Thorsten Claus
|
2db1d5d641
|
Fixing PR Rewview issues
|
2021-04-18 13:11:25 +02:00 |
|
Thorsten Claus
|
4147249d2d
|
Makes the local posts link be configured for special audiences
|
2021-04-18 13:11:25 +02:00 |
|
Thorsten Claus
|
ddee980426
|
Adds a local-public tag on the sidebar that shows all posts local to this pod
|
2021-04-18 13:11:25 +02:00 |
|
Jonne Haß
|
d9db761c79
|
API: Add endpoint to toggle conversation read status
|
2020-11-30 18:03:38 +01:00 |
|
Jonne Haß
|
a7ff52f366
|
API: Don't mark conversations as read when fetching its messages
|
2020-11-30 18:03:38 +01:00 |
|
Jonne Haß
|
0aba20f85c
|
OpenID Connect: ensure consistent issuer URL
root_url does not know the right protocol in all contexts,
some clients are strict when validating this.
|
2020-10-24 22:30:43 +02:00 |
|
Benjamin Neff
|
81bc438c98
|
Fix error in TagFollowingsController#create when duplicate is created
|
2020-10-23 21:10:15 +02:00 |
|
Jonne Haß
|
7fabd9d17f
|
OpenID Connect: Disable form-action CSP on authorization page
Some browsers apply this CSP rules even to the redirect response
after the POST requests, blocking the redirect_uri redirect
|
2020-10-20 18:10:52 +02:00 |
|
Jonne Haß
|
d13bcc00e0
|
Merge branch 'next-minor' into develop
|
2020-03-21 19:15:14 +01:00 |
|
Vitalie Ciubotaru
|
827a2ce991
|
Remove links to deleted profiles in admin user stats
closes #8063
closes #8061
|
2020-03-21 19:14:56 +01:00 |
|
Jonne Haß
|
1a7b2b0c31
|
API: extend /search/user with a filter option
See API docs for more details
|
2020-03-20 12:39:09 +01:00 |
|
Jonne Haß
|
2d28ddc1ef
|
Add API route to (un)block a user
|
2020-03-20 12:38:27 +01:00 |
|
Jonne Haß
|
cd6e02ccec
|
API: allow post creation without a body when there are photos
|
2020-02-20 18:50:32 +01:00 |
|
Jonne Haß
|
e9242d7754
|
API: Fix fetching explicitly not only unread conversations
|
2020-02-17 10:59:10 +01:00 |
|
Jonne Haß
|
00df0b7bda
|
API: add new route to search for tags
|
2020-02-17 10:58:04 +01:00 |
|
Benjamin Neff
|
4139ae2549
|
Merge branch 'next-minor' into develop
|
2020-02-12 00:13:19 +01:00 |
|
Dennis Schubert
|
2e2b42ef1a
|
Mark non-attribute usage in SQL queries as safe.
Non-attribute arguments will be disallowed in Rails 6.0.
|
2020-02-11 23:54:55 +01:00 |
|
Dennis Schubert
|
45e8b54bea
|
Check for status codes instead of relying on response.redirect?.
Rack did so much refactoring, we do not see a Response object here anymore.
|
2020-02-11 23:53:14 +01:00 |
|
Jonne Haß
|
6dbef95951
|
API: return whether post or item was already reported or not
|
2020-02-09 11:04:59 +01:00 |
|
Jonne Haß
|
8068d8747b
|
API: Fix fetching explicitly not only unread notifications
|
2020-02-09 11:03:55 +01:00 |
|
Jonne Haß
|
cd0995abf3
|
API: Don't return notifications target unless it's a post
|
2020-02-09 11:03:55 +01:00 |
|
Jonne Haß
|
2e7526bac5
|
API: Let hide endpoint take payload as documented and act according to it
|
2020-02-02 21:49:20 +01:00 |
|
Jonne Haß
|
dcbd02cf7f
|
Return 403 for unauthorized API requests
Also cleanup error handling code and remove last translatable
API error messages
|
2020-02-02 21:49:20 +01:00 |
|
Jonne Haß
|
884de9008f
|
API: rename poll_answer_id to poll_answer in post interactions vote endpoint
|
2020-02-02 21:26:33 +01:00 |
|
Jonne Haß
|
0754c92116
|
API: correct like and comment scopes for private posts
|
2020-02-02 18:23:34 +01:00 |
|
Jonne Haß
|
fbd0a51829
|
API: return current users like, reshare and subcription status in post infos
|
2020-02-02 18:13:55 +01:00 |
|
Jonne Haß
|
6bbcb7415b
|
API: don't make error messages translatable
|
2020-02-02 18:04:11 +01:00 |
|
Jonne Haß
|
04744b4dac
|
API: Return 409 when trying to create something existing and 410 when trying to delete something already gone
Probably missed a few more cases where we always return sucess when the user requests
status quo, but this should cover most ground
|
2020-02-02 18:04:11 +01:00 |
|
Jonne Haß
|
e8b9a70fbf
|
Ensure API responses adhere to documented error format
|
2020-02-02 18:04:11 +01:00 |
|
Jonne Haß
|
35bfbc9c82
|
Return missing created_at field on reshares endpoint
|
2020-01-24 16:58:32 +01:00 |
|
Jonne Haß
|
16b242fa0f
|
Drop chat_enabled from aspects API
|
2020-01-21 23:35:01 +01:00 |
|
Jonne Haß
|
39c863ead9
|
Merge branch 'develop' into api
|
2020-01-21 23:35:01 +01:00 |
|
cmrd Senya
|
6b8cd5d390
|
API: accept name parameter instead of first name and last name in user patch
|
2020-01-21 23:34:43 +01:00 |
|
Jonne Haß
|
dad54db7f4
|
Return API pagination links as headers rather than in the response body itself
|
2020-01-21 23:34:43 +01:00 |
|
Jonne Haß
|
cb679371ac
|
Merge branch 'develop' into api
|
2020-01-21 23:34:43 +01:00 |
|
Benjamin Neff
|
1cbb3f9a7c
|
Merge pull request #8069 from denschub/remove-chat
Remove the JSXC/Prosody integration.
|
2019-10-25 01:32:37 +02:00 |
|
Benjamin Neff
|
6bb2e2fadd
|
Merge branch 'next-minor' into develop
|
2019-10-25 01:24:19 +02:00 |
|
FeruzOripov
|
3856b44c57
|
Refactoring aspects_controller.rb
closes #8064
|
2019-10-25 01:22:02 +02:00 |
|
Dennis Schubert
|
862fa38f8b
|
Remove the JSXC/Prosody integration.
As per discussion on https://discourse.diasporafoundation.org/t/removing-diaspora-s-current-chat-integration/2718, nobody raised serious concerns or objections. Given future plans, we do not think having an unfinished implementation of something that likely will not get finished in the current form is worth it. So let's get rid of it.
|
2019-10-18 23:14:14 +02:00 |
|
Benjamin Neff
|
e63fa7a398
|
Merge branch 'next-minor' into develop
|
2019-07-04 02:30:38 +02:00 |
|
Benjamin Neff
|
b42c9896bc
|
Migrate pending profile photos and fix upload to unpend profile photos
fixes #8043
closes #8044
|
2019-07-04 02:29:17 +02:00 |
|
Benjamin Neff
|
6f14f1b850
|
Merge branch 'next-minor' into develop
|
2019-06-17 01:20:42 +02:00 |
|
Benjamin Neff
|
5602dc4418
|
Use username parameter first if present
this makes sure we don't use an old otp_user_id from an old session
closes #8031
|
2019-06-17 01:14:22 +02:00 |
|
Benjamin Neff
|
88e35d3f3a
|
Use :database_authenticatable strategy to check password for OTP user
This:
* makes sure that after_database_authentication is called for users with
enabled 2fa.
* handles paranoid mode correctly
|
2019-06-17 01:12:42 +02:00 |
|
Benjamin Neff
|
314239ff2a
|
Merge branch 'next-minor' into develop
|
2019-05-12 00:25:52 +02:00 |
|
flaburgan
|
4feab5219e
|
Use a partial to share code between mobile and desktop, add the new route to the RegistrationController, drop flash message for closed registrations
|
2019-05-12 00:25:36 +02:00 |
|
alebor-5
|
469983a623
|
Improve communication about signing up on closed pods
fixes #7767
|
2019-05-12 00:25:08 +02:00 |
|
Benjamin Neff
|
d25d9f96f9
|
Merge branch 'next-minor' into develop
|
2019-04-30 22:52:00 +02:00 |
|
Benjamin Neff
|
54fd4846c0
|
Use password to disable 2FA instead of a token
Using token doesn't make much sense when you can generate new tokens
right below.
closes #8006
|
2019-04-30 22:51:51 +02:00 |
|
lislis
|
9d5b981809
|
Two factor authentication (#7751)
|
2019-04-28 23:24:40 +02:00 |
|