mastodon

Commit Graph

Author	SHA1	Message	Date
Claire	bea340816d	Merge commit from fork * Fix domain blocks/rationales being visible to unapproved/unconfirmed users * Fix domain blocks/rationales being visible to suspended users Co-authored-by: Claire <claire.github-309c@sitedethib.com> * Allow moved users to view domain blocks * Add authorization specs for `/api/v1/instance/domain_blocks` spec * Fix tests * Fix incorrect test setup --------- Co-authored-by: Jeremy Kescher <jeremy@kescher.at>	2 days ago
Claire	5a44db38ac	Fix incorrect signature after HTTP redirect (#33757 )	4 days ago
Claire	346c37df80	Fix replies collection being cached improperly	5 months ago
Claire	4fb4721072	Merge pull request from GHSA-58x8-3qxw-6hm7 * Fix insufficient permission checking for public timeline endpoints Note that this changes unauthenticated access failure code from 401 to 422 * Add more tests for public timelines * Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`	8 months ago
Claire	df974a912b	Merge pull request from GHSA-vp5r-5pgw-jwqx * Fix streaming sessions not being closed when revoking access to an app * Add tests for GHSA-7w3c-p9j8-mq3x	8 months ago
Emelia Smith	67b2e62331	Fix missing destory audit logs for Domain Allows (#30125 )	10 months ago
Claire	56b7d1a7b6	Fix not being able to block a subdomain of an already-blocked domain through the API (#30119 )	10 months ago
Claire	c3be5a3d2e	Remove caching in `cache_collection` (#29862 )	10 months ago
Matt Jankowski	0143c9d3e1	Fix results/query in `api/v1/featured_tags/suggestions` (#29597 )	10 months ago
Claire	6536d96d1b	Add fallback redirection when getting a webfinger query `WEB_DOMAIN@WEB_DOMAIN` (#28592 )	10 months ago
Claire	870ee80fd3	Fix user creation failure handling in OAuth paths (#29207 )	1 year ago
Claire	f1700523f1	Merge pull request from GHSA-vm39-j3vx-pch3 * Prevent different identities from a same SSO provider from accessing a same account * Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true` * Rename methods to avoid confusion between OAuth and OmniAuth	1 year ago
Claire	a6641f828b	Merge pull request from GHSA-3fjr-858r-92rw * Fix insufficient origin validation * Bump version to v4.2.5	1 year ago
Claire	6fe2a47357	Add rate-limit of TOTP authentication attempts at controller level (#28801 )	1 year ago
Claire	3837ec2227	Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476 )	1 year ago
Claire	c0a9db3611	Fix potential redirection loop of streaming endpoint (#28665 )	1 year ago
Claire	01caa18e5b	Fix streaming API redirection ignoring the port of `streaming_api_base_url` (#28558 )	1 year ago
Claire	d7875adad2	Fix call to inefficient `delete_matched` cache method in domain blocks (#28367 )	1 year ago
Claire	700ae1f918	Fix report processing notice not mentioning the report number when performing a custom action (#27442 )	1 year ago
Claire	ffcf2c691e	Fix Vary headers not being set on some redirects (#27272 )	1 year ago
Robert R George	20666482ef	Added admin api for managing tags (#26872 )	1 year ago
CSDUMMI	9a70cac9de	Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857 )	1 year ago
Claire	33c8708a1a	Change `GET /api/v1/directory` to use database replica rather than primary (#26856 )	1 year ago
Claire	09ec9c6aa5	Downgrade signature verification debug logging from `warn` to `debug` (#26812 )	2 years ago
Claire	548c032dbb	Improve interaction modal error handling (#26795 )	2 years ago
Claire	16681e0f20	Add admin notifications for new Mastodon versions (#26582 )	2 years ago
Claire	9e26cd5503	Add `authorized_fetch` server setting in addition to env var (#25798 )	2 years ago
Daniel M Brasil	ccca542db1	Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled (#26237 )	2 years ago
Claire	25bf640629	Add debug logging on signature verification failure (#26637 )	2 years ago
Lukas Martini	a7d96e6aff	Improve error messages when DeepL quota is exceeded (#26704 )	2 years ago
jsgoldstein	30c191aaa0	Add new public status index (#26344 ) Co-authored-by: Eugen Rochko <eugen@zeonfederated.com> Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2 years ago
Claire	191d302b7f	Refactor `Api::V1::ProfilesController` into two separate controllers (#26573 )	2 years ago
Daniel M Brasil	d24a87ce4f	Add ability to delete avatar or header picture via the API (#25124 ) Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2 years ago
Claire	cc4560d95b	Change “privacy and reach” settings so that unchecking boxes always increase privacy and checking them always increase reach (#26508 )	2 years ago
Claire	fc5ab2dc83	Add privacy tab in profile settings (#26484 ) Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>	2 years ago
Claire	b12d75ef4f	Fix blocking subdomains of an already-blocked domain (#26392 )	2 years ago
Claire	8b37dd2c86	Fix Content Security Policy sometimes unnecessarily allowing hCaptcha scripts (#26388 )	2 years ago
CSDUMMI	120f5802c0	Add direct link to the Single-Sign On provider if there is only one sign up method available (#26083 )	2 years ago
Daniel M Brasil	3a4d3e9d4b	Add `GET /api/v1/instance/languages` to REST API (#24443 ) Co-authored-by: Eugen Rochko <eugen@zeonfederated.com> Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2 years ago
Emelia Smith	e258b4cb64	Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252 )	2 years ago
Christian Schmidt	ca342d4838	Add List-Unsubscribe email header (#26085 )	2 years ago
Claire	6c39125761	Change /api/v1/peers/search to be case-insensitive when using Elasticsearch (#26268 )	2 years ago
Misty De Méo	12a6cf569e	Storage: add :azure to remaining callers (#26080 )	2 years ago
Claire	b4e739ff0f	Change interaction modal in web UI (#26075 ) Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>	2 years ago
Matt Jankowski	50ff3d3342	Coverage for `Auth::OmniauthCallbacks` controller (#26147 )	2 years ago
Claire	b629e21515	Fix unexpected redirection to /explore after sign-in (#26143 )	2 years ago
Christian Schmidt	4c18928a93	Wrong count in response when removing favourite/reblog (#24365 ) Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2 years ago
Claire	943f27f437	Remove unfollowed hashtag posts from home feed (#26028 )	2 years ago
Claire	41f65edb21	Fix embed dropdown menu item for unauthenticated users (#25964 )	2 years ago
Eugen Rochko	8d0c69529a	Change markers API to use a replica (#25851 )	2 years ago

1 2 3 4 5 ...

1434 Commits (3a1c880283073c14f53a66f481e79db9992856a6)