13 Commits (ababab30ed61c50bb95cf764ed3dc24d679f4344)

Author	SHA1	Message	Date
Your Name	fbca487bcd	Mark OIDC login session password-confirmed to fix dangerzone lockout	1 week ago
Your Name	d86fd28e34	polish	4 weeks ago
Shlee	a82dc91295	Merge branch 'staging' into dev	4 weeks ago
Your Name	302edf09d5	refactor: rename PixelfedUsername rule to ValidUsername ... Pure rename of the App\Rules\PixelfedUsername validation rule to App\Rules\ValidUsername for a clearer, more idiomatic name. Updates the class, filename, test, and all 8 controller call sites. No behavior change.	4 weeks ago
Your Name	c0cde2f682	refactor: move 52 legacy models from App\ to App\Models\ ... Move all Eloquent models from the app/ root directory to app/Models/ for consistency with modern Laravel conventions. The project already had 54 models in App\Models; this migrates the remaining 52 legacy models. Changes: - Move 52 model files from app/ to app/Models/ - Update namespace declarations in each model - Update all ~1000 import references across the codebase - Add Relation::morphMap() in AppServiceProvider for backward compatibility with existing polymorphic database records - Add missing HasSnowflakePrimary imports for models that relied on same-namespace resolution	4 weeks ago
Your Name	54cfdf3c2b	refactor: add return type declarations to controller methods ... Adds explicit return type declarations to 498 controller methods across 88 files. Types inferred from return statements: - JsonResponse for response()->json() returns - RedirectResponse for redirect()/back() returns - View (contract) for view() returns - Response for response() returns - void for methods with no return value - array for array returns - string/int/bool for scalar returns Also fixes 3 methods with incorrect bare returns: - AvatarController::deleteAvatar - bare return → json response - ImportPostController::checkPermissions - bare return → true - RemoteAuthController::accountToId - bare return → empty array	4 weeks ago
Your Name	4320231c1f	fix: replace deprecated $request->get() with $request->input() ... Symfony 8.0 removes Request::get(). Laravel 13 will support Symfony 8, so these 11 usages would break on upgrade. Using $request->input() which checks both query string and request body (same behavior as the old get() method).	4 weeks ago
Thomas Jacumin	9d0b5949e9	Use Mastodon username convention for OIDC	4 weeks ago
Shlee	baf21797f0	Update RemoteOidcController.php	1 month ago
Daniel Supernault	374344754e	Lint	9 months ago
Daniel Supernault	26887c7672	Update OIDC config with comments, and disable tests as we dont have db tests configured	1 year ago
Gavin Mogan	70584b47c5	Fixes for items highlighted by review.ai ... * Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks: `abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid state');` * For better data integrity, consider adding a foreign key constraint to the user_id column: `$table- >foreign('user_id')->references('id')->on('users')->onDelete('cascade');` * Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`	1 year ago
Gavin Mogan	441c8e0d4c	Generic OIDC Support ... * Everything should be configurable by env variables * Basic request tests	1 year ago