946 Commits (ca22a22d7f4db867ad0045a7978e3d8dcd251a69)

Author	SHA1	Message	Date
ThibG	53071389ee	Fix multiple issues with replies collection for pages further than self-replies (#11582) ... * Fix the replies collection returning snowflakes ids rather than URIs Fixes #11568 * Fix min_id in replies queries once self-replies are exhausted * Fix `next` attribute of replies collection being nil when there are no self-replies * Rename other_accounts param to only_other_accounts	6 years ago
Eugen Rochko	e5cee8062f	Fix blurhash and autoplay not working on public pages (#11585)	6 years ago
Eugen Rochko	6e872c6dab	Fix 422 being returned instead of 404 when POSTing (#11574)	6 years ago
ThibG	7ffec882ae	Fix reverse-proxy caching of instance actor object (#11561)	6 years ago
ThibG	5f63339744	Fix more ActivityPub queries setting cookies and preventing caching (#11557)	6 years ago
ThibG	646f96d448	Fix ActivityPub and REST API queries setting cookies and preventing caching (#11539) ... Regression from #8657	6 years ago
Eugen Rochko	699db454c3	Fix pinned statuses API returning pagination headers (#11526) ... Fix #10227	6 years ago
Eugen Rochko	898dacf83e	Fix weekly usage not being displayed correctly in hashtag admin UI (#11524) ... Fix percentages in usage breakdown having too many digits Change trending hashtags to only ask for review if a hashtag enters the top 3 position in the set, since it's the only items shown in the default web UI	6 years ago
Eugen Rochko	f51c7c105f	Fix acct URIs with IDN domains not being resolved (#11520) ... Fix #11494	6 years ago
Eugen Rochko	3a6b6c63f2	Add breakdown of usage by source to admin UI for hashtags (#11517) ... Allows determining where the majority of posts in a hashtag come from on a given day at a glance.	6 years ago
ThibG	bced70469a	Add domain block notes (#11515) ... * Add database columns for adding notes to domain blocks/restrctions * Add admin UI to set private and public comments when blocking a domain * Add text for private and public comments on domain blocks * Show domain block comments in admin UI * Add comments to the domain block undo page * Make UnblockDomainService more robust regarding upgraded domain blocks * Allow editing domain blocks * Rename button from “undo domain block” to “view domain block” in account admin UI * Change test to unsilence silenced users from upgraded blocks	6 years ago
Eugen Rochko	94c54997cf	Fix trending tags returning less items than requested sometimes (#11513) ... Add better sorting defaults to the hashtags admin UI Add "not reviewed" filter to hashtags admin UI	6 years ago
Eugen Rochko	7a737c79cc	Add number of pending accounts and pending hashtags to admin dashboard (#11514)	6 years ago
Eugen Rochko	ac33f1aedd	Fix account tags not being saved correctly (#11507) ... * Fix account tags not being saved correctly Regression from f371b32 Fix Tag#discoverable not returning tags where listable is nil instead of true Add notice when saving hashtags in admin UI Change public hashtag and directory pages to return 404 for forbidden tags * Remove unused locale string	6 years ago
Eugen Rochko	dd38c280a5	Fix admin dashboard missing latest features (#11505) ... Fix redis-namespace deprecation warning about administrative commands	6 years ago
Eugen Rochko	9072fe5ab6	Add trends UI with admin and user settings (#11502)	6 years ago
Eugen Rochko	115dab78f1	Change admin UI for hashtags and add back whitelisted trends (#11490) ... Fix #271 Add back the `GET /api/v1/trends` API with the caveat that it does not return tags that have not been allowed to trend by the staff. When a hashtag begins to trend (internally) and that hashtag has not been previously reviewed by the staff, the staff is notified. The new admin UI for hashtags allows filtering hashtags by where they are used (e.g. in the profile directory), whether they have been reviewed or are pending reviewal, they show by how many people the hashtag is used in the directory, how many people used it today, how many statuses with it have been created today, and it allows fixing the name of the hashtag to make it more readable. The disallowed hashtags feature has been reworked. It is now controlled from the admin UI for hashtags instead of from the file `config/settings.yml`	6 years ago
Eugen Rochko	8b9d0a0533	Remove XML version of Webfinger and remove links to Atom feeds (#11460) ... Fix #11453	6 years ago
Eugen Rochko	24552b5160	Add whitelist mode (#11291)	6 years ago
ThibG	92569ffde8	Fix invites not being disabled upon account suspension (#11412) ... * Disable invite links from disabled/suspended users * Add has_many invites relationship to users * Destroy unused invites when suspending an account	6 years ago
dependabot-preview[bot]	1955aa9f7d	Bump active_model_serializers from 0.10.9 to 0.10.10 (#11311) ... * Bump active_model_serializers from 0.10.9 to 0.10.10 Bumps [active_model_serializers](https://github.com/rails-api/active_model_serializers) from 0.10.9 to 0.10.10. - [Release notes](https://github.com/rails-api/active_model_serializers/releases) - [Changelog](https://github.com/rails-api/active_model_serializers/blob/v0.10.10/CHANGELOG.md) - [Commits](https://github.com/rails-api/active_model_serializers/compare/v0.10.9...v0.10.10) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Add root option to render method	6 years ago
Eugen Rochko	964ae8eee5	Change unconfirmed user login behaviour (#11375) ... Allow access to account settings, 2FA, authorized applications, and account deletions to unconfirmed and pending users, as well as users who had their accounts disabled. Suspended users cannot update their e-mail or password or delete their account. Display account status on account settings page, for example, when an account is frozen, limited, unconfirmed or pending review. After sign up, login users straight away and show a simple page that tells them the status of their account with links to account settings and logout, to reduce onboarding friction and allow users to correct wrongly typed e-mail addresses. Move the final sign-up step of SSO integrations to be the same as above to reduce code duplication.	6 years ago
Eugen Rochko	c669bb42ba	Add (back) rails-level JSON caching (#11333)	6 years ago
Eugen Rochko	bd1545de5e	Change locale detection to run once per session (#8657) ... Fix #6462	6 years ago
ThibG	650459f93c	Fix some flash notices/alerts staying on unrelated pages (#11364)	6 years ago
ThibG	730c4053d6	Add ActivityPub actor representing the entire server (#11321) ... * Add support for an instance actor * Skip username validation for local Application accounts * Add migration script to create instance actor * Make Codeclimate happy * Switch to id -99 for instance actor * Remove unused `icon` and `image` attributes from instance actor * Use if/elsif/else instead of return + ternary operator * Add instance actor to fresh installs * Use instance actor as instance representative Use instance actor for forwarding reports, relay operations, and spam auto-reporting. * Seed database in test environment * Fix single-user mode * Fix tests * Fix specs to accomodate for an extra `Account` * Auto-reject follows on instance actor Following an instance actor might make sense, but we are not handling that right now, so auto-reject. * Fix webfinger lookup and serialization for instance actor * Rename instance actor * Make it clear in the HTML view that the instance actor should not be blocked * Raise cache time for instance actor as there's no dynamic content * Re-use /about/more with a flash message for instance actor profile	6 years ago
ThibG	7e2b6da57f	Add setting to disable the anti-spam (#11296) ... * Add environment variable to disable the anti-spam * Move antispam setting to admin settings * Fix typo * antispam → spam_check	6 years ago
Eugen Rochko	fccd25cf53	Change terms and privacy policy pages to always be accessible (#11334) ... Fix #11328	6 years ago
ThibG	873828ad2d	Fix custom CSS controller (#11336)	6 years ago
ThibG	15ddabf95a	Fix caching headers in ActivityPub endpoints (#11331) ... * Fix reverse-proxy caching in public fetch mode * Fix caching in ActivityPub-specific controllers	6 years ago
Eugen Rochko	9b1d3e4acb	Add option to disable real-time updates in web UI (#9984) ... Fix #9031 Fix #7913	6 years ago
Eugen Rochko	5bf67ca913	Add ActivityPub secure mode (#11269) ... * Add HTTP signature requirement for served ActivityPub resources * Change `SECURE_MODE` to `AUTHORIZED_FETCH` * Add 'Signature' to 'Vary' header and improve code style * Improve code style by adding `public_fetch_mode?` method	6 years ago
Eugen Rochko	4e92183227	Refactor domain block checks (#11268)	6 years ago
Eugen Rochko	ef15246397	Remove unused remote unfollow controller (#11250)	6 years ago
Eugen Rochko	63c7fe8e48	Refactor controllers for statuses, accounts, and more (#11249)	6 years ago
Eugen Rochko	b851456139	Remove Atom feeds and old URLs in the form of `GET /:username/updates/:id` (#11247)	6 years ago
Eugen Rochko	23aeef52cc	Remove Salmon and PubSubHubbub (#11205) ... * Remove Salmon and PubSubHubbub endpoints * Add error when trying to follow OStatus accounts * Fix new accounts not being created in ResolveAccountService	6 years ago
Eugen Rochko	0c1b1069c9	Remove deprecated REST API `GET /api/v1/statuses/:id/card` (#11213)	6 years ago
Eugen Rochko	3fd6ab99e6	Remove deprecated REST API `GET /api/v1/timelines/direct` (#11212)	6 years ago
Eugen Rochko	e64e6a03dd	Add categories for custom emojis (#11196) ... Fix #7940	6 years ago
ThibG	3086c645fd	Add option to disable blurhash previews (#11188) ... * Add option to disable blurhash previews * Update option text * Change options order	6 years ago
Eugen Rochko	6836587117	Fix unnecessary SQL query performed on unauthenticated requests (#11179)	6 years ago
Eugen Rochko	707ddf7808	Change domain blocks to automatically support subdomains (#11138) ... * Change domain blocks to automatically support subdomains If a more authoritative domain is blocked (example.com), then the same block will be applied to a subdomain (foo.example.com) * Match subdomains of existing accounts when blocking/unblocking domains * Improve code style	6 years ago
Eugen Rochko	7696f77245	Add moderation API (#9387) ... Fix #8580 Fix #7143	6 years ago
Acid Chicken (硫酸鶏)	33144e132d	Fix layout of identity proofs settings (#11126)	6 years ago
Eugen Rochko	f7f23b4a19	Add audio uploads (#11123) ... * Add audio uploads Fix #4827 Accept uploads of OGG, WAV, FLAC, OPUS and MP3 files, and converts them to OGG. Media attachments get a new `audio` type. In the UI, audio uploads are displayed identically to video uploads. * Improve code style	6 years ago
Eugen Rochko	8514ef723c	Fix login sometimes redirecting to paths that are not pages (#11019) ... Fix #11016	6 years ago
Eugen Rochko	560ec24e58	Change /settings/preferences to redirect to appearance, add /settings/preferences/other (#10988)	6 years ago
Eugen Rochko	1db4117030	Change preferences page into appearance, notifications, and other (#10977)	6 years ago
Eugen Rochko	a60364ca7d	Add waiting time to list of pending accounts in admin UI (#10985)	6 years ago
ThibG	cac9110533	Cleanup various controllers (#10972) ... * Remove skip_session! as it is not supported in Rails 5 * Minor cleanup in StreamEntriesController * Remove redundant mark_cacheable! calls	6 years ago
ThibG	7fa23ec697	Fix potential private status leak (#10969)	6 years ago
Eugen Rochko	48fee1a800	Fix poll API not requiring authentication on non-public polls (#10960) ... * Fix poll API not requiring authentication on non-public polls That API does not reveal the content of the status, i.e. the question itself, nor who the author is, nor which status it belongs to, but it does reveal the poll options and how many answers they got Fix #10959 * Add test	6 years ago
ThibG	fe3b863926	Fix web push notifications for polls (#10864) ... Fixes #10861	6 years ago
Eugen Rochko	1e5532e693	Add responsive panels to the single-column layout (#10820) ... * Add responsive panels to the single-column layout * Fixes * Fix not being able to save the preference * Fix code style issues * Set max-height on the compose textarea and add a link to relationship manager	6 years ago
ThibG	89d600bedb	Move signature verification stoplight to the requests themselves (#10813) ... * Move signature verification stoplight to the requests themselves This avoids blocking messages from known keys for 5 minutes when only one fails… * Put the stoplight on the actual client IP, not a potential reverse proxy	6 years ago
Paul Woolcock	0c933c1b8c	Add `account_id` param to `GET /api/v1/notifications` (#10796) ... * Add `from_account` to notifications API this adds the ability to filter notifications by the account they originated from * passing a non-existent user should cause none to be returned * Fix codeclimate warnings * fix more codeclimate warnings * make requested changes: * use account id instead of user@domain * name the param `account_id` instead of `from_account` * Don't use `return` in a lambda	6 years ago
ThibG	14f6ce2885	Record account suspend/silence time and keep track of domain blocks (#10660) ... * Record account suspend/silence time and keep track of domain blocks * Also unblock users who were suspended/silenced before dates were recorded * Add tests * Keep track of suspending date for users suspended through the CLI * Show accurate number of accounts that would be affected by unsuspending an instance * Change migration to set silenced_at and suspended_at * Revert "Also unblock users who were suspended/silenced before dates were recorded" This reverts commit a015c65d2d. * Switch from using suspended and silenced to suspended_at and silenced_at * Add post-deployment migration script to remove `suspended` and `silenced` columns * Use Account#silence! and Account#suspend! instead of updating the underlying property * Add silenced_at and suspended_at migration to post-migration * Change account fabricator to translate suspended and silenced attributes * Minor fixes * Make unblocking domains always retroactive	6 years ago
ThibG	6d44f2441b	Add toot source to delete result to ease Delete & Redraft (#10669) ... * Return Status with raw text in raw_content when deleting a status * Use raw content if available on delete & redraft * Rename raw_content to text; do not serialize formatted content when source is requested	6 years ago
ThibG	26fc21c188	Add some caching for HTML versions of statuses pages (#10701)	6 years ago
ThibG	91634947f8	Explicitly disable storage of REST API results (#10655) ... Fixes #10652	6 years ago
ThibG	011b032300	Provide a link to existing domain block when trying to block an already-blocked domain (#10663) ... * When trying to block an already-blocked domain, provide a link to the block * Fix styling for links in flash messages * Allow blocks to be upgraded but not downgraded	6 years ago
ThibG	21a73c52a7	Check that an invite link is valid before bypassing approval mode (#10657) ... * Check that an invite link is valid before bypassing approval mode Fixes #10656 * Add tests * Only consider valid invite links in registration controller * fixup	6 years ago
Eugen Rochko	f27d709351	Fix not being able to save e-mail preference for new pending accounts (#10622)	6 years ago
Alex Gessner	154106c0c3	compare usernames case-insensitively on new proof creation flow (#10544) ... * compare usernames case-insensitively on new proof creation flow * Fix code style issue	6 years ago
Eugen Rochko	46cb36fd2c	Add invite request to pending account notification e-mail (#10528) ... Fix sorting of the pending accounts page	6 years ago
Eugen Rochko	36b39fbac5	Add preference to disable e-mails about new pending accounts (#10529)	6 years ago
Eugen Rochko	8b69a66380	Add "why do you want to join" field to invite requests (#10524) ... * Add "why do you want to join" field to invite requests Fix #10512 * Remove unused translations * Fix broken registrations when no invite request text is submitted	6 years ago
Eugen Rochko	654f79d2b1	Fix permission denied bug on approve all/reject all pending accounts (#10519)	6 years ago
ThibG	5247ea4efd	Fix batch actions not working on pending accounts (#10508)	6 years ago
Eugen Rochko	67b3b62b98	Improve blocked view of profiles (#10491) ... * Revert "Fix filtering of favourited_by, reblogged_by, followers and following (#10447)" This reverts commit 120544067f. * Revert "Hide blocking accounts from blocked users (#10442)" This reverts commit 62bafa20a1. * Improve blocked view of profiles - Change "You are blocked" to "Profile unavailable" - Hide following/followers in API when blocked - Disable follow button and show "Profile unavailable" on public profile as well	6 years ago
Eugen Rochko	e1d0390e29	Add batch actions for approving and rejecting pending accounts (#10469)	6 years ago
Eugen Rochko	2c63e0292a	Fix admin validation being too strict about usernames (#10449) ... * Fix admin validation being too strict about usernames Fix #10446 * Strip Setting.site_contact_username consistently throughout the codebase	6 years ago
ThibG	cc6e3c3900	Cache featured collections, as well as outbox, followers and following (#10467)	6 years ago
ThibG	62bafa20a1	Hide blocking accounts from blocked users (#10442) ... * Revert "Add indication that you have been blocked in web UI (#10420)" This reverts commit bd02ec6daa. * Revert "Add `blocked_by` relationship to the REST API (#10373)" This reverts commit 9745de883b. * Hide blocking accounts from search results * Filter blocking accouts from account followers * Filter blocking accouts from account's following accounts * Filter blocking accounts from “reblogged by” and “favourited by” lists * Remove blocking account from URL search * Return 410 on trying to fetch user data from a user who blocked us * Return 410 in /api/v1/account/statuses for suspended or blocking accounts * Fix status filtering when performing URL search * Restore some React improvements Restore some cleanup from bd02ec6daa * Refactor by adding `without_blocking` scope	6 years ago
ThibG	68c797bece	Ensure request.body isn't emptied out before signature verification (#10432) ... Fixes #10429	6 years ago
Alex Gessner	69141dca26	squashed identity proof updates (#10375)	6 years ago
Eugen Rochko	08ec7435ce	Add order options to relationship manager UI (#10404)	6 years ago
Eugen Rochko	e117964325	Change icons of features on admin dashboard to remove bias (#10366) ... Red crosses implied that it was bad/unexpected that certain features were not enabled. In reality, they are options, so showing a green or grey power-off icon is more appropriate. Add status of timeline preview as well Fix sample accounts changing too frequently due to wrong query Sample accounts are intended to be sorted by popularity	6 years ago
Eugen Rochko	555c4e11ba	Add validations to admin settings (#10348) ... * Add validations to admin settings - Validate correct HTML markup - Validate presence of contact username & e-mail - Validate that all usernames are valid - Validate that enums have expected values * Fix code style issue * Fix tests	6 years ago
ThibG	2361917944	Mark the 410 gone response for suspended accounts as cachable (#10339) ... This will help a great deal with #9377 when a caching reverse proxy is configured.	6 years ago
ThibG	66d9452092	Do not try fetching keys of unknown accounts on a Delete from them (#10326)	6 years ago
ThibG	1217185cfa	Do not distribute Delete when rejecting unapproved accounts (#10321)	6 years ago
Eugen Rochko	9c4cbdbafb	Add Keybase integration (#10297) ... * create account_identity_proofs table * add endpoint for keybase to check local proofs * add async task to update validity and liveness of proofs from keybase * first pass keybase proof CRUD * second pass keybase proof creation * clean up proof list and add badges * add avatar url to keybase api * Always highlight the “Identity Proofs” navigation item when interacting with proofs. * Update translations. * Add profile URL. * Reorder proofs. * Add proofs to bio. * Update settings/identity_proofs front-end. * Use `link_to`. * Only encode query params if they exist. URLs without params had a trailing `?`. * Only show live proofs. * change valid to active in proof list and update liveness before displaying * minor fixes * add keybase config at well-known path * extremely naive feature flagging off the identity proof UI * fixes for rubocop * make identity proofs page resilient to potential keybase issues * normalize i18n * tweaks for brakeman * remove two unused translations * cleanup and add more localizations * make keybase_contacts an admin setting * fix ExternalProofService my_domain * use Addressable::URI in identity proofs * use active model serializer for keybase proof config * more cleanup of keybase proof config * rename proof is_valid and is_live to proof_valid and proof_live * cleanup * assorted tweaks for more robust communication with keybase * Clean up * Small fixes * Display verified identity identically to verified links * Clean up unused CSS * Add caching for Keybase avatar URLs * Remove keybase_contacts setting	6 years ago
Eugen Rochko	b8e4c85e69	Add dormant filter to relationship manager, rename other filters (#10308) ... Rename "abandoned" to "moved", and "active" to "primary"	6 years ago
Ben Lubar	c3d1594576	Reduce server load caused by anonymous viewing. (#9059) ... Do not start a session if the current user is not logged in for public-facing pages. Mark pages that don't care about sessions as publicly cacheable. Keep the max age as 0 so proxies and browsers will still try to retrieve an updated version but can still fall back to the stale version if the site is down or too slow. Fixes #9035.	6 years ago
Eugen Rochko	1c113fd72d	Add relationship manager UI (#10268)	6 years ago
Eugen Rochko	ba84b6d4d7	Add `visibility` param to reblog REST API (#9851) ... Use async worker for creating reblog notification to improve performance	6 years ago
Eugen Rochko	d94e21f933	Add a preferences API so apps can share basic behaviours (#10109)	6 years ago
Eugen Rochko	51e154f5e8	Admission-based registrations mode (#10250) ... Fix #6856 Fix #6951	6 years ago
Eugen Rochko	06663fcf87	Fix `tagged` param not being normalized before querying tags (#10249)	6 years ago
Eugen Rochko	65fffeac3f	Redesign landing page (#10232)	6 years ago
ThibG	5506b9406d	Avoid race conditions when creating backups (#10234) ... Under load, multiple backups for a single user could be planned, which is very expensive.	6 years ago
Eugen Rochko	230a012f00	Add polls (#10111) ... * Add polls Fix #1629 * Add tests * Fixes * Change API for creating polls * Use name instead of content for votes * Remove poll validation for remote polls * Add polls to public pages * When updating the poll, update options just in case they were changed * Fix public pages showing both poll and other media	6 years ago
ThibG	d8498b3983	Give the `replies` collection an identifier and enable pagination (#10128)	6 years ago
abcang	a5e7ada62f	Improve account media query (#10121)	6 years ago
Eugen Rochko	e7f20cc43f	Add type, limit, offset, min_id, max_id, account_id to search API (#10091) ... * Add type, limit, offset, min_id, max_id, account_id to search API Fix #8939 * Make the offset work on accounts and hashtags search as well * Assure brakeman we are not doing mass assignment here * Do not allow paginating unless a type is chosen * Fix search query and index id field on statuses instead of created_at	6 years ago
Hinaloe	d7ad42a888	Randomize emoji filename (#10090)	6 years ago
ThibG	738c034213	Do not error out when performing admin actions on no statuses (#10094) ... Same as #8220 but for reports	6 years ago
ThibG	6840a77711	Add domain search/filter to the "Federation" (/admin/instances) page (#10071)	6 years ago