mastodon

Commit Graph

Author	SHA1	Message	Date
Matt Jankowski	319109029d	Fix logic in "last used at per application" oauth token list (#32912 )	1 month ago
Emelia Smith	e1b7382ea6	Add userinfo oauth endpoint (#32548 )	2 months ago
Matt Jankowski	a9d0b48b65	Set "admin" body class from `admin` nested layout (#31269 )	4 months ago
Claire	395f17ca17	Merge pull request from GHSA-vp5r-5pgw-jwqx * Fix streaming sessions not being closed when revoking access to an app * Add tests for GHSA-7w3c-p9j8-mq3x	6 months ago
Claire	963354978a	Add `Account#unavailable?` and `Account#permanently_unavailable?` aliases (#28053 )	1 year ago
Claire	e13d2edd47	Fix “Authorized applications” inefficiently and incorrectly getting last use date (#25060 )	2 years ago
Eugen Rochko	e98c86050a	Refactor `Cache-Control` and `Vary` definitions (#24347 )	2 years ago
Claire	4ae97a2e4c	Fix OAuth flow being broken by recent CSP change (#20958 )	2 years ago
Daniel Axtens	4d85c27d1a	Add 'private' to Cache-Control, match Rails expectations (#20608 ) Several controlers set quite intricate Cache-Control headers in order to hopefully not be cached by any intermediate proxies or local caches. Unfortunately, these headers are processed by ActionDispatch::HTTP::Cache in a way that squashes and discards any values set alongside no-store other than private: `8015c2c2cf/actionpack/lib/action_dispatch/http/cache.rb (L207-L209)` We want to preserve no-store on these responses, but we might as well remove parts that are going to be dropped anyway. As many of the endpoints in these controllers are private to a particular user, we should also add "private", which will be preserved alongside no-store.	2 years ago
Eugen Rochko	5a48bf1085	Fix error when trying to revoke OAuth token without supplying a token (#18205 )	3 years ago
Eugen Rochko	4e4b3a0c8e	Refactor settings controllers (#14767 ) - Disallow suspended accounts from revoking sessions and apps - Allow suspended accounts to access exports	4 years ago
Eugen Rochko	6e9e8d89fa	Fix settings pages being cacheable by the browser (#12714 ) Fix #12255	5 years ago
Eugen Rochko	964ae8eee5	Change unconfirmed user login behaviour (#11375 ) Allow access to account settings, 2FA, authorized applications, and account deletions to unconfirmed and pending users, as well as users who had their accounts disabled. Suspended users cannot update their e-mail or password or delete their account. Display account status on account settings page, for example, when an account is frozen, limited, unconfirmed or pending review. After sign up, login users straight away and show a simple page that tells them the status of their account with links to account settings and logout, to reduce onboarding friction and allow users to correct wrongly typed e-mail addresses. Move the final sign-up step of SSO integrations to be the same as above to reduce code duplication.	6 years ago
rinsuki	88f35f339d	Fix authorized applications list page design (#9969 )	6 years ago
Eugen Rochko	2288d50a7b	Add force_login option to OAuth authorize page (#8655 ) * Add force_login option to OAuth authorize page For when a user needs to sign into an app from multiple accounts on the same server * When logging out from modal header, redirect back after re-login	6 years ago
Eugen Rochko	8378b72eba	Ensure push subscription is immediately removed when application is revoked (#7548 ) * Ensure push subscription is immediately removed when application is revoked * When token is revoked from app, unsubscribe too	7 years ago
Eugen Rochko	4b621188ad	Fix #1165 - before_action was called before protect_from_forgery	8 years ago
Eugen Rochko	e3a3422a65	Allow setting of default language through config Setting of locale in controller extracted to Localized concern, the doorkeeper authorized applications controller moved under custom namespace with inclusion of Localized, which resolves the "it sometimes appears in a different random language" bug	8 years ago
Eugen Rochko	b510a56c0c	Only call regeneration worker after first login after a 14 day break	8 years ago
Eugen Rochko	fdc17bea58	Fix rubocop issues, introduce usage of frozen literal to improve performance	8 years ago
Eugen Rochko	b746a931a5	Fix OAuth authorization redirect	8 years ago
Eugen Rochko	a9e40a3d80	Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting to the API	8 years ago
Eugen Rochko	7e14eefc81	Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app registration API	8 years ago
Eugen Rochko	10ba09f546	Upgrade to Rails 5.0.0.1	8 years ago
Eugen Rochko	6fec8afc3f	Bind oauth applications to users	9 years ago

25 Commits (feature-starter-packs)