Steffen van Bergerem
c3de77e0fc
Send notification mails on CSRF fails
...
closes #7050
2016-09-04 03:26:42 +02:00
Steffen van Bergerem
6ad9000f8c
Sign out users with wrong CSRF tokens
...
See http://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf
2016-09-04 03:26:18 +02:00
Jonne Haß
e70ffebc49
Merge pull request #6805 from cmrd-senya/mention-name-fixup
...
Fix up the meaning of the name parameter in mention
2016-08-11 13:28:02 +02:00
cmrd Senya
d200e92aeb
Fix up the meaning of the name parameter in mentions
...
The desktop frontend now treats the "name" parameter of mention as
a string to display unconditionally. But the Diaspora::Mentionable
renders mentions the different way: "name" is treated as a fallback
string which is rendered only if the person's name is unavailable.
This reflects on the mobile version ATM. This patch makes it behave
the same way as the current desktop version does.
2016-08-11 13:19:48 +03:00
cmrd Senya
4ae26e1ded
Upgrade devise to 4.2
2016-08-11 12:25:36 +03:00
Steffen van Bergerem
46cbc6e52a
Filter mentions on status message creation
2016-07-04 10:26:45 +02:00
Benjamin Neff
65f03b2d08
extract mappings between diaspora and the federation gem
2016-06-26 06:21:02 +02:00
Benjamin Neff
1cf11db634
remove diaspora_handle setter to set author
2016-06-26 06:21:02 +02:00
Benjamin Neff
cf5a72719e
participates root author when receiving a reshare
2016-06-26 06:21:02 +02:00
Benjamin Neff
b39f3ccc74
relay relayables after receive
...
also refactored relayable specs to use `let`
2016-06-26 06:21:02 +02:00
Benjamin Neff
902d7faca4
relay retractions for relayables
2016-06-26 06:21:01 +02:00
Benjamin Neff
3df70bb205
send retractions for public targets publicly
2016-06-26 06:21:01 +02:00
Benjamin Neff
5f25135848
send public messages
2016-06-26 06:21:00 +02:00
Benjamin Neff
645c7bd5ad
rewrite attack vector specs using new federation
2016-06-26 06:21:00 +02:00
Benjamin Neff
7bb172cefb
remove old Private and Public Receiver
2016-06-26 06:21:00 +02:00
Benjamin Neff
581f8d7226
don't force remove contact on block
...
this creates inconsistent states, if you remove the block in the future
2016-06-26 06:21:00 +02:00
Benjamin Neff
102e2a0834
remove Request class and refactor Connecting
2016-06-26 06:20:59 +02:00
Benjamin Neff
6fbfc2bf96
write receive specs and delete old unused specs
...
also refactored receive methods
2016-06-26 06:20:59 +02:00
Benjamin Neff
a7f6c84bf3
fix TODOs in federation specs
2016-06-26 06:20:59 +02:00
Benjamin Neff
59bb46eeb6
handle retractions
2016-06-26 06:20:59 +02:00
Benjamin Neff
58a5a881cf
receive local
...
* Contact: auto-follow-back
* Shareable: create share visibilities
2016-06-26 06:20:59 +02:00
Benjamin Neff
f3466bcfd6
update profile
2016-06-26 06:20:59 +02:00
Benjamin Neff
4fb34139b0
cleanup notifications and fix tests
2016-06-26 06:20:59 +02:00
Benjamin Neff
ebfb0aa884
create NotificationService: send notifications after receive
2016-06-26 06:20:59 +02:00
Benjamin Neff
87666eeb35
handle receive contact
2016-06-26 06:20:59 +02:00
Benjamin Neff
e0da6708f4
save entities on receive
...
first implementation of receive_entity callback
2016-06-26 06:20:59 +02:00
Benjamin Neff
dfe32a5e4b
fix federation tests
2016-06-26 06:20:59 +02:00
Benjamin Neff
b1d30aa9cc
add more "diaspora to federation entity" methods
...
move it to Diaspora::Federation::Entities and use it in some tests, but most of the tests can be removed later.
2016-06-26 06:20:58 +02:00
Dennis Schubert
61fb7410cc
Merge pull request #6844 from cmrd-senya/unique-aspect-visibilities
...
Fix possible duplication of AspectVisibility
2016-06-19 01:49:41 +02:00
Dennis Schubert
520d80cc1a
Merge branch 'stable' into develop
2016-06-09 03:19:35 +02:00
Steffen van Bergerem
a14c61300e
Remove the publisher from the photos page
...
closes #6851
2016-06-09 03:17:52 +02:00
cmrd Senya
717554edac
Fix possible duplication of AspectVisibility
...
No uniqueness control on AspectVisibility resulted in possible having
multiple AspectVisibility objects in the DB for the same aspect and
shareable which doesn't make sense. Introduce uniqueness validation
and fix up tests where duplication happened.
2016-05-27 20:22:03 +03:00
Dennis Schubert
e95c742aa1
Merge branch 'stable' into develop
2016-03-30 10:18:09 +02:00
Benjamin Neff
a3ed9da210
changes for new federation-gem version
2016-03-30 09:45:46 +02:00
cmrd Senya
2986aa8b24
Remove diaspora_handle from shareables
...
We can determine diaspora_handle from a relation with people for the
shareables (posts, photos). So we don't need to store diaspora_handle in
the DB. Also remove tmp_old_id from photos which is not refenrenced anywhere.
2016-03-07 18:47:21 +03:00
Dennis Schubert
91d636b9f6
Merge pull request #6727 from SuperTux88/improve-pod-check
...
Improve pod check
2016-03-05 06:03:20 +01:00
Benjamin Neff
b1a6516474
add migration for pods-table
...
* add port to pods
* remove url from person and link people with pod-table
2016-03-05 00:12:54 +01:00
Steffen van Bergerem
bf17205c17
Fix some publisher.scss scss-lint errors
2016-03-04 18:02:22 +01:00
Benjamin Neff
7011f2961d
Revert "Back out #6723 due to Postgres breakage"
...
This reverts commit 84cfbd22fc .
2016-03-04 14:01:31 +01:00
Dennis Schubert
84cfbd22fc
Back out #6723 due to Postgres breakage
...
This reverts commit 832a56134b , reversing
changes made to 75c3e6068c .
2016-03-04 13:33:32 +01:00
Benjamin Neff
7583568be8
update queries for new ShareVisibility
...
Also:
* remove ShareablesFromPerson evil-query
* improve multi-stream and aspect-stream queries
* fix logging for recieve
* don't add last 100 public posts to users streams after sharing
* delete share visibility when shareable is deleted
2016-03-03 21:43:11 +01:00
Dennis Schubert
515cda7658
Merge branch 'stable' into develop
2016-01-24 07:15:04 +01:00
Benjamin Neff
44ab0df02b
fix suppress_annoying_errors
...
closes #6653
2016-01-24 07:14:58 +01:00
Jonne Haß
baeff22451
Merge pull request #6095 from AugierLe42e/openid
...
OpenID Connect
2016-01-06 12:30:15 +01:00
Dennis Schubert
40e780abcf
Merge branch 'stable' into develop
2016-01-06 00:49:15 +01:00
Benjamin Neff
812510b44a
refactoring tests again
...
closes #6595
2016-01-06 00:47:55 +01:00
cmrd Senya
b6c7f004e4
Further receive tests development
2016-01-06 00:47:42 +01:00
theworldbright
a76f51a6a5
Use redirect_uri if no sector identifier for ppid
...
As according to http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg :
"If the Client has not provided a value for
sector_identifier_uri in Dynamic Client Registration
[OpenID.Registration], the Sector Identifier used
for pairwise identifier calculation is the host
component of the registered redirect_uri."
2016-01-04 16:49:55 +09:00
theworldbright
6e1a673459
Replace let!() with factory girl
2016-01-04 16:49:52 +09:00
theworldbright
99d6d7b3e7
Add pairwise pseudonymous identifier support
...
Squashed commits:
[a182de7] Fix pronto/travis errors
2016-01-04 16:49:51 +09:00