dansup
268ab6dba0
Merge branch 'staging' into remove-exp-pue
1 month ago
dansup
7354f63563
Merge branch 'staging' into remove-exp-rec
1 month ago
Daniel Supernault
26ee049d07
Update AppRegisterController
1 month ago
Daniel Supernault
fbff6ed307
Update trustedproxy config
1 month ago
Daniel Supernault
a2be0cb47d
Update CommentController
1 month ago
Daniel Supernault
40aef7a212
Update GroupsFeedController
1 month ago
Daniel Supernault
5f397f9135
Update StoryController
1 month ago
dansup
f568804426
Merge pull request #6680 from pixelfed/shleeable-patch-15
...
Update FollowerObserver.php
1 month ago
dansup
d6cd65463d
Merge pull request #6676 from pixelfed/shleeable-patch-10
...
Stories API: PostgreSQL story carousel endpoints crash due to calling collection methods on query builder
1 month ago
dansup
668653039f
Merge pull request #6663 from vinzgreg/fix/api-status-edit-auth-guard
...
Fix API status editing: use auth:api guard
1 month ago
dansup
ca5f83d2d1
Merge pull request #6655 from TowyTowy/fix/timeline-home-nullable-max-id
...
Fix home timeline rejecting empty max_id/min_id pagination params
1 month ago
dansup
5aae3f46c7
Merge pull request #6691 from pixelfed/shleeable-patch-26
...
Improve validation
1 month ago
dansup
219297d0e3
Merge pull request #6690 from pixelfed/shleeable-patch-25
...
Typo: change pid to id for FollowerService::remove
1 month ago
dansup
6910115166
Merge pull request #6686 from pixelfed/shleeable-patch-20
...
Update type on abort.
1 month ago
dansup
77831e7640
Merge pull request #6688 from pixelfed/shleeable-patch-22
...
Clear oauth material on permanent delete
1 month ago
dansup
5115e5c960
Merge pull request #6677 from pixelfed/shleeable-patch-12
...
Typo in abort
1 month ago
dansup
179dfffafe
Merge pull request #6672 from pixelfed/shleeable-patch-5
...
Places directory crashes on PostgreSQL for multi-word country URLs (case-sensitive mismatch)
1 month ago
Shlee
c2044f77cf
Update AdminUserController.php
1 month ago
Shlee
1d72f1b437
Update ApiV1Controller.php
1 month ago
Shlee
fbe98ea4de
Update AccountController.php
1 month ago
Shlee
9966eb50b8
Update ApiV1Controller.php
1 month ago
Shlee
87d866f58d
Update SettingsController.php
1 month ago
Shlee
baf21797f0
Update RemoteOidcController.php
2 months ago
Shlee
0f79861f1d
Update PrivacySettings.php
2 months ago
Shlee
4e6b341532
Update StoryController.php
2 months ago
Shlee
8ce4b5d409
Update StoryApiV1Controller.php
2 months ago
Shlee
f99ee65676
Update PlaceController.php
2 months ago
Shlee
6f5f6e3368
Update ReportController.php
2 months ago
vinzgreg
d19671a92c
Fix API status editing: use auth:api guard
...
StatusEditController's constructor applies the web `auth` guard, which
Bearer/OAuth clients cannot satisfy. PUT /api/v1/statuses/{id} and
GET /api/v1/statuses/{id}/history therefore fail for every third-party
API client, while status create/delete keep working because
ApiV1Controller has no controller-level web auth.
The controller is routed only from routes/api.php, where the route group
already applies ['auth:api', 'validemail'], so no web/session route
depends on the old guard. Switch the constructor to match.
2 months ago
TowyTowy
795473be55
Fix home timeline rejecting empty max_id/min_id pagination params
...
`GET /api/v1/timelines/home?max_id=` (empty value) fails validation
because `min_id`/`max_id` use the `sometimes|integer` rule. The global
`ConvertEmptyStringsToNull` middleware turns `?max_id=` into `null`, and
since the field is present, `sometimes` does not skip it while `null`
fails the `integer` rule — returning HTTP 422.
Every other timeline/listing endpoint in this controller (timelinePublic,
accountStatusesById, etc.) uses `nullable|integer` for these params, so
`timelineHome` was the lone outlier. Mastodon-API clients such as Pixelfed
for iOS send `max_id=` on first page load and could not paginate the home
timeline.
Switch `min_id`/`max_id` to `nullable|integer` to match the rest of the
controller.
Fixes #6610
Co-Authored-By: Claude <noreply@anthropic.com>
2 months ago
Daniel Supernault
0f781cba34
Update Personal Access Tokens
3 months ago
Daniel Supernault
fb92949a71
Update PersonalAccessTokenController.php
3 months ago
Daniel Supernault
25d5142f12
Fix PAT + oauth routes
3 months ago
Daniel Supernault
9fe9b7eb32
Update AdminInviteController
3 months ago
dansup
096a1bc901
Merge pull request #6553 from pixelfed/w2
...
OAuth: Token endpoint response loses required no-store/no-cache headers
4 months ago
dansup
120b08b758
Merge pull request #6563 from pixelfed/shleeable-patch-1
...
Update to Passport 13 refresh token method in AppRegisterController.php
5 months ago
Your Name
3c9fc9a1fe
Remove EXP_PUE flag, post editing is always enabled
...
Remove the 'pue' entry from config/exp.php and the abort_if guard
in StatusEditController. Post editing is now unconditionally available.
5 months ago
Your Name
10a5eb7228
Remove exp.rec recommendations dead code
...
- Remove userRecommendations controller method and /api/local/exp/rec route
- Remove suggestions UI panel, data properties, and methods from Timeline.vue
- Remove commented-out suggestions card from feed template
The recommendations feature was deprecated and hardcoded to false/empty.
5 months ago
Daniel Supernault
14b325641f
Update Password Change with new Revoke Sessions option
...
As requested in https://lgbtqia.space/@serigala_tropis/116412473982617371
5 months ago
Shlee
bbd09fe50f
Update AppRegisterController.php
6 months ago
Your Name
b329ee9edc
API: Media uploads leak orphaned files when status creation validation fails
6 months ago
Your Name
3d858af1fa
OAuth: Token endpoint response loses required no-store/no-cache headers when adding created_at
6 months ago
dansup
6e9c33fcab
Merge pull request #6496 from pixelfed/shleeable-patch-7
...
Remove sleep from AppRegisterController.php
6 months ago
dansup
bdc203dc5c
Merge pull request #6493 from ShadowJonathan/fix-profile-saving
...
Make sure profile saving has a clear error when email is not verified
6 months ago
Daniel Supernault
ef803ae9b6
Fix oauth/token
6 months ago
Daniel Supernault
f6746aec8b
Update AuthServiceProvider
7 months ago
Daniel Supernault
52f5626530
Fix oauth
7 months ago
Daniel Supernault
695e851026
Fix oauth
7 months ago
Shlee
d9bd6d446f
Update AppRegisterController.php
7 months ago
Jonathan de Jong
8e91918b88
Make sure profile saving has a clear error when email is not verified
7 months ago