Dennis Schubert
31b28e731d
Merge branch 'next-minor' into develop
2020-06-13 23:31:09 +02:00
Noah Leal
ad91dddd63
Issue #8119 - Add length validation to a profile's gender field.
...
closes #8127
2020-06-13 23:31:03 +02:00
Jonne Haß
1a7b2b0c31
API: extend /search/user with a filter option
...
See API docs for more details
2020-03-20 12:39:09 +01:00
Benjamin Neff
4139ae2549
Merge branch 'next-minor' into develop
2020-02-12 00:13:19 +01:00
Dennis Schubert
2e2b42ef1a
Mark non-attribute usage in SQL queries as safe.
...
Non-attribute arguments will be disallowed in Rails 6.0.
2020-02-11 23:54:55 +01:00
Dennis Schubert
4685df634c
Make Person.search_query_string public.
...
Accessibility of private/protected class methods in :scope is deprecated and will be removed in Rails 6.0.
2020-02-11 23:53:14 +01:00
Dennis Schubert
25e9728fae
Do not depend on the default parameter being set in Person#initialize.
...
ActiveRecord 5.2.x occasionally calls with a nil parameter explicitly provided, so using default arguments does not work.
2020-02-11 23:53:14 +01:00
Jonne Haß
b921b71b97
API: ensure nsfw field in post is returned as a boolean
2020-02-02 18:31:46 +01:00
Jonne Haß
0935451cd8
Return a default token_endpoint_auth_method when the client gives none in its OpenID Connect registration request
...
Since we announce it in the supported metadata, some clients expect to be told what to use and don't fallback to the spec standard of
client_secret_basic on their own.
2020-01-24 11:02:02 +01:00
Jonne Haß
3abf6b6f41
return required client_secret_expires_at in openid connect dynamic registration response
2020-01-21 23:35:01 +01:00
Jonne Haß
39c863ead9
Merge branch 'develop' into api
2020-01-21 23:35:01 +01:00
cmrd Senya
c348a763cf
API: add profile:read_private scope
2020-01-21 23:34:43 +01:00
Jonne Haß
d08b31f2ed
OpenID: remove private profile data claims that are not returned anyway and fix return values for profile and picture
2020-01-21 23:34:43 +01:00
Jonne Haß
cb679371ac
Merge branch 'develop' into api
2020-01-21 23:34:43 +01:00
Jonne Haß
16e754f4c7
API: don't return default avatar
2020-01-21 23:34:00 +01:00
Benjamin Neff
034d78e3e4
Remove commentable functionality from photos
...
This is not (and as far as I know, was never) used. If we want to make
standalone photos commentable, we can always add it back, but it would
also need to change federation for it to work, because comments support
only posts there. But for now it makes the code cleaner and easier to
remove it.
2019-07-02 01:58:54 +02:00
Benjamin Neff
6f14f1b850
Merge branch 'next-minor' into develop
2019-06-17 01:20:42 +02:00
Benjamin Neff
ef31ea6b96
Enable remember me for all forms
...
fixes #8023
2019-06-17 01:12:42 +02:00
Jonne Haß
700e5588e0
Merge branch 'next-minor' into develop
2019-05-24 22:43:13 +02:00
Jonne Haß
1227f34b2a
Pass normalized URI to OpenGraphReader
...
This ensures the hostname is downcase and thus subsequent third party library
assumptions hold, namely http-cookie (pulled through faraday-cookie_jar) doesn't
raise
closes #8021
2019-05-24 22:43:08 +02:00
Benjamin Neff
314239ff2a
Merge branch 'next-minor' into develop
2019-05-12 00:25:52 +02:00
Benjamin Neff
165b8f4f6e
Don't encrypt the OTP secret
...
It doesn't add any security to have this encrypted, but it adds
complexity for podmins, because they need to backup the key.
closes #8014
2019-05-12 00:06:28 +02:00
lislis
9d5b981809
Two factor authentication ( #7751 )
2019-04-28 23:24:40 +02:00
lislis
1da118780e
Two factor authentication ( #7751 )
2019-04-28 19:06:48 +02:00
cmrd Senya
597d9e0275
AccountMigration: support chained migration case
2019-04-26 20:29:26 +03:00
Jonne Haß
99411fced7
Merge branch 'develop' into api
2019-04-26 17:54:08 +02:00
cmrd Senya
f85f167f50
Implement archive import backend
...
This implements archive import feature.
The feature is divided in two main subfeatures: archive validation and archive import.
Archive validation performs different validation on input user archive. This can be
used without actually running import, e.g. when user wants to check the archive
before import from the frontend. Validators may add messages and modify the archive.
Validators are separated in two types: critical validators and non-critical validators.
If validations by critical validators fail it means we can't import archive.
If non-critical validations fail, we can import archive, but some warning messages
are rendered.
Also validators may change archive contents, e.g. when some entity can't be
imported it may be removed from the archive.
Validators' job is to take away complexity from the importer and perform the validations
which are not implemented in other parts of the system, e.g. DB validations or
diaspora_federation entity validations.
Archive importer then takes the modified archive from the validator and imports it.
In order to incapsulate high-level migration logic a MigrationService is
introduced. MigrationService links ArchiveValidator, ArchiveImporter and
AccountMigration.
Also here is introduced a rake task which may be used by podmins to run archive
import.
2019-04-26 18:41:27 +03:00
flaburgan
6804132c15
Do not autofollow back a user you are ignoring
...
fixes #7808
closes #7913
2019-01-06 22:02:10 +01:00
Hank Grabowski
ce01946eb0
Fixed new pronto warnings after develop branch sync
2018-12-30 17:04:35 -05:00
Hank Grabowski
9c730fc0f3
OpenID Scopes and Security updates
2018-12-30 22:33:04 +01:00
Hank Grabowski
a53495c9aa
API Paging library and used in appropriate controllers with full tests
2018-12-30 22:33:04 +01:00
Hank Grabowski
2f432eb560
Users Controller and unit tests complete
2018-12-30 22:33:04 +01:00
Hank Grabowski
09c13fdf67
Notifications API Endpoint and unit test complete
2018-12-30 22:33:04 +01:00
Hank Grabowski
173461ac3d
Reshares API Endpoint complete with full unit tests
2018-12-30 22:31:33 +01:00
Benjamin Neff
98d165c0c5
Bump acts-as-taggable-on
2018-11-17 21:04:37 +01:00
flaburgan
e33466de89
Display raw images in gallery
...
closes #7890
2018-11-08 05:08:04 +01:00
Zachary Rabinovich
c4fed4bbcc
Add the ability to assign roles in the admin panel
...
closes #7868
2018-10-14 06:03:06 +02:00
Benjamin Neff
fc6893d4fc
Remove facebook integration
...
Facebook removed the API and facebook integration is broken now, so lets
remove it.
closes #7874
2018-10-08 02:50:25 +02:00
Benjamin Neff
08e108d3d8
Fix comment notification subject for posts without text
...
Fixes #7854
2018-09-05 03:17:58 +02:00
cmrd Senya
6f812a5b8f
Add LinksController
...
LinksController redirects requests for provided diaspora:// links to
respective entities urls.
2018-07-11 01:24:28 +02:00
cmrd Senya
2e0b382699
Use 'post' prefix for status message route helpers
...
This is required to make url_for(StatusMessage.new) work
2018-07-11 01:24:28 +02:00
HankG
5a8bdc1e71
Facebook plugin always appends (via D* post URL) to cross-posts
...
fixes #7770
closes #7774
2018-06-20 00:47:12 +02:00
cmrd Senya
87968284ba
Support fetching StatusMessage by Poll guid
...
When public fetch is requested with Poll guid, return parent
StatusMessage for it, which includes the Poll in its turn.
closes #7815
2018-06-16 04:36:05 +02:00
cmrd Senya
a3378ae744
Account merging: handle duplicates for TagFollowing
...
I missed it in #7803
closes #7807
2018-05-16 00:54:16 +02:00
cmrd Senya
cb294fd3f4
Add completed_at to account_migrations
...
Use completed_at datetime field as an indication of a performed migration
closes #7805
2018-05-03 21:31:29 +02:00
cmrd Senya
8680b24a2e
Account merging support
...
Adds support for merging accounts with account migration by eliminating
duplicate data in favor of the target user's data.
closes #7803
2018-04-30 22:06:34 +02:00
HankG
211e5cd1bc
Bugfix 7714 twitter char overflow
...
closes #7791
2018-04-23 20:33:07 +02:00
Benjamin Neff
7d6623d069
Remove contacts page on profiles
...
closes #7769
2018-04-12 01:40:49 +02:00
Benjamin Neff
4fa92c1823
Remove flag for contacts visible to each other
...
This feature only worked on the same pod and was more confusing than
useful.
2018-04-12 01:39:11 +02:00
Benjamin Neff
4e5ee36675
Keep order of profile tags
...
closes #7724
2018-02-27 00:48:42 +01:00