Commit Graph

64 Commits (5654ab6c270c4687a32abc87646bcf7c91209db7)

Author SHA1 Message Date
Your Name 5654ab6c27 fix: viewPulse gate denies admins due to strict === on boolean is_admin
is_admin is cast to bool on the User model, so $user->is_admin === 1 is always
false and the gate 403s every user, admins included. Use a boolean check,
consistent with the viewHorizon gate.
1 day ago
Your Name 139b29733e fix: serve Pulse and Horizon dashboards under admin/ to avoid username route collisions
- Pulse: set PULSE_PATH default to admin/pulse; Pulse::ignoreRoutes() in
  AppServiceProvider and register the dashboard explicitly in routes/web-admin.php
  so it is matched before the {username} profile catch-all.
- Horizon: set horizon.path to admin/horizon (all Horizon routes follow); add an
  explicit base-path GET mirroring Horizon's own HomeController@index for clarity.
- Remove now-unneeded 'horizon' reservation from RestrictedNames.
- Add PULSE_ENABLED-gated Pulse links to admin sidenav and topnav.
- Replace HorizonRedirectTest with HorizonDashboardTest (base path now renders
  the dashboard directly instead of redirecting).
1 day ago
Your Name 0eddd93d5e larastan fix 5 days ago
Your Name a28d3df4c4 StrictArrayParamDimFetchRector 5 days ago
Daniel Supernault 7c412d7e70
Add new oauth scopes and improve security endpoints 1 week ago
Shlee 1d76ec6d85
Update AppServiceProvider.php 1 week ago
Your Name 47dd59367e polish 1 week ago
Your Name 3c6ba88e6e chore: modernize service providers for Laravel 13 readiness
Remove deprecated Foundation\Support\Providers\AuthServiceProvider and
EventServiceProvider base classes. Move policy and event listener
registrations into AppServiceProvider using Gate::policy() and
Event::listen(). Behavior is unchanged (verified via event:list and
auth test suite).
3 weeks ago
Your Name c0cde2f682 refactor: move 52 legacy models from App\ to App\Models\
Move all Eloquent models from the app/ root directory to app/Models/
for consistency with modern Laravel conventions. The project already had
54 models in App\Models; this migrates the remaining 52 legacy models.

Changes:
- Move 52 model files from app/ to app/Models/
- Update namespace declarations in each model
- Update all ~1000 import references across the codebase
- Add Relation::morphMap() in AppServiceProvider for backward
  compatibility with existing polymorphic database records
- Add missing HasSnowflakePrimary imports for models that relied
  on same-namespace resolution
4 weeks ago
Shlee f13a891ff4
Update AppServiceProvider.php 4 weeks ago
dansup e1b60d070b
Merge pull request #6882 from pixelfed/shleeable-patch-2
Refactor: Add additional strict modes for testing environments only
4 weeks ago
Shlee de8de9251b
Update AppServiceProvider.php 4 weeks ago
Shlee 1ae0feb129
Update AppServiceProvider.php 4 weeks ago
dansup e0876c8a97
Merge pull request #6878 from pixelfed/fix/mysql-strict-mode
fix: enable MySQL strict mode and remove defaultStringLength(191)
4 weeks ago
Shlee c04fec21fc
Update model loading behavior in AppServiceProvider 4 weeks ago
Your Name 1b64c59beb fix: enable MySQL strict mode and remove defaultStringLength(191)
- Enable strict mode for MySQL connection to prevent silent data
  truncation, zero-date insertion, and division-by-zero errors.
- Remove Schema::defaultStringLength(191) which was a MySQL 5.7
  workaround no longer needed on MySQL 8.0+ / MariaDB 10.3+.
4 weeks ago
Shlee 0837968fad
Update AppServiceProvider.php 4 weeks ago
Your Name ed90e619fb feat: add throttle:api middleware to the api route group
Adds a global rate limiter (240 req/min per user or IP) to all API
routes. Previously rate limiting was only applied ad-hoc on individual
routes, leaving some endpoints unprotected.
4 weeks ago
Your Name c891f34df6 polish 4 weeks ago
Your Name 5a364be58b fix: remove deprecated Passport::personalAccessClientId() and enableImplicitGrant()
- Remove Passport::personalAccessClientId() (removed in Passport v13, auto-discovers now)
- Remove Passport::enableImplicitGrant() (legacy grant, no clients use it)
- Flatten config instance.oauth.pat to pat_enabled (remove dead pat.id key)
- Add OAUTH_PAT_ENABLED=false to .env.example and .env.docker.example
- Show swal alert when PATs disabled instead of hidden API error
- Improve store() error handling to surface 403 messages in the UI
- Remove OAUTH_PAT_ID row from admin diagnostics blade
4 weeks ago
Your Name c807a8524c refactor: replace short facade aliases with fully-qualified imports
Convert all 273 short facade alias imports (e.g. 'use Cache;') to their
fully-qualified class names (e.g. 'use Illuminate\Support\Facades\Cache;')
across 193 files.

This resolves 643 PHPStan 'class.notFound' errors caused by the static
analyzer being unable to resolve global aliases, and aligns with modern
Laravel conventions. It also unblocks removing the aliases array from
config/app.php in a future change.

All 107 tests pass.
4 weeks ago
Daniel Supernault 26ee049d07
Update AppRegisterController 1 month ago
Daniel Supernault 40aef7a212
Update GroupsFeedController 1 month ago
Daniel Supernault 0f781cba34
Update Personal Access Tokens 3 months ago
Daniel Supernault ef803ae9b6
Fix oauth/token 6 months ago
Daniel Supernault f6746aec8b
Update AuthServiceProvider 7 months ago
Daniel Supernault 695e851026
Fix oauth 7 months ago
Daniel Supernault 80a2f4f2b0
Add api/v1/accounts/lookup endpoint 8 months ago
Daniel Supernault 53742fa699
Lint 9 months ago
Gavin Mogan 441c8e0d4c Generic OIDC Support
* Everything should be configurable by env variables
* Basic request tests
1 year ago
Daniel Supernault a7f0c45505
Update AppServiceProvider.php 2 years ago
Daniel Supernault dbd1e17b25
Add app register email verify resends 2 years ago
Anil Kulkarni 972b299025
Prevent pulse crash when it is not configured 2 years ago
Daniel Supernault 4e6e6b4ab7
Update routes 2 years ago
Daniel Supernault f8dc50ebd3
Update AppServiceProvider.php 2 years ago
Daniel Supernault 3c249616ef
Add rate limits, fix typo and styling 2 years ago
Daniel Supernault ea17e24281
Update asp 2 years ago
Daniel Supernault 3d67d5a369
Add Pulse 2 years ago
Daniel Supernault a5946f590b
Update AppServiceProvider 2 years ago
Daniel Supernault 81f7d17263
Update FollowerService, improve cache invalidation 4 years ago
Daniel Supernault 0cdab339ff
Add default value for forceHttps in AppServiceProvider 4 years ago
Daniel Supernault a31bdec750
Allow forceHttps to be disabled, fixes #3710 4 years ago
daniel f776c79284
Merge pull request #3710 from thisislawatts/fix/opt-out-of-forcing-https
fix: add opt of forceScheme(https)
4 years ago
Daniel Supernault 18f3fcc663
Update Laravel 8 => 9 4 years ago
Luke Watts d1dca5a1f1
fix: add opt of forceScheme(https)
When running the application locally with
APP_URL=http://localhost it is unexpected for
all route URLs returned by `route('route-name')`
to use the https prefix.

Configuring SSL for your local environment should
not be a required step to development locally.

The new logic checks the configured URL for presence
of https:// OR that this the application is running
in a production environment.
4 years ago
Daniel Supernault d122c2d042
Add StatusObserver 4 years ago
Daniel Supernault 80d9b9399a
Refactor following & relationship logic. Replace FollowerObserver with FollowerService and added RelationshipService to cache results. Removed NotificationTransformer includes and replaced with cached services to improve performance and reduce database queries. 5 years ago
Daniel Supernault 38e5fc43eb
Add FollowObserver 5 years ago
Daniel Supernault d3157f2a2d
Add LikeObserver 5 years ago
Daniel Supernault b299da9311
Update AccountService, cache object and observe changes 6 years ago