1,336 commits

Author	SHA1	Message	Date
Claire	faa336e3f7	Change logged-out WebUI HTML pages to be cached for a few seconds (#24708)	2023-04-28 10:27:26 +02:00
Claire	1c61869eed	Fix /api/v1/custom_emojis being cached even when unauthenticated API access is disallowed (#24665)	2023-04-28 10:01:38 +02:00
Claire	b0bf6216e6	Fix /api/v1/instance/domain_blocks being unconditionally cached (#24662)	2023-04-26 11:42:47 +02:00
Claire	62ab7506d6	Fix /actor needlessly reading session cookie and varying on Signature (#24664)	2023-04-26 11:42:26 +02:00
Claire	1419f90ef2	Fix some user-independent endpoints potentially reading session cookies (#24650)	2023-04-25 22:14:44 +02:00
Claire	276c39361b	Fix anonymous visitors getting a session cookie on first visit (#24584)	2023-04-25 16:51:38 +02:00
Eugen Rochko	6084461cd0	Change unauthenticated responses to be cached in REST API (#24348)	2023-04-25 15:41:34 +02:00
Claire	e9a79d46cd	Fix crash when SSO_ACCOUNT_SETTINGS is not defined (#24628)	2023-04-24 20:26:04 +02:00
Matt Jankowski	0a5f0a8b20	Remove instance variables from helper usage (#24203)	2023-04-23 22:35:54 +02:00
Claire	58a1b2e330	Fix caching logic with regards to Accept-Language, Cookie, and Signature (#24604)	2023-04-23 22:27:24 +02:00
Eugen Rochko	e98c86050a	Refactor Cache-Control and Vary definitions (#24347)	2023-04-19 16:07:29 +02:00
Robert R George	4db8230194	Add trend management to admin API (#24257)	2023-04-18 11:33:30 +02:00
Eugen Rochko	e5c0b16735	Add progress indicator to sign-up flow (#24545)	2023-04-16 07:01:24 +02:00
Matt Jankowski	d193bc8c5c	Remove unused methods in 2FA OTP Auth Controller (#24220)	2023-04-07 14:13:53 +02:00
Claire	9d08b81193	Fix user archive takeouts when using OpenStack Swift (#24431)	2023-04-05 19:31:49 +02:00
Claire	280fa3b2c0	Fix invalid/expired invites being processed on sign-up (#24337)	2023-03-31 21:42:28 +02:00
Eugen Rochko	a9b5598c97	Change user settings to be stored in a more optimal way (#23630) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2023-03-30 14:44:00 +02:00
Claire	e084b5b82d	Fix user archive takeout when using OpenStack Swift or S3 providers with no ACL support (#24200)	2023-03-27 17:07:37 +02:00
Matt Jankowski	0663803348	Move link header setting to after_action (#24251)	2023-03-26 00:40:01 +01:00
Matt Jankowski	e633b26f4f	Add allow_other_host in redirects which may go outside app (#24252)	2023-03-26 00:38:32 +01:00
Claire	2626097869	Fix Rails cache namespace being overriden with v2 for cached statuses (#24202)	2023-03-22 15:47:44 +01:00
Matt Jankowski	7bef11630d	Remove references to non-existent actions (#24183)	2023-03-20 20:03:44 +01:00
Jean byroot Boussier	160f38f03d	Workaround the ActiveRecord / Marshal serialization bug on Ruby 3.2 (#24142) ... Co-authored-by: Jean Boussier <jean.boussier@gmail.com>	2023-03-17 14:37:30 +01:00
CSDUMMI	d75a1e5054	Link to the Identity provider's account settings from the account settings (#24100) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2023-03-17 10:09:01 +01:00
Eugen Rochko	75e5a6e437	Change user backups to use expiring URLs for download when possible (#24136)	2023-03-16 22:46:52 +01:00
Christian Schmidt	bd047acc35	Replace Status#translatable? with language matrix in separate endpoint (#24037)	2023-03-16 11:07:24 +01:00
Nick Schonning	25d36b6edd	Autofix Rubocop Style/RedundantArgument (#23798)	2023-03-16 10:34:00 +09:00
Claire	a232a1feb8	Fix misleading error code when receiving invalid WebAuthn credentials (#23568)	2023-03-15 04:15:20 +01:00
CSDUMMI	39c7236649	Redirect users to SLO at the IdP after logging them out of Mastodon. (#24020)	2023-03-15 03:52:40 +01:00
CSDUMMI	d258ec8e3b	Prefer the stored location as after_sign_in_path in Omniauth Callback Controller (#24073)	2023-03-13 00:06:27 +01:00
Claire	f8bb4d0d6b	Fix server error when failing to follow back followers from /relationships (#23787)	2023-03-03 20:36:18 +01:00
Claire	c2a046ded1	Fix “Remove all followers from the selected domains” being more destructive than it claims (#23805)	2023-03-03 20:25:15 +01:00
Nick Schonning	434770f580	Autofix Rubocop Rails/FindById (#23762)	2023-02-21 10:21:48 +09:00
Nick Schonning	717683d1c3	Autofix Rubocop remaining Layout rules (#23679)	2023-02-20 06:58:28 +01:00
Nick Schonning	aef0051fd0	Enable Rubocop HTTP status rules (#23717)	2023-02-20 11:16:40 +09:00
Nick Schonning	2177daeae9	Autofix Rubocop Style/RedundantBegin (#23703)	2023-02-19 07:09:40 +09:00
Nick Schonning	c38bd17657	Autofix Rubocop Style/TrailingCommaInArguments (#23694)	2023-02-18 12:39:58 +01:00
Nick Schonning	e2a3ebb271	Autofix Rubocop Style/IfUnlessModifier (#23697)	2023-02-18 12:37:47 +01:00
Nick Schonning	a6f77aa28a	Autofix Rubocop Lint/AmbiguousOperatorPrecedence (#23681)	2023-02-18 04:30:23 +01:00
Claire	d6930b3847	Add API parameter to safeguard unexpect mentions in new posts (#18350)	2023-02-13 16:36:29 +01:00
Claire	832595d1e7	Remove posts count and last posts from ActivityPub representation of hashtag collections (#23460)	2023-02-08 17:57:25 +01:00
Nick Schonning	f68bb52556	Apply Rubocop Style/NegatedIfElseCondition (#23451)	2023-02-08 07:07:36 +01:00
Nick Schonning	2e652aa81c	Apply Rubocop Performance/RedundantSplitRegexpArgument (#23443) ... * Apply Rubocop Performance/RedundantSplitRegexpArgument * Update app/controllers/concerns/signature_verification.rb	2023-02-08 02:25:20 +01:00
Claire	20a479ff7c	Change POST /settings/applications/:id to regenerate token on scopes change (#23359) ... Fixes #23096	2023-02-02 12:03:49 +01:00
Eugen Rochko	21780c0204	Change notifications per page from 15 to 40 in REST API (#23348)	2023-02-01 11:23:54 +01:00
Claire	68dcbcb7bf	Add more specific error messages to HTTP signature verification (#21617) ... * Return specific error on failure to parse Date header * Add error message when preferredUsername is not set * Change error report to be JSON and include more details * Change error report to differentiate unknown account and failed refresh * Add tests	2023-01-18 16:47:56 +01:00
Claire	343e1fe8e9	Add confirmation screen when handling reports (#22375) ... * Add confirmation screen on moderation actions * Add flash notice when a report has been processed * Refactor tests * Add tests	2023-01-18 16:40:09 +01:00
Claire	4b92e59f4f	Add support for editing media description and focus point of already-posted statuses (#20878) ... * Add backend support for editing media attachments of existing posts * Allow editing media attachments of already-posted toots * Add tests	2023-01-18 16:33:55 +01:00
Claire	b034dc42be	Fix /api/v1/admin/trends/tags using wrong serializer (#18943) ... * Fix /api/v1/admin/trends/tags using wrong serializer Fix regression from #18641 * Only use `REST::Admin::TagSerializer` when the user can `manage_taxonomies` * Fix admin trending hashtag component to not link if `id` is unknown	2023-01-18 16:28:18 +01:00
Claire	fcc4c9b34a	Change domain block CSV parsing to be more robust and handle more lists (#21470) ... * Change domain block CSV parsing to be more robust and handle more lists * Add some tests * Improve domain block import validation and reporting	2023-01-18 16:20:52 +01:00