Commit Graph

2022 Commits (e7ba43e2e1ea56243ecf2d4dfffce2d64f2b2317)

Author SHA1 Message Date
Shlee f99ee65676
Update PlaceController.php 1 month ago
Shlee 6f5f6e3368
Update ReportController.php 1 month ago
vinzgreg d19671a92c Fix API status editing: use auth:api guard
StatusEditController's constructor applies the web `auth` guard, which
Bearer/OAuth clients cannot satisfy. PUT /api/v1/statuses/{id} and
GET /api/v1/statuses/{id}/history therefore fail for every third-party
API client, while status create/delete keep working because
ApiV1Controller has no controller-level web auth.

The controller is routed only from routes/api.php, where the route group
already applies ['auth:api', 'validemail'], so no web/session route
depends on the old guard. Switch the constructor to match.
2 months ago
TowyTowy 795473be55 Fix home timeline rejecting empty max_id/min_id pagination params
`GET /api/v1/timelines/home?max_id=` (empty value) fails validation
because `min_id`/`max_id` use the `sometimes|integer` rule. The global
`ConvertEmptyStringsToNull` middleware turns `?max_id=` into `null`, and
since the field is present, `sometimes` does not skip it while `null`
fails the `integer` rule — returning HTTP 422.

Every other timeline/listing endpoint in this controller (timelinePublic,
accountStatusesById, etc.) uses `nullable|integer` for these params, so
`timelineHome` was the lone outlier. Mastodon-API clients such as Pixelfed
for iOS send `max_id=` on first page load and could not paginate the home
timeline.

Switch `min_id`/`max_id` to `nullable|integer` to match the rest of the
controller.

Fixes #6610

Co-Authored-By: Claude <noreply@anthropic.com>
2 months ago
Daniel Supernault 0f781cba34
Update Personal Access Tokens 3 months ago
Daniel Supernault fb92949a71
Update PersonalAccessTokenController.php 3 months ago
Daniel Supernault 25d5142f12
Fix PAT + oauth routes 3 months ago
Daniel Supernault 9fe9b7eb32
Update AdminInviteController 3 months ago
dansup 096a1bc901
Merge pull request #6553 from pixelfed/w2
OAuth: Token endpoint response loses required no-store/no-cache headers
4 months ago
dansup 120b08b758
Merge pull request #6563 from pixelfed/shleeable-patch-1
Update to Passport 13 refresh token method in AppRegisterController.php
5 months ago
Your Name 3c9fc9a1fe Remove EXP_PUE flag, post editing is always enabled
Remove the 'pue' entry from config/exp.php and the abort_if guard
in StatusEditController. Post editing is now unconditionally available.
5 months ago
Your Name 10a5eb7228 Remove exp.rec recommendations dead code
- Remove userRecommendations controller method and /api/local/exp/rec route
- Remove suggestions UI panel, data properties, and methods from Timeline.vue
- Remove commented-out suggestions card from feed template

The recommendations feature was deprecated and hardcoded to false/empty.
5 months ago
Daniel Supernault 14b325641f
Update Password Change with new Revoke Sessions option
As requested in https://lgbtqia.space/@serigala_tropis/116412473982617371
5 months ago
Shlee bbd09fe50f
Update AppRegisterController.php 6 months ago
Your Name b329ee9edc API: Media uploads leak orphaned files when status creation validation fails 6 months ago
Your Name 3d858af1fa OAuth: Token endpoint response loses required no-store/no-cache headers when adding created_at 6 months ago
dansup 6e9c33fcab
Merge pull request #6496 from pixelfed/shleeable-patch-7
Remove sleep from AppRegisterController.php
6 months ago
dansup bdc203dc5c
Merge pull request #6493 from ShadowJonathan/fix-profile-saving
Make sure profile saving has a clear error when email is not verified
6 months ago
Daniel Supernault ef803ae9b6
Fix oauth/token 6 months ago
Daniel Supernault f6746aec8b
Update AuthServiceProvider 7 months ago
Daniel Supernault 52f5626530
Fix oauth 7 months ago
Daniel Supernault 695e851026
Fix oauth 7 months ago
Shlee d9bd6d446f
Update AppRegisterController.php 7 months ago
Jonathan de Jong 8e91918b88
Make sure profile saving has a clear error when email is not verified 7 months ago
Shlee 1b21f83132
Update BaseApiController.php 7 months ago
dansup f1af72e66d
Merge pull request #6454 from pixelfed/a5
Bugfix: Validation was ignored, allows any file type/size
7 months ago
Daniel Supernault c975ddb13f
Update composer deps 7 months ago
Your Name 1a1dc5e096 fix typo 8 months ago
Daniel Supernault 3140404835
Update ApiV1Controller.php 8 months ago
Daniel Supernault 80a2f4f2b0
Add api/v1/accounts/lookup endpoint 8 months ago
Daniel Supernault f76567f67b
Improve reblog check 8 months ago
Severin 066f8ee309
Pulls user settings for reblogs 8 months ago
dansup 1f04a190a9
Merge pull request #6438 from pixelfed/shleeable-patch-22
UpdatePersonValidator rejects null name/summary due to required|nullable conflict
8 months ago
dansup fc694dd37a
Merge pull request #6431 from grossermensch/patch-1
Fix for portfolio with recent images not showing up on PSQL
8 months ago
dansup b3fdc41816
Merge pull request #6429 from albattran/dev
Added pagination to the followers/followings API endpoints
8 months ago
dansup ceec5a0eea
Merge pull request #6419 from pixelfed/shleeable-patch-18
Bugfix: CommentController : inherit appropriate visibility
8 months ago
dansup 70f3206b51
Merge pull request #6415 from pixelfed/shleeable-patch-14
Bugfix: Reversed follower check in PublicApiController::scopeCheck for private accounts.
8 months ago
dansup ebb119e4df
Merge pull request #6410 from pixelfed/shleeable-patch-9
Bugfix: Missing status filter exposes suspended/disabled profiles via ActivityPub in getCachedUser(withTrashed)
8 months ago
dansup 11692c72e9
Merge pull request #6408 from pixelfed/shleeable-patch-3
Bugfix: Account deletion proceeds without validation server side.
8 months ago
Shlee ac19942083
Update RemoteAuthController.php 8 months ago
Severin b948a31e61
Fix for portfolio with recent images not showing up on PSQL 8 months ago
samir 9c3130a3c7 Added pagination to the followers/followings API endpoints 8 months ago
Shlee 4419054ae5
Update CommentController.php 9 months ago
Shlee da03ca79d5
Update PublicApiController.php 9 months ago
Shlee 8394b8ac4b
Update ProfileController.php 9 months ago
Shlee 43f6686667
Update SettingsController.php 9 months ago
Shlee def22b267d
Update BookmarkController.php 9 months ago
Daniel Supernault ef6187b917
Fix LoginController 9 months ago
Daniel Supernault 0032eaf482
Fix AdminController 9 months ago
Daniel Supernault 34278c77c2
Update LoginController 9 months ago
Daniel Supernault 374344754e
Lint 9 months ago
Rm Yakovenko 7cb54eb7c2 [Bug]: public API endpoint /accounts/{id}/statuses ignores max_id parameter 10 months ago
Daniel Supernault 4bc1e22121
Refactor LikePipeline and improve Undo Announce handling 10 months ago
Daniel Supernault 04bf75fb68
Revert inbox changes 10 months ago
dansup f783db493a
Merge pull request #6340 from grossermensch/patch-3
Allow to set new image types in admin interface
11 months ago
dansup eae2dafcac
Merge branch 'staging' into intervention-laravel-clean 11 months ago
Severin df5814d0f8
Allow to set new image types in admin interface 11 months ago
Shlee fabb93d4a0
Update StoryComposeController.php 11 months ago
Your Name 45a9a3b472 RemoveUnreachableStatementRector 11 months ago
dansup 7881b09c2f
Merge pull request #6304 from pixelfed/classV2
Larastan: Fix Missing classes 2 - Medium risk
11 months ago
dansup 14d5fe940e
Merge pull request #6302 from pixelfed/miscClosureUnusedUseV2
Larastan: fix Unused Use - Low risk
11 months ago
dansup f9d430d6e6
Merge pull request #6299 from pixelfed/classNotFoundV1
Larastan: Fix Missing classes - Low risk
11 months ago
dansup 99e89814b4
Merge pull request #6295 from pixelfed/shleeable-patch-20
Dead Code - Delete app/Http/Controllers/Api/InstanceApiController.php - Low Risk
11 months ago
dansup 6df58e67f2
Merge pull request #6290 from pixelfed/emptyv1
Larastan: 'empty() always exists and is not falsy' errors - Low risk
11 months ago
dansup 93217c8c63
Merge pull request #6284 from pixelfed/shleeable-patch-15
Larastan: Remove unused arg from Function config_cache - Safe/Mergable
11 months ago
dansup d2acad9388
Merge pull request #6283 from pixelfed/shleeable-patch-14
Larastan: Update GroupsPostController.php - Safe/Mergable
11 months ago
dansup bc9a974037
Merge pull request #6280 from pixelfed/refactor-RemoveDuplicatedArrayKeyRector
Larastan: Removed duplicated Keys in arrays.
11 months ago
dansup e5c6ac0eca
Merge pull request #6274 from pixelfed/shleeable-patch-9
Larastan: Update BaseApiController.php
11 months ago
dansup 59e1e12625
Merge pull request #6273 from pixelfed/shleeable-patch-8
Larastan: Update ResetPasswordController.php / ForgotPasswordController.php
11 months ago
Your Name 15cc07e602 Fix all class.notFound PHPStan issues - 31 fixes 11 months ago
Your Name 28ed625f12 Fix PHPStan closure.unusedUse issues - 7 fixes 11 months ago
Your Name ca6c875bbb Fix PHPStan class.notFound issues 11 months ago
Shlee e297cd0e94
Dead Code - Delete app/Http/Controllers/Api/InstanceApiController.php 11 months ago
Your Name 72e840345e Fix PHPStan 'empty() always exists and is not falsy' errors
- Remove redundant empty() checks where variables are guaranteed to exist and be non-falsy
- Replace empty() with simple null/false checks where appropriate
- Maintain original logic while fixing static analysis issues
- Affected files:
  - app/Http/Controllers/GroupController.php
  - app/Http/Controllers/ProfileAliasController.php
  - app/Jobs/ImageOptimizePipeline/ImageUpdate.php
  - app/Jobs/InboxPipeline/DeleteWorker.php
  - app/Jobs/InboxPipeline/InboxValidator.php
  - app/Jobs/InboxPipeline/InboxWorker.php
  - app/Jobs/ProfilePipeline/HandleUpdateActivity.php
  - app/Rules/ExpoPushTokenRule.php
  - app/Services/AutospamService.php
  - app/Services/CollectionService.php
  - app/Services/NotificationAppGatewayService.php
  - app/Services/WebfingerService.php
  - app/Util/ActivityPub/Helpers.php
11 months ago
Shlee 133e497879
Larastan: Update ComposeController.php 11 months ago
Shlee 304c3eab3f
Update GroupsPostController.php 11 months ago
Your Name e43078961c Fix PHP deprecation warnings for implicit nullable parameters
- Add explicit nullable type declarations to GroupService::log() method parameters
- Add explicit nullable type declaration to ModLogService::metadata() method parameter
- Add explicit nullable type declaration to HitHighlighter::highlight() method parameter
- Resolves PHP 8.1+ deprecation warnings about implicitly marking parameters as nullable
11 months ago
Daniel Supernault cc90df9d8c
Add user admin toggles for email and ip 11 months ago
Shlee 8d197107e8
Update BaseApiController.php 11 months ago
Shlee b826f4fe48
Update ForgotPasswordController.php 11 months ago
Shlee 4adc8947d8
Update ResetPasswordController.php 11 months ago
dansup ea0fd2e719
Merge pull request #6261 from pixelfed/shleeable-patch-24
Larastan: Update FederationController.php
11 months ago
Shlee d8c9d72f11
Update FederationController.php 11 months ago
Shlee 5a3d841e19
Update AccountController.php 11 months ago
dansup f2e4715749
Merge pull request #6194 from emlove/migration
Account Migration fixes
11 months ago
dansup 1586808b11
Merge pull request #6189 from rossbearman/admin-invites
Admin web interface for creating and expiring invites; add invitation emails
11 months ago
Daniel Supernault 76b5601a01
Update IG Import
To support non-local fs
12 months ago
Daniel Supernault 03d01d296f
Update StoryComposeController.php
Fix non-local storage bug
12 months ago
Daniel Supernault 02455129a5
Update StoryComposeController.php
Fix support for non-local fs
12 months ago
Emily Love Watson 7709d5da29
Cleanup 12 months ago
Emily Love Watson 871efff1a8
Remove unused params 12 months ago
Emily Love Watson 453ae4b32e
MVP migration 12 months ago
Ross Bearman db03733415 Add admin invite interface and email support
This commit does two things:

* Add invite email support to AdminInviteCommand
  - Moves `invite_code` generation to AdminInvite model `creating` event
* Add admin invite management section under admin users dashboard
  - Adds `Admin/AdminUserInviteController` and associated `home` and
    `create` Blade templates.
  - Adds "Invites" button to admin user dashboard
1 year ago
Daniel Supernault 3686c92122
Update Status storage, add SanitizerService to fix spacing in html stripped content 1 year ago
Daniel Supernault ec21eec508
Update ApiV1Dot1Controller, fix Story report follower check 1 year ago
Daniel Supernault f195102b34
Update StoryApiV1Controller, reduce min story size to 10kb 1 year ago
Daniel Supernault 5d4674daa4
Update ApiV1StoryController, fix viewer pagination
Fix cursor pagination
1 year ago
(dan)iel (sup)ernault 2e0b3829a3
Merge pull request #6081 from eufelipemateus/adjust-oderby-statuses-profile
fix: ordery by statutes profile
1 year ago
Daniel Supernault 32b1f26d69
Update StoryApiV1Controller, update error messsage 1 year ago
Daniel Supernault 8fb44e3162
Update StoryApiV1Controller, improve text overlay validation regex for improved support 1 year ago