Shlee
c2044f77cf
Update AdminUserController.php
2 months ago
Shlee
1d72f1b437
Update ApiV1Controller.php
2 months ago
Shlee
fbe98ea4de
Update AccountController.php
2 months ago
Shlee
9966eb50b8
Update ApiV1Controller.php
2 months ago
Shlee
87d866f58d
Update SettingsController.php
2 months ago
Shlee
baf21797f0
Update RemoteOidcController.php
2 months ago
Shlee
0f79861f1d
Update PrivacySettings.php
2 months ago
Shlee
4e6b341532
Update StoryController.php
2 months ago
Shlee
8ce4b5d409
Update StoryApiV1Controller.php
2 months ago
Shlee
f99ee65676
Update PlaceController.php
2 months ago
Shlee
6f5f6e3368
Update ReportController.php
2 months ago
vinzgreg
d19671a92c
Fix API status editing: use auth:api guard
...
StatusEditController's constructor applies the web `auth` guard, which
Bearer/OAuth clients cannot satisfy. PUT /api/v1/statuses/{id} and
GET /api/v1/statuses/{id}/history therefore fail for every third-party
API client, while status create/delete keep working because
ApiV1Controller has no controller-level web auth.
The controller is routed only from routes/api.php, where the route group
already applies ['auth:api', 'validemail'], so no web/session route
depends on the old guard. Switch the constructor to match.
2 months ago
TowyTowy
795473be55
Fix home timeline rejecting empty max_id/min_id pagination params
...
`GET /api/v1/timelines/home?max_id=` (empty value) fails validation
because `min_id`/`max_id` use the `sometimes|integer` rule. The global
`ConvertEmptyStringsToNull` middleware turns `?max_id=` into `null`, and
since the field is present, `sometimes` does not skip it while `null`
fails the `integer` rule — returning HTTP 422.
Every other timeline/listing endpoint in this controller (timelinePublic,
accountStatusesById, etc.) uses `nullable|integer` for these params, so
`timelineHome` was the lone outlier. Mastodon-API clients such as Pixelfed
for iOS send `max_id=` on first page load and could not paginate the home
timeline.
Switch `min_id`/`max_id` to `nullable|integer` to match the rest of the
controller.
Fixes #6610
Co-Authored-By: Claude <noreply@anthropic.com>
2 months ago
Daniel Supernault
0f781cba34
Update Personal Access Tokens
3 months ago
Daniel Supernault
fb92949a71
Update PersonalAccessTokenController.php
3 months ago
Daniel Supernault
25d5142f12
Fix PAT + oauth routes
3 months ago
Daniel Supernault
9fe9b7eb32
Update AdminInviteController
3 months ago
dansup
096a1bc901
Merge pull request #6553 from pixelfed/w2
...
OAuth: Token endpoint response loses required no-store/no-cache headers
4 months ago
dansup
120b08b758
Merge pull request #6563 from pixelfed/shleeable-patch-1
...
Update to Passport 13 refresh token method in AppRegisterController.php
5 months ago
Your Name
3c9fc9a1fe
Remove EXP_PUE flag, post editing is always enabled
...
Remove the 'pue' entry from config/exp.php and the abort_if guard
in StatusEditController. Post editing is now unconditionally available.
5 months ago
Your Name
10a5eb7228
Remove exp.rec recommendations dead code
...
- Remove userRecommendations controller method and /api/local/exp/rec route
- Remove suggestions UI panel, data properties, and methods from Timeline.vue
- Remove commented-out suggestions card from feed template
The recommendations feature was deprecated and hardcoded to false/empty.
5 months ago
Daniel Supernault
14b325641f
Update Password Change with new Revoke Sessions option
...
As requested in https://lgbtqia.space/@serigala_tropis/116412473982617371
5 months ago
Shlee
bbd09fe50f
Update AppRegisterController.php
6 months ago
Your Name
b329ee9edc
API: Media uploads leak orphaned files when status creation validation fails
6 months ago
Your Name
3d858af1fa
OAuth: Token endpoint response loses required no-store/no-cache headers when adding created_at
6 months ago
dansup
6e9c33fcab
Merge pull request #6496 from pixelfed/shleeable-patch-7
...
Remove sleep from AppRegisterController.php
6 months ago
dansup
bdc203dc5c
Merge pull request #6493 from ShadowJonathan/fix-profile-saving
...
Make sure profile saving has a clear error when email is not verified
6 months ago
Daniel Supernault
ef803ae9b6
Fix oauth/token
7 months ago
Daniel Supernault
f6746aec8b
Update AuthServiceProvider
7 months ago
Daniel Supernault
52f5626530
Fix oauth
7 months ago
Daniel Supernault
695e851026
Fix oauth
7 months ago
Shlee
d9bd6d446f
Update AppRegisterController.php
7 months ago
Jonathan de Jong
8e91918b88
Make sure profile saving has a clear error when email is not verified
7 months ago
Shlee
1b21f83132
Update BaseApiController.php
7 months ago
dansup
f1af72e66d
Merge pull request #6454 from pixelfed/a5
...
Bugfix: Validation was ignored, allows any file type/size
7 months ago
Daniel Supernault
c975ddb13f
Update composer deps
7 months ago
Your Name
1a1dc5e096
fix typo
8 months ago
Daniel Supernault
3140404835
Update ApiV1Controller.php
8 months ago
Daniel Supernault
80a2f4f2b0
Add api/v1/accounts/lookup endpoint
8 months ago
Daniel Supernault
f76567f67b
Improve reblog check
8 months ago
Severin
066f8ee309
Pulls user settings for reblogs
8 months ago
dansup
1f04a190a9
Merge pull request #6438 from pixelfed/shleeable-patch-22
...
UpdatePersonValidator rejects null name/summary due to required|nullable conflict
8 months ago
dansup
fc694dd37a
Merge pull request #6431 from grossermensch/patch-1
...
Fix for portfolio with recent images not showing up on PSQL
8 months ago
dansup
b3fdc41816
Merge pull request #6429 from albattran/dev
...
Added pagination to the followers/followings API endpoints
8 months ago
dansup
ceec5a0eea
Merge pull request #6419 from pixelfed/shleeable-patch-18
...
Bugfix: CommentController : inherit appropriate visibility
8 months ago
dansup
70f3206b51
Merge pull request #6415 from pixelfed/shleeable-patch-14
...
Bugfix: Reversed follower check in PublicApiController::scopeCheck for private accounts.
8 months ago
dansup
ebb119e4df
Merge pull request #6410 from pixelfed/shleeable-patch-9
...
Bugfix: Missing status filter exposes suspended/disabled profiles via ActivityPub in getCachedUser(withTrashed)
8 months ago
dansup
11692c72e9
Merge pull request #6408 from pixelfed/shleeable-patch-3
...
Bugfix: Account deletion proceeds without validation server side.
8 months ago
Shlee
ac19942083
Update RemoteAuthController.php
8 months ago
Severin
b948a31e61
Fix for portfolio with recent images not showing up on PSQL
8 months ago
samir
9c3130a3c7
Added pagination to the followers/followings API endpoints
8 months ago
Shlee
4419054ae5
Update CommentController.php
9 months ago
Shlee
da03ca79d5
Update PublicApiController.php
9 months ago
Shlee
8394b8ac4b
Update ProfileController.php
9 months ago
Shlee
43f6686667
Update SettingsController.php
9 months ago
Shlee
def22b267d
Update BookmarkController.php
9 months ago
Daniel Supernault
ef6187b917
Fix LoginController
9 months ago
Daniel Supernault
0032eaf482
Fix AdminController
9 months ago
Daniel Supernault
34278c77c2
Update LoginController
9 months ago
Daniel Supernault
374344754e
Lint
9 months ago
Rm Yakovenko
7cb54eb7c2
[Bug]: public API endpoint /accounts/{id}/statuses ignores max_id parameter
10 months ago
Daniel Supernault
4bc1e22121
Refactor LikePipeline and improve Undo Announce handling
11 months ago
Daniel Supernault
04bf75fb68
Revert inbox changes
11 months ago
dansup
f783db493a
Merge pull request #6340 from grossermensch/patch-3
...
Allow to set new image types in admin interface
11 months ago
dansup
eae2dafcac
Merge branch 'staging' into intervention-laravel-clean
11 months ago
Severin
df5814d0f8
Allow to set new image types in admin interface
11 months ago
Shlee
fabb93d4a0
Update StoryComposeController.php
11 months ago
Your Name
45a9a3b472
RemoveUnreachableStatementRector
11 months ago
dansup
7881b09c2f
Merge pull request #6304 from pixelfed/classV2
...
Larastan: Fix Missing classes 2 - Medium risk
11 months ago
dansup
14d5fe940e
Merge pull request #6302 from pixelfed/miscClosureUnusedUseV2
...
Larastan: fix Unused Use - Low risk
11 months ago
dansup
f9d430d6e6
Merge pull request #6299 from pixelfed/classNotFoundV1
...
Larastan: Fix Missing classes - Low risk
11 months ago
dansup
99e89814b4
Merge pull request #6295 from pixelfed/shleeable-patch-20
...
Dead Code - Delete app/Http/Controllers/Api/InstanceApiController.php - Low Risk
11 months ago
dansup
6df58e67f2
Merge pull request #6290 from pixelfed/emptyv1
...
Larastan: 'empty() always exists and is not falsy' errors - Low risk
11 months ago
dansup
93217c8c63
Merge pull request #6284 from pixelfed/shleeable-patch-15
...
Larastan: Remove unused arg from Function config_cache - Safe/Mergable
11 months ago
dansup
d2acad9388
Merge pull request #6283 from pixelfed/shleeable-patch-14
...
Larastan: Update GroupsPostController.php - Safe/Mergable
11 months ago
dansup
bc9a974037
Merge pull request #6280 from pixelfed/refactor-RemoveDuplicatedArrayKeyRector
...
Larastan: Removed duplicated Keys in arrays.
11 months ago
dansup
e5c6ac0eca
Merge pull request #6274 from pixelfed/shleeable-patch-9
...
Larastan: Update BaseApiController.php
11 months ago
dansup
59e1e12625
Merge pull request #6273 from pixelfed/shleeable-patch-8
...
Larastan: Update ResetPasswordController.php / ForgotPasswordController.php
11 months ago
Your Name
15cc07e602
Fix all class.notFound PHPStan issues - 31 fixes
11 months ago
Your Name
28ed625f12
Fix PHPStan closure.unusedUse issues - 7 fixes
11 months ago
Your Name
ca6c875bbb
Fix PHPStan class.notFound issues
11 months ago
Shlee
e297cd0e94
Dead Code - Delete app/Http/Controllers/Api/InstanceApiController.php
11 months ago
Your Name
72e840345e
Fix PHPStan 'empty() always exists and is not falsy' errors
...
- Remove redundant empty() checks where variables are guaranteed to exist and be non-falsy
- Replace empty() with simple null/false checks where appropriate
- Maintain original logic while fixing static analysis issues
- Affected files:
- app/Http/Controllers/GroupController.php
- app/Http/Controllers/ProfileAliasController.php
- app/Jobs/ImageOptimizePipeline/ImageUpdate.php
- app/Jobs/InboxPipeline/DeleteWorker.php
- app/Jobs/InboxPipeline/InboxValidator.php
- app/Jobs/InboxPipeline/InboxWorker.php
- app/Jobs/ProfilePipeline/HandleUpdateActivity.php
- app/Rules/ExpoPushTokenRule.php
- app/Services/AutospamService.php
- app/Services/CollectionService.php
- app/Services/NotificationAppGatewayService.php
- app/Services/WebfingerService.php
- app/Util/ActivityPub/Helpers.php
11 months ago
Shlee
133e497879
Larastan: Update ComposeController.php
11 months ago
Shlee
304c3eab3f
Update GroupsPostController.php
11 months ago
Your Name
e43078961c
Fix PHP deprecation warnings for implicit nullable parameters
...
- Add explicit nullable type declarations to GroupService::log() method parameters
- Add explicit nullable type declaration to ModLogService::metadata() method parameter
- Add explicit nullable type declaration to HitHighlighter::highlight() method parameter
- Resolves PHP 8.1+ deprecation warnings about implicitly marking parameters as nullable
11 months ago
Daniel Supernault
cc90df9d8c
Add user admin toggles for email and ip
11 months ago
Shlee
8d197107e8
Update BaseApiController.php
11 months ago
Shlee
b826f4fe48
Update ForgotPasswordController.php
11 months ago
Shlee
4adc8947d8
Update ResetPasswordController.php
11 months ago
dansup
ea0fd2e719
Merge pull request #6261 from pixelfed/shleeable-patch-24
...
Larastan: Update FederationController.php
11 months ago
Shlee
d8c9d72f11
Update FederationController.php
11 months ago
Shlee
5a3d841e19
Update AccountController.php
11 months ago
dansup
f2e4715749
Merge pull request #6194 from emlove/migration
...
Account Migration fixes
11 months ago
dansup
1586808b11
Merge pull request #6189 from rossbearman/admin-invites
...
Admin web interface for creating and expiring invites; add invitation emails
11 months ago
Daniel Supernault
76b5601a01
Update IG Import
...
To support non-local fs
12 months ago
Daniel Supernault
03d01d296f
Update StoryComposeController.php
...
Fix non-local storage bug
12 months ago
Daniel Supernault
02455129a5
Update StoryComposeController.php
...
Fix support for non-local fs
12 months ago
Emily Love Watson
7709d5da29
Cleanup
12 months ago
Emily Love Watson
871efff1a8
Remove unused params
12 months ago
Emily Love Watson
453ae4b32e
MVP migration
12 months ago
Ross Bearman
db03733415
Add admin invite interface and email support
...
This commit does two things:
* Add invite email support to AdminInviteCommand
- Moves `invite_code` generation to AdminInvite model `creating` event
* Add admin invite management section under admin users dashboard
- Adds `Admin/AdminUserInviteController` and associated `home` and
`create` Blade templates.
- Adds "Invites" button to admin user dashboard
1 year ago
Daniel Supernault
3686c92122
Update Status storage, add SanitizerService to fix spacing in html stripped content
1 year ago
Daniel Supernault
ec21eec508
Update ApiV1Dot1Controller, fix Story report follower check
1 year ago
Daniel Supernault
f195102b34
Update StoryApiV1Controller, reduce min story size to 10kb
1 year ago
Daniel Supernault
5d4674daa4
Update ApiV1StoryController, fix viewer pagination
...
Fix cursor pagination
1 year ago
(dan)iel (sup)ernault
2e0b3829a3
Merge pull request #6081 from eufelipemateus/adjust-oderby-statuses-profile
...
fix: ordery by statutes profile
1 year ago
Daniel Supernault
32b1f26d69
Update StoryApiV1Controller, update error messsage
1 year ago
Daniel Supernault
8fb44e3162
Update StoryApiV1Controller, improve text overlay validation regex for improved support
1 year ago
Daniel Supernault
76d9ded694
Update StoryApiV1Controller, add missing validation rule
1 year ago
Daniel Supernault
6c701b335d
Update StoryComposeController, add StoryIndexService support
1 year ago
Daniel Supernault
97badbbdd6
Update StoryApiV1Controller, add new v1.2 endpoints
1 year ago
Daniel Supernault
44914a5143
Update StoryController, add StoryIndexService s markSeen support for webUI endpoint
1 year ago
Daniel Supernault
f5dced0f7a
Update ApiV1Dot1Controller, add story report support
1 year ago
Daniel Supernault
35424ccb4d
Update HomeSettings, remove unnecessary relation query
1 year ago
Daniel Supernault
86af73455f
Update DirectMessageController, add mutuals endpoint
1 year ago
Daniel Supernault
d42c25ca64
Update DiscoverController
1 year ago
Daniel Supernault
c319dfbcc4
Update AppRegister controller, add scheduled cleanup task to delete older than 90d
1 year ago
Daniel Supernault
3977137d02
Update AppRegisterController
1 year ago
Felipe Mateus
11a5fa9314
fix: ordery by
1 year ago
Daniel Supernault
e56bcf3853
Update ComposeController, fix postgres operator
1 year ago
Daniel Supernault
2a9c28b81e
Update ComposeController, fix user tagging endpoint
1 year ago
Daniel Supernault
10eb1a8acb
Update ComposeController, prioritize followed users and follower_count first
1 year ago
Daniel Supernault
b6bc1e50e2
Update Admin Users dashboard
1 year ago
Daniel Supernault
56f909a61b
Update ComposeController, add addl compose settings data
1 year ago
Daniel Supernault
1cb01545bc
Update ComposeController, add addl compose settings data
1 year ago
Daniel Supernault
9048ab52c2
Update ComposeController, add addl compose settings data
1 year ago
Daniel Supernault
1c66cf7fef
Update CuratedRegisterController
1 year ago
Daniel Supernault
ece23d751b
Update Places, improve cache invalidation/ttl
1 year ago
Daniel Supernault
f81a4acdc6
Update PlaceController, fix show method
1 year ago
Daniel Supernault
9d89425e62
Update StoryController, fix intervention/image
1 year ago
Daniel Supernault
86fbeeec35
Update StoryComposeController, fix intervention/image v3 support
1 year ago
Daniel Supernault
7f7387ee4d
Update StatusController, fix mimeTypeCheck
1 year ago
Daniel Supernault
4747266b04
Update ApiV1Controller, fix cache invalidation order
1 year ago
Daniel Supernault
ae47ba73d6
Update ComposeController, fix cache invalidation order
1 year ago
Daniel Supernault
4e938a8ffa
Fix heic, avif, webp support and add libvips driver
1 year ago
Daniel Supernault
ab9c13fe0d
New supported formats, Preserve ICC Color Profiles, libvips support
...
Update image pipeline to handle avif, heic and webp and preserve ICC color profiles and added libvips support.
1 year ago
Daniel Supernault
5a3a1cf76c
Update remove_from_followers api endpoint
1 year ago
daniel
92482c24cd
Merge pull request #5895 from eufelipemateus/feat-remove-follow
...
[Improvement] Add button remove follow
1 year ago
Daniel Supernault
26887c7672
Update OIDC config with comments, and disable tests as we dont have db tests configured
1 year ago
Gavin Mogan
70584b47c5
Fixes for items highlighted by review.ai
...
* Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks:
`abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid
state');`
* For better data integrity, consider adding a foreign key constraint to the user_id column: `$table-
>foreign('user_id')->references('id')->on('users')->onDelete('cascade');`
* Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a
null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`
1 year ago
Gavin Mogan
441c8e0d4c
Generic OIDC Support
...
* Everything should be configurable by env variables
* Basic request tests
1 year ago
Mackenzie Morgan
9966260a91
use case insensitive search when tagging accounts
1 year ago
Felipe Mateus
fed800acfb
Merge branch 'dev-contrib-origin' into feat-remove-follow
1 year ago
Daniel Supernault
fc77a98f7b
Update CustomFilterController, remove statuses check as we dont support them yet
1 year ago
Daniel Supernault
5f5ed1e62d
Update ComposeController, fix tag mention bug. Closes #5885
1 year ago
Daniel Supernault
5a32bfe304
Update ApiV1Controller, add Custom Filters to home/public and hashtag feeds
1 year ago
Daniel Supernault
c4a96da019
Update CustomFilterController, improve case-insentive handling, mastoAPI compatibility and custom config limits
1 year ago
Daniel Supernault
b86102823b
Update CustomFilter model and CustomFilterController
1 year ago
Daniel Supernault
168816db2d
Update CustomFilterController
1 year ago