1542 Commits (9c39fb52f300c447dce5f279e448edeb0291d002)

Author	SHA1	Message	Date
zunda	a30cdfd4d4	Specify 410 for code when responding as json while self-destruction (#29420)	11 months ago
Matt Jankowski	785e2f9399	Add scope `providing_styles` to `UserRole` (#29286)	11 months ago
Claire	d4d0565b0f	Fix user creation failure handling in OAuth paths (#29207)	11 months ago
Claire	b31af34c97	Merge pull request from GHSA-vm39-j3vx-pch3 ... * Prevent different identities from a same SSO provider from accessing a same account * Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true` * Rename methods to avoid confusion between OAuth and OmniAuth	11 months ago
Claire	7efc33b909	Move HTTP Signature parsing code to its own class (#28932)	12 months ago
Claire	eeabf9af72	Fix compatibility with Redis <6.2 (#29123)	12 months ago
Matt Jankowski	2f19ddd1fa	Move status serializer error handling to private method (#29031)	12 months ago
Matt Jankowski	93a5b3f9df	Move status serializer chooser to private method (#29030)	12 months ago
Matt Jankowski	0877f6fda4	Remove redundant `return` in `IntentsController` (#29099)	12 months ago
Matt Jankowski	4cf07ed78c	Add missing action logging to `api/v1/admin/reports#update` (#29044)	12 months ago
Claire	1726085db5	Merge pull request from GHSA-3fjr-858r-92rw ... * Fix insufficient origin validation * Bump version to 4.3.0-alpha.1	12 months ago
Matt Jankowski	42ab855b23	Add specs for `Instance` model scopes and add `with_domain_follows` scope (#28767)	12 months ago
Matt Jankowski	17ea22671d	Fix `Style/GuardClause` cop in app/controllers (#28420)	12 months ago
Matt Jankowski	7c9c6c7f80	Fix remaining `Rails/WhereExists` cop violations, regenerate todo (#28892)	12 months ago
Claire	c50274a0ac	Fix redirect confirmation for accounts (#28902)	12 months ago
Eugen Rochko	b19ae521b7	Add confirmation when redirecting logged-out requests to permalink (#27792) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	12 months ago
Eugen Rochko	5b1eb09d54	Add annual reports for accounts (#28693)	12 months ago
Matt Jankowski	c0e8e457ab	Eager loading fixes for `api/` controllers (#28848)	1 year ago
Claire	e2d9635074	Add notification email on invalid second authenticator (#28822)	1 year ago
Matt Jankowski	18004bf227	Add `Account.matches_uri_prefix` scope and use in activitypub/followers_synchronizations controller (#28820)	1 year ago
Matt Jankowski	7ecf7f5403	Move controller->request specs for api/v1/statuses/* (#28818)	1 year ago
Claire	3593ee2e36	Add rate-limit of TOTP authentication attempts at controller level (#28801)	1 year ago
Matt Jankowski	329911b0a3	Migrate controller->request spec for api/v1/follow* (#28811)	1 year ago
Matt Jankowski	1480573c83	Add `Account.auditable` scope, fix N+1 in admin/action_logs#index (#28812)	1 year ago
Matt Jankowski	0b853678a4	Add coverage for `api/v1/peers/search` endpoint and extract controller query to Instance scope (#28796)	1 year ago
Claire	98b5f85f10	Rename and refactor `User#confirm!` to `User#mark_email_as_confirmed!` (#28735)	1 year ago
Matt Jankowski	e72676e83a	Improve `api/v1/markers#create` performance against simultaneous requests (#28718)	1 year ago
Matt Jankowski	7801db7ba4	Spec coverage for custom css endpoint (#28706)	1 year ago
Matt Jankowski	575ab085be	Disable `Rails/ApplicationController` for `HealthController` (#28705)	1 year ago
Claire	d7e13e2483	Fix potential redirection loop of streaming endpoint (#28665)	1 year ago
Jean Boussier	5a6d533c53	Enable Rails 7.1 Marshalling format (#28609)	1 year ago
Claire	419c659bc4	Add fallback redirection when getting a webfinger query `WEB_DOMAIN@WEB_DOMAIN` (#28592)	1 year ago
Claire	dfdadb92e8	Add ability to require approval when users sign up using specific email domains (#28468)	1 year ago
Matt Jankowski	e12d8893f4	Fix intermittent failure from unspecified order in `export_domain_blocks` controller spec (#28562)	1 year ago
Claire	092bb8a27a	Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476)	1 year ago
Claire	1184887b01	Fix streaming API redirection ignoring the port of `streaming_api_base_url` (#28558)	1 year ago
Eugen Rochko	b5ac61b2c5	Change algorithm of follow recommendations (#28314) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Matt Jankowski	c28976d89e	Handle negative offset param in `api/v2/search` (#28282)	1 year ago
Claire	7d9b209fe8	Fix call to inefficient `delete_matched` cache method in domain blocks (#28374)	1 year ago
Matt Jankowski	0e5b8fc46b	Fix `Style/RedundantReturn` cop (#28391)	1 year ago
Matt Jankowski	3bc437b99a	Fix `Style/RedundantParentheses` cop (#28176)	1 year ago
Matt Jankowski	d83d01eb1e	Fix `Lint/RedundantSafeNavigation` cop (#28172)	1 year ago
Claire	963354978a	Add `Account#unavailable?` and `Account#permanently_unavailable?` aliases (#28053)	1 year ago
Matt Jankowski	1f1c75bba5	File cleanup/organization in `controllers/concerns` (#27846)	1 year ago
Matt Jankowski	e7c340a634	Spec coverage for missing `q` param and error conditions in `api/v2/search` controller (#27842)	1 year ago
Matt Jankowski	bb0efe16e6	Remove `default_scope` from `MediaAttachment` class (#28043)	1 year ago
Matt Jankowski	e48ecd2929	Remove `default_scope` from `Admin::ActionLog` (#28026)	1 year ago
Matt Jankowski	291dc04e67	Remove un-needed `action` and `template` options to `render` in controllers (#28022)	1 year ago
Matt Jankowski	baf3b71e3b	Extract `path_without_format` private methd in accounts controller (#28091)	1 year ago
Matt Jankowski	9072896ae5	Avoid unnecessary i-var for account rss page url generation (#28092)	1 year ago
Matt Jankowski	dfc7154767	Remove unused `cached_filtered_status_page` method from accounts controller (#28090)	1 year ago
Kevin Bongart	7877fcd83c	Deduplicate IDs in relationships and familiar_followers APIs (#27982)	1 year ago
Matt Jankowski	4be12791e6	Remove `default_scope` from `StatusEdit` class (#28042)	1 year ago
Matt Jankowski	9742bccbe7	Add coverage for `api/v2/media` endpoint (#28027)	1 year ago
Matt Jankowski	876f5b1d12	Convert `/instances/*` controller specs to request specs (#27988) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Matt Jankowski	fe58ac8d9f	Improve spec coverage for `api/web/push_subscriptions` controller (#27858) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Eugen Rochko	d67bd44ca1	Add profile setup to onboarding in web UI (#27829)	1 year ago
Matt Jankowski	7e1a77ea51	Add base class for `api/v1/timelines/*` controllers (#27840)	1 year ago
Matt Jankowski	d562fb8459	Specs for minimal CSP policy in `Api::` controllers (#27845)	1 year ago
Matt Jankowski	1f8173ac5a	Extract private methods in api/v1/instances/domain_blocks (#27844)	1 year ago
Matt Jankowski	0945e25b8f	Add `Api::V1::Statuses::BaseController` base controller class (#27794)	1 year ago
Claire	07a4059901	Add support for invite codes in the registration API (#27805)	1 year ago
Eugen Rochko	0d14fcebae	Change link previews to keep original URL from the status (#27312)	1 year ago
Matt Jankowski	ac69f90098	Add `Api::V1::Instances::BaseController` base controller class (#27797)	1 year ago
Claire	c451bbe249	Allow viewing and severing relationships with suspended accounts (#27667)	1 year ago
Matt Jankowski	13c3e59601	Use helper method to build batched status edits in `admin/statuses/show` (#27739)	1 year ago
Matt Jankowski	d6f50839e1	Fix `RSpec/SpecFilePathFormat` cops (#27730)	1 year ago
Claire	d649bbf28f	Add some more tests and clean up domain block controller (#27469)	1 year ago
Ricardo Trindade	33f8c1c5eb	Remove version check from update cache_concern.rb (#27592)	1 year ago
Matt Jankowski	1f5187e2e2	Misc spec/refactor to user mailer and user mailer spec (#27486)	1 year ago
Claire	d2f52f7f64	Fix report processing notice not mentioning the report number when performing a custom action (#27442)	1 year ago
Claire	49b8433c56	Fix confusing screen when visiting a confirmation link for an already-confirmed email (#27368)	1 year ago
Claire	379115e601	Add SELF_DESTRUCT env variable to process self-destructions in the background (#26439)	1 year ago
Claire	99f2534cee	Add support for displaying unknown servers on /admin/instances/:domain (#27150)	1 year ago
Emelia Smith	7c3fea7275	Feature: Allow token introspection without read scope (#27142)	1 year ago
Matt Jankowski	d4c2dca874	Fix haml-lint `InstanceVariables` rule for auth/sessions/two_factor/o… (#27372)	1 year ago
Claire	40ba6e119b	Fix Vary headers not being set on some redirects (#27272)	1 year ago
Matt Jankowski	340f1a68be	Simplify instance presenter view access (#26046)	1 year ago
Robert R George	20666482ef	Added admin api for managing tags (#26872)	1 year ago
CSDUMMI	9a70cac9de	Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857)	1 year ago
Claire	33c8708a1a	Change `GET /api/v1/directory` to use database replica rather than primary (#26856)	1 year ago
Claire	09ec9c6aa5	Downgrade signature verification debug logging from `warn` to `debug` (#26812)	1 year ago
Claire	548c032dbb	Improve interaction modal error handling (#26795)	1 year ago
Claire	16681e0f20	Add admin notifications for new Mastodon versions (#26582)	1 year ago
Claire	9e26cd5503	Add `authorized_fetch` server setting in addition to env var (#25798)	1 year ago
Daniel M Brasil	ccca542db1	Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled (#26237)	1 year ago
Claire	25bf640629	Add debug logging on signature verification failure (#26637)	1 year ago
Lukas Martini	a7d96e6aff	Improve error messages when DeepL quota is exceeded (#26704)	1 year ago
jsgoldstein	30c191aaa0	Add new public status index (#26344) ... Co-authored-by: Eugen Rochko <eugen@zeonfederated.com> Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Claire	191d302b7f	Refactor `Api::V1::ProfilesController` into two separate controllers (#26573)	1 year ago
Daniel M Brasil	d24a87ce4f	Add ability to delete avatar or header picture via the API (#25124) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Claire	cc4560d95b	Change “privacy and reach” settings so that unchecking boxes always increase privacy and checking them always increase reach (#26508)	1 year ago
Claire	fc5ab2dc83	Add privacy tab in profile settings (#26484) ... Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>	1 year ago
Claire	b12d75ef4f	Fix blocking subdomains of an already-blocked domain (#26392)	1 year ago
Claire	8b37dd2c86	Fix Content Security Policy sometimes unnecessarily allowing hCaptcha scripts (#26388)	1 year ago
CSDUMMI	120f5802c0	Add direct link to the Single-Sign On provider if there is only one sign up method available (#26083)	1 year ago
Daniel M Brasil	3a4d3e9d4b	Add `GET /api/v1/instance/languages` to REST API (#24443) ... Co-authored-by: Eugen Rochko <eugen@zeonfederated.com> Co-authored-by: Claire <claire.github-309c@sitedethib.com>	1 year ago
Emelia Smith	e258b4cb64	Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)	1 year ago
Christian Schmidt	ca342d4838	Add List-Unsubscribe email header (#26085)	1 year ago
Claire	6c39125761	Change /api/v1/peers/search to be case-insensitive when using Elasticsearch (#26268)	1 year ago