mastodon

Commit Graph

Author	SHA1	Message	Date
Matt Jankowski	7581b1ff96	Profiling tools configuration improvement (#25383 )	2 years ago
Renaud Chaput	4d1b67f664	Add end-to-end (system) tests (#25461 )	2 years ago
Matt Jankowski	07933db788	Add coverage for `CLI::Cache` command (#25238 )	2 years ago
Matt Jankowski	c94bb9ba9a	Disable paperclip processing in specs (#25359 )	2 years ago
Matt Jankowski	b0104e4c33	Silence output to stdout during cli specs (#25211 )	2 years ago
Nick Schonning	1fe04f740a	Enable Rubocop Rails/FilePath (#23854 )	2 years ago
Claire	1eb51bd749	Add request specs for caching behavior (#24592 )	2 years ago
Matt Jankowski	91a8cd21d8	React component helper specs (#24072 )	2 years ago
Claire	f45961aa98	Add feature test for OAuth access grant (#24624 )	2 years ago
Matt Jankowski	1ed12d5e2f	Add basic search specs for chewy indexes (#24065 )	2 years ago
Nick Schonning	8fd3fc404d	Autofix Rubocop Rails/RootPathnameMethods (#23760 )	2 years ago
Nick Schonning	84cc805cae	Enable Style/FrozenStringLiteralComment for specs (#23790 )	2 years ago
Nick Schonning	81ad6c2e39	Autofix Rubocop Style/StringLiterals (#23695 )	2 years ago
Nick Schonning	d65b2c1924	Apply Rubocop Style/RedundantConstantBase (#23463 )	2 years ago
Nick Schonning	1487fcde93	Apply Rubocop Style/ExpandPathArguments (#23450 )	2 years ago
Eugen Rochko	3917353645	Fix single Redis connection being used across all threads (#18135 ) * Fix single Redis connection being used across all Sidekiq threads * Fix tests	3 years ago
Eugen Rochko	ddbe906c25	Fix not updating a status when newer version is fetched manually (#17745 )	3 years ago
santiagorodriguez96	e8d41bc2fe	Add WebAuthn as an alternative 2FA method (#14466 ) * feat: add possibility of adding WebAuthn security keys to use as 2FA This adds a basic UI for enabling WebAuthn 2FA. We did a little refactor to the Settings page for editing the 2FA methods – now it will list the methods that are available to the user (TOTP and WebAuthn) and from there they'll be able to add or remove any of them. Also, it's worth mentioning that for enabling WebAuthn it's required to have TOTP enabled, so the first time that you go to the 2FA Settings page, you'll be asked to set it up. This work was inspired by the one donde by Github in their platform, and despite it could be approached in different ways, we decided to go with this one given that we feel that this gives a great UX. Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> * feat: add request for WebAuthn as second factor at login if enabled This commits adds the feature for using WebAuthn as a second factor for login when enabled. If users have WebAuthn enabled, now a page requesting for the use of a WebAuthn credential for log in will appear, although a link redirecting to the old page for logging in using a two-factor code will also be present. Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> * feat: add possibility of deleting WebAuthn Credentials Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> * feat: disable WebAuthn when an Admin disables 2FA for a user Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> * feat: remove ability to disable TOTP leaving only WebAuthn as 2FA Following examples form other platforms like Github, we decided to make Webauthn 2FA secondary to 2FA with TOTP, so that we removed the possibility of removing TOTP authentication only, leaving users with just WEbAuthn as 2FA. Instead, users will have to click on 'Disable 2FA' in order to remove second factor auth. The reason for WebAuthn being secondary to TOPT is that in that way, users will still be able to log in using their code from their phone's application if they don't have their security keys with them – or maybe even lost them. * We had to change a little the flow for setting up TOTP, given that now it's possible to setting up again if you already had TOTP, in order to let users modify their authenticator app – given that now it's not possible for them to disable TOTP and set it up again with another authenticator app. So, basically, now instead of storing the new `otp_secret` in the user, we store it in the session until the process of set up is finished. This was because, as it was before, when users clicked on 'Edit' in the new two-factor methods lists page, but then went back without finishing the flow, their `otp_secret` had been changed therefore invalidating their previous authenticator app, making them unable to log in again using TOTP. Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com> * refactor: fix eslint errors The PR build was failing given that linting returning some errors. This commit attempts to fix them. * refactor: normalize i18n translations The build was failing given that i18n translations files were not normalized. This commits fixes that. * refactor: avoid having the webauthn gem locked to a specific version * refactor: use symbols for routes without '/' * refactor: avoid sending webauthn disabled email when 2FA is disabled When an admins disable 2FA for users, we were sending two mails to them, one notifying that 2FA was disabled and the other to notify that WebAuthn was disabled. As the second one is redundant since the first email includes it, we can remove it and send just one email to users. * refactor: avoid creating new env variable for webauthn_origin config * refactor: improve flash error messages for webauthn pages Co-authored-by: Facundo Padula <facundo.padula@cedarcode.com>	5 years ago
dependabot-preview[bot]	56531d646e	Bump sidekiq from 5.2.7 to 6.0.4 (#11727 ) * Bump sidekiq from 5.2.7 to 6.0.0 Bumps [sidekiq](https://github.com/mperham/sidekiq) from 5.2.7 to 6.0.0. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v5.2.7...v6.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Sidekiq::Logger.logger -> Sidekiq.logger * Drop support Ruby 2.4 * update Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com> Co-authored-by: Yamagishi Kazutoshi <ykzts@desire.sh>	5 years ago
Eugen Rochko	5c42f47617	Fix records not being indexed sometimes (#12024 ) It's possible that after commit callbacks were not firing when exceptions occurred in the process. Also, the default Sidekiq strategy does not push indexing jobs immediately, which is not necessary and could be part of the issue too.	6 years ago
Moritz Heiber	ecf40d09ed	Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819 )	6 years ago
ashleyhull-versent	f194857ac9	rubocop issues - Cleaning up (#8912 ) * cleanup pass * undo mistakes * fixed. * revert	6 years ago
Sorin Davidoi	6f3d934bc1	feat(cookies): Use the same-site attribute to lax (#8626 ) CSFR-prevention is already implemented but adding this doesn't hurt. A brief introduction to Same-Site cookies (and the difference between strict and lax) can be found at https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/ TLDR: We use lax since we want the cookies to be sent when the user navigates safely from an external site.	7 years ago
Eugen Rochko	cb5b5cb5f7	Slightly reduce RAM usage (#7301 ) * No need to re-require sidekiq plugins, they are required via Gemfile * Add derailed_benchmarks tool, no need to require TTY gems in Gemfile * Replace ruby-oembed with FetchOEmbedService Reduce startup by 45382 allocated objects * Remove preloaded JSON-LD in favour of caching HTTP responses Reduce boot RAM by about 6 MiB * Fix tests * Fix test suite by stubbing out JSON-LD contexts	7 years ago
Akihiko Odaki	9b8a448477	Isolate each specs for cache store (#6450 ) The cache store is explicitly used by some specs, but they were not isolated and therefore not reliable. This fixes the issue by clearing the cache after each specs.	7 years ago
Yamagishi Kazutoshi	1d92b90be9	Fix force_ssl conditional (#6201 )	7 years ago
Naoki Kosaka	8d51ce4290	Fix enforce HTTPS in production. (#6180 )	7 years ago
Eugen Rochko	00df69bc89	Fix #4058 - Use a long-lived cookie to keep track of user-level sessions (#4091 ) * Fix #4058 - Use a long-lived cookie to keep track of user-level sessions * Fix tests, smooth migrate from previous session-based identifier	8 years ago
Akihiko Odaki (@fn_aki@pawoo.net)	7d8e3721ae	Overwrite old statuses with reblogs in PrecomputeFeedService (#3984 )	8 years ago
Eugen Rochko	f7301bd5b9	Add overview of active sessions (#3929 ) * Add overview of active sessions * Better display of browser/platform name * Improve how browser information is stored and displayed for sessions overview * Fix test	8 years ago
Sorin Davidoi	2211e8d1cd	Revocable sessions (#3616 ) * feat: Revocable sessions * fix: Tests using sign_in * feat: Configuration entry for the maximum number of session activations	8 years ago
Matt Jankowski	fd66f7cdc0	Disable sidekiq logging in test mode (#2962 )	8 years ago
Matt Jankowski	484c9709b6	Misc spec coverage improvements (#2821 ) * Dont use raise_error by itself (avoids warning) * Add coverage for AccountFilter * Improve coverage and refactor for Subscription#lease_seconds * Improve coverage and refactor for NotificationMailer * Simplify assignment of min/max threshold on subscription	8 years ago
Eugen	501514960a	Followers-only post federation (#2111 ) * Make private toots get PuSHed to subscription URLs that belong to domains where you have approved followers * Authorized followers controller, stub for bulk action * Soft block in the background * Add simple test for new controller * Rename Settings::FollowersController to Settings::FollowerDomainsController, paginate results, rename "private" post setting to "followers-only", fix pagination style, improve post privacy preferences style, improve warning style * Extract compose form warnings into own container, show warning when posting to followers-only with unlocked account	8 years ago
Matt Jankowski	355965c17b	Silence Devise deprecation warning about TestHelpers (#1840 ) Devise changed their approach - `3f3ec236bb` This change silences a deprecation warning about `TestHelpers`	8 years ago
Chad Pytel	92cd207c50	Introduce capybara and first feature spec (#1801 ) This commit introduces Capybara and the first feature spec. I focused on coverage for log in for the first feature spec because that would have prevented `624a9a7136` causing #1236.	8 years ago
Samy KACIMI	81c76fe375	add more tests to models	8 years ago
Eugen Rochko	aabf884c5f	Discard misattributed remote statuses, improve timelines filter	8 years ago
Eugen Rochko	67b35a601a	Exclude blocked users from follow suggestions, fix tests	9 years ago
Eugen Rochko	22a8801dbc	Adding domain blocks	9 years ago
Eugen Rochko	ae1fac0062	Add API to upload media attachments	9 years ago
Eugen Rochko	10ba09f546	Upgrade to Rails 5.0.0.1	9 years ago
Eugen Rochko	85b00d19b8	Moving Salmon notifications to background processing, fixing mini-profiler behaviour with Turbolinks enabled, optimizing Rabl for production	9 years ago
Eugen Rochko	b640f35621	Writing out more tests, fixed some bugs	9 years ago
Eugen Rochko	3824c58853	Adding GNU Public license, adding home timeline, reblog/favourite counters	9 years ago
Eugen Rochko	11ff92c9d7	Adding a test for ReblogService, fixing mentions for remote statuses	9 years ago
Eugen Rochko	71fe24096c	Adding a Mention model, test stubs	9 years ago

47 Commits (f2257069b21892f8bbd57595efb474cdd1020bbc)