7b9f8766e8
Fix #416 - Generate random unique 14-byte (19 characters) shortcodes
...
for local attachments, use them in URLs. Check status privacy
before redirecting to actual file.
8 years ago
1bbcd71cd4
Fix #390 - fix redirect after sign-up (to login page instead of homepage)
8 years ago
f79ba2de83
Fix admin UI not loading JS, make sure to strip "acct:" out of remote account's usernames when authorizing follow
8 years ago
75122e162d
Fix uri expansion during remote follow
8 years ago
8f47f6a7ec
Adding remote follow button
8 years ago
a302e56f9a
Add API for retrieving favourites
8 years ago
49834a6e7f
Add API for retrieving blocked accounts
8 years ago
8724094ed0
Support remote follow request providing URL instead of acct
8 years ago
d7dc84439c
Add ability to use remote follow function on other sites
8 years ago
eca6110fc4
Add preferences for follow request notification e-mails
8 years ago
2146ac91a0
Follow requests send e-mail notifications, but are excluded from notifications API
...
Better initial state for unlisted/nsfw toggles
8 years ago
3689c119f0
Replacing follow requests in the settings area with in-UI column
8 years ago
004382e4d0
Adding follow requests API
8 years ago
3282448878
Fix #86 - resolve layout breaking on zoom-out on accounts grid
8 years ago
b302b9202b
Add page for authorizing/rejecting follow requests
8 years ago
05b13c38b5
Re-enable Webfinger for locked accounts but don't handle "follow" events
...
coming in via Salmon.
Currently no way to prevent remote follows, but they will only receive public
and unlisted posts
8 years ago
b891a81008
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
8 years ago
2d2154ba75
Add "locked" flag to accounts, prevent blocked users from following, force-unfollow blocked users
8 years ago
80e02b90e4
Private visibility on statuses prevents non-followers from seeing those
...
Filters out hidden stream entries from Atom feed
Blocks now generate hidden stream entries, can be used to federate blocks
Private statuses cannot be reblogged (generates generic 422 error for now)
POST /api/v1/statuses now takes visibility=(public|unlisted|private) param instead of unlisted boolean
Statuses JSON now contains visibility=(public|unlisted|private) field
8 years ago
e09d3a2c66
Fix #249 - use window.location hack to let people login from sandboxed iOS homescreen
8 years ago
0542773bca
Make unfavouriting async to prevent timeout errors from leaving orphaned records behind
8 years ago
5ae1b39ec9
Adjusting public display of statuses to look similar to logged-in UI,
...
fix #361 with rich OEmbed display via iframe, fix #237 by hiding sensitive
content behind a spoiler on public pages
8 years ago
aed25932b5
Add OEmbed iframe HTML, convert emojis on public pages, increase size of attachment thumbnails
8 years ago
76ec907993
Improved admin UI
8 years ago
f978b06dd1
Add suspend account functionality to admin UI
8 years ago
f406e01fcf
Add filters for suspended accounts
8 years ago
1357c1cb3d
Add single user mode
8 years ago
39cc9fde8a
Add account suspension
8 years ago
9d9f796130
Adding more to admin accounts UI
8 years ago
d236dcded2
Fix public tags page
8 years ago
5abf64d647
Add "next" pagination to public profiles
8 years ago
ec44cff9a2
Admin accounts page lists accounts
8 years ago
816284d739
Fix #248 - Reload all accounts when fetching from cache
8 years ago
1d0321fc45
Fix pt translations, improve pre-cache queries, removing will_paginate
...
from accounts/tags because it's a terribly inefficient way to paginate
large sets of data
8 years ago
6ff93845d5
Add basic OEmbed provider API, fix #247
8 years ago
14bd46946d
Per-status control for unlisted mode, also federation for unlisted mode
...
Fix #233 , fix #268
8 years ago
a21bcac9e1
Further abstract caching for includes
8 years ago
356d3874eb
Normalize localizations, add stub for admin/accounts
8 years ago
ff21ff1489
Make User#current_sign_in_at actually track when user was last active,
...
by updating it at least every 24h if the user visits the site
8 years ago
7e90772c92
Unify collection caching code
8 years ago
93a90cd9c3
Delete statuses asynchronously but provide instant feedback in the API
8 years ago
3ba6531611
Fix setting of confirmed=true on successful confirmation
8 years ago
27fc49d745
Add simple admin overview of PuSH subscriptions
8 years ago
2d2c81765b
Adding embedded PuSH server
8 years ago
4495baf451
X-RateLimit-Reset formatted with iso8601
8 years ago
8a3745a4df
Remove stale entries from cache results
8 years ago
71401659b8
Fix #65 - Options to block notifications from people you don't follow/who don't follow you
8 years ago
8efa081f21
Remove Neo4J
8 years ago
8e34bed7cc
Mini Profiler not working well, remove it
8 years ago
cefef2c571
Extract filename obfuscation into module
8 years ago
7161f91313
Rename media to avoid exposing filename ( fixes #207 )
8 years ago
79a0135869
Cache accounts/:id/statuses and single statuses too
8 years ago
0603971894
Adding sensitive marker to statuses in API
8 years ago
4bdb6a0eaf
Rename "publish" to "toot" in english locale, fix lightbox showing old image
...
before loading new one, cache notifications API, fix missing follow button
on public profiles
8 years ago
cf912e01fd
Implement includes caching for timelines APIs
8 years ago
5c78547198
More query optimizations
8 years ago
fc90d38893
Moving some counter queries out of subqueries in the API
8 years ago
45c7ee39b3
Remove unneeded indices, improve error handling in background workers, don't needlessly reload reblogged status, send Devise e-mails asynchronously
8 years ago
1788164352
Local accounts can control "silenced" attribute which removes them from public timeline
8 years ago
627a85f4e4
Better error message in doorkeeper json response
8 years ago
f88ca4a206
Performance improvement for notifications API
8 years ago
52119104b9
Remove some n+1 queries from notifications API
8 years ago
e8c27767aa
Remove orphaned notifications, add scopes param to app create API
8 years ago
fb48cc3b74
Desktop notifications
8 years ago
da2ef4d676
Adding unified streamable notifications
8 years ago
7dea6a23f7
Move Salmon processing to background as well as PuSH
8 years ago
2c766bd4b4
Add user locale setting
8 years ago
3ce6ac0ce2
Adding some localizations
8 years ago
4f07fb1f0a
Fix #144 - Filter statuses from blocked users out of ancestors/descendants results
8 years ago
fdc17bea58
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
a91c3ef6ce
Delegate processing of incoming PuSH data to background workers
8 years ago
cea28e0c1d
Fix wrong link header on followers API, wrong link in tabs component, order
...
account results
8 years ago
afded319d2
Add limit to search results
8 years ago
09218d4c01
Use full-text search for autosuggestions
8 years ago
17903c6dae
Improve filtering of public/hashtag timelines, both in backlog and real-time
8 years ago
448ab18a20
Replace setting custom CORS headers with rack-cors, set it on /oauth/token endpoint
8 years ago
b13e7dda1f
API pagination for all collections using Link header
8 years ago
9aecc0f48a
Move timelines API from statuses to its own controller, add a check for
...
resources that require a user context vs those that don't (such as public timeline)
/api/v1/statuses/public -> /api/v1/timelines/public
/api/v1/statuses/home -> /api/v1/timelines/home
/api/v1/statuses/mentions -> /api/v1/timelines/mentions
/api/v1/statuses/tag/:tag -> /api/v1/timelines/tag/:tag
8 years ago
a698b767c1
Fix linking of remote hashtags in UI, add public view of hashtags
8 years ago
48b9619439
Adding hashtags
8 years ago
62292797ec
Adding hashtag model
8 years ago
3731230c6d
Allow @username@domain/@username in follow form, prevent duplicate accounts
...
created via remote look-up when domains differ but point to the same resource
8 years ago
e4671adc25
Fix reblogged/favourited caching; add API endpoints for who favd/reblogged status
8 years ago
562044f36a
Need to disable caching again due to bug in Rabl
8 years ago
9467b900a2
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
dd03118098
Fix follow icon changing plus to minus, add terms page stub
8 years ago
fa1cc2d05a
Limit returned followees/followers by API to 40 for now
8 years ago
e0a197650a
Adding common followers API, fixing fallback query again
8 years ago
b746a931a5
Fix OAuth authorization redirect
8 years ago
a9e40a3d80
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
04bbc57690
Fix #100 - Add "back" button to certain views
...
Also fix reloading of timelines after merge-type events
8 years ago
43df35213e
Improving all forms
8 years ago
2e0a38d07c
Added e-mail edit field to settings, proper format default for webfinger
8 years ago
d5e086a47b
Adding application/jrd+json webfinger resource
8 years ago
de1f3aab86
Fix #16 - Optimize n+1 queries when checking reblogged/favourited values for status lists in API
8 years ago
e21a3fe0cd
Adding sync of follow relationships to Neo4J, accounts/suggestions API
8 years ago
7a6d95f70c
E-mail preferences page
8 years ago
33f7e1cf99
Shorten rendered links (strip protocol and www, truncate to 30 chars), redirect
...
to sign in page after sign up instead of root path which redirects to /about
8 years ago
157f03f8bd
No-op for Salmons without body, fail fast if Webfinger does not contain
...
all required resource links (profile page, salmon, atom feed, magic key)
8 years ago
68eed8c61f
Stop logging incoming Atom
8 years ago
f49ed8c819
Log incoming Atom from PuSH
8 years ago
427ba27641
Public timeline to exclude users you blocked
8 years ago
22a8801dbc
Adding domain blocks
8 years ago
1f650d327d
Adding public timeline
8 years ago
943c69c65d
Fix #73 - Click on in-UI profile avatar/name to open public profile
8 years ago
3554d638b3
Fix #72 - add follow/unfollow button to public profiles
8 years ago
15d01a5e08
Better comparison of "local" domain
8 years ago
b60430fe8f
Fix sign-in redirecting "back" to a missing image because missing static files hit the raise_not_found method
8 years ago
2f5b205916
Catch Paperclip errors on /api/v1/media, return early from update profile service if XML given is nil
8 years ago
fe77921e47
Catching more exceptions that slipped through, removing AR logging from
...
production as it's very verbose and not very useful
8 years ago
7b9a4af311
API for blocking and unblocking
8 years ago
2c9e672ee2
Integrating block relationships into the API (read-only for now)
8 years ago
9d59d7b463
Adding a block model and filter mentions from blocked users ( fix #60 )
8 years ago
fc198a8b4c
Adding e-mail confirmations
8 years ago
188c6f326b
Making public pages responsive, removing reblogs/favs counts from them
8 years ago
9fd3d7b6cd
Add since_id param to feeds
8 years ago
a0f85774c4
Redirect after sign in to previous page (unless it's a sign in/up/etc page)
8 years ago
6d7290f47c
Add API for getting info about authenticated user: /api/v1/accounts/verify_credentials
8 years ago
96ad9b0db1
Meaningful validation errors in API response
8 years ago
62b057b085
Adjust client registration API
8 years ago
ef2b50c9ac
Deleting statuses from UI
8 years ago
927333f4f8
Improve code style
8 years ago
e63aebff7a
Adding landing page
8 years ago
4f9b7432dd
Fix #52 - Add API versioning (v1)
8 years ago
7e14eefc81
Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app
...
registration API
8 years ago
693383234c
Improved style of settings page
8 years ago
3f9708edc4
Change output of api/accounts/:id/follow and unfollow to return relationship
...
Track relationship in redux state. Display follow/unfollow and following-back
information on account view (unstyled)
8 years ago
c6d893a71d
Uploading/undoing media modifies status text. Also: status text trimmed before validation
8 years ago
c0e9603c92
Fix #50 - Order ancestors/descendants by tree path
8 years ago
e46abc71ca
Fix notifications in UI, added new API for fetching account relationships
8 years ago
4bec613897
Fix #24 - Thread resolving for remote statuses
...
This is a big one, so let me enumerate:
Accounts as well as stream entry pages now contain Link headers that
reference the Atom feed and Webfinger URL for the former and Atom entry
for the latter. So you only need to HEAD those resources to get that
information, no need to download and parse HTML <link>s.
ProcessFeedService will now queue ThreadResolveWorker for each remote
status that it cannot find otherwise. Furthermore, entries are now
processed in reverse order (from bottom to top) in case a newer entry
references a chronologically previous one.
ThreadResolveWorker uses FetchRemoteStatusService to obtain a status
and attach the child status it was queued for to it.
FetchRemoteStatusService looks up the URL, first with a HEAD, tests
if it's an Atom feed, in which case it processes it directly. Next
for Link headers to the Atom feed, in which case that is fetched
and processed. Lastly if it's HTML, it is checked for <link>s to the Atom
feed, and if such is found, that is fetched and processed. The account for
the status is derived from author/name attribute in the XML and the hostname
in the URL (domain). FollowRemoteAccountService and ProcessFeedService
are used.
This means that potentially threads are resolved recursively until a dead-end
is encountered, however it is performed asynchronously over background jobs,
so it should be ok.
8 years ago
1d2856c2af
Since GNU Social hubs don't seem to return a hub.lease_seconds param in the subscription confirmation request,
...
we'll have to default that value to the GS "minimum" (from their code) which is 24 hours.
8 years ago
246330493b
More debugging for PuSH confirmations
8 years ago
a66d34878c
Add more logging to PuSH callback
8 years ago
608a2bfffc
Upgrade to PubSubHubbub 0.4 (removing verify_token)
8 years ago
059ebbf48d
Separate PuSH subscriptions from following, add mastodon:push:refresh task,
...
respect hub.lease_seconds (fix #46 )
8 years ago
adffc7a495
Fix #43
8 years ago
bd5ad304ba
Adding media controller, 1 webm/compose form allowed, previews generated
8 years ago
0e9c1a297a
Improved error handling for FollowRemoteService
8 years ago
8c0b19012b
Fix #41 , debug #42
8 years ago
5b0cef9781
Setting up preliminary "detailed" routes in the UI, new API end-point for fetching status context
8 years ago
d6a64f45fd
Adding a notification stack for error messages
8 years ago
762157ee4e
Fix for single status pages
8 years ago
85d89b472d
Optimized n+1 queries in accounts Atom and HTML views
...
Added stack trace for SQL queries in development
Removed badly thought out accounts/lookup API
8 years ago
509c18eb13
Fix local follows, 404 in logs
8 years ago
0f4bc56719
Improving production logs, removing n+1 on media attachments in atom,
...
adding attachments display to static views
8 years ago
eec0dc46a6
PostStatusService can attach media to status, ProcessFeedService likewise
8 years ago
ae1fac0062
Add API to upload media attachments
8 years ago
b5ebf99439
Possibly fix issue with stale favourite/reblog information after API call
8 years ago
54ea7f5dfe
Case-insensitive search by usernames
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
bc0692d75b
Removing mini-profiler that doesn't work, formatting timelines a bit better
8 years ago
49520d6e62
Adding React.js, Redux, revamping dashboard
8 years ago
8985f8e66c
Fixing more configuration issues with ActionCable
8 years ago
8459acd123
Fix for force SSL issue with websockets
8 years ago
6426819b6f
Fix tests
8 years ago
6deb9f966e
Live timelines using ActionCable
8 years ago
10ba09f546
Upgrade to Rails 5.0.0.1
8 years ago
ff2cbc0753
Remember me enabled by default
9 years ago
85b00d19b8
Moving Salmon notifications to background processing, fixing mini-profiler
...
behaviour with Turbolinks enabled, optimizing Rabl for production
9 years ago
da4b675aca
Fix favourite handling in ProcessInteractionService
9 years ago
43bb8a25e7
Remember user logins by default
9 years ago
5764d52b04
Fix Sidekiq pooling issues. Remove API docs from homepage, replace with
...
a basic home timeline
9 years ago
e24bfbde1a
Fixing FanOutOnWriteService, fixing Sidekiq not having enough DB connections
...
in the pool, adding a throttle of 60rpm per IP, adding mini profiler, adding
admin status to users
9 years ago
a08e724476
Fix subscriptions:clear task, refactor feeds, refactor streamable activites
...
and atom feed generation to some extent, as well as the way mentions are
stored
9 years ago
9594f0e858
Fix preloading
9 years ago
0f5bbb999c
Pre-loading polymorphic associations for Atom feeds
9 years ago
7e58303a8d
Limit Atom feeds to 20 items by default, add pagination by max_id
...
(But there are no Atom feed pagination elements yet)
9 years ago
082e1cbe5a
Fix default max_id query in paginate_by_max_id
9 years ago
12559b01ea
Add pagination by max_id instead of offset/limit
9 years ago
f14f462eaf
Adding Turbolinks, adding status posting form on homepage
9 years ago
c28971c70c
Fixed the lookup API method
9 years ago
02696a063e
Change default avatar, redirect to home after sign up
9 years ago
9d55529318
Fix text color in dashboard inputs, sanitize remote status content in UI,
...
simplify FanOutOnWriteService, add /api/accounts/lookup method
9 years ago
7e00a21ea6
Small optimizations in Atom feeds
9 years ago
19a259915e
Security update
9 years ago
2ba6537f52
Escape PuSH challenge and change subscriptions and salmon APIs to text/plain
9 years ago
b640f35621
Writing out more tests, fixed some bugs
9 years ago
e14b76c7cb
On following/followers pages, show most recent first
9 years ago
71ae4dd3d2
Adding public following and followers pages, fix #3
9 years ago
c349200761
Removing some unused gems, adding pagination to profiles, fix #10
9 years ago
9a7485d034
Fix typo on /api/accounts/:id/statuses, fix potential case-sensitivity issue
...
when registering incoming status mentions, add Travis CI file
9 years ago
323474c97e
Fix #2 , add rake task for PuSH-unsubscribing from remote users who have no
...
local followers. Remote users' usernames SHOULD be case-sensitive
9 years ago
9cb690c706
Access tokens no longer expire, case-insensitive local username validation, as well as case-insensitive Webfinger look-up
9 years ago
6fec8afc3f
Bind oauth applications to users
9 years ago
3441361568
Adding simple_form, adding profile settings, header image
9 years ago
1aa477ac2f
Customized more doorkeeper views, only logged in users can create oauth apps
9 years ago
aab9f57e36
Adding config for puma, dashboard layout, fixing some queries
9 years ago
447cfef62d
Improving feed queries, switching API to doorkeeper authentication
9 years ago
6c4c84b161
Distrubute statuses as a fan-out-on-write system, with optional precomputing
9 years ago
fe57f6330f
API methods for retrieving home and mentions timelines
9 years ago
f099bc6091
Adding API for favouriting a status
9 years ago
ab6696e855
Adding doorkeeper, adding a REST API
...
POST /api/statuses Params: status (text contents), in_reply_to_id (optional)
GET /api/statuses/:id
POST /api/statuses/:id/reblog
GET /api/accounts/:id
GET /api/accounts/:id/following
GET /api/accounts/:id/followers
POST /api/accounts/:id/follow
POST /api/accounts/:id/unfollow
POST /api/follows Params: uri (e.g. user@domain)
OAuth authentication is currently disabled, but the API can be used with HTTP Auth.
9 years ago
3824c58853
Adding GNU Public license, adding home timeline, reblog/favourite counters
9 years ago
c605b828b5
Adding routes to follow, unfollow, favourite and reblog (locally known models)
9 years ago
aab330eb2d
Adjusting design of public pages, optimizing account page queries
9 years ago
ab80ebdeec
Adjusting design of profile and entry pages, linkify mentions in statuses
9 years ago
6045b6cb18
Customizing devise views and controllers
9 years ago
3b4e04dc32
Fixing some bugs, adding pending test examples
9 years ago
23d08c6749
Changing the use of config constants to the Rails configuration object
9 years ago
0e8f59c16f
Refactoring Grape API methods into normal controllers & other things
9 years ago
47d50b0e39
A lot of fixes from a live test
9 years ago
24646d5769
Adding views for the profile and entry pages
9 years ago
fa33750105
Adding reblogs, favourites, improving atom generation
9 years ago
2bc48e9064
Individual atom entries
9 years ago
1dad72bf13
Fixes and general progress
9 years ago
709c6685a9
Made some progress
9 years ago
9c4856bdb1
Initial commit
9 years ago
Eugen Rochko
Alyssa Ross
Andrea Faulds