriting a status
9 years ago
ab6696e855
Adding doorkeeper, adding a REST API
...
POST /api/statuses Params: status (text contents), in_reply_to_id (optional)
GET /api/statuses/:id
POST /api/statuses/:id/reblog
GET /api/accounts/:id
GET /api/accounts/:id/following
GET /api/accounts/:id/followers
POST /api/accounts/:id/follow
POST /api/accounts/:id/unfollow
POST /api/follows Params: uri (e.g. user@domain)
OAuth authentication is currently disabled, but the API can be used with HTTP Auth.
9 years ago
3824c58853
Adding GNU Public license, adding home timeline, reblog/favourite counters
9 years ago
c605b828b5
Adding routes to follow, unfollow, favourite and reblog (locally known models)
9 years ago
aab330eb2d
Adjusting design of public pages, optimizing account page queries
9 years ago
ab80ebdeec
Adjusting design of profile and entry pages, linkify mentions in statuses
9 years ago
6045b6cb18
Customizing devise views and controllers
9 years ago
3b4e04dc32
Fixing some bugs, adding pending test examples
9 years ago
23d08c6749
Changing the use of config constants to the Rails configuration object
9 years ago
0e8f59c16f
Refactoring Grape API methods into normal controllers & other things
9 years ago
47d50b0e39
A lot of fixes from a live test
9 years ago
24646d5769
Adding views for the profile and entry pages
9 years ago
fa33750105
Adding reblogs, favourites, improving atom generation
9 years ago
2bc48e9064
Individual atom entries
9 years ago
1dad72bf13
Fixes and general progress
9 years ago
709c6685a9
Made some progress
9 years ago
9c4856bdb1
Initial commit
9 years ago
Eugen Rochko
Effy Elden
Alyssa Ross
Andrea Faulds