Commit Graph

1503 Commits (718ee72c8073fe8851a29dc930fd78a41335906c)

Author SHA1 Message Date
Claire 44bf7b8128
Add notifications of severed relationships ()
Claire 8a1423a474
Allow unblocking email addresses from any matching account ()
Matt Jankowski b5115850bb
Move repeated `insert_pagination_headers` method to api base class ()
Matt Jankowski 7720c684c5
Move common module inclusion in sub classes to `ActivityPub::BaseController` ()
Matt Jankowski f9100743ec
Add `Api::ErrorHandling` concern for api/base controller ()
Matt Jankowski c09b8a7164
Add `Account.without_internal` scope ()
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Matt Jankowski 9754967d5f
Move `pagination_max_id` and `pagination_since_id` into api/base controller ()
Eugen Rochko c10bbf5fe3
Add notification policies and notification requests in web UI ()
Eugen Rochko 5b3a8737d6
Add hints for rules ()
Eugen Rochko 50b17f7e10
Add notification policies and notification requests ()
Matt Jankowski eb1b8f69de
Allow pagination `Link` headers on API accounts/statuses when pinned true ()
zunda a30cdfd4d4
Specify 410 for code when responding as json while self-destruction ()
Matt Jankowski 785e2f9399
Add scope `providing_styles` to `UserRole` ()
Claire d4d0565b0f
Fix user creation failure handling in OAuth paths ()
Claire b31af34c97
Merge pull request from GHSA-vm39-j3vx-pch3
* Prevent different identities from a same SSO provider from accessing a same account

* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`

* Rename methods to avoid confusion between OAuth and OmniAuth
Claire 7efc33b909
Move HTTP Signature parsing code to its own class ()
Claire eeabf9af72
Fix compatibility with Redis <6.2 ()
Matt Jankowski 2f19ddd1fa
Move status serializer error handling to private method ()
Matt Jankowski 93a5b3f9df
Move status serializer chooser to private method ()
Matt Jankowski 0877f6fda4
Remove redundant `return` in `IntentsController` ()
Matt Jankowski 4cf07ed78c
Add missing action logging to `api/v1/admin/reports#update` ()
Claire 1726085db5
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to 4.3.0-alpha.1
Matt Jankowski 42ab855b23
Add specs for `Instance` model scopes and add `with_domain_follows` scope ()
Matt Jankowski 17ea22671d
Fix `Style/GuardClause` cop in app/controllers ()
Matt Jankowski 7c9c6c7f80
Fix remaining `Rails/WhereExists` cop violations, regenerate todo ()
Claire c50274a0ac
Fix redirect confirmation for accounts ()
Eugen Rochko b19ae521b7
Add confirmation when redirecting logged-out requests to permalink ()
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Eugen Rochko 5b1eb09d54
Add annual reports for accounts ()
Matt Jankowski c0e8e457ab
Eager loading fixes for `api/` controllers ()
Claire e2d9635074
Add notification email on invalid second authenticator ()
Matt Jankowski 18004bf227
Add `Account.matches_uri_prefix` scope and use in activitypub/followers_synchronizations controller ()
Matt Jankowski 7ecf7f5403
Move controller->request specs for api/v1/statuses/* ()
Claire 3593ee2e36
Add rate-limit of TOTP authentication attempts at controller level ()
Matt Jankowski 329911b0a3
Migrate controller->request spec for api/v1/follow* ()
Matt Jankowski 1480573c83
Add `Account.auditable` scope, fix N+1 in admin/action_logs#index ()
Matt Jankowski 0b853678a4
Add coverage for `api/v1/peers/search` endpoint and extract controller query to Instance scope ()
Claire 98b5f85f10
Rename and refactor `User#confirm!` to `User#mark_email_as_confirmed!` ()
Matt Jankowski e72676e83a
Improve `api/v1/markers#create` performance against simultaneous requests ()
Matt Jankowski 7801db7ba4
Spec coverage for custom css endpoint ()
Matt Jankowski 575ab085be
Disable `Rails/ApplicationController` for `HealthController` ()
Claire d7e13e2483
Fix potential redirection loop of streaming endpoint ()
Jean Boussier 5a6d533c53
Enable Rails 7.1 Marshalling format ()
Claire 419c659bc4
Add fallback redirection when getting a webfinger query `WEB_DOMAIN@WEB_DOMAIN` ()
Claire dfdadb92e8
Add ability to require approval when users sign up using specific email domains ()
Matt Jankowski e12d8893f4
Fix intermittent failure from unspecified order in `export_domain_blocks` controller spec ()
Claire 092bb8a27a
Fix Mastodon not correctly processing HTTP Signatures with query strings ()
Claire 1184887b01
Fix streaming API redirection ignoring the port of `streaming_api_base_url` ()
Eugen Rochko b5ac61b2c5
Change algorithm of follow recommendations ()
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
Matt Jankowski c28976d89e
Handle negative offset param in `api/v2/search` ()
Claire 7d9b209fe8
Fix call to inefficient `delete_matched` cache method in domain blocks ()