Lukas Matt
16275ec926
account_deletions get stuck while selecting participations
...
Following query takes over 20 minutes and fills up the database:
SELECT * FROM participations WHERE author_id = XXXXX
On servers with a huge participations-table this is a serious
performance issue which is easily fixed by the author_id index
Signed-off-by: Lukas Matt <lukas@zauberstuhl.de>
2016-03-27 14:16:03 +02:00
cmrd Senya
2986aa8b24
Remove diaspora_handle from shareables
...
We can determine diaspora_handle from a relation with people for the
shareables (posts, photos). So we don't need to store diaspora_handle in
the DB. Also remove tmp_old_id from photos which is not refenrenced anywhere.
2016-03-07 18:47:21 +03:00
Benjamin Neff
10af3a8b11
fix pod table migration if someone deleted a user (owner) manually
2016-03-06 23:55:28 +01:00
Jonne Haß
39ae5e741e
Merge pull request #6732 from SuperTux88/cleanup-aspect_visibilities
...
Cleanup aspect visibilities
2016-03-05 11:05:55 +01:00
Benjamin Neff
b1a6516474
add migration for pods-table
...
* add port to pods
* remove url from person and link people with pod-table
2016-03-05 00:12:54 +01:00
Benjamin Neff
54ff7ee278
migration to cleanup aspect_visibilities
...
* remove all for public posts
* remove all for deleted posts
2016-03-04 20:13:52 +01:00
Benjamin Neff
c778fc4232
use plain sql for update_all to fix postgres
...
also added a migration model
2016-03-04 15:14:45 +01:00
Benjamin Neff
7011f2961d
Revert "Back out #6723 due to Postgres breakage"
...
This reverts commit 84cfbd22fc .
2016-03-04 14:01:31 +01:00
Dennis Schubert
84cfbd22fc
Back out #6723 due to Postgres breakage
...
This reverts commit 832a56134b , reversing
changes made to 75c3e6068c .
2016-03-04 13:33:32 +01:00
Benjamin Neff
8929d56dc0
update schema.rb after migration from #6586
2016-03-04 00:11:52 +01:00
Benjamin Neff
9657810208
create migration to link share visibility directly with users
...
Also:
* remove share visibilities where the shareable is already deleted
* remove share visibilities where the user doesn't exist
* remove `created_at` and `updated_at` to make the table smaller
2016-03-03 21:43:08 +01:00
Dennis Schubert
7c88fb7936
Merge pull request #6586 from cmrd-senya/drop-signatures
...
Remove parent author signature for relayables from the DB
2016-03-03 17:39:28 +01:00
theworldbright
38439277d6
Add licenses where appropriate
2016-01-04 17:22:44 +09:00
theworldbright
2a002d90c4
Allow for longer redirect uri lists
2016-01-04 16:49:56 +09:00
augier
7b2be0d3c6
Support displaying TOS and policy
2016-01-04 16:49:56 +09:00
theworldbright
9c9880d880
Move JWKs files to database
2016-01-04 16:49:56 +09:00
theworldbright
da766d8e8b
Revoke previously issued tokens on duplicate request
2016-01-04 16:49:55 +09:00
theworldbright
fd467cd42b
Add private_key_jwt support
...
See
- http://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication
- https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata
2016-01-04 16:49:55 +09:00
theworldbright
a76f51a6a5
Use redirect_uri if no sector identifier for ppid
...
As according to http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg :
"If the Client has not provided a value for
sector_identifier_uri in Dynamic Client Registration
[OpenID.Registration], the Sector Identifier used
for pairwise identifier calculation is the host
component of the registered redirect_uri."
2016-01-04 16:49:55 +09:00
theworldbright
4e18f3849d
Remove GUID as primary key in ppid table
2016-01-04 16:49:55 +09:00
theworldbright
21175e7eee
Allow POST requests for user info endpoint
2016-01-04 16:49:54 +09:00
theworldbright
1a7f2edc01
Perform major refactoring
...
- Add foreign_keys
- Remove unused classes/methods
- Fix pronto errors
- Add method to retrieve client id from name
- Remove TODO comments
- Fix unnecessary private key generation
2016-01-04 16:49:54 +09:00
theworldbright
e55a0b0d0b
Replace scopes with constants in Authorization
2016-01-04 16:49:54 +09:00
theworldbright
724f32604b
Add nonce to auth code flow
2016-01-04 16:49:53 +09:00
theworldbright
65c40f236e
Load scopes from seeds
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:51 +09:00
theworldbright
99d6d7b3e7
Add pairwise pseudonymous identifier support
...
Squashed commits:
[a182de7] Fix pronto/travis errors
2016-01-04 16:49:51 +09:00
theworldbright
e5932968fd
Add support for authorization code flow
2016-01-04 16:49:51 +09:00
theworldbright
3cbe75469b
Add support for scopes
...
Remove scopes from tokens
Squashed commits:
[83db38f] Add redirect uris to supported metadata
2016-01-04 16:49:51 +09:00
augier
de4f68c289
Support for more metadata
2016-01-04 16:49:50 +09:00
theworldbright
979adca1e7
Fix account deleter specs
...
Squashed commits:
[7ff4276] Adjust discovery controller
2016-01-04 16:49:50 +09:00
theworldbright
7b80a7408d
Add integration tests for implicit flow
...
Squashed commits:
[d5001fe] Refactor
[8d8a23f] Add test for when authorization is denied
[659fc56] Adjust password flow integration test
2016-01-04 16:49:50 +09:00
theworldbright
2d762da072
Adjust tokens to fit revised Authorization
2016-01-04 16:49:50 +09:00
theworldbright
17fde49d61
Implement ID Token for the implicit flow
2016-01-04 16:49:50 +09:00
theworldbright
1475672d72
Fix authorization and related models
...
Squashed commits:
[a844d37] Remove unnecessary class_name's from models
[529a30c] Further adjust authorization and related models
2016-01-04 16:49:50 +09:00
augier
031679762a
Redesign the models
2016-01-04 16:49:49 +09:00
Augier
9140c8244b
Support for refresh tokens w/ no tests
2016-01-04 16:49:49 +09:00
Augier
73cc55940d
Fix travis errors and refactor
2016-01-04 16:49:49 +09:00
theworldbright
059933f076
Add scopes and authorization models
2016-01-04 16:49:49 +09:00
theworldbright
7c75eb5901
Make access tokens belong to user not client app
2016-01-04 16:49:48 +09:00
theworldbright
beae77102d
Allow current user to be obtained from access token
2016-01-04 16:49:16 +09:00
theworldbright
efdfe318fd
Add ability to get user info from access tokens
2016-01-04 16:48:42 +09:00
Augier
a1f3d5f5f9
Getting token from user credential flow
2016-01-04 16:45:21 +09:00
augier
8d8faf684c
OpenID Connect debut work
2016-01-04 16:45:21 +09:00
cmrd Senya
a2ce47fae5
Remove parent author signature for relayables from the DB
...
since it is considered redundant
2015-12-16 22:00:35 +03:00
Lukas Matt
78f9b39e55
Use polymorphic association for the report item
...
* Adopt pronto suggestions
Signed-off-by: Lukas Matt <lukas@zauberstuhl.de>
2015-10-03 17:18:03 +02:00
Florian Staudacher
738413c65f
fix some issues with pod-checking
...
add tooltips in the frontend
fix a JS problem with empty hostname
use `find_in_batches` correctly
add a migration to clean up the pods table + unique index on hostname
2015-08-30 18:50:34 +02:00
Florian Staudacher
ea397ffdfb
Add connection test for pods in the network
...
* add a class for checking pod connectivity
* extend pod model to handle new functionality
* add an admin frontend to list pods and re-trigger checks manually
* add a daily worker to run through all the pods
* add unit tests for most of the new code
2015-08-24 22:04:53 +02:00
Jonne Haß
6ee3843449
Merge branch 'stable' into develop
2015-07-26 13:11:49 +02:00
theworldbright
2a3dde1ae5
Refactor PostService and extract its tests
...
Squashed commits:
[ada0f09] Remove favorites from Posts table
closes #6208
2015-07-26 13:10:24 +02:00
cmrd Senya
7a5a0a909a
Allow extended profile fields (previously private profile) to be set public ( #5684 ).
...
This adds a new boolean field "public_details" to person model.
By default it is false and represents old behaviour. When it is
set to true, extended profile (bio,location,gender,birthday)
get available to people who didn't log into diaspora and to
people you don't share with (i.e. it is made public).
In UI, a bootstrap-switch added on the profile-edit page in order to
change the setting.
This also changes wording from public/private profile to basic/extended.
The latter could be public and limited.
2015-07-11 04:36:45 +03:00