Your Name
98267eb26f
refactor: replace deprecated str_random() with Str::random()
...
str_random() is a deprecated helper from laravel/helpers that was
missed in the initial helpers removal. Replace all 18 call sites
with the modern Str::random() equivalent.
4 weeks ago
Daniel Supernault
8f1e475407
Fix typo
4 weeks ago
Daniel Supernault
7937d91c37
Update ApiV1Controller, add is_suggestable to update_credentials endpoint
4 weeks ago
Daniel Supernault
4e2e49f843
Update ApiV1Controller, add show_atom support to update_credentials endpoint
4 weeks ago
Shlee
fb655f1308
Merge pull request #6782 from ashleyhull-versent/shift-179490
...
Laravel Shift Preshift
4 weeks ago
Ashley Hull
ab07a705e6
Merge branch 'dev' into shift-179490
4 weeks ago
Shlee
68dca50973
Merge pull request #6774 from pixelfed/fix/oauth-scope-bypass-remove-follower-6643
...
Fix: OAuth accountRemoveFollowById to check token.
4 weeks ago
Shlee
20123ff5ba
Merge pull request #6773 from pixelfed/fix/first-follower-pagination-6695
...
Fix: Show first follower/following record excluded from previous API responses
4 weeks ago
Daniel Supernault
91645faeee
Lint
4 weeks ago
Daniel Supernault
e1235dfd75
Fix ApiV1Controller, ensure follow notifications have an account
4 weeks ago
Your Name
822e9c98cb
Fix OAuth scope bypass on remove_from_followers endpoint
...
Fixes #6643
The POST /api/v1/accounts/{id}/remove_from_followers endpoint was missing
the token existence check (! $request->user()->token()). While the
tokenCan('follow') scope check was already present, the missing token
guard meant unauthenticated token-less requests could potentially bypass
the scope enforcement.
Added the standard guard pattern consistent with accountFollowById and
accountUnfollowById endpoints.
Also adds tests verifying:
- Read-only tokens are denied (403)
- Follow-scoped tokens succeed (200)
- Unauthenticated requests are denied (403)
4 weeks ago
Your Name
396cf2d861
Fix first follower/following record excluded from API responses
...
Fixes #6695
When no pagination params are provided, the default min_id was set to 1
and the query used 'id > 1', which excluded the very first follower row
(id=1) on fresh instances.
Changed default min_id from 1 to 0 and switched the direction check from
truthy evaluation to !== null, so the query becomes 'id > 0' which
correctly includes all records.
4 weeks ago
Shift
19880c2ffb
Convert string references to `::class`
...
PHP 5.5.9 adds the new static `class` property which provides the fully qualified class name. This is preferred over using strings for class names since the `class` property references are checked by PHP.
4 weeks ago
Daniel Supernault
a2be0cb47d
Update CommentController
1 month ago
Daniel Supernault
40aef7a212
Update GroupsFeedController
1 month ago
dansup
ca5f83d2d1
Merge pull request #6655 from TowyTowy/fix/timeline-home-nullable-max-id
...
Fix home timeline rejecting empty max_id/min_id pagination params
1 month ago
dansup
5aae3f46c7
Merge pull request #6691 from pixelfed/shleeable-patch-26
...
Improve validation
1 month ago
Shlee
1d72f1b437
Update ApiV1Controller.php
1 month ago
Shlee
9966eb50b8
Update ApiV1Controller.php
1 month ago
TowyTowy
795473be55
Fix home timeline rejecting empty max_id/min_id pagination params
...
`GET /api/v1/timelines/home?max_id=` (empty value) fails validation
because `min_id`/`max_id` use the `sometimes|integer` rule. The global
`ConvertEmptyStringsToNull` middleware turns `?max_id=` into `null`, and
since the field is present, `sometimes` does not skip it while `null`
fails the `integer` rule — returning HTTP 422.
Every other timeline/listing endpoint in this controller (timelinePublic,
accountStatusesById, etc.) uses `nullable|integer` for these params, so
`timelineHome` was the lone outlier. Mastodon-API clients such as Pixelfed
for iOS send `max_id=` on first page load and could not paginate the home
timeline.
Switch `min_id`/`max_id` to `nullable|integer` to match the rest of the
controller.
Fixes #6610
Co-Authored-By: Claude <noreply@anthropic.com>
2 months ago
Your Name
b329ee9edc
API: Media uploads leak orphaned files when status creation validation fails
6 months ago
Daniel Supernault
695e851026
Fix oauth
7 months ago
Daniel Supernault
3140404835
Update ApiV1Controller.php
8 months ago
Daniel Supernault
80a2f4f2b0
Add api/v1/accounts/lookup endpoint
8 months ago
Daniel Supernault
f76567f67b
Improve reblog check
8 months ago
Severin
066f8ee309
Pulls user settings for reblogs
8 months ago
samir
9c3130a3c7
Added pagination to the followers/followings API endpoints
8 months ago
Daniel Supernault
374344754e
Lint
9 months ago
Daniel Supernault
4bc1e22121
Refactor LikePipeline and improve Undo Announce handling
10 months ago
Daniel Supernault
3686c92122
Update Status storage, add SanitizerService to fix spacing in html stripped content
1 year ago
Daniel Supernault
4747266b04
Update ApiV1Controller, fix cache invalidation order
1 year ago
Daniel Supernault
4e938a8ffa
Fix heic, avif, webp support and add libvips driver
1 year ago
Daniel Supernault
ab9c13fe0d
New supported formats, Preserve ICC Color Profiles, libvips support
...
Update image pipeline to handle avif, heic and webp and preserve ICC color profiles and added libvips support.
1 year ago
Daniel Supernault
5a3a1cf76c
Update remove_from_followers api endpoint
1 year ago
daniel
92482c24cd
Merge pull request #5895 from eufelipemateus/feat-remove-follow
...
[Improvement] Add button remove follow
1 year ago
Felipe Mateus
fed800acfb
Merge branch 'dev-contrib-origin' into feat-remove-follow
1 year ago
Daniel Supernault
5a32bfe304
Update ApiV1Controller, add Custom Filters to home/public and hashtag feeds
1 year ago
Daniel Supernault
b86102823b
Update CustomFilter model and CustomFilterController
1 year ago
Daniel Supernault
437d742ac4
Add custom filters
...
Add custom filters, compatible with Mastodon `/api/v2/filters`
Todo:
- [ ] fix routes
- [ ] finish other context filtering
1 year ago
daniel
0158941fb6
API improvements + test fixes ( #5925 )
...
* migrate PHPUnit configuration
* replace @test annotations with #[Test] attributes, and add it where it was missing
* remove test prefix from test method names
* add PHPUnit cache to .gitignore
* Update ApiV1Controller, fix notifications favourited/reblogged/bookmarked state. Fixes #5901
* Update ApiV1Controller, fix relationship fields. Fixes #5900
* Update instance config, return proper matrix limits. Fixes #4780
* Update SearchApiV2Service, fix offset bug. Fixes #5875
* Update ApiV1Controller, add better direct error message. Fixes #4789
* Update changelog
---------
Co-authored-by: Daniel Simon <daniel.simon.dev@proton.me>
1 year ago
Daniel Supernault
658fe6898e
Update ApiV1Controller, add better direct error message. Fixes #4789
1 year ago
Daniel Supernault
4732019087
Update instance config, return proper matrix limits. Fixes #4780
1 year ago
Daniel Supernault
8a86808a06
Update ApiV1Controller, fix notifications favourited/reblogged/bookmarked state. Fixes #5901
1 year ago
daniel
e5c577054b
Add Pinned Posts + WebUI profile fixes ( #5914 )
...
* translate notifications
* translate profile
* fix translate privacy
* add missing keys
* pinned posts
* fix key settings
* fix key
Co-Authored-By: daniel <danielsupernault@gmail.com>
* Update AccountImport, improve webp support
* Update GroupSettings, add missing avatar/header deletion
* Update i18n
* Update compiled assets
* Update 2025_03_19_022553_add_pinned_columns_statuses_table.php
* Fix pinned posts implementation
* Update docker readme, closes #5909
* Update post pinning, and dispatch Notification cache warming to a job, and fix reblogged state on some endpoints
* Refactor following check
* Fix ProfileFeed bookmark, likes and shares. Closes #5879
* Update PublicApiController, use pixelfed entities for /api/pixelfed/v1/accounts/id/statuses with bookmarked state
* Update changelog
* Update compiled assets
* Update i18n
---------
Co-authored-by: Felipe Mateus <eu@felipemateus.com>
1 year ago
Daniel Supernault
0f1819125c
Update post pinning, and dispatch Notification cache warming to a job, and fix reblogged state on some endpoints
1 year ago
Daniel Supernault
2f655d0008
Fix pinned posts implementation
1 year ago
daniel
c9a0fe0026
Merge pull request #5884 from eufelipemateus/pinned-posts
...
[Improvement] Pinned posts
2 years ago
Felipe Mateus
128533b5d8
Update ApiV1Controller.php
...
Co-Authored-By: Mathieu <385764+Casmo@users.noreply.github.com>
2 years ago
Felipe Mateus
456f96d574
add remove follow
2 years ago
Daniel Supernault
aa6f95b1cf
Update ApiV1Controller, improve query
2 years ago