2053 Commits (fbff6ed30745773f95c874016b4253ed1b65d628)

Author	SHA1	Message	Date
Daniel Supernault	fbff6ed307	Update trustedproxy config	1 month ago
Daniel Supernault	a2be0cb47d	Update CommentController	1 month ago
Daniel Supernault	40aef7a212	Update GroupsFeedController	1 month ago
Daniel Supernault	5f397f9135	Update StoryController	1 month ago
dansup	f568804426	Merge pull request #6680 from pixelfed/shleeable-patch-15 ... Update FollowerObserver.php	1 month ago
dansup	d6cd65463d	Merge pull request #6676 from pixelfed/shleeable-patch-10 ... Stories API: PostgreSQL story carousel endpoints crash due to calling collection methods on query builder	1 month ago
dansup	668653039f	Merge pull request #6663 from vinzgreg/fix/api-status-edit-auth-guard ... Fix API status editing: use auth:api guard	1 month ago
dansup	ca5f83d2d1	Merge pull request #6655 from TowyTowy/fix/timeline-home-nullable-max-id ... Fix home timeline rejecting empty max_id/min_id pagination params	1 month ago
dansup	5aae3f46c7	Merge pull request #6691 from pixelfed/shleeable-patch-26 ... Improve validation	1 month ago
dansup	219297d0e3	Merge pull request #6690 from pixelfed/shleeable-patch-25 ... Typo: change pid to id for FollowerService::remove	1 month ago
dansup	6910115166	Merge pull request #6686 from pixelfed/shleeable-patch-20 ... Update type on abort.	1 month ago
dansup	77831e7640	Merge pull request #6688 from pixelfed/shleeable-patch-22 ... Clear oauth material on permanent delete	1 month ago
dansup	5115e5c960	Merge pull request #6677 from pixelfed/shleeable-patch-12 ... Typo in abort	1 month ago
dansup	179dfffafe	Merge pull request #6672 from pixelfed/shleeable-patch-5 ... Places directory crashes on PostgreSQL for multi-word country URLs (case-sensitive mismatch)	1 month ago
dansup	f344b40aa9	Merge pull request #6671 from pixelfed/shleeable-patch-4 ... Account migration fails with 500 when remote ActivityPub profile returns `alsoKnownAs` as a string	1 month ago
Shlee	c2044f77cf	Update AdminUserController.php	1 month ago
Shlee	1d72f1b437	Update ApiV1Controller.php	1 month ago
Shlee	fbe98ea4de	Update AccountController.php	1 month ago
Shlee	9966eb50b8	Update ApiV1Controller.php	1 month ago
Shlee	87d866f58d	Update SettingsController.php	1 month ago
Shlee	baf21797f0	Update RemoteOidcController.php	1 month ago
Shlee	0f79861f1d	Update PrivacySettings.php	1 month ago
Shlee	4e6b341532	Update StoryController.php	1 month ago
Shlee	8ce4b5d409	Update StoryApiV1Controller.php	1 month ago
Shlee	f99ee65676	Update PlaceController.php	1 month ago
Shlee	142025db82	Update ProfileMigrationStoreRequest.php	1 month ago
Shlee	6f5f6e3368	Update ReportController.php	1 month ago
vinzgreg	d19671a92c	Fix API status editing: use auth:api guard ... StatusEditController's constructor applies the web `auth` guard, which Bearer/OAuth clients cannot satisfy. PUT /api/v1/statuses/{id} and GET /api/v1/statuses/{id}/history therefore fail for every third-party API client, while status create/delete keep working because ApiV1Controller has no controller-level web auth. The controller is routed only from routes/api.php, where the route group already applies ['auth:api', 'validemail'], so no web/session route depends on the old guard. Switch the constructor to match.	2 months ago
TowyTowy	795473be55	Fix home timeline rejecting empty max_id/min_id pagination params ... `GET /api/v1/timelines/home?max_id=` (empty value) fails validation because `min_id`/`max_id` use the `sometimes|integer` rule. The global `ConvertEmptyStringsToNull` middleware turns `?max_id=` into `null`, and since the field is present, `sometimes` does not skip it while `null` fails the `integer` rule — returning HTTP 422. Every other timeline/listing endpoint in this controller (timelinePublic, accountStatusesById, etc.) uses `nullable|integer` for these params, so `timelineHome` was the lone outlier. Mastodon-API clients such as Pixelfed for iOS send `max_id=` on first page load and could not paginate the home timeline. Switch `min_id`/`max_id` to `nullable|integer` to match the rest of the controller. Fixes #6610 Co-Authored-By: Claude <noreply@anthropic.com>	2 months ago
Daniel Supernault	0f781cba34	Update Personal Access Tokens	3 months ago
Daniel Supernault	fb92949a71	Update PersonalAccessTokenController.php	3 months ago
Daniel Supernault	25d5142f12	Fix PAT + oauth routes	3 months ago
Daniel Supernault	9fe9b7eb32	Update AdminInviteController	3 months ago
Daniel Supernault	038a2bbf9f	Lint	3 months ago
dansup	096a1bc901	Merge pull request #6553 from pixelfed/w2 ... OAuth: Token endpoint response loses required no-store/no-cache headers	4 months ago
dansup	120b08b758	Merge pull request #6563 from pixelfed/shleeable-patch-1 ... Update to Passport 13 refresh token method in AppRegisterController.php	5 months ago
Daniel Supernault	14b325641f	Update Password Change with new Revoke Sessions option ... As requested in https://lgbtqia.space/@serigala_tropis/116412473982617371	5 months ago
Shlee	bbd09fe50f	Update AppRegisterController.php	6 months ago
Your Name	b329ee9edc	API: Media uploads leak orphaned files when status creation validation fails	6 months ago
Your Name	3d858af1fa	OAuth: Token endpoint response loses required no-store/no-cache headers when adding created_at	6 months ago
dansup	6e9c33fcab	Merge pull request #6496 from pixelfed/shleeable-patch-7 ... Remove sleep from AppRegisterController.php	6 months ago
dansup	bdc203dc5c	Merge pull request #6493 from ShadowJonathan/fix-profile-saving ... Make sure profile saving has a clear error when email is not verified	6 months ago
Daniel Supernault	ef803ae9b6	Fix oauth/token	6 months ago
Daniel Supernault	f6746aec8b	Update AuthServiceProvider	7 months ago
Daniel Supernault	52f5626530	Fix oauth	7 months ago
Daniel Supernault	695e851026	Fix oauth	7 months ago
Shlee	d9bd6d446f	Update AppRegisterController.php	7 months ago
Jonathan de Jong	8e91918b88	Make sure profile saving has a clear error when email is not verified	7 months ago
Shlee	1b21f83132	Update BaseApiController.php	7 months ago
dansup	f1af72e66d	Merge pull request #6454 from pixelfed/a5 ... Bugfix: Validation was ignored, allows any file type/size	7 months ago