Daniel Supernault
7975ba9c75
Fix StoryCarousel cache invalidation
2 weeks ago
Daniel Supernault
915879ff57
Update account suggestions
2 weeks ago
Daniel Supernault
9aafa37364
Update ApiV1Controller.php
2 weeks ago
Daniel Supernault
6a33716870
Update ApiV1Controller, fix account suggestions
2 weeks ago
Your Name
ce073ffc92
Merge remote-tracking branch 'origin/staging' into feature/honeypot-spam-protection
...
# Conflicts:
# routes/web.php
2 weeks ago
Your Name
10559c23e3
Fix larastan noAuthFacadeInRequestScope in LoginController
...
Replace Auth::check() with $request->user() !== null in confirmEmail(),
which already has the request in scope, and drop the now-unused Auth
facade import. Resolves the 2 remaining project-wide larastan errors.
2 weeks ago
Your Name
6496904293
Fix account storage limit not freeing on media deletion ( #7169 )
...
users.storage_used only ever grew: uploads incremented it but no deletion
path decremented it, so users hit the account size limit even when their
real media usage was well below it.
- Decrement storage_used in MediaDeletePipeline when media is removed
- Add UserStorageService::increaseStorageUsed / decrementStorageUsed as the
fast, symmetric hot-path counter updates (floor-based, clamped at zero)
- Refactor the 6 upload call sites to use increaseStorageUsed instead of
duplicated inline writes (also fixes ceil/floor drift vs the reconciler)
- Add (user_id, size) covering index so per-user SUM(size) is not a full
table scan (INPLACE/LOCK=NONE, skipped on sqlite)
- Add user:storage:recalculate command to repair affected accounts, with a
daily --stale=168 scheduled reconciler to correct any drift
- Add regression tests for the pipeline and UserStorageService
2 weeks ago
Daniel Supernault
194c881cb2
Update ResetPasswordController
2 weeks ago
Daniel Supernault
1d96c94054
Refactor Auth, remove expensive middleware
2 weeks ago
Daniel Supernault
13aa36efb4
Update ApiV1Controller.php
2 weeks ago
Your Name
742c1a6bc8
Require dangerzone sudo mode on curated register, shadow filter and page admin controllers
2 weeks ago
Shlee
97b5d2f180
Merge pull request #7159 from shleeable/fix/directory-exclude-private-profiles
...
Exclude private profiles from public directory and clear suggestable on going private
2 weeks ago
Your Name
1581863093
Exclude private profiles from public directory and clear suggestable on going private
2 weeks ago
Shlee
903c191f10
Merge pull request #7158 from shleeable/fix/2fa-logout-session-cleanup
...
Clear 2FA session state on forced logout after failed attempts
2 weeks ago
Your Name
97f1a097ff
Clear 2FA session state on forced logout after failed attempts
2 weeks ago
Your Name
917a13d4a7
Filter null-account statuses from non-cached network timeline
2 weeks ago
Shlee
fc80bce460
Update StoryApiV1Controller.php
2 weeks ago
Your Name
0234a305ae
Use intended-redirect session for authorize_interaction guest login
2 weeks ago
Shlee
46fb9613e3
Merge pull request #7146 from shleeable/fix/2fa-checkpoint-throttle
...
Rate limit and audit-log 2FA checkpoint verification
2 weeks ago
Your Name
8cebb24c04
Rate limit and audit-log 2FA checkpoint verification
2 weeks ago
Shlee
0ebe1f8fb1
Merge pull request #7145 from shleeable/fix/media-blocklist-check-before-store
...
Check media blocklist before storing uploads to prevent orphaned files
2 weeks ago
Your Name
ec6827bae2
Check media blocklist before storing uploads to prevent orphaned files
2 weeks ago
Shlee
cecdad5b53
Merge pull request #7143 from shleeable/fix/search-controller-pgsql-ilike
...
Use ILIKE for case-insensitive search on PostgreSQL
2 weeks ago
Your Name
613cf413de
Use ILIKE for case-insensitive search on PostgreSQL
2 weeks ago
Shlee
173abef5c5
Merge pull request #7142 from shleeable/fix/reblog-duplicate-dispatch
...
Only dispatch SharePipeline for newly-created reblogs
2 weeks ago
Your Name
d190ba7b66
Only dispatch SharePipeline for newly-created reblogs
2 weeks ago
Shlee
a5cbea834f
Merge pull request #7138 from shleeable/fix/oob-authorize-omitted-redirect-uri
...
Detect OOB oauth client when redirect_uri omitted on authorize
2 weeks ago
Shlee
ae31ed8e66
Merge pull request #7137 from shleeable/fix/story-remote-expiry-cache
...
Invalidate latest-story cache on remote story expiry and null-guard l…
2 weeks ago
Your Name
53ad34b321
Ignore own row when validating email update uniqueness
2 weeks ago
Your Name
462b4bc0da
Detect OOB oauth client when redirect_uri omitted on authorize
2 weeks ago
Your Name
9850aac676
Invalidate latest-story cache on remote story expiry and null-guard latest()
2 weeks ago
Shlee
9c5be0e271
Merge pull request #7136 from shleeable/fix/custom-filter-rate-limit-ttl
...
Fix custom filter rate-limit counter never expiring
2 weeks ago
Your Name
63e3c95fae
Fix custom filter rate-limit counter never expiring
2 weeks ago
Your Name
afcb68c183
Fix registration form redirecting when max_users is falsy
2 weeks ago
Shlee
daf83fd564
Merge pull request #7132 from shleeable/fix/pat-renew-kill-switch
...
Enforce pat_enabled kill-switch on personal access token renew
2 weeks ago
Your Name
d2b11a71b3
Enforce pat_enabled kill-switch on personal access token renew
2 weeks ago
Shlee
13a441af93
Merge pull request #7131 from shleeable/fix/login-activity-groupby
...
Fix login activity groupBy returning stale rows and 500 on strict DBs
2 weeks ago
Your Name
3cb5b6e1ff
Fix login activity groupBy returning stale rows and 500 on strict DBs
2 weeks ago
Your Name
fe70cd1155
Fix directory listing reporting oauth and activitypub flags always true
2 weeks ago
Shlee
18ba2dc932
Merge pull request #7119 from shleeable/fix/hashtag-follow-null-profile
...
Guard hashtag follow against null profile for soft-deleted accounts
2 weeks ago
Shlee
3b8d7b8d1f
Merge pull request #7123 from shleeable/fix/poll-vote-scope-authz
...
Enforce poll scope authorization on vote endpoint
2 weeks ago
Shlee
0900509c27
Merge pull request #7124 from shleeable/fix/collection-store-visibility-required
...
Require visibility on collection store to match NOT NULL schema
2 weeks ago
Shlee
3f63b245bc
Merge pull request #7126 from shleeable/fix/admin-instance-stats-postgres-guard
...
Fix admin instance stats endpoint 404 on Postgres via strict is_admin boolean check
2 weeks ago
Shlee
fe8c53ddd7
Merge pull request #7127 from shleeable/fix/favourites-pagination-off-by-one
...
Fix favourites pagination skipping one favourite per page
2 weeks ago
Shlee
602e498f0a
Update ApiV1Controller.php
2 weeks ago
Your Name
a286509622
Require visibility on collection store to match NOT NULL schema
2 weeks ago
Your Name
a8a7a430d7
Enforce poll scope authorization on vote endpoint
2 weeks ago
Your Name
e79135a771
Fix favourites pagination skipping one favourite per page boundary
2 weeks ago
Your Name
8258a5a5f8
Guard hashtag follow against null profile for soft-deleted accounts
2 weeks ago
Your Name
df1e771f93
Fix admin instance stats endpoint 404 on Postgres via strict is_admin check
2 weeks ago