3d550b5712
Fix multiple N+1s in ConversationsController ( #25134 )
1 year ago
4e8d882274
Remove dead code in Api::V1::FeaturedTagsController ( #25073 )
2 years ago
0b4d3bf363
Remove invalid X-Frame-Options: ALLOWALL ( #25070 )
2 years ago
6e38ffcaee
Fix uncaught TypeError in POST `/api/v1/featured_tags` ( #25072 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
5009e9aed5
Fix uncaught NoMethodError in POST `/api/v1/featured_tags` ( #25063 )
2 years ago
da9237adb5
Fix “Authorized applications” inefficiently and incorrectly getting last use date ( #25060 )
2 years ago
4d07793150
Fix POST `/api/v1/admin/domain_allows` returning 200 when no domain is specified ( #24958 )
2 years ago
9cf831be0b
Order sessions by most-recent to least-recently updated ( #25005 )
2 years ago
5bf9e2ebec
Fix race condition when reblogging a status ( #25016 )
2 years ago
844d8e101e
Add hCaptcha support ( #25019 )
2 years ago
86961b5b7b
Add polling and automatic redirection to `/start` on email confirmation ( #25013 )
2 years ago
7cf0ce19e2
Fix uncaught NoMethodError error in `/api/v1/admin/canonical_email_blocks/test` ( #24947 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
458f6d0afb
Make it possible to upload audio and video to Heroku app ( #24866 )
2 years ago
833076d6bf
Bump rubocop-rails 2.19.1 with update .rubocop_todo.yml ( #24469 )
2 years ago
54d59b8ee0
Autofix Rubocop Style/CaseLikeIf ( #23756 )
2 years ago
fded3a99ab
Spec coverage for settings/preferences/* controllers ( #24825 )
2 years ago
53682a7b4f
Fix Performance/DeletePrefix cop ( #24796 )
2 years ago
4d1f9d4278
Rename `with_lock` to `with_redis_lock` to avoid confusion with ActiveRecord's method ( #24741 )
2 years ago
7da78595fc
Add fallback redirection when getting a webfinger query `LOCAL_DOMAIN@LOCAL_DOMAIN` ( #23600 )
...
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2 years ago
abce7cf2b9
Rewrite import feature ( #21054 )
2 years ago
390aa577e7
Fix Rails/ActionOrder cop ( #24692 )
2 years ago
75a3da1abf
Change logged-out WebUI HTML pages to be cached for a few seconds ( #24708 )
2 years ago
3acc54f7bf
Fix /api/v1/custom_emojis being cached even when unauthenticated API access is disallowed ( #24665 )
2 years ago
e82696a4b9
Fix /api/v1/instance/domain_blocks being unconditionally cached ( #24662 )
2 years ago
8c30221a41
Fix /actor needlessly reading session cookie and varying on Signature ( #24664 )
2 years ago
0cfbe4c4af
Fix some user-independent endpoints potentially reading session cookies ( #24650 )
2 years ago
31bd0da41f
Fix anonymous visitors getting a session cookie on first visit ( #24584 )
2 years ago
b61ff36351
Change unauthenticated responses to be cached in REST API ( #24348 )
2 years ago
24d5626e02
Fix crash when SSO_ACCOUNT_SETTINGS is not defined ( #24628 )
2 years ago
f01a643897
Remove instance variables from helper usage ( #24203 )
2 years ago
d8e7a72597
Fix caching logic with regards to Accept-Language, Cookie, and Signature ( #24604 )
2 years ago
3ca64638d4
Refactor `Cache-Control` and `Vary` definitions ( #24347 )
2 years ago
335b53ab48
Add trend management to admin API ( #24257 )
2 years ago
9a7a4d79ec
Add progress indicator to sign-up flow ( #24545 )
2 years ago
d30c48c975
Remove unused methods in 2FA OTP Auth Controller ( #24220 )
2 years ago
caf209b28b
Fix user archive takeouts when using OpenStack Swift ( #24431 )
2 years ago
db2b09bdd4
Fix invalid/expired invites being processed on sign-up ( #24337 )
2 years ago
c75fccf033
Change user settings to be stored in a more optimal way ( #23630 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
af57bcd3cf
Fix user archive takeout when using OpenStack Swift or S3 providers with no ACL support ( #24200 )
2 years ago
85e90f4b7d
Move link header setting to after_action ( #24251 )
2 years ago
cc5208f020
Add allow_other_host in redirects which may go outside app ( #24252 )
2 years ago
12eb6740d1
Fix Rails cache namespace being overriden with `v2` for cached statuses ( #24202 )
2 years ago
7a82026971
Remove references to non-existent actions ( #24183 )
2 years ago
dfc075c9d4
Workaround the ActiveRecord / Marshal serialization bug on Ruby 3.2 ( #24142 )
...
Co-authored-by: Jean Boussier <jean.boussier@gmail.com>
2 years ago
e7c5ccafca
Link to the Identity provider's account settings from the account settings ( #24100 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2 years ago
ef0c6a43ed
Change user backups to use expiring URLs for download when possible ( #24136 )
2 years ago
7583523bf0
Replace `Status#translatable?` with language matrix in separate endpoint ( #24037 )
2 years ago
0717d1b058
Autofix Rubocop Style/RedundantArgument ( #23798 )
2 years ago
8a618c8eca
Fix misleading error code when receiving invalid WebAuthn credentials ( #23568 )
2 years ago
cfc04637b5
Redirect users to SLO at the IdP after logging them out of Mastodon. ( #24020 )
2 years ago
5f9f43d051
Prefer the stored location as after_sign_in_path in Omniauth Callback Controller ( #24073 )
2 years ago
6943192f5e
Fix server error when failing to follow back followers from `/relationships` ( #23787 )
2 years ago
7bc43c91a0
Fix “Remove all followers from the selected domains” being more destructive than it claims ( #23805 )
2 years ago
a0e4d69c12
Autofix Rubocop Rails/FindById ( #23762 )
2 years ago
e6312104c7
Autofix Rubocop remaining Layout rules ( #23679 )
2 years ago
ae51248ffe
Enable Rubocop HTTP status rules ( #23717 )
2 years ago
49f1168050
Autofix Rubocop Style/RedundantBegin ( #23703 )
2 years ago
7f8439ee07
Autofix Rubocop Style/TrailingCommaInArguments ( #23694 )
2 years ago
793f8c7dd5
Autofix Rubocop Style/IfUnlessModifier ( #23697 )
2 years ago
b7d4391c4d
Autofix Rubocop Lint/AmbiguousOperatorPrecedence ( #23681 )
2 years ago
0ae0740826
Add API parameter to safeguard unexpect mentions in new posts ( #18350 )
2 years ago
1c08aef482
Remove posts count and last posts from ActivityPub representation of hashtag collections ( #23460 )
2 years ago
e0a02f8696
Apply Rubocop Style/NegatedIfElseCondition ( #23451 )
2 years ago
e276e530ea
Apply Rubocop Performance/RedundantSplitRegexpArgument ( #23443 )
...
* Apply Rubocop Performance/RedundantSplitRegexpArgument
* Update app/controllers/concerns/signature_verification.rb
2 years ago
3536a88bc9
Change `POST /settings/applications/:id` to regenerate token on scopes change ( #23359 )
...
Fixes #23096
2 years ago
99787fa30d
Change notifications per page from 15 to 40 in REST API ( #23348 )
2 years ago
b131e01db7
Add more specific error messages to HTTP signature verification ( #21617 )
...
* Return specific error on failure to parse Date header
* Add error message when preferredUsername is not set
* Change error report to be JSON and include more details
* Change error report to differentiate unknown account and failed refresh
* Add tests
2 years ago
592fe1a3bd
Add confirmation screen when handling reports ( #22375 )
...
* Add confirmation screen on moderation actions
* Add flash notice when a report has been processed
* Refactor tests
* Add tests
2 years ago
42aa864c84
Add support for editing media description and focus point of already-posted statuses ( #20878 )
...
* Add backend support for editing media attachments of existing posts
* Allow editing media attachments of already-posted toots
* Add tests
2 years ago
0ad00e71c5
Fix /api/v1/admin/trends/tags using wrong serializer ( #18943 )
...
* Fix /api/v1/admin/trends/tags using wrong serializer
Fix regression from #18641
* Only use `REST::Admin::TagSerializer` when the user can `manage_taxonomies`
* Fix admin trending hashtag component to not link if `id` is unknown
2 years ago
0687eb20da
Change domain block CSV parsing to be more robust and handle more lists ( #21470 )
...
* Change domain block CSV parsing to be more robust and handle more lists
* Add some tests
* Improve domain block import validation and reporting
2 years ago
27751cd101
Allow changing hide_collections setting with the api ( #22790 )
...
* Allow changing hide_collections setting with the api
This is currently only possible with app/controllers/settings/profiles_controller.rb
and is the only difference in the allowed parameter between the two controllers
* Fix the lint issue
* Use normal indent
2 years ago
99ecd6a106
Change referrer-policy to no-referrer application-wide ( #23014 )
2 years ago
c78d61f21a
Add dropdown menu item to open admin interface for remote domains ( #21895 )
...
* Allow /admin/instances/:domain to handle IDNs
* Add dropdown menu item to open admin interface for remote domains
2 years ago
81ae025687
Fix PermalinkRedirector not applying to users with moved accounts ( #22497 )
...
Fixes #22262
2 years ago
94d294202b
Fix changing domain block severity not undoing individual account effects ( #22135 )
...
* Fix changing domain block severity not undoing individual account effects
Fixes #22133
* Add tests
2 years ago
4c10de8ae3
Fix single name variables on controller folder ( #20092 )
...
Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>
Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>
Co-authored-by: Effy Elden <effy@effy.space>
2 years ago
01f0da2a4f
Change CSP directives on API to be tight and concise ( #20960 )
2 years ago
93ad2aba5e
Fix N+1 queries from in NotificationsController ( #21202 )
...
Co-authored-by: Nonexistent <nx@example.org>
2 years ago
c7d4d21d99
Allow adding relays while secure mode & limited federation mode are enabled ( #22324 )
2 years ago
3a11a90dd3
Revoke all authorized applications on password reset ( #21325 )
...
* Clear sessions on password change
* Rename User::clear_sessions to revoke_access for a clearer meaning
* Add reset paassword controller test
* Use User.find instead of User.find_for_authentication for reset password test
* Use redirect and render for better test meaning in reset password
Co-authored-by: Effy Elden <effy@effy.space>
2 years ago
5ad9fea52a
Log admin approve and reject account ( #22088 )
...
* Log admin approve and reject account
* Add unit tests for approve and reject logging
2 years ago
b97260426b
Fix irreversible and whole_word parameters handling in /api/v1/filters ( #21988 )
...
Fixes #21965
2 years ago
1bef772764
Fix some performance issues with /admin/instances ( #21907 )
...
/admin/instances?availability=failing remains wholly unefficient
2 years ago
655ad99a37
Fix not being able to follow more than one hashtag ( #21285 )
...
Fixes regression from #20860
2 years ago
3b81318a0f
Fix form-action CSP directive for external login ( #20962 )
2 years ago
aa37dc6aae
Fix OAuth flow being broken by recent CSP change ( #20958 )
2 years ago
498e9478c7
Support for import/export of instance-level domain blocks/allows for 4.x w/ additional fixes ( #20597 )
...
* Allow import/export of instance-level domain blocks/allows (#1754 )
* Allow import/export of instance-level domain blocks/allows.
Fixes #15095
* Pacify circleci
* Address simple code review feedback
* Add headers to exported CSV
* Extract common import/export functionality to
AdminExportControllerConcern
* Add additional fields to instance-blocked domain export
* Address review feedback
* Split instance domain block/allow import/export into separate pages/controllers
* Address code review feedback
* Pacify DeepSource
* Work around Paperclip::HasAttachmentFile for Rails 6
* Fix deprecated API warning in export tests
* Remove after_commit workaround
(cherry picked from commit b8319d0578#1773 )
* Move glitch-soc-specific strings to glitch-soc-specific locale files
* Add confirmation page when importing blocked domains
(cherry picked from commit 73a2e3326f655bac2c3a1ba41b34c11686374b2f
2 years ago
4abfb043f2
Fix invalid/empty RSS feed link on account pages ( #20772 )
...
Fixes #20770
2 years ago
699bec589f
Make tag following idempotent ( #20860 )
2 years ago
c7accdb6ac
Change automatic post deletion configuration to be accessible to redirected users ( #20774 )
...
Fixes #20550
2 years ago
9b83c67aa7
Fix pagination of followed tags ( #20861 )
...
* Fix missing pagination headers on followed tags
* Fix typo
2 years ago
e61dc520ae
Add 'private' to Cache-Control, match Rails expectations ( #20608 )
...
Several controlers set quite intricate Cache-Control headers in order to
hopefully not be cached by any intermediate proxies or local caches. Unfortunately,
these headers are processed by ActionDispatch::HTTP::Cache in a way that squashes
and discards any values set alongside no-store other than private:
8015c2c2cf/actionpack/lib/action_dispatch/http/cache.rb (L207-L209)
2 years ago
72d3607229
Move V2 Filter methods under /api/v2 prefix ( #20622 )
...
* Move V2 Filter methods under /api/v2 prefix
* move over the tests too
2 years ago
8b98bebc17
Fix error when passing unknown filter param in REST API ( #20626 )
...
Fix #19156
2 years ago
3cc5ed3bae
Fix `role_ids` not accepting arrays in admin API ( #20625 )
...
Fix #19157
2 years ago
2fe47bc7db
Remove dead code and refactor status threading code ( #20357 )
...
* Remove dead code
* Remove unneeded/broken parameters and refactor descendant computation
2 years ago
ee5a39a507
Change logged out /api/v1/statuses/:id/context logged out limits ( #20355 )
2 years ago
c4ff2640c1
Improve performance by avoiding regex construction ( #20215 )
...
```ruby
10.times { p /#{FOO}/.object_id }
10.times { p FOO_RE.object_id }
```
2 years ago
17881148e4
Revert filtering public timelines by locale by default ( #20294 )
2 years ago
Claire
Daniel M Brasil
Frankie Roberto
zunda
Nick Schonning
Matt Jankowski
Eugen Rochko
Robert R George
Jean byroot Boussier
CSDUMMI
Christian Schmidt
Carl Schwan
David Vega
nametoolong
Effy Elden
Francis Murillo
lenore gilbert
trwnh
Daniel Axtens
James Tucker