5b12624847
Add proper error page for request timeouts
8 years ago
c46843c65c
🔧 S3 protocol from ENV
...
add support for reading S3 protocol from ENV
also add S3_HOSTNAME in .env.production.sample
8 years ago
2816b1bf8e
Federate header images, fix open-uri http->https redirection error
8 years ago
02349b3269
Obfuscate filenames better, double rate limits
8 years ago
1fb3e8988b
Revert earlier fix due to new bug reports
8 years ago
ebc01bf0f6
Make the paperclip filename interpolator smarter about the :original style
...
If an :original gets converted into another format, it would get saved as
original_filename *anyway*, so generating the extension is pointless and
yields bad results for when you change the style definition later. This way,
old gifs will still have correct URLs
8 years ago
138d21aea8
Update service timeout setting from 15s to 90s
8 years ago
9d5fb49cd8
Merge pull request #603 from evanminto/activitypub-account
...
Expose ActivityStreams 2.0 representation of accounts
8 years ago
94e213c6c1
Reuse existing controller and route
8 years ago
ccb8ac8573
Make the streaming API also handle websockets (because trying to get the browser EventSource interface to
...
work flawlessly was a nightmare). WARNING: This commit makes the web UI connect to the streaming API instead
of ActionCable like before. This means that if you are upgrading, you should set that up beforehand.
8 years ago
f4bc9620a9
Update settings to re-use admin layout, one big navigation tree, improve settings forms
8 years ago
76e970c856
Do not automatically login after password reset, as it would circumvent two-factor auth (if enabled)
...
Do not require e-mail address changes to be re-confirmed, it's only trouble for no real benefit
8 years ago
ba192f12e3
Added optional two-factor authentication
8 years ago
f6a5977f0b
Fix key names in statsd
8 years ago
d567f21d4f
Improve StatsD instrumentation
8 years ago
7329fbd8a4
Fix up timeout, improve contrast on "show more", add responsive style
...
for extremely wide monitors
8 years ago
956da43e19
Fix error
8 years ago
61aee0006e
Override Rack::Request to use the same trusted proxy settings as Rails
8 years ago
f0de621e76
Fix #463 - Fetch and display previews of URLs using OpenGraph tags
8 years ago
306eb6e9c9
Add optional StatsD performance tracking
8 years ago
ab4f5f5da5
Add Heroku deployment support
8 years ago
a097dd489b
Change default S3 ACL string used by Paperclip from 'public' (which is invalid) to 'public-read'
8 years ago
2e71bb031b
Fix Paperclip timeout setting. Fix bug introduced in #437
8 years ago
7ddec6e7c3
Add read timeout to paperclip when it's downloading remote images
8 years ago
b891a81008
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
8 years ago
6d71044c85
Don't use rack timeout in any but production environments
8 years ago
6de079a5af
Removing external hub completely, fix #333 fixing digit-only hashtags,
...
removing web app capability from non-webapp pages
8 years ago
8b93f45f3d
Fix paperclip config
8 years ago
f114bc7bb7
Update Paperclip config to allow plugging in Minio instead of AWS
8 years ago
1357c1cb3d
Add single user mode
8 years ago
b362de2232
Adding configurable e-mail blacklist
8 years ago
f763e844e8
Do not use expiring links after all
8 years ago
80c44ed9c1
Do not autoplay videos, display play button instead. Use expiring links when using S3. Do not keep originals
...
for avatars/headers, resize avatars down to 120x120 instead of 300x300. Set cache headers on S3 stuff, also
make it private (aka only accessible via expiring links to prevent hotlinking)
8 years ago
290ffb63cd
Fix cloudfront config
8 years ago
d3bd10dfe4
Add Cloudfront support
8 years ago
5973ca3d11
Upgrade Paperclip to 5, AWS-SDK to 2, do not generate medium/small versions of avatars
8 years ago
cc70f28f19
Adding rack timeout of 30sec, PuSH jobs moved to push queue so they
...
can be processed separately
8 years ago
c0555f2db6
Don't rate-limit PuSH endpoints
8 years ago
4e351baf88
Fix URLs in inline-rendered XML
8 years ago
41ef277da3
Fix URLs in ApplicationController.renderer
8 years ago
dda9ac9222
Fix reset date format when rate limited
8 years ago
8efa081f21
Remove Neo4J
8 years ago
8e34bed7cc
Mini Profiler not working well, remove it
8 years ago
fc90d38893
Moving some counter queries out of subqueries in the API
8 years ago
116ab27e08
i18n for devise mailer too
8 years ago
546c4718e7
Localizations for most server-side strings
8 years ago
fdc17bea58
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
86574ea524
Adding Emoji One
8 years ago
2f21f4cc01
Fix region setting for AWS gem
8 years ago
dbe00a4156
Improved configuration from ENV, cleaned up timeline filter methods
...
to be more readable, add extra logging to process feed service
8 years ago
b835f4aa1c
Fix insecure S3 URLs
8 years ago
d14967e1c8
Fix URL configuration when S3 is enabled
8 years ago
45230c56ab
Improve S3 config
8 years ago
3ab193bc3f
Adding optional S3, fail-mastodon
8 years ago
9467b900a2
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
720d1f8f3d
Restrict access to oauth/applications to admins only
8 years ago
a9e40a3d80
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
43df35213e
Improving all forms
8 years ago
d5e086a47b
Adding application/jrd+json webfinger resource
8 years ago
e21a3fe0cd
Adding sync of follow relationships to Neo4J, accounts/suggestions API
8 years ago
3554d638b3
Fix #72 - add follow/unfollow button to public profiles
8 years ago
f06f295890
Fix doorkeeper skip_authorization
8 years ago
4909bbf415
Add logging for outgoing http requests
8 years ago
492224b93f
Allow non-https redirect URIs for OAuth apps (AndStatus seems to require this)
8 years ago
7e14eefc81
Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app
...
registration API
8 years ago
3b56350121
Fix #6 - Rate limit GET reqs to 300/5min, POST to 100/5min
8 years ago
1022d682dc
Normalized data in Redux, fix for asset URLs when rendered outside request
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
44e57f64dd
Improving statuses, adding a composer drawer, which doesn't work yet
8 years ago
bc0692d75b
Removing mini-profiler that doesn't work, formatting timelines a bit better
8 years ago
68c93f8b85
Final fix for ActionCable origin issues
8 years ago
8985f8e66c
Fixing more configuration issues with ActionCable
8 years ago
5a8c149f6b
Fix ActionCable origin checking
8 years ago
6426819b6f
Fix tests
8 years ago
6deb9f966e
Live timelines using ActionCable
8 years ago
10ba09f546
Upgrade to Rails 5.0.0.1
8 years ago
85b00d19b8
Moving Salmon notifications to background processing, fixing mini-profiler
...
behaviour with Turbolinks enabled, optimizing Rabl for production
9 years ago
5764d52b04
Fix Sidekiq pooling issues. Remove API docs from homepage, replace with
...
a basic home timeline
9 years ago
318886287b
Fixing some stuff for Turbolinks, adding gzip on top, fixing a n+1 query
9 years ago
36f3da3cde
Adjust down the number of Sidekiq threads to 5 (default of 25 is way too high)
9 years ago
e24bfbde1a
Fixing FanOutOnWriteService, fixing Sidekiq not having enough DB connections
...
in the pool, adding a throttle of 60rpm per IP, adding mini profiler, adding
admin status to users
9 years ago
42dcb0d4cb
Adding Sidekiq for background processing (firstly just of mailers)
9 years ago
b640f35621
Writing out more tests, fixed some bugs
9 years ago
e2b846f630
Adding letter opener for development and Rack::Attack for future rate limiting implementations
9 years ago
9cb690c706
Access tokens no longer expire, case-insensitive local username validation, as well as case-insensitive Webfinger look-up
9 years ago
2c374cd97c
Adding e-mail configuration
9 years ago
6fec8afc3f
Bind oauth applications to users
9 years ago
3441361568
Adding simple_form, adding profile settings, header image
9 years ago
1aa477ac2f
Customized more doorkeeper views, only logged in users can create oauth apps
9 years ago
aab9f57e36
Adding config for puma, dashboard layout, fixing some queries
9 years ago
447cfef62d
Improving feed queries, switching API to doorkeeper authentication
9 years ago
b919f39b31
Customizing doorkeeper views for authorizing app
9 years ago
6c4c84b161
Distrubute statuses as a fan-out-on-write system, with optional precomputing
9 years ago
ab6696e855
Adding doorkeeper, adding a REST API
...
POST /api/statuses Params: status (text contents), in_reply_to_id (optional)
GET /api/statuses/:id
POST /api/statuses/:id/reblog
GET /api/accounts/:id
GET /api/accounts/:id/following
GET /api/accounts/:id/followers
POST /api/accounts/:id/follow
POST /api/accounts/:id/unfollow
POST /api/follows Params: uri (e.g. user@domain)
OAuth authentication is currently disabled, but the API can be used with HTTP Auth.
9 years ago
7e93da3f8d
Removing grape and adding devise
9 years ago
23d08c6749
Changing the use of config constants to the Rails configuration object
9 years ago
ee73d35eea
Incoming Salmon requests can be turned into follows and unfollows
9 years ago
1dad72bf13
Fixes and general progress
9 years ago
709c6685a9
Made some progress
9 years ago
9c4856bdb1
Initial commit
9 years ago
Eugen Rochko
leopku
Evan Minto
Effy Elden