You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/app/views
Claire bddd9ba36d
Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288)
* Remove support for OAUTH_REDIRECT_AT_SIGN_IN

Fixes #15959

Introduced in #6540, OAUTH_REDIRECT_AT_SIGN_IN allowed skipping the log-in form
to instead redirect to the external OmniAuth login provider.

However, it did not prevent the log-in form on /about introduced by #10232 from
appearing, and completely broke with the introduction of #15228.

As I restoring that previous log-in flow without introducing a security
vulnerability may require extensive care and knowledge of how OmniAuth works,
this commit removes support for OAUTH_REDIRECT_AT_SIGN_IN instead for the time
being.

* Add OMNIAUTH_ONLY environment variable to enforce external log-in only

* Disable user registration when OMNIAUTH_ONLY is set to true

* Replace log-in links When OMNIAUTH_ONLY is set with exactly one OmniAuth provider
3 years ago
..
about Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288) 3 years ago
accounts Remove Keybase integration (#17045) 3 years ago
admin Add post edited notice in admin and public UIs (#17335) 3 years ago
admin_mailer Remove IP tracking columns from users table (#16409) 3 years ago
application Add trending links (#16917) 3 years ago
auth Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288) 3 years ago
authorize_interactions Fix misleading error when attempting to re-send a pending follow request (#13133) 5 years ago
directories Change number_to_human calls to always use 3-digits precision (#16469) 4 years ago
errors Add specific rate limits for posting and following (#13172) 5 years ago
filters Fix not being able to change world filter expiration back to “Never” (#15858) 4 years ago
follower_accounts Improve blocked view of profiles (#10491) 6 years ago
following_accounts Improve blocked view of profiles (#10491) 6 years ago
home Fix Google Translate breaking web interface (#15610) 4 years ago
invites Remove invite comments from UI (#12068) 6 years ago
kaminari Pagination improvements (#1445) 8 years ago
layouts Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288) 3 years ago
media Fix error when trying to render component for media without meta (#16112) 4 years ago
notification_mailer Add notifications for statuses deleted by moderators (#17204) 3 years ago
oauth Refactor settings controllers (#14767) 5 years ago
public_timelines Fix Google Translate breaking web interface (#15610) 4 years ago
relationships Change number_to_human calls to always use 3-digits precision (#16469) 4 years ago
remote_follow Admission-based registrations mode (#10250) 6 years ago
remote_interaction Remove Atom feeds and old URLs in the form of `GET /:username/updates/:id` (#11247) 6 years ago
settings Remove Keybase integration (#17045) 3 years ago
shared Add honeypot fields and minimum fill-out time for sign-up form (#15276) 4 years ago
shares Add subresource integrity for JS and CSS assets (#15096) 4 years ago
statuses Add OMNIAUTH_ONLY environment variable to enforce externa log-in (#17288) 3 years ago
statuses_cleanup Add feature to automatically delete old toots (#16529) 4 years ago
tags Fix Google Translate breaking web interface (#15610) 4 years ago
user_mailer Add notifications for statuses deleted by moderators (#17204) 3 years ago
well_known/host_meta Remove dependency on goldfinger gem (#14919) 5 years ago