You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/app/controllers
Eugen Rochko 1618b68bfa HTTP signatures (#4146)
* Add Request class with HTTP signature generator

Spec: https://tools.ietf.org/html/draft-cavage-http-signatures-06

* Add HTTP signature verification concern

* Add test for SignatureVerification concern

* Add basic test for Request class

* Make PuSH subscribe/unsubscribe requests use new Request class

Accidentally fix lease_seconds not being set and sent properly, and
change the new minimum subscription duration to 1 day

* Make all PuSH workers use new Request class

* Make Salmon sender use new Request class

* Make FetchLinkService use new Request class

* Make FetchAtomService use the new Request class

* Make Remotable use the new Request class

* Make ResolveRemoteAccountService use the new Request class

* Add more tests

* Allow +-30 seconds window for signed request to remain valid

* Disable time window validation for signed requests, restore 7 days
as PuSH subscription duration (which was previous default due to a bug)
7 years ago
..
admin Improve UI of admin site settings (#4163) 7 years ago
api HTTP signatures (#4146) 7 years ago
auth Add overview of active sessions (#3929) 7 years ago
concerns HTTP signatures (#4146) 7 years ago
oauth Fix #1165 - before_action was called before protect_from_forgery 8 years ago
settings Add option to opt out of search engines on public profile/status pages (#4199) 7 years ago
well_known Ensure well_known controllers use WEB_DOMAIN by including RoutingHelper (#2388) 7 years ago
about_controller.rb Redesign the landing page, mount public timeline on it (#4122) 7 years ago
account_follow_controller.rb Restful refactor of accounts/ routes (#2133) 8 years ago
account_unfollow_controller.rb Restful refactor of accounts/ routes (#2133) 8 years ago
accounts_controller.rb HTTP signatures (#4146) 7 years ago
application_controller.rb Fix #4058 - Use a long-lived cookie to keep track of user-level sessions (#4091) 7 years ago
authorize_follows_controller.rb Remote following success page (#4129) 7 years ago
follower_accounts_controller.rb Introduce recent to Follow (#3247) 8 years ago
following_accounts_controller.rb Introduce recent to Follow (#3247) 8 years ago
home_controller.rb Web Push Notifications (#3243) 7 years ago
manifests_controller.rb Fix #3063 - Add dynamic app manifest (#3563) 7 years ago
media_controller.rb Extract authorization policy for viewing statuses (#3150) 8 years ago
remote_follow_controller.rb Conditional validations no longer accept strings for if/unless (#3124) 8 years ago
statuses_controller.rb Extract authorization policy for viewing statuses (#3150) 8 years ago
stream_entries_controller.rb HTTP signatures (#4146) 7 years ago
tags_controller.rb Return missing page when tag does not exist (#2563) 8 years ago