790 Commits (c5071f2d787e81251c2b3111074b20d94773ee44)

Author	SHA1	Message	Date
ThibG	ed30110618	Make displaying application used to toot opt-in (#9897) ... * Make storing and displaying application used to toot opt-in * Revert to storing application info, and display it to the author via API	6 years ago
Eugen Rochko	6b91da97bb	Fix directory showing tags that have no currently eligible accounts (#9872)	6 years ago
Eugen Rochko	32daecffef	Fix REST API showing non-public reblogs for a given status (#9850)	6 years ago
Eugen Rochko	bc642ac24b	Redesign public hashtag page to use a masonry layout (#9822)	6 years ago
Eugen Rochko	1c6588accc	Redesign admin instances area (#9645)	6 years ago
ThibG	28b482874a	Improvements to signature verification (#9667) ... * Refactor signature verification a bit * Rescue signature verification if recorded public key is invalid Fixes #8822 * Always re-fetch AP signing key when HTTP Signature verification fails But when the account is not marked as stale, avoid fetching collections and media, and avoid webfinger round-trip. * Apply stoplight to key/account update as well as initial key retrieval	6 years ago
Eugen Rochko	5654535728	Change remote interaction dialog to use specific actions (#9743) ... * Change remote interaction dialog to use specific actions Instead of just "interact", use different strings based on whether it's a reply, reblog or favourite. Add explanation why the step is necessary in the first place * Remove obsolete strings	6 years ago
Eugen Rochko	43c61bca60	Add locale param to sign-up API (#9747) ... Fix #9627	6 years ago
Eugen Rochko	5dbe186585	Add cache to custom emojis API (#9732) ... Fix #9729	6 years ago
Eugen Rochko	a49d43d112	Add scheduled statuses (#9706) ... Fix #340	6 years ago
ThibG	6f9a7bd02c	Add quick links to the admin interface in the WebUI (#8545) ... * Allow to show a specific status in the admin interface * Let the front-end know the current account is a moderator * Add admin links to status and account menus If the current logged-in user is an admin, add quick links to the admin interface in account and toot dropdown menu. Suggestion by @ashkitten * Use @statuses.first instead of @statuses[0]	6 years ago
Eugen Rochko	82ef5c0461	Fix list of local followers showing remote followers in admin UI (#9700)	6 years ago
Eugen Rochko	7fc7437d05	Add CSV export for lists and domain blocks (#9677) ... Fix #6893 Fix #9268	6 years ago
Eugen Rochko	6e49907ecf	Improve admin UI for account view (#9643)	6 years ago
chr v1.x	c3465f699e	Add local followers page to admin account UI (#9610) ... * Add local followers page to admin account UI For moderation, I often find myself wondering who, locally, is following a remote user. Currently, to see this, I have to go back to the web UI, paste in their full handle, click their profile, and go to the "Followers" tab (plus, this information is incidental, and if mastodon ever decides to resolve all of the follower information, there will be no place local followers are shown). This PR adds a new page which is accessible via the "following" count on the admin's account view page, which shows the local followers. (It has filter parameters for account location to indicate that only local followers are shown, and leave room for expansion if mastodon ever decides to store the entire remote follow list). * Normalize en.yml	6 years ago
Eugen Rochko	ee1ba59692	Add exclude_reblogs option to account statuses API (#9640) ... Fix #9606	6 years ago
Eugen Rochko	9b8c7a9aad	Redirect to reports overview instead of report after account action (#9639)	6 years ago
ThibG	4423999609	Fix account unsilencing and unsuspension (#9637) ... Fix regression from 3c033c4352	6 years ago
Eugen Rochko	17cd91c777	Fix signature verification stoplight triggering on non-timeout errors (#9617)	6 years ago
Takeshi Umeda	bf70e5cfda	Add error message with invalid email confirmation (#9625)	6 years ago
Eugen Rochko	5d2fc6de32	Add REST API for creating an account (#9572) ... * Add REST API for creating an account The method is available to apps with a token obtained via the client credentials grant. It creates a user and account records, as well as an access token for the app that initiated the request. The user is unconfirmed, and an e-mail is sent as usual. The method returns the access token, which the app should save for later. The REST API is not available to users with unconfirmed accounts, so the app must be smart to wait for the user to click a link in their e-mail inbox. The method is rate-limited by IP to 5 requests per 30 minutes. * Redirect users back to app from confirmation if they were created with an app * Add tests * Return 403 on the method if registrations are not open * Require agreement param to be true in the API when creating an account	6 years ago
ThibG	e25947db4a	Sanitize and sandbox toot embeds (#9552)	6 years ago
Eugen Rochko	59e333385b	Show 40 profiles per directory page instead of 30 (#9609) ... To better align with the list of hashtags	6 years ago
Eugen Rochko	3c033c4352	Add moderation warnings (#9519) ... * Add moderation warnings Replace individual routes for disabling, silencing, and suspending a user, as well as the report update route, with a unified account action controller that allows you to select an action (none, disable, silence, suspend) as well as whether it should generate an e-mail notification with optional custom text. That notification, with the optional custom text, is saved as a warning. Additionally, there are warning presets you can configure to save time when performing the above. * Use Account#local_username_and_domain	6 years ago
Eugen Rochko	108b2139cd	Allow unauthenticated REST API access to GET /api/v1/accounts/:id/statuses (#9573) ... Fix #7087 The same data is available over the ActivityPub outbox, RSS, and Atom, so there is little benefit to keeping it limited in this method.	6 years ago
jomo	2c1a6f746f	fix CSP / X-Frame-Options for media embeds (#9558)	6 years ago
ysksn	3281df0df1	Move #set_user to Admin::BaseController (#9470) ... * Move #set_user to Admin::BaseController * Rename Admin::TwoFactorAuthenticationsController from `#set_user` to `#set_target_user` .	6 years ago
Eugen Rochko	087e118971	Remove "most popular" tab from profile directory, add responsive design (#9539) ... * Remove "most popular" tab from profile directory, add responsive design * Remove unused translations	6 years ago
ysksn	b048926e67	Create Settings::BaseController (#9507) ... Define `Settings::BaseController#set_body_classes` so that sub classes inherit `Settings::BaseController` don't need to define `#set_body_classes` agein.	6 years ago
ThibG	cf6ee4ff24	Add admin ability to remove an user's header image (#9495) ... * Fix markup in admin/accounts/:id table for avatar * Add admin ability to remove an user's header image	6 years ago
ThibG	720daa8143	Add instance-wide setting to disable profile directory (#9497) ... * Add instance-wide setting to disable profile directory Fixes #9496 When the profile directory is disabled: - The “discoverable” setting is hidden from users - The “profile directory” link is not shown on public pages - /explore returns 404 * Move Setting.profile_directory check to a before_action filter	6 years ago
ysksn	ed24bb2c3e	Add specs for activitypub collections controller (#9484) ... * Add specs for ActivityPub::CollectionsController#show * Raise ActiveRecord::RecordNotFound Raising ActiveRecord::NotFound raises NameError: uninitialized constant ActiveRecord::NotFound.	6 years ago
ysksn	189a6b17fb	Remove RemoteAccountControllerConcern never used (#9482)	6 years ago
ysksn	361818e931	Fix Admin::TagsController#unhide (#9481)	6 years ago
ThibG	81bda7d67c	Add setting to not aggregate reblogs (#9248) ... * Add setting to not aggregate reblogs Fixes #9222 * Handle cases where user is nil in add_to_home and add_to_list * Add hint for setting_aggregate_reblogs option * Reword setting_aggregate_reblogs label	6 years ago
Eugen Rochko	73be8f38c1	Add profile directory (#9427) ... Fix #5578	6 years ago
ThibG	e88c6a5c3c	Fix thread depth computation in statuses_controller (#9426) ... * Add test that should currently fail * Fix depth computation (will still fail if statuses have been filtered out) * Fix handling of broken threads	6 years ago
Eugen Rochko	73faadad28	Redesign admin accounts index (#9340) ... * Improve overview of accounts in admin UI - Display suspended status, role, last activity and IP prominently - Default to showing local accounts - Default to not showing suspended accounts * Remove unused strings * Fix tests * Allow filtering accounts by IP mask	6 years ago
Eugen Rochko	d6b9a62e0a	Extract counters from accounts table to account_stats table (#9295)	6 years ago
Eugen Rochko	8069fd636b	Remove intermediary arrays when creating hash maps from results (#9291)	6 years ago
Eugen Rochko	4615512285	Reduce connect timeout limit and limit signature failures by source IP (#9236) ... * Reduce connect timeout from 10s to 1s * Limit failing signature verifications per source IP	6 years ago
Eugen Rochko	6d59dfa15d	Optimize the process of following someone (#9220) ... * Eliminate extra accounts select query from FollowService * Optimistically update follow state in web UI and hide loading bar Fix #6205 * Asynchronize NotifyService in FollowService And fix failing test * Skip Webfinger resolve routine when called from FollowService if possible If an account is ActivityPub, then webfinger re-resolving is not necessary when called from FollowService. Improve options of ResolveAccountService	6 years ago
James Kiesel	4c03e05a4e	Allow joining several hashtags in a single column (#8904) ... * Nascent tag menu on frontend * Hook up frontend to search * Tag intersection backend first pass * Update yarnlock * WIP * Fix for tags not searching correctly * Make radio buttons function * Simplify radio buttons with modeOption * Better naming * Rearrange options * Add all/any/none functionality on backend * Small PR cleanup * Move to service from scope * Small cleanup, add proper service tests * Don't use send with user input :D * Set appropriate column header * Handle auto updating timeline * Fix up toggle function * Use tag value correctly * A bit more correct to use 'self' rather than 'all' in status scope * Fix some style issues * Fix more code style issues * Style select dropdown more better * Only use to_id'ed value to ensure no SQL injection * Revamp frontend to allow for multiple selects * Update backend / col header to account for more flexible tagging * Update brakeman ignore * Codeclimate suggestions * Fix presenter tag_url * Implement initial PR feedback * Handle additional tag streaming * CodeClimate tweak	6 years ago
Eugen Rochko	5c8e7f0e1d	Revert "feat(auth/session_controller): Send Clear-Site-Data when logging out (8627)" (#9161) ... This reverts commit 10680f93e7.	6 years ago
Eugen Rochko	795f0107d2	Include preview cards in status entity in REST API (#9120) ... * Include preview cards in status entity in REST API * Display preview card in-stream * Improve in-stream display of preview cards	6 years ago
ThibG	215e649391	Fix styling in /auth/edit (#9117)	6 years ago
Eugen Rochko	d4cf963749	Allow inbox owner to view implicitly targeted ActivityPub payload (#9093) ... Fix #9091	6 years ago
Yamagishi Kazutoshi	e8ffecbd36	Set @body_classes to admin layout (#9081)	6 years ago
Eugen Rochko	fd5285658f	Add option to block reports from domain (#8830)	6 years ago
Eugen Rochko	9486f0ca77	Add "disable" button to report screen (#9024) ... * Add "disable" button to report screen * i18n-tasks remove-unused	6 years ago