Commit Graph

139 Commits (3dddd3ec4c32f3ad7b0d2acc2fb0fe950bbf291a)

Author SHA1 Message Date
Lincoln Nogueira 52539fc130
chore: prevent visitors from breaking demo (#2869)
* chore: add en-GB language

* chore: remove en-GB contents

* chore: prevent visitors from breaking demo
- prevent disabling password login
- prevent updating `memos-demo` user
- prevent setting additional style
- prevent setting additional script
- add some error feedback to system settings UI

* Revert "chore: add en-GB language"

This reverts commit 2716377b04.
1 year ago
Steven de8db63811 chore: rename workspace setting service 1 year ago
Steven dd9ee44a1f docs: regenerate swagger 1 year ago
Aleksandr Baryshnikov fa17dce046
feat: pre-signed URL for S3 storage (#2855)
Adds automatically background refresh of all external links if they are belongs to the current blob (S3) storage. The feature is disabled by default in order to keep backward compatibility.

The background go-routine spawns once during startup and periodically signs and updates external links if that links belongs to current S3 storage.

The original idea was to sign external links on-demand, however, with current architecture it will require duplicated code in plenty of places. If do it, the changes will be quite invasive and in the end pointless: I believe, the architecture will be eventually updated to give more scalable way for pluggable storage. For example - Upload/Download interface without hard dependency on external link. There are stubs already, but I don't feel confident enough to change significant part of the application architecture.
1 year ago
Steven 2b7bd47b44 fix: rss routes 1 year ago
Steven af646ce2de refactor: move gomark 1 year ago
Steven f4ac7ff529 chore: update memo resource url 1 year ago
Steven 87b23940a6 chore: upgrade backend dependencies 1 year ago
Steven b9cbe6626f chore: update tag rename 1 year ago
Brilliant Hanabi 3a129d5cfb
fix: avoid making memos public when disabled (#2816)
* fix: avoid making memos public when disabled in v2

* fix: avoid making memos public when disabled in v1
1 year ago
Steven 4d48f50815 chore: use resource name in frontend 1 year ago
Steven 582cc6609c feat: add user-defined id to resource 1 year ago
Steven 40bd75c725 fix: create memo with resource name 1 year ago
Steven 8382354ef7 feat: add user-defined name to memo 1 year ago
Elliot Chen 2e0619b4dc
feat: add a webhook action for deleted memos (#2791) 1 year ago
Wen Sun e4488da96e
fix: signup is not allowed if password login is disabled (#2776)
Signup is not allowed if password login is disabled

If password login is disabled in the system configuration, the "signup" in the "/auth" page disappears, but the user can manually enter "/auth/signup" to access the system by creating a new user.
1 year ago
Steven a297cc3140 chore: exclude comments in memo list response 1 year ago
Elliot Chen 3181c076b2
feat: add {uuid} in path template when using local storage or S3 (#2696)
Add {uuid} in path template when using local storage or S3

Add an addition tag `{uuid}` to the `replacePathTemplate`.

It is a workaround to leak the public links of a resource when using S3-based object storage. Currently, all resource blobs stored in S3 (R2, OSS) are set to be public. It is insecure as the resources for the private memos are also accessible on the Internet. Using an additional {uuid} might reduce this risk.

Meanwhile, it is also possible to avoid filename conflict
1 year ago
Lincoln Nogueira 411e807dcc
chore: use consistent relative paths for resources (#2683)
- always store resources with a relative path with forward slashes, which will be transformed as needed when the file is accessed

- fix an issue with thumbnail generation on Windows

- add several validations for local storage setting

- improve front-end error feedback when changing local storage

- add migrations to make existing resource paths relative (not needed, but improves database consistency)
1 year ago
Steven 2cfa4c3b76 chore: tweak frontend routes register 1 year ago
Steven 1b81999329 chore: skip invalida setting checks 1 year ago
Steven c267074851 chore: prevent archive/delete current user 1 year ago
Steven af68cae6ea chore: regenerate swagger docs 1 year ago
Steven e0cacfc6d6 chore: retire auto backup for sqlite 1 year ago
Steven d8a0528135 chore: tweak variable names 1 year ago
Steven 1c7fb77e05 chore: update user setting names 1 year ago
Steven e8ca2ea5a0 chore: rename renderer package 1 year ago
Steven 7b0ceee57b chore: update memo metadata description 1 year ago
Steven a10b3d3821 chore: tweak custom profile 1 year ago
Steven 89ef9b8531 chore: add instance url system setting 1 year ago
Steven e0290b94b4 chore: use gomark in rss api 1 year ago
Steven 4f05c972d5 chore: fix jwt acl 1 year ago
Steven 7fc7b19d64 chore: deprecate user setting legacy api 1 year ago
Steven fa6693a7ae chore: update list memos 1 year ago
Steven 5069476dcc chore: add webhook metric 1 year ago
Steven 0026f9e54f chore(frontend): add webhooks section 1 year ago
Steven bc965f6afa chore: implement webhook dispatch in api v1 1 year ago
Steven 45d7d0d5f6 chore: migrate get current user 1 year ago
Athurg Gooth 91296257fc
chore: remove invalid access token from db (#2539)
Remove invalid access token from db
1 year ago
Steven ec2995d64a chore: fix order by pinned 1 year ago
Steven 7f7ddf77b8 chore: update allow sign up default value 1 year ago
Athurg Gooth 52fdf8bccd
fix: persist jwt expires by cookie (#2509)
fix pesist jwt expires by cookie
1 year ago
ti777777 38f05fd6f2
chore: fix tag in http_getter.go (#2500)
Update http_getter.go

fix tag in  http_getter.go
1 year ago
Steven c24181b2be chore: fix jwt checks 1 year ago
Steven e67820cabe chore: update list user api permission 1 year ago
Steven 137e64b0dd chore: update metrics 1 year ago
Steven ac81d856f6 chore: delete resource file sync 2 years ago
Steven 2b7d7c95a5 chore: update inbox detect 2 years ago
Steven 3c36cc2953 feat: add inbox ui 2 years ago
Steven 36b4ba33fa chore: remove outdated activity definition 2 years ago