Commit Graph

13517 Commits (9f2cf47e921a0eebd45af184cb09ca21bcb52118)
 

Author SHA1 Message Date
Shlee 9f2cf47e92
Merge pull request #6789 from cosark/dev
Add RepoCloud one-click deploy option
1 week ago
Shlee c517650b56
Update README.md 1 week ago
Shlee de29985af2
Merge pull request #7259 from pixelfed/fix/ap-delivery-tests-force-production
test(federation): run AP delivery tests in production env
1 week ago
Your Name 7b11b72e1d test(federation): run AP delivery tests in production env
ActivityPubDeliveryService::pool() and queueDelivery() only perform HTTP
delivery when app()->environment('production'); outside production they log
and return. The pool/job delivery tests were written before that guard was
added (commit 868e09b64) and never forced production, so no requests were
made and every assertSent/assertSentCount failed (6 failing tests).

Wrap the delivery-exercising tests in a forged production environment
(restored afterwards) and seed the public-ips DNS cache plus an empty
banned-domains cache so validateDestination() passes without a real DNS
lookup or DB query. Seed after factory creation, since the lazy DB refresh
can flush the cache store.

Also fix a by-value capture bug in the onError assertions: the $errors
array was captured through an arrow-fn wrapper, so the inner callback's
by-reference mutations never reached the assertion. Use a regular closure.

No production code changed; the production delivery gate is intended
behavior.
1 week ago
Shlee 0b9ef4dba0
Merge pull request #7258 from pixelfed/fix/ap-delivery-connection-exception-swallow
fix(federation): swallow ConnectionException on synchronous AP delivery
1 week ago
Your Name 729396302a fix(federation): swallow ConnectionException on synchronous AP delivery
queueDelivery() runs synchronously from the v1 follow/unfollow endpoints
(via Helpers::sendSignedObject), which commit local state before delivery
and have no try/catch. After the Http::send() rewrite, a ConnectionException
from a momentarily-unreachable remote was rethrown out of queueDelivery(),
turning a best-effort delivery into a 500 for the user after the follow/
unfollow was already persisted. For unfollows, a retry then hit the
isFollowing==false branch and never re-sent the Undo, diverging state.

Treat transport failures (ConnectionException) as best-effort on this
single-delivery path: log, record host health, and return without
propagating. Other exception types (invalid sender/destination, signing,
serialization) still throw, matching pre-rewrite precondition behavior.

Also widen SendUpdateActor's per-user catch from HttpException to Throwable
so a single bad host no longer aborts a fleet-wide actor update (the old
HttpException catch is dead for ConnectionException/invalid-destination).
1 week ago
Shlee 7c47bab0dd
Merge pull request #7256 from pixelfed/fix/statusdelete-fanout-isolation
Isolate fanout delivery failures from StatusDelete local cleanup
1 week ago
Your Name 8a4567a5c2 Isolate fanout delivery failures from StatusDelete local cleanup 1 week ago
Shlee a1abf10010
Merge pull request #7254 from pixelfed/fix/oidc-dangerzone-lockout
Mark OIDC login session password-confirmed to fix dangerzone lockout
1 week ago
Your Name fbca487bcd Mark OIDC login session password-confirmed to fix dangerzone lockout 1 week ago
Shlee 78447646b8
Merge pull request #7253 from pixelfed/fix/remote-update-media-validate-before-orphan
Validate remote update attachments before detaching existing media
1 week ago
Your Name 9b829ca56e Validate remote update attachments before detaching existing media 1 week ago
Shlee 1d7ee48f2e
Merge pull request #7252 from pixelfed/fix/v2-media-can-post-role
Enforce can-post role check on POST /api/v2/media
1 week ago
Your Name 3a23606573 Enforce can-post role check on POST /api/v2/media 1 week ago
Shlee a510682122
Merge pull request #7251 from pixelfed/fix/delete-account-purge-status-edits
Purge status_edits on account and status deletion
1 week ago
Your Name 60284a871e Purge status_edits on account and status deletion 1 week ago
Shlee ad21fc89db
Merge pull request #7249 from pixelfed/fix/privacy-remove-all-chunkbyid-dangerzone
Fix remove-all follower purge chunkById key and gate the route behind sudo
1 week ago
Shlee 7a5626766e
Update PrivacySettings.php 1 week ago
Your Name 7b90bc8699 Fix remove-all follower purge chunkById key and gate the route behind dangerzone 1 week ago
Shlee 72be5860b5
Merge pull request #7248 from pixelfed/fix/admin-invite-verification-email
Send verification email for admin-invite users that require verification
1 week ago
Your Name cfbdabdd61 Send verification email for admin-invite users that require verification 1 week ago
Shlee 1fffdef464
Merge pull request #7247 from pixelfed/fix/report-object-id-integer-validation
Validate report object_id as a positive integer to fix 500
1 week ago
Shlee 17d29e4acf
Merge pull request #7246 from pixelfed/fix/story-index-author-ttl
Extend story author-key TTL instead of overwriting
1 week ago
Your Name b4bd3c87a0 Validate report object_id as a positive integer to fix 500 on array input 1 week ago
Your Name fe382bdb86 Extend story author-key TTL instead of overwriting so it survives to the longest-lived story 1 week ago
Shlee 7858686c21
Merge pull request #7245 from pixelfed/fix/apiv1-purify-import-larastan
Import Purify facade in ApiV1Controller to fix larastan class.notFound
1 week ago
Your Name 5ec239404b Import Purify facade in ApiV1Controller to fix larastan class.notFound 1 week ago
Daniel Supernault fbd0922fd0
Update Helpers 1 week ago
Daniel Supernault a27033d2fd
Update LoginController 1 week ago
Shlee 2f9f8ecd1b
Merge pull request #7244 from pixelfed/fix/curated-register-details-xss
Escape message in curated register details email to fix reflected XSS
1 week ago
Daniel Supernault 538a11cccd
Update LoginController 1 week ago
Daniel Supernault 96acfb3d91
Update InboxWorker, improve handling 1 week ago
Daniel Supernault 13a8a255f6
Update ActivityPub Inbox update handling 1 week ago
Daniel Supernault d2a45ee4d3
Update ApiV1Controller 1 week ago
Daniel Supernault 22108f8f11
Lint PostImportController 1 week ago
Daniel Supernault 914ab1196a
Update StoryComposeController 1 week ago
Daniel Supernault b0ca632026
Update unbookmark endpoint 1 week ago
Daniel Supernault 1cead5cf60
Update in-app registration 1 week ago
Your Name 623f03bb68 Escape message in curated register details email to fix reflected XSS 1 week ago
Shlee 88137649a3
Merge pull request #7242 from pixelfed/fix/home-timeline-null-account
Guard home timeline filter against null account
1 week ago
Shlee 589e9bef9e
Merge pull request #7241 from pixelfed/fix/status-delete-notification-cache
Invalidate notification cache when deleting a status
1 week ago
Your Name b13c374f21 Guard home timeline filter against null account 1 week ago
Shlee 7877dbf5c9
Merge pull request #7240 from pixelfed/fix/horizon-redirect-absolute-path
Use absolute path for /horizon dashboard redirect
1 week ago
Your Name f1e4536d19 Invalidate notification cache when deleting a status 1 week ago
Your Name ac872c12ed Use absolute path for /horizon dashboard redirect 1 week ago
Daniel Supernault e0550c441c
Fix AdminApiController profiles endpoint, dont include deleted accounts 1 week ago
Daniel Supernault 6a2208087c
Update AdminStatsService, fix reports_monthly stat 1 week ago
Daniel Supernault b2deebb72b
Update AdminApiController, fix typo 1 week ago
Daniel Supernault 6232d35d90
Update AccountService and AdminApiController 1 week ago
Daniel Supernault 96229868ff
Update AdminApiController, fix missing resource 1 week ago