mastodon

Commit Graph

Author	SHA1	Message	Date
Eugen Rochko	e98c86050a	Refactor `Cache-Control` and `Vary` definitions (#24347 )	2 years ago
Claire	4ae97a2e4c	Fix OAuth flow being broken by recent CSP change (#20958 )	2 years ago
Daniel Axtens	4d85c27d1a	Add 'private' to Cache-Control, match Rails expectations (#20608 ) Several controlers set quite intricate Cache-Control headers in order to hopefully not be cached by any intermediate proxies or local caches. Unfortunately, these headers are processed by ActionDispatch::HTTP::Cache in a way that squashes and discards any values set alongside no-store other than private: `8015c2c2cf/actionpack/lib/action_dispatch/http/cache.rb (L207-L209)` We want to preserve no-store on these responses, but we might as well remove parts that are going to be dropped anyway. As many of the endpoints in these controllers are private to a particular user, we should also add "private", which will be preserved alongside no-store.	2 years ago
Eugen Rochko	6e9e8d89fa	Fix settings pages being cacheable by the browser (#12714 ) Fix #12255	5 years ago
Eugen Rochko	2288d50a7b	Add force_login option to OAuth authorize page (#8655 ) * Add force_login option to OAuth authorize page For when a user needs to sign into an app from multiple accounts on the same server * When logging out from modal header, redirect back after re-login	6 years ago
Eugen Rochko	4b621188ad	Fix #1165 - before_action was called before protect_from_forgery	8 years ago
Eugen Rochko	e3a3422a65	Allow setting of default language through config Setting of locale in controller extracted to Localized concern, the doorkeeper authorized applications controller moved under custom namespace with inclusion of Localized, which resolves the "it sometimes appears in a different random language" bug	8 years ago
Eugen Rochko	b510a56c0c	Only call regeneration worker after first login after a 14 day break	8 years ago
Eugen Rochko	fdc17bea58	Fix rubocop issues, introduce usage of frozen literal to improve performance	8 years ago
Eugen Rochko	b746a931a5	Fix OAuth authorization redirect	8 years ago
Eugen Rochko	a9e40a3d80	Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting to the API	8 years ago

11 Commits (5cd55d8aaf9880ca36dfa16d08600d31e8a5ff17)