220 Commits (72108b20e215a866ae4ce54bd2113e36551ba2ef)

Author	SHA1	Message	Date
Matt Jankowski	fdcf884cf7	Extract user tracking into concern (#2600)	8 years ago
Matt Jankowski	f48cb3eb17	More coverage yes more even more (#2627) ... * Add coverage for admin/confirmations controller * Coverage for statuses controller show action * Add coverage for admin/domain_blocks controller * Add coverage for settings/profiles#update	8 years ago
Matt Jankowski	9566893cc9	More controller specs (#2561) ... * Add render_views in more places * Delegate methods from account to user with allow nil true, so that admin accounts show view renders when missing a user * Use actual account instances in authorize follow controller spec	8 years ago
Matt Jankowski	429480bb77	Return missing page when tag does not exist (#2563)	8 years ago
Matt Jankowski	a39e719b39	Add render_views to admin/reports controller spec (#2548)	8 years ago
Matt Jankowski	9736753985	Fix remote follow (#2547) ... * Add coverage for remote_follow#new * Fix reference to authorize_follows/card partial	8 years ago
Matt Jankowski	b48f2cbc8b	Catch error when server decryption fails on 2FA (#2512)	8 years ago
Matt Jankowski	0618f09939	Add spec coverage and refactor authorize_follows controller (#2505)	8 years ago
alpaca-tc	9317ec8eb1	Localize with i18n for Devise::FailureApp (#2309) ... This PR fixes I18n.locale for rake middlewares. Mastodon uses Devise that depends on Warden. Warden::Manager can be found in rake middleware. It is outside of the controller. In the case of authentication failed, warden calls throw(:warden). At the time Warden::Manager delegates request to failure_app to generate response and flash[:alert] after catching it. Unfortunately, I18n.locale is already reset then because I18n.with_locale is enabled only inside the controller. If we used I18n.locale=, Devise::FailureApp could get the current locale.	8 years ago
Evan Minto	122d59ac41	Change ActivityPub paging to match spec. Clean up ActivityPub outbox changes. (#2410) ... * Change ActivityPub paging to match spec. Clean up ActivityPub outbox changes. * Fix code style and test failures for OutboxController. * Attempt to fix CI errors.	8 years ago
Matt Jankowski	092fdc89fa	Fix flashes partial render error for controllers which don't inherit from application controller (#2400) ... * Add failing spec for oauth/authorized_applications controller * Use explicit reference to flashes partial from admin layout Because some of the controllers which use the admin layout do not inherit from application controller, this partial is not in their view path.	8 years ago
Eugen	501514960a	Followers-only post federation (#2111) ... * Make private toots get PuSHed to subscription URLs that belong to domains where you have approved followers * Authorized followers controller, stub for bulk action * Soft block in the background * Add simple test for new controller * Rename Settings::FollowersController to Settings::FollowerDomainsController, paginate results, rename "private" post setting to "followers-only", fix pagination style, improve post privacy preferences style, improve warning style * Extract compose form warnings into own container, show warning when posting to followers-only with unlocked account	8 years ago
Matt Jankowski	948dd26931	Fix deprecation warnings on activitypub controller specs (#2357)	8 years ago
Evan Minto	66fd8e7821	ActivityPub: Add basic, read-only support for Outboxes, Notes, and Create/Announce Activities (#2197) ... * Clean up collapsible components * Expose user Outboxes and AS2 representations of statuses * Save work thus far. * Fix bad merge. * Save my work * Clean up pagination. * First test working. * Add tests. * Add Forbidden error template. * Revert yarn.lock changes. * Fix code style deviations and use localized instead of hardcoded English text.	8 years ago
Matt Jankowski	67dea31b0f	2FA controller cleanup (#2296) ... * Add spec coverage for settings/two_factor_auth area * extract setup method for qr code * Move otp required check to before action * Merge method only used once * Remove duplicate view * Consolidate creation of @codes for backup * Move settings/2fq#recovery_codes to settings/recovery_codes#create * Rename settings/two_factor_auth#disable to #destroy * Add coverage for the otp required path on 2fa#show * Clean up the recovery codes list styles * Move settings/two_factor_auth to settings/two_factor_authentication * Reorganize the settings two factor auth area Updated to use a flow like: - settings/two_factor_authentication goes to a #show view which has a button either enable or disable 2fa on the account - the disable button turns off the otp requirement for the user - the enable button cycles the user secret and redirects to a confirmation page - the confirmation page is a #new view which shows the QR code for user - that page posts to #create which verifies the code, and creates the recovery codes - that create action shares a view with a recovery codes controller which can be used separately to reset codes if needed	8 years ago
Matt Jankowski	ee0c897bba	User settings mutation (#2270) ... * Add user spec for settings, highlight global default mutation issue * Fix mutation issue caused by settings/preferences spec	8 years ago
Matt Jankowski	2dda356e3f	Clean up settings/preferences controller (#2237) ... * Add missing fields group on preferences page * Clean up settings/preferences controller * Extract a UserSettingsDecorator	8 years ago
Matt Jankowski	1ada494bb2	Admin settings controller refactor, add specs, cleanup (#2225) ... * Add render_views for admin/settings spec * Add coverage for admin/settings#update * Add coverage for admin/settings typecasting open_registrations setting * Simplify how admin/settings finds the value for updating * Rely on activerecord to not update a value that hasnt changed * Add coverage for non-existent setting * Use a constant for boolean settings	8 years ago
Marcin Cieślak	59a77923b3	Add static gif for upload testing (#2168)	8 years ago
Matt Jankowski	8bac0350d1	Restful refactor of accounts/ routes (#2133) ... * Add routing specs for accounts followers and following actions * Use more restful route naming for public account follow pages Moves two actions: - accounts#followers to accounts/follower_accounts#index - accounts#following to accounts/following_accounts#index Adds routing spec to ensure prior URLs are preserved.	8 years ago
happycoloredbanana	0a7588282a	Remove API authentication for public statuses (after review) (#1919)	8 years ago
Matt Jankowski	55e1503522	Instances list in admin (#2095) ... * Add admin/instances index action * Add link to instances admin page * View lists instances * Instances, grouped by domain, ordered by count * Use Account.remote scope * Extract method: Account.by_domain_accounts	8 years ago
Matt Jankowski	cc1361c149	Media controller specs (#2022) ... * Add spec for media controller * Add MediaAttachment.attached scope * Simplify methods in media controller	8 years ago
saturday06	d87ee1167e	Assign user locale on signup (#1982)	8 years ago
Matt Jankowski	6670e6d33f	Add password reset for users from admin accounts area (#1841)	8 years ago
Patrick Figel	df4ff9a8e1	Add recovery code support for two-factor auth (#1773) ... * Add recovery code support for two-factor auth When users enable two-factor auth, the app now generates ten single-use recovery codes. Users are encouraged to print the codes and store them in a safe place. The two-factor prompt during login now accepts both OTP codes and recovery codes. The two-factor settings UI allows users to regenerated lost recovery codes. Users who have set up two-factor auth prior to this feature being added can use it to generate recovery codes for the first time. Fixes #563 and fixes #987 * Set OTP_SECRET in test enviroment * add missing .html to view file names	8 years ago
Matt Jankowski	8b74aa4217	Admin reports controller improvements (#1714) ... * Simplify admin/reports controller filtering for index * Rename parameter to resolved * Fix issue where reports view could not access filter_link_to * Add coverage for admin/reports controller * DRY up resolution of related reports for target account * Clean up admin/reports routes * Add Report#statuses method * DRY up current account action taken params * Rubocop styles	8 years ago
Matt Jankowski	137100dcf3	Clean up well-known routes/controllers (#1649) ... * Add request spec for host meta route returning xml * Add routing spec for xrd routes * Update well-known routes * Move webfinger and host-meta actions to their own controllers	8 years ago
Matt Jankowski	3a9eb81a80	Admin accounts controller cleanup (#1664) ... * Remove unused account_params method in admin/accounts controller * Introduce AccountFilter to find accounts * Use AccountFilter in admin/accounts controller * Use more restful routes admin silence and suspension area * Add admin/silences and admin/suspensions controllers	8 years ago
Matt Jankowski	0e39cc6a35	Settings export refactor (#1646) ... * Refactor Export to take an account and know about the export types * Use Export instance in settings/exports#show	8 years ago
Matt Jankowski	7f0a865b05	Allow import/export of mutes list (#1541) ... * Allow export of mutes list * Allow importing of mutes list * Refactor to use Settings::Exports::BaseController and DRY up exports code	8 years ago
Matt Jankowski	dd1ae3b109	Simplify the way the embed view is created (#1590) ... * Add coverage for embedded status view * Refactor embed view to eliminate @external_links variable	8 years ago
Matt Jankowski	b352a8e5d4	Default to json type for webfinger requests (#1583)	8 years ago
Matt Jankowski	b155e6ccf5	Fix issue with intermittent api/v1/notifications failure (#1606) ... The spec was checking the activity_id of the activities held in notifications within the controller. Because the activities are different models, it is possible that they are created with the same database IDs, and when they are this spec fails because an activity which should not count as a match is counted as one.	8 years ago
Matt Jankowski	3ddd936b03	Refactor exports controller (#1567) ... * Add basic coverage for settings/exports controller * Remove unused @account variable from settings/exports controller * Add coverage for download export actions * Remove deprecated `render :text` in favor of `send_data` for csv downloads * Add model to handle exports * Use Export class in settings/exports controller * Simplify settings/exports controller methods * Move settings/export to more restful routes	8 years ago
Matt Jankowski	89e8e110c8	Imports controller errors (#1553) ... * Add spec for settings/imports controller * Add failing spec for settings/imports#create * Fix broken imports * Refactor ImportWorker	8 years ago
Eugen	2810013b93	API param to exclude notification types from response (#1341) ... * Add exclude_types param to /api/v1/notifications * Exclude notification types in web UI through exclude_types in the API	8 years ago
Matt Jankowski	0687ab8ae3	Clean up generation of account webfinger string (#1477) ... * Consolidate webfinger string creation under Account#to_webfinger_s * Introduce Account#local_username_and_domain for consolidation	8 years ago
Matt Jankowski	dbe9f33fdc	Admin base controller (#1465) ... * Add Admin::BaseController to wrap admin area Extracts the setting of the `admin` layout and verifying that users are admins to a common base class for the admin/ controllers. * Add basic coverage for admin/reports and admin/settings controllers	8 years ago
Eugen	15d442cf9d	Fix /api/v1/accounts/update_credentials tests (#1357)	8 years ago
David Celis	d4fe6cd2bf	Allow users to update their Account in the API (#1179) ... * Allow users to update their Account in the API It would be nice for API clients to be able to allow users to update their accounts without having to wrap Mastodon in a web view. This patch adds an API endpoint to let users submit a PATCH for their account. Signed-off-by: David Celis <me@davidcel.is> * Add /api/v1/accounts/update_credentials to the API docs Signed-off-by: David Celis <me@davidcel.is>	8 years ago
Matt Jankowski	e5282e4ec0	Clean up about page (#1282) ... * Add InstancePresenter to expose site details * Clean up about controller, use instance presenter	8 years ago
Eugen Rochko	1c6b02f936	Fix #690 - Webfinger should handle new shortform profile URLs now (nice)	8 years ago
Eugen Rochko	d6ed2eb512	Prettier account and stream entry URLs	8 years ago
Kit Redgrave	442fdbfc53	Mute button progress so far. WIP, doesn't entirely work correctly.	8 years ago
Eugen Rochko	00b5731ecb	After FollowService, re-fetch remote account asynchronously, do nothing ... if account lock info was up to date, otherwise re-do the FollowService with now updated information	8 years ago
Eugen	9d5fb49cd8	Merge pull request #603 from evanminto/activitypub-account ... Expose ActivityStreams 2.0 representation of accounts	8 years ago
Evan Minto	da7f24c238	Add test	8 years ago
Eugen Rochko	77e13c2bc9	Removing failed push notification API, make context loads use cache	8 years ago
Eugen Rochko	d9ca46b464	Cleaning up format of broadcast real-time messages, removing ... redis-backed "mentions" timeline as redundant (given notifications)	8 years ago
Eugen Rochko	e70e721a0d	Add tests for new API	8 years ago
Eugen Rochko	7c015ece45	Fix oembed controller test	8 years ago
Eugen Rochko	e9737c2235	Fix tests, add applications to eager loading/cache for statuses, fix ... application website validation, don't link to app website if website isn't set, also comment out animated boost icon from #464 until it's consistent with non-animated version	8 years ago
Eugen Rochko	1bbcd71cd4	Fix #390 - fix redirect after sign-up (to login page instead of homepage)	8 years ago
Eugen Rochko	a302e56f9a	Add API for retrieving favourites	8 years ago
Eugen Rochko	49834a6e7f	Add API for retrieving blocked accounts	8 years ago
Eugen Rochko	d7dc84439c	Add ability to use remote follow function on other sites	8 years ago
Eugen Rochko	3689c119f0	Replacing follow requests in the settings area with in-UI column	8 years ago
Eugen Rochko	004382e4d0	Adding follow requests API	8 years ago
Eugen Rochko	7376af90f7	Don't show statuses to blocked users	8 years ago
Eugen Rochko	b302b9202b	Add page for authorizing/rejecting follow requests	8 years ago
Eugen Rochko	80e02b90e4	Private visibility on statuses prevents non-followers from seeing those ... Filters out hidden stream entries from Atom feed Blocks now generate hidden stream entries, can be used to federate blocks Private statuses cannot be reblogged (generates generic 422 error for now) POST /api/v1/statuses now takes visibility=(public|unlisted|private) param instead of unlisted boolean Statuses JSON now contains visibility=(public|unlisted|private) field	8 years ago
Eugen Rochko	6de079a5af	Removing external hub completely, fix #333 fixing digit-only hashtags, ... removing web app capability from non-webapp pages	8 years ago
Eugen Rochko	76ec907993	Improved admin UI	8 years ago
Eugen Rochko	f978b06dd1	Add suspend account functionality to admin UI	8 years ago
Eugen Rochko	b14b5e3b44	Improve notification model	8 years ago
Eugen Rochko	6ff93845d5	Add basic OEmbed provider API, fix #247	8 years ago
Eugen Rochko	356d3874eb	Normalize localizations, add stub for admin/accounts	8 years ago
Eugen Rochko	7e90772c92	Unify collection caching code	8 years ago
Eugen Rochko	27fc49d745	Add simple admin overview of PuSH subscriptions	8 years ago
Eugen Rochko	2d2c81765b	Adding embedded PuSH server	8 years ago
Eugen Rochko	2cb3dc5e5a	Update hub URL and re-subscribe if hub URL changes	8 years ago
Eugen Rochko	8efa081f21	Remove Neo4J	8 years ago
Eugen Rochko	7b7bf834e9	Fix OAuth authorization page and add a spec for it	8 years ago
Eugen Rochko	7ac574d9a9	Fix #148 - Devise mailer fixed, test spec added so it won't slip past again	8 years ago
Eugen Rochko	9aecc0f48a	Move timelines API from statuses to its own controller, add a check for ... resources that require a user context vs those that don't (such as public timeline) /api/v1/statuses/public -> /api/v1/timelines/public /api/v1/statuses/home -> /api/v1/timelines/home /api/v1/statuses/mentions -> /api/v1/timelines/mentions /api/v1/statuses/tag/:tag -> /api/v1/timelines/tag/:tag	8 years ago
Eugen Rochko	7bb28bf780	Improve @mention regex	8 years ago
Eugen Rochko	48b9619439	Adding hashtags	8 years ago
Eugen Rochko	829d189f44	Add tests for recently added API end points	8 years ago
Eugen Rochko	7a6d95f70c	E-mail preferences page	8 years ago
Eugen Rochko	1f650d327d	Adding public timeline	8 years ago
Eugen Rochko	7b9a4af311	API for blocking and unblocking	8 years ago
Eugen Rochko	9d59d7b463	Adding a block model and filter mentions from blocked users (fix #60)	8 years ago
Eugen Rochko	6d7290f47c	Add API for getting info about authenticated user: /api/v1/accounts/verify_credentials	8 years ago
Eugen Rochko	b36197c307	Fix tests, update goldfinger to catch XML errors	8 years ago
Eugen Rochko	2603c7e69f	Fix tests	8 years ago
Eugen Rochko	e63aebff7a	Adding landing page	8 years ago
Eugen Rochko	4f9b7432dd	Fix #52 - Add API versioning (v1)	8 years ago
Eugen Rochko	7e14eefc81	Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app ... registration API	8 years ago
Eugen Rochko	c6b0311b86	Fix #54 - Fetch remote accounts by URL from mentions ... Fetching atom extracted from FetchRemoteAccountService and FetchRemoteStatusService into FetchAtomService. Mentions of the constant "http://activityschema.org/collection/public" skipped as it's not a real URL/user.	8 years ago
Eugen Rochko	e46abc71ca	Fix notifications in UI, added new API for fetching account relationships	8 years ago
Eugen Rochko	4bec613897	Fix #24 - Thread resolving for remote statuses ... This is a big one, so let me enumerate: Accounts as well as stream entry pages now contain Link headers that reference the Atom feed and Webfinger URL for the former and Atom entry for the latter. So you only need to HEAD those resources to get that information, no need to download and parse HTML <link>s. ProcessFeedService will now queue ThreadResolveWorker for each remote status that it cannot find otherwise. Furthermore, entries are now processed in reverse order (from bottom to top) in case a newer entry references a chronologically previous one. ThreadResolveWorker uses FetchRemoteStatusService to obtain a status and attach the child status it was queued for to it. FetchRemoteStatusService looks up the URL, first with a HEAD, tests if it's an Atom feed, in which case it processes it directly. Next for Link headers to the Atom feed, in which case that is fetched and processed. Lastly if it's HTML, it is checked for <link>s to the Atom feed, and if such is found, that is fetched and processed. The account for the status is derived from author/name attribute in the XML and the hostname in the URL (domain). FollowRemoteAccountService and ProcessFeedService are used. This means that potentially threads are resolved recursively until a dead-end is encountered, however it is performed asynchronously over background jobs, so it should be ok.	9 years ago
Eugen Rochko	608a2bfffc	Upgrade to PubSubHubbub 0.4 (removing verify_token)	9 years ago
Eugen Rochko	9863196f7b	Small rubocop offences removed	9 years ago
Eugen Rochko	4f25e3d042	Test case for new api endpoint	9 years ago
Eugen Rochko	ce29624c6d	Fixing image upload limits, allowing webm, merge/unmerge events trigger ... timeline reload in UI, other small fixes	9 years ago
Eugen Rochko	3cc47beb6e	Refactored generation of unique tags, URIs and object URLs into own classes, ... as well as formatting of content	9 years ago
Eugen Rochko	85d89b472d	Optimized n+1 queries in accounts Atom and HTML views ... Added stack trace for SQL queries in development Removed badly thought out accounts/lookup API	9 years ago
Eugen Rochko	509c18eb13	Fix local follows, 404 in logs	9 years ago
Eugen Rochko	87576e1ab1	Fixing atom feeds for accounts, adding tests that would catch such bugs in future	9 years ago
Eugen Rochko	eec0dc46a6	PostStatusService can attach media to status, ProcessFeedService likewise	9 years ago
Eugen Rochko	ae1fac0062	Add API to upload media attachments	9 years ago
Eugen Rochko	413e700fe0	Enhancing test suite but I think the problem might have been caching setting	9 years ago
Eugen Rochko	8985f8e66c	Fixing more configuration issues with ActionCable	9 years ago
Eugen Rochko	10ba09f546	Upgrade to Rails 5.0.0.1	9 years ago
Eugen Rochko	ff2cbc0753	Remember me enabled by default	9 years ago
Eugen Rochko	f14f462eaf	Adding Turbolinks, adding status posting form on homepage	9 years ago
Eugen Rochko	c28971c70c	Fixed the lookup API method	9 years ago
Eugen Rochko	9d55529318	Fix text color in dashboard inputs, sanitize remote status content in UI, ... simplify FanOutOnWriteService, add /api/accounts/lookup method	9 years ago
Eugen Rochko	35aafdba96	Ancestors and descendants of statuses	9 years ago
Eugen Rochko	b640f35621	Writing out more tests, fixed some bugs	9 years ago
Eugen Rochko	71ae4dd3d2	Adding public following and followers pages, fix #3	9 years ago
Eugen Rochko	d4892ace62	Adding more test stubs	9 years ago
Eugen Rochko	6fec8afc3f	Bind oauth applications to users	9 years ago
Eugen Rochko	3441361568	Adding simple_form, adding profile settings, header image	9 years ago
Eugen Rochko	ab6696e855	Adding doorkeeper, adding a REST API ... POST /api/statuses Params: status (text contents), in_reply_to_id (optional) GET /api/statuses/:id POST /api/statuses/:id/reblog GET /api/accounts/:id GET /api/accounts/:id/following GET /api/accounts/:id/followers POST /api/accounts/:id/follow POST /api/accounts/:id/unfollow POST /api/follows Params: uri (e.g. user@domain) OAuth authentication is currently disabled, but the API can be used with HTTP Auth.	9 years ago
Eugen Rochko	3824c58853	Adding GNU Public license, adding home timeline, reblog/favourite counters	9 years ago
Eugen Rochko	0e8f59c16f	Refactoring Grape API methods into normal controllers & other things	9 years ago
Eugen Rochko	71fe24096c	Adding a Mention model, test stubs	9 years ago
Eugen Rochko	709c6685a9	Made some progress	9 years ago