1110 Commits (aab731e926dff9029094e9df969c130493ad4c42)

Author	SHA1	Message	Date
ThibG	bf94934623	Fix account redirect confirmation message talking about moved followers (#13950) ... Fixes #13949	6 years ago
Eugen Rochko	5d8398c8b8	Add E2EE API (#13820)	6 years ago
ThibG	71fce71c94	Fix webfinger returning wrong status code on malformed or missing param (#13759) ... Fixes #13757	6 years ago
ThibG	4bcef12bad	Fix sr locale being selected over sr-Latn (#13693) ... * Fix sr locale being selected over sr-Latn * Update tests	6 years ago
Eugen Rochko	8be4c2ba21	Add ability to remove identity proofs from account (#13682) ... Fix #12613	6 years ago
Takeshi Umeda	26b08a3c54	Add remote only to public timeline (#13504) ... * Add remote only to public timeline * Fix code style	6 years ago
ThibG	45202f79ef	Remove confusing “You are already signed in.” flash message (#13547) ... When attempting to access the log-in page while already logged in, Devise's `require_no_authentication` kicks in and sets a flash message “You are already signed in.” In almost all cases, this also causes a redirect to /web, which does not display or clear flash messages, thus leaving the message to a potentially much later date, like for instance, accessing /preferences several minutes after being redirected to /web.	6 years ago
ThibG	f1e0fa80f6	Fix own following/followers not showing muted users (#13614) ... Fixes #13612	6 years ago
Eugen Rochko	5cff7910c2	Add more ActivityPub controller tests (#13590)	6 years ago
Eugen Rochko	988b0493fe	Add more tests for ActivityPub controllers (#13585)	6 years ago
sternenseemann	679980f77c	Allow users to delete their header and avatar (#13234) ... This is achieved by sending a DELETE request to /settings/profile/pictures/{avatar,header} via a link that is part of the upload form's hint of the respective picture.	6 years ago
Takeshi Umeda	2c7128c7f0	Add local only to hashtag timeline (#13502)	6 years ago
Eugen Rochko	5edff32733	Change delivery failure tracking to work with hostnames instead of URLs (#13437)	6 years ago
Eugen Rochko	c9efb400b4	Add rate limit for reporting (#13390)	6 years ago
Eugen Rochko	f65568f1d4	Add ability to filter audit log in admin UI (#13381)	6 years ago
Takeshi Umeda	e4617c8ed8	Fix ImportsController param to permit :mode (#13347)	6 years ago
ThibG	0d117c106a	Fix 404 and 410 API errors being silently discarded in WebUI (#13279) ... * Fix 404 and 410 API errors being silently discarded in WebUI Fixes #13278 * Return more appropriate error when user replies to a deleted toot * Please CodeClimate * Fix 404/410 errors on fetching account timelines & identity proofs * Refactor error handling * Move error message string to statuses.errors	6 years ago
Eugen Rochko	bea0bb39d6	Add option to include resolved DNS records when blacklisting e-mail domains in admin UI (#13254) ... * Add shortcuts to blacklist a user's e-mail domain in admin UI * Add option to blacklist resolved MX and IP records for e-mail domains	6 years ago
Eugen Rochko	f556f79b77	Add titles to warning presets in admin UI (#13252)	6 years ago
ThibG	b154428e14	Add federation support for the "hide network" preference (#11673) ... * Change ActivityPub follower/following collections to not link first page * Add support for hiding followers and following of remote users * Switch to using a single `hide_collections` column * Address code style remarks	6 years ago
Eugen Rochko	9660aa4543	Change local media attachments to perform heavy processing asynchronously (#13210) ... Fix #9106	6 years ago
ThibG	2423d2f677	Add ability to delete files uploaded for settings in admin UI (#13192) ... * Allow deleting site uploads * Refactor and move links into hints * Fix i18n tests * Fix HTML output of site_upload_delete_hint	6 years ago
Eugen Rochko	339ce1c4e9	Add specific rate limits for posting and following (#13172)	6 years ago
Eugen Rochko	0ae5c6312f	Remove useless `respond_to` calls (#13208)	6 years ago
Eugen Rochko	0c28a505dd	Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)	6 years ago
ThibG	7face973fa	Fix dismissing an announcement twice raising an obscure error (#13124)	6 years ago
ThibG	d8e9bae482	Fix account JSON/RSS not being cacheable due to wrong mime type comparison (#13116) ... `request.format` is not a symbol but a `Mime::Type`, so the condition actually never matched, and a session was created even for those requests, preventing caching.	6 years ago
ThibG	c48d895ea7	Fix sign-ups without checked user agreement being accepted through the web form (#13088) ... * Fix user agreement not being verified * Fix tests * Fix up agreement field being dismissed	6 years ago
Eugen Rochko	b686e275e7	Fix unfiltered params error when generating ActivityPub tag pagination (#13049)	6 years ago
Eugen Rochko	a64973aecf	Fix malformed HTML causing uncaught error (#13042) ... Fix OEmbed preview API leaking existence of private statuses (see #12930)	6 years ago
Eugen Rochko	5265df0a8a	Change signature verification to ignore signatures with invalid host (#13033) ... Instead of returning a signature verification error, pretend there was no signature (i.e., this does not allow access to resources that need a valid signature), so public resources can still be fetched Fix #13011	6 years ago
ThibG	3adc722d1c	Change how unread announcements are handled (#13020) ... * Change meaning of /api/v1/announcements/:id/dismiss to mark an announcement as read * Change how unread announcements are counted in UI * Add unread marker to announcements and mark announcements as unread as they are displayed * Fixups	6 years ago
Eugen Rochko	663ea84b08	Add publish/unpublish controls to announcements in admin UI (#12967)	6 years ago
Eugen Rochko	b9d74d4076	Add streaming API updates for announcements being modified or deleted (#12963) ... Change `all_day` to be a visual client-side cue only Publish immediately if `scheduled_at` is in the past Add `published_at` and `updated_at` to announcements JSON	6 years ago
Eugen Rochko	c4c315ea40	Fix OEmbed leaking information about existence of non-public statuses (#12930)	6 years ago
Eugen Rochko	daf71573d0	Fix password change/reset not immediately invalidating other sessions (#12928) ... While making browser requests in the other sessions after a password change or reset does not allow you to be logged in and correctly invalidates the session making the request, sessions have API tokens associated with them, which can still be used until that session is invalidated. This is a security issue for accounts that were already compromised some other way because it makes it harder to throw out the hijacker.	6 years ago
Eugen Rochko	ce1dee85b5	Fix relationships page not showing results in admin UI (#12934) ... Follow-up to #12927	6 years ago
Eugen Rochko	f52c988e12	Add announcements (#12662) ... * Add announcements Fix #11006 * Add reactions to announcements * Add admin UI for announcements * Add unit tests * Fix issues - Add `with_dismissed` param to announcements API - Fix end date not being formatted when time range is given - Fix announcement delete causing reactions to send streaming updates - Fix announcements container growing too wide and mascot too small - Fix `all_day` being settable when no time range is given - Change text "Update" to "Announcement" * Fix scheduler unpublishing announcements before they are due * Fix filter params not being passed to announcements filter	6 years ago
Eugen Rochko	c0006a004d	Change followers page to relationships page in admin UI (#12927) ... Allow browsing and filtering all relationships instead of just followers, unify the codebase with the user-facing relationship manager, add ability to see who the user invited	6 years ago
Eugen Rochko	6feafb8802	Various fixes and improvements (#12878) ... * Fix unused role routes being generated * Remove unused JavaScript code * Refactor filters code to be DRYer * Fix `.count == 0` comparisons to `.empty?` in views * Fix filters in views	6 years ago
Eugen Rochko	02d272cf49	Fix access to OEmbed endpoint in secure mode (#12864)	6 years ago
Eugen Rochko	49b2f7c0a2	Fix base64-encoded file uploads not being possible (#12748) ... Fix #3804, Fix #5776	6 years ago
Eugen Rochko	4729341903	Fix missing authentication call in filters controller (#12746)	6 years ago
Eugen Rochko	83deae5bd7	Fix uncaught unknown format errors in host meta controller (#12747)	6 years ago
ThibG	3b3bdc7293	Hide blocked users from more places (#12733) ... * Hide blocked, muted, and blocked-by users from toot favourite lists * Hide blocked, muted, and blocked-by users from toot reblog lists * Hide blocked, muted, and blocked-by users from followers/following (API) * Fix tests * Hide blocked, muted, and blocked-by users from followers/following on public pages	6 years ago
Eugen Rochko	2999c95596	Fix error when fetching followers/following from REST API when user has network hidden (#12716) ... Fix #12510	6 years ago
ThibG	b2f81060b7	Remove unused AccountRelationshipsPresenter call in public pages (#12734) ... Those were used to show a “follow” or “unfollow” button on account grid on public pages, but that got removed a while ago.	6 years ago
Eugen Rochko	6e9e8d89fa	Fix settings pages being cacheable by the browser (#12714) ... Fix #12255	6 years ago
Eugen Rochko	353c94910b	Fix HTML error pages being returned when JSON is expected (#12713) ... Fix #12509 See also #12214	6 years ago
Eugen Rochko	7ee6f51b78	Fix missing error templates for non-HTML requests (#12593)	6 years ago
Eugen Rochko	6d7daf6154	Fix generic HTTP 500 error on duplicate records (#12563) ... Fix #12551 Fix #12547	6 years ago
ThibG	911cc14481	Add follow_request notification type (#12198) ... * Add follow_request notification type The notification type already existed in the backend but was never pushed to the front-end. This also means translation strings were also available for the backend, from the notification mailer. Unlike other notification types, these are off by default, to match what I remember of Gargron's view on the topic: that follow requests should not clutter notifications and should instead be reviewed at the user's own leisure in the dedicated column. Since follow requests have their own column, I've deemed it unnecessary to add a specific tab for them in the notification quick filter. * Show follow request link in single-column if there are pending requests, even if account isn't locked * Push follow requests from notifications to the follow_requests list * Offer to accept or reject follow request from the notification * Redesign follow request notification	6 years ago
ThibG	d8f96028c5	Add ability to filter reports by target account domain (#12154) ... * Add ability to filter reports by target account domain * Reword by_target_domain label	6 years ago
Eugen Rochko	d9793b2367	Fix proofs API being inaccessible in secure mode (#12495)	6 years ago
Gomasy	5a2c0707f1	Support min_id-based pagination for bookmarks (#12381) ... * Support min_id-based pagination for bookmarks * Fix spec	6 years ago
Jennifer Glauche	fd93a9c871	make it not return http 400 when passing and empty source argument (#12259) ... * make it not return http 400 when passing and empty source argument * create a spec for the empty source hash bug * compact checks for nil, empty? parameters * use nil.blank? instead checking for nil	6 years ago
ThibG	dfea7368c9	Add bookmarks (#7107) ... * Add backend support for bookmarks Bookmarks behave like favourites, except they aren't shared with other users and do not have an associated counter. * Add spec for bookmark endpoints * Add front-end support for bookmarks * Introduce OAuth scopes for bookmarks * Add bookmarks to archive takeout * Fix migration * Coding style fixes * Fix rebase issue * Update bookmarked_statuses to latest UI changes * Update bookmark actions to properly reflect status changes in state * Add bookmarks item to single-column layout * Make active bookmarks red	6 years ago
Yamagishi Kazutoshi	afb398b583	Change to always returns html document in error pages (#12214)	6 years ago
Faye Duxovni	48f75b86ae	Add setting for whether to crop images in unexpanded toots (#12126)	6 years ago
ThibG	bd684e25d9	Fix incoming federation in whitelist mode (#12185) ... … posting to the AP inbox required a logged-in local user…	6 years ago
Eugen Rochko	354fdd317e	Fix attachment not being re-downloaded even if file is not stored (#12125) ... Change the behaviour of remotable concern. Previously, it would skip downloading an attachment if the stored remote URL is identical to the new one. Now it would not be skipped if the attachment is not actually currently stored by Paperclip.	6 years ago
Eugen Rochko	a582185625	Fix `GET /api/v1/instance` REST APIs being unavailable in secure mode (#12089)	6 years ago
Eugen Rochko	f665901e3c	Fix performance of home feed regeneration (#12084) ... Fetching statuses from all followed accounts at once takes too long within Postgres. Fetching them one by one and merging in Ruby could be a lot less resource-intensive Because the query for dynamically fetching the home timeline is so heavy, we can no longer offer it when the home timeline is missing	6 years ago
Eugen Rochko	eb83d6256e	Add `reason` param to `POST /api/v1/accounts` REST API (#12064) ... For approval-required registrations mode	6 years ago
ThibG	699f53c464	Fix RSS caching (but disable localization) (#12054)	6 years ago
Eugen Rochko	fa7dd5c2cd	Fix featured hashtag URL being interpreted as media or with_replies (#12048) ... Fix #12034	6 years ago
Eugen Rochko	5f69eb89e2	Add a nodeinfo endpoint (#12002) ... * Add nodeinfo endpoint * dont commit stuff from my local dev * consistant naming since we implimented 2.1 schema * Add some additional node info stuff * Add nodeinfo endpoint * dont commit stuff from my local dev * consistant naming since we implimented 2.1 schema * expanding this to include federation info * codeclimate feedback * CC feedback * using activeserializers seems like a good idea... * get rid of draft 2.1 version * Reimplement 2.1, also fix metaData -> metadata * Fix metaData -> metadata here too * Fix nodeinfo 2.1 tests * Implement cache for monthly user aggregate * Useless * Remove ostatus from the list of supported protocols * Fix nodeinfo's open_registration reading obsolete setting variable * Only serialize domain blocks with user-facing limitations * Do not needlessly list noop severity in nodeinfo * Only serialize domain blocks info in nodeinfo when they are set to be displayed to everyone * Enable caching for nodeinfo endpoints * Fix rendering nodeinfo * CodeClimate fixes * Please CodeClimate * Change InstancePresenter#active_user_count_months for clarity * Refactor NodeInfoSerializer#metadata * Remove nodeinfo 2.1 support as the schema doesn't exist * Clean-up	6 years ago
Eugen Rochko	368a87755b	Fix account migration not affecting followers on origin server (#11980)	6 years ago
Eugen Rochko	163ed91af3	Add (back) option to set redirect notice on account without moving followers (#11994) ... Fix #11913	6 years ago
Eugen Rochko	de5305a3a5	Fix redirecting non-functional accounts on public pages (#11978) ... Fix #11969	6 years ago
Eugen Rochko	ab33c4df94	Add `exclude_unreviewed` param to `GET /api/v2/search` REST API (#11977) ... Make it so normal search returns even unreviewed matches, but autosuggestions do not. Fix #11960	6 years ago
ThibG	18b451c0e6	Change silences to always require approval on follow (#11975) ... * Change silenced accounts to require approval on follow * Also require approval for follows by people explicitly muted by target accounts * Do not auto-accept silenced or muted accounts when switching from locked to unlocked * Add `follow_requests_count` to verify_credentials * Show “Follow requests” menu item if needed even if account is locked * Add tests * Correctly reflect that follow requests weren't auto-accepted when local account is silenced * Accept follow requests from user-muted accounts to avoid leaking mutes	6 years ago
abcang	059945c97c	Improve status pin query (#11972)	6 years ago
Eugen Rochko	add4d4118c	Fix relays UI being available in whitelist/secure mode (#11963) ... Fix relays UI referencing relay that is not functional	6 years ago
Eugen Rochko	a1f04c1e34	Fix authentication before 2FA challenge (#11943) ... Regression from #11831	6 years ago
Takeshi Umeda	f497d14b19	Addition of update activity distribution by alias, minor correction (#11905) ... * Addition of update activity distribution by alias, minor correction * Distribute Update activity after adding alias * Add uniqueness verification to alias uri * accept acct starting with @ * fix double-quoted to single-quoted	6 years ago
Takeshi Umeda	e35636a0d1	Fixed an error in the aliases template of the aliases controller (#11902)	6 years ago
Eugen Rochko	3ed94dcc1a	Add account migration UI (#11846) ... Fix #10736 - Change data export to be available for non-functional accounts - Change non-functional accounts to include redirecting accounts	6 years ago
Eugen Rochko	d930eb88b6	Add table of contents to about page (#11885) ... Move public domain blocks information to about page	6 years ago
Eugen Rochko	e1066cd431	Add password challenge to 2FA settings, e-mail notifications (#11878) ... Fix #3961	6 years ago
Eugen Rochko	a4b60e9ba4	Fix TOTP codes not being filtered from logs during enabling/disabling (#11877) ... Not a serious issue because they are meaningless past single use	6 years ago
Eugen Rochko	b671b91211	Fix webfinger response not returning 410 when account is suspended (#11869)	6 years ago
mayaeh	ef0d22f232	Add search and sort functions to hashtag admin UI (#11829) ... * Add search and sort functions to hashtag admin UI * Move scope processing from tags_controller to tag_filter * Fix based on method naming conventions * Fixed not to get 500 errors for invalid requests	6 years ago
Eugen Rochko	c707ef49d9	Fix 2FA challenge and password challenge for non-database users (#11831) ... * Fix 2FA challenge not appearing for non-database users Fix #11685 * Fix account deletion not working when using external login Fix #11691	6 years ago
Eugen Rochko	18331fefa2	Remove deprecated `GET /api/v1/search` API (#11823) ... Use `GET /api/v2/search` instead	6 years ago
ThibG	225edac118	Change /api/v1/timelines/public to require auth when public preview is off (#11802) ... Fixes #11289	6 years ago
Eugen Rochko	59da5ccb8e	Change unlisted custom emoji to not appear in autosuggestions (#11818) ... Fix #11669	6 years ago
Eugen Rochko	16cdaa1110	Fix uncaught errors in media proxy controller (#11811)	6 years ago
Eugen Rochko	c5d37f18cb	Change deletes to preserve soft-deleted statuses in unresolved reports (#11805) ... Change all account actions except "none" to resolve all unresolved reports Refactor `SuspendAccountService` to be more readable	6 years ago
ThibG	4faaa5b25e	Add updated relationship to follow request API responses (#11800) ... Fixes #11747	6 years ago
Eugen Rochko	1110ea1a91	Add batch actions and categories to admin UI for custom emojis (#11793)	6 years ago
Eugen Rochko	261e52268c	Add batch approve/reject for pending hashtags in admin UI (#11791)	6 years ago
Takeshi Umeda	9c9dcf580a	Add featured tags API (#11778) ... * Add featured tags API * Remove show and update, change scope, fix code style	6 years ago
Yamagishi Kazutoshi	d7268befa8	Add healthcheck endpoint for web (#11770)	6 years ago
Eugen Rochko	e445a8af64	Add timeline read markers API (#11762) ... Fix #4093	6 years ago
Eugen Rochko	58755439ac	Fix wrong variable regression from #11753 (#11763)	6 years ago
Eugen Rochko	43f56f1291	Change account deletion page to have better explanations (#11753) ... Fix deletion of unconfirmed account not freeing up the username Add prefill of logged-in user's email in the reconfirmation form	6 years ago
Eugen Rochko	70ddef2654	Change trending hashtags to not disappear instantly after midnight (#11712)	6 years ago
Eugen Rochko	47584180d8	Fix wrong percentages in admin UI for hashtag usage breakdown (#11714)	6 years ago
Eugen Rochko	9871904172	Change layout of public profile directory to be the same as in web UI (#11705)	6 years ago
Eugen Rochko	70ae77895f	Fix error in REST API for an account's statuses (#11700)	6 years ago
Eugen Rochko	60e684af5f	Fix uncaught error when resource param is missing in Webfinger request (#11701)	6 years ago
Eugen Rochko	b54b725d6b	Fix uncaught domain normalization error in remote follow (#11703)	6 years ago
Eugen Rochko	22ce4778eb	Fix uncaught parameter missing exceptions and missing error templates (#11702)	6 years ago
Eugen Rochko	cb447b28c4	Add profile directory to web UI (#11688) ... * Add profile directory to web UI * Add a line of bio to the directory	6 years ago
Eugen Rochko	73ca0bb925	Add option to include reported statuses in warning e-mail (#11639)	6 years ago
Eugen Rochko	282ea17078	Add soft delete for statuses for instant deletes through API (#11623) ... * Add soft delete for statuses to allow them to appear instant * Allow reporting soft-deleted statuses and show them in the admin UI * Change index for getting an account's statuses	6 years ago
Eugen Rochko	97192d9a77	Fix remote and staff-removed statuses leaving media behind for a day (#11638) ... The reason for unattaching media instead of removing it is to support delete & redraft functionality, but remote or staff-removed statuses will never be redrafted, so the media should be deleted immediately	6 years ago
ThibG	cb62a83a71	Add invite comments (#10465)	6 years ago
ThibG	9b6a5ed109	Add public blocks to /about/blocks (#11298) ... * Add automatic blocklist display in /about/blocks Inspired by https://github.com/Gargron/mastodon.social-misc * Add admin option to set who can see instance blocks * Normalize locales files * Rename “Sandbox” to “Silence” for consistency * Disable /about/blocks when in whitelist mode * Optionally display rationale for domain blocks * Only display domain blocks that have user-facing limitations, and order them * Redesign table of blocked domains to better handle long domain names and rationales * Change domain blocks ordering now that rationales aren't displayed right away * Only show explanation for block severities actually in use * Reword instance block explanations and add disclaimer for public fetch mode	6 years ago
Takeshi Umeda	9e1d28f48e	Add an RSS feed tagged to a public profile page (#10502) ... * Add featured tag support to rss feed on public account page * fix codeing style	6 years ago
Eugen Rochko	a8b0bb355d	Fix uncaught 422 and 500 errors (#11590)	6 years ago
Eugen Rochko	1bc077dc74	Add HTTP signature keyId to request log (#11591)	6 years ago
Eugen Rochko	b348c9b0db	Add explanation to featured hashtags page and profile (#11586)	6 years ago
ThibG	53071389ee	Fix multiple issues with replies collection for pages further than self-replies (#11582) ... * Fix the replies collection returning snowflakes ids rather than URIs Fixes #11568 * Fix min_id in replies queries once self-replies are exhausted * Fix `next` attribute of replies collection being nil when there are no self-replies * Rename other_accounts param to only_other_accounts	6 years ago
Eugen Rochko	e5cee8062f	Fix blurhash and autoplay not working on public pages (#11585)	6 years ago
Eugen Rochko	6e872c6dab	Fix 422 being returned instead of 404 when POSTing (#11574)	6 years ago
ThibG	7ffec882ae	Fix reverse-proxy caching of instance actor object (#11561)	6 years ago
ThibG	5f63339744	Fix more ActivityPub queries setting cookies and preventing caching (#11557)	6 years ago
ThibG	646f96d448	Fix ActivityPub and REST API queries setting cookies and preventing caching (#11539) ... Regression from #8657	6 years ago
Eugen Rochko	699db454c3	Fix pinned statuses API returning pagination headers (#11526) ... Fix #10227	6 years ago
Eugen Rochko	898dacf83e	Fix weekly usage not being displayed correctly in hashtag admin UI (#11524) ... Fix percentages in usage breakdown having too many digits Change trending hashtags to only ask for review if a hashtag enters the top 3 position in the set, since it's the only items shown in the default web UI	6 years ago
Eugen Rochko	f51c7c105f	Fix acct URIs with IDN domains not being resolved (#11520) ... Fix #11494	6 years ago
Eugen Rochko	3a6b6c63f2	Add breakdown of usage by source to admin UI for hashtags (#11517) ... Allows determining where the majority of posts in a hashtag come from on a given day at a glance.	6 years ago
ThibG	bced70469a	Add domain block notes (#11515) ... * Add database columns for adding notes to domain blocks/restrctions * Add admin UI to set private and public comments when blocking a domain * Add text for private and public comments on domain blocks * Show domain block comments in admin UI * Add comments to the domain block undo page * Make UnblockDomainService more robust regarding upgraded domain blocks * Allow editing domain blocks * Rename button from “undo domain block” to “view domain block” in account admin UI * Change test to unsilence silenced users from upgraded blocks	6 years ago
Eugen Rochko	94c54997cf	Fix trending tags returning less items than requested sometimes (#11513) ... Add better sorting defaults to the hashtags admin UI Add "not reviewed" filter to hashtags admin UI	6 years ago
Eugen Rochko	7a737c79cc	Add number of pending accounts and pending hashtags to admin dashboard (#11514)	6 years ago
Eugen Rochko	ac33f1aedd	Fix account tags not being saved correctly (#11507) ... * Fix account tags not being saved correctly Regression from f371b32 Fix Tag#discoverable not returning tags where listable is nil instead of true Add notice when saving hashtags in admin UI Change public hashtag and directory pages to return 404 for forbidden tags * Remove unused locale string	6 years ago
Eugen Rochko	dd38c280a5	Fix admin dashboard missing latest features (#11505) ... Fix redis-namespace deprecation warning about administrative commands	6 years ago
Eugen Rochko	9072fe5ab6	Add trends UI with admin and user settings (#11502)	6 years ago
Eugen Rochko	115dab78f1	Change admin UI for hashtags and add back whitelisted trends (#11490) ... Fix #271 Add back the `GET /api/v1/trends` API with the caveat that it does not return tags that have not been allowed to trend by the staff. When a hashtag begins to trend (internally) and that hashtag has not been previously reviewed by the staff, the staff is notified. The new admin UI for hashtags allows filtering hashtags by where they are used (e.g. in the profile directory), whether they have been reviewed or are pending reviewal, they show by how many people the hashtag is used in the directory, how many people used it today, how many statuses with it have been created today, and it allows fixing the name of the hashtag to make it more readable. The disallowed hashtags feature has been reworked. It is now controlled from the admin UI for hashtags instead of from the file `config/settings.yml`	6 years ago
Eugen Rochko	8b9d0a0533	Remove XML version of Webfinger and remove links to Atom feeds (#11460) ... Fix #11453	6 years ago
Eugen Rochko	24552b5160	Add whitelist mode (#11291)	6 years ago
ThibG	92569ffde8	Fix invites not being disabled upon account suspension (#11412) ... * Disable invite links from disabled/suspended users * Add has_many invites relationship to users * Destroy unused invites when suspending an account	6 years ago
dependabot-preview[bot]	1955aa9f7d	Bump active_model_serializers from 0.10.9 to 0.10.10 (#11311) ... * Bump active_model_serializers from 0.10.9 to 0.10.10 Bumps [active_model_serializers](https://github.com/rails-api/active_model_serializers) from 0.10.9 to 0.10.10. - [Release notes](https://github.com/rails-api/active_model_serializers/releases) - [Changelog](https://github.com/rails-api/active_model_serializers/blob/v0.10.10/CHANGELOG.md) - [Commits](https://github.com/rails-api/active_model_serializers/compare/v0.10.9...v0.10.10) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Add root option to render method	6 years ago
Eugen Rochko	964ae8eee5	Change unconfirmed user login behaviour (#11375) ... Allow access to account settings, 2FA, authorized applications, and account deletions to unconfirmed and pending users, as well as users who had their accounts disabled. Suspended users cannot update their e-mail or password or delete their account. Display account status on account settings page, for example, when an account is frozen, limited, unconfirmed or pending review. After sign up, login users straight away and show a simple page that tells them the status of their account with links to account settings and logout, to reduce onboarding friction and allow users to correct wrongly typed e-mail addresses. Move the final sign-up step of SSO integrations to be the same as above to reduce code duplication.	6 years ago
Eugen Rochko	c669bb42ba	Add (back) rails-level JSON caching (#11333)	6 years ago
Eugen Rochko	bd1545de5e	Change locale detection to run once per session (#8657) ... Fix #6462	6 years ago
ThibG	650459f93c	Fix some flash notices/alerts staying on unrelated pages (#11364)	6 years ago
ThibG	730c4053d6	Add ActivityPub actor representing the entire server (#11321) ... * Add support for an instance actor * Skip username validation for local Application accounts * Add migration script to create instance actor * Make Codeclimate happy * Switch to id -99 for instance actor * Remove unused `icon` and `image` attributes from instance actor * Use if/elsif/else instead of return + ternary operator * Add instance actor to fresh installs * Use instance actor as instance representative Use instance actor for forwarding reports, relay operations, and spam auto-reporting. * Seed database in test environment * Fix single-user mode * Fix tests * Fix specs to accomodate for an extra `Account` * Auto-reject follows on instance actor Following an instance actor might make sense, but we are not handling that right now, so auto-reject. * Fix webfinger lookup and serialization for instance actor * Rename instance actor * Make it clear in the HTML view that the instance actor should not be blocked * Raise cache time for instance actor as there's no dynamic content * Re-use /about/more with a flash message for instance actor profile	6 years ago
ThibG	7e2b6da57f	Add setting to disable the anti-spam (#11296) ... * Add environment variable to disable the anti-spam * Move antispam setting to admin settings * Fix typo * antispam → spam_check	6 years ago
Eugen Rochko	fccd25cf53	Change terms and privacy policy pages to always be accessible (#11334) ... Fix #11328	6 years ago
ThibG	873828ad2d	Fix custom CSS controller (#11336)	6 years ago
ThibG	15ddabf95a	Fix caching headers in ActivityPub endpoints (#11331) ... * Fix reverse-proxy caching in public fetch mode * Fix caching in ActivityPub-specific controllers	6 years ago
Eugen Rochko	9b1d3e4acb	Add option to disable real-time updates in web UI (#9984) ... Fix #9031 Fix #7913	6 years ago
Eugen Rochko	5bf67ca913	Add ActivityPub secure mode (#11269) ... * Add HTTP signature requirement for served ActivityPub resources * Change `SECURE_MODE` to `AUTHORIZED_FETCH` * Add 'Signature' to 'Vary' header and improve code style * Improve code style by adding `public_fetch_mode?` method	6 years ago
Eugen Rochko	4e92183227	Refactor domain block checks (#11268)	7 years ago
Eugen Rochko	ef15246397	Remove unused remote unfollow controller (#11250)	7 years ago
Eugen Rochko	63c7fe8e48	Refactor controllers for statuses, accounts, and more (#11249)	7 years ago
Eugen Rochko	b851456139	Remove Atom feeds and old URLs in the form of `GET /:username/updates/:id` (#11247)	7 years ago