mastodon

Commit Graph

Author	SHA1	Message	Date
ThibG	28b482874a	Improvements to signature verification (#9667 ) * Refactor signature verification a bit * Rescue signature verification if recorded public key is invalid Fixes #8822 * Always re-fetch AP signing key when HTTP Signature verification fails But when the account is not marked as stale, avoid fetching collections and media, and avoid webfinger round-trip. * Apply stoplight to key/account update as well as initial key retrieval	6 years ago
Eugen Rochko	43c61bca60	Add locale param to sign-up API (#9747 ) Fix #9627	6 years ago
Eugen Rochko	1cbdf8d218	Fix wrong param name in scheduled statuses and return params in API (#9725 ) The database column and API param are called in_reply_to_id, not in_reply_to_status_id, so it makes no sense to encode it that way	6 years ago
Eugen Rochko	a49d43d112	Add scheduled statuses (#9706 ) Fix #340	6 years ago
Naoki Kosaka	fae32634b1	Use Contact User as Relay, Report, Subscribe. (#9661 ) * Use Contact User as Relay, Report, Subscribe. * Use Account.representative to fetch contact user. * Use find_local. * No reason to use Account.representative in subscribe_service. * Don't required representative! * Fallback is included in Account.representative method.	6 years ago
kodai	6a090db4c9	Fix links not being verified (#9673 ) Fix #9365	6 years ago
Jeong Arm	511231ce57	Skip full text search if failed (#9654 ) * Skip full text search if failed * Move rescue block to "perform_statuses_search!"	6 years ago
ThibG	6fb6a53938	Avoid duplicate work by merging ReplyDistributionWorker into DistributionWorker (#9660 )	6 years ago
ThibG	290932602b	Reduce usage of LD signatures (#9659 ) * Do not LDS-sign Follow, Accept, Reject, Undo, Block * Do not use LDS for Create activities of private toots * Minor cleanup * Ignore unsigned activities instead of misattributing them * Use status.distributable? instead of querying visibility directly	6 years ago
Eugen Rochko	0f938ff29c	Add handler for Move activity (#9629 )	6 years ago
Eugen Rochko	6e49907ecf	Improve admin UI for account view (#9643 )	6 years ago
Eugen Rochko	5d2fc6de32	Add REST API for creating an account (#9572 ) * Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account	6 years ago
ThibG	5f387995d9	Limit maximum visibility of local silenced users to unlisted (#9583 ) Fixes #9580	6 years ago
ThibG	e709b8da0d	Ignore low-confidence CharlockHolmes guesses when parsing link cards (#9510 ) * Add failing test for windows-1251 link cards * Ignore low-confidence CharlockHolmes guesses Fixes #9466 * Fix no method error when charlock holmes cannot detect charset	6 years ago
Sumit Khanna	769c2d2680	Error message for avatar image that's too large. #9204 (#9518 ) * Error message for avatar image that's too large. #9204 * Code climate/formatting * Removed avatar error message * Moved valid image dimentions check to update service * removed unnescessary begin block * code climate formatting * code climate indent fix	6 years ago
ysksn	83975a2394	Remove redundant (#9503 )	6 years ago
ysksn	351ed12b2f	Use find_or_initialize_by (#9504 )	6 years ago
Eugen Rochko	73be8f38c1	Add profile directory (#9427 ) Fix #5578	6 years ago
Eugen Rochko	6ddf0432e7	Improve account suspension speed and completeness (#9290 ) - Some associations were missing from the clean-up - Some attributes were not reset on suspension - Skip federation and streaming deletes when purging a dead domain - Move account association definitions to concern	6 years ago
valerauko	824497fbce	Ignore JSON-LD profile in mime type comparison (#9179 ) Ignore JSON-LD profile in mime type comparison	6 years ago
James Kiesel	6a65d87f4d	Simplify hashtag query service, perf increase for 'any' tags (#9298 )	6 years ago
Eugen Rochko	8069fd636b	Remove intermediary arrays when creating hash maps from results (#9291 )	6 years ago
ThibG	7f5a4be580	Fix emoji update date processing (#9255 )	6 years ago
ThibG	9b89c62d43	Check that twitter:player is valid before using it (#9254 ) Fixes #9251	6 years ago
Eugen Rochko	6d59dfa15d	Optimize the process of following someone (#9220 ) * Eliminate extra accounts select query from FollowService * Optimistically update follow state in web UI and hide loading bar Fix #6205 * Asynchronize NotifyService in FollowService And fix failing test * Skip Webfinger resolve routine when called from FollowService if possible If an account is ActivityPub, then webfinger re-resolving is not necessary when called from FollowService. Improve options of ResolveAccountService	6 years ago
m.b	cd41c2c6ad	Update resolve_url_service.rb (#9188 )	6 years ago
James Kiesel	4c03e05a4e	Allow joining several hashtags in a single column (#8904 ) * Nascent tag menu on frontend * Hook up frontend to search * Tag intersection backend first pass * Update yarnlock * WIP * Fix for tags not searching correctly * Make radio buttons function * Simplify radio buttons with modeOption * Better naming * Rearrange options * Add all/any/none functionality on backend * Small PR cleanup * Move to service from scope * Small cleanup, add proper service tests * Don't use send with user input :D * Set appropriate column header * Handle auto updating timeline * Fix up toggle function * Use tag value correctly * A bit more correct to use 'self' rather than 'all' in status scope * Fix some style issues * Fix more code style issues * Style select dropdown more better * Only use to_id'ed value to ensure no SQL injection * Revamp frontend to allow for multiple selects * Update backend / col header to account for more flexible tagging * Update brakeman ignore * Codeclimate suggestions * Fix presenter tag_url * Implement initial PR feedback * Handle additional tag streaming * CodeClimate tweak	6 years ago
Eugen Rochko	ce2ee68b64	Revert "Fix FetchAtomService content type handling (#9132 )" (#9171 ) This reverts commit `c36a4a1617`.	6 years ago
valerauko	c36a4a1617	Fix FetchAtomService content type handling (#9132 ) * Add profile to json+ld in Accept It's required by the ActivityPub spec * Use headers['Content-type'] instead of mime_type mime_type strips the profile from the content type, but it's still available raw in the headers hash * Add test for ld+json with profile	6 years ago
Eugen Rochko	be202f9377	Accept the same payload in multiple inboxes and deliver (#9150 )	6 years ago
Eugen Rochko	47b8d195e6	Always let through notifications from staff (#9152 ) * Always let through notifications from staff Follow-up to #8993 * Let messages from staff through, but no other notifications	6 years ago
ThibG	a03d506626	Fix Pleroma mentions being fetched as preview cards (#9158 )	6 years ago
ThibG	33a71e8f7c	Do not hide boost notifications from followed people with hidden boosts (#9147 ) * Do not hide boost notifications from followed people with hidden boosts Not displaying boosts from a followed user in the Home timeline and not having notifications when they reblog your own content are two very separate concerns, tying them together seem counter-intuitive and unwanted. * Update specs accordingly	6 years ago
Eugen Rochko	795f0107d2	Include preview cards in status entity in REST API (#9120 ) * Include preview cards in status entity in REST API * Display preview card in-stream * Improve in-stream display of preview cards	6 years ago
Eugen Rochko	eef8d9a5f7	Add locality check to ActivityPub::FetchRemoteAccountService (#9109 ) * Add locality check to ActivityPub::FetchRemoteAccountService Fix #8643 Because there are a few places where it is called, it is difficult to confirm if they all previously checked it for locality. It's better to make sure within the service. * Remove faux-remote duplicates of local accounts	6 years ago
abcang	1e2695198a	Skip link-back check if body is nil (#9107 )	6 years ago
ThibG	7fee968e9f	Do not fetch preview card for mentioned users (#6934 )	6 years ago
Eugen Rochko	ddd30f331c	Improve support for aspects/circles (#8950 ) * Add silent column to mentions * Save silent mentions in ActivityPub Create handler and optimize it Move networking calls out of the database transaction * Add "limited" visibility level masked as "private" in the API Unlike DMs, limited statuses are pushed into home feeds. The access control rules between direct and limited statuses is almost the same, except for counter and conversation logic * Ensure silent column is non-null, add spec * Ensure filters don't check silent mentions for blocks/mutes As those are "this person is also allowed to see" rather than "this person is involved", therefore does not warrant filtering * Clean up code * Use Status#active_mentions to limit returned mentions * Fix code style issues * Use Status#active_mentions in Notification And remove stream_entry eager-loading from Notification	6 years ago
Quint Guvernator	f5e2e96e95	always allow DMs from staff (#8993 )	6 years ago
Eugen Rochko	87fdd139b8	Do not push DMs into the home feed (#8940 ) * Do not push DMs into the home feed * Show DMs column after sending a DM, if DMs column is not already shown	6 years ago
Eugen Rochko	774ac47373	Add conversations API (#8832 ) * Add conversations API * Add web UI for conversations * Add test for conversations API * Add tests for ConversationAccount * Improve web UI * Rename ConversationAccount to AccountConversation * Remove conversations on block and mute * Change last_status_id to be a denormalization of status_ids * Add optimistic locking	6 years ago
Eugen Rochko	7fe137d2f7	Fix link verification for remote accounts (#8868 )	6 years ago
Eugen Rochko	f92f1ee80a	Support link verification with redirects (#8735 ) (e.g. URL shortener)	7 years ago
Yamagishi Kazutoshi	3da1cc7d5e	Fix failed profile verification when rel attribute including values other than me (#8733 )	7 years ago
Eugen Rochko	68833a50d4	Fix VerifyAccountLinksWorker not being queued (#8721 ) UX-wise, people expect that saving the profile will re-check links even without changing fields content. Bug-wise, `@account` was undefined. Regression from #8703	7 years ago
Eugen Rochko	f4d549d300	Redesign forms, verify link ownership with rel="me" (#8703 ) * Verify link ownership with rel="me" * Add explanation about verification to UI * Perform link verifications * Add click-to-copy widget for verification HTML * Redesign edit profile page * Redesign forms * Improve responsive design of settings pages * Restore landing page sign-up form * Fix typo * Support <link> tags, add spec * Fix links not being verified on first discovery and passive updates	7 years ago
ThibG	bd9e47e9be	Handle relative URLs when fetching OEmbed/OpenGraph cards (#8669 )	7 years ago
Eugen Rochko	c593d6df9c	Add preference for report notification e-mails, skip for duplicates (#8559 ) If an unresolved report for the same target account already exists, no new notification is generated	7 years ago
Eugen Rochko	cabdbb7f9c	Add CLI task for rotating keys (#8466 ) * If an Update is signed with known key, skip re-following procedure Because it means the remote actor did not lose their database * Add CLI method for rotating keys bin/tootctl accounts rotate [USERNAME] Generates a new RSA key per account and sends out an Update activity signed with the old key. * Key rotation: Space out Update fan-outs every 5 minutes per 1000 accounts * Skip suspended accounts in key rotation	7 years ago
Eugen Rochko	8adf485c0f	Bump interactions count when a follow happens (#8468 )	7 years ago

1 2 3 4 5 ...

626 Commits (12307c564809604d503716da8e0f605f58a7f2c1)