Commit Graph

77 Commits (dev)

Author SHA1 Message Date
daniel 3861e7ddfe
Staging (#5978)
* Added current title as value for input so that the current value remains stored by default

* Added parameter 'show_legal_notice_link' => (bool) config_cache('instance.has_legal_notice'),

* Added conditional display of a link to legal notice if the page is active

* Added key 'legalNotice'

* feat translate story

* translate auth

- register
- login

* add remove follow

* Update ApiV1Controller.php

Co-Authored-By: Mathieu <385764+Casmo@users.noreply.github.com>

* New translations web.php (Chinese Simplified)
[ci skip]

* Added current title as value for input so that the current value remains stored by default

* Added parameter 'show_legal_notice_link' => (bool) config_cache('instance.has_legal_notice'),

* Added conditional display of a link to legal notice if the page is active

* Added key 'legalNotice'

* add missing key

* add missing keys

* New translations web.php (Portuguese, Brazilian)
[ci skip]

* New translations web.php (Turkish)
[ci skip]

* New translations web.php (Italian)
[ci skip]

* translate custom  filter

* New translations web.php (Italian)
[ci skip]

* use configured alt text length limit when uploading multiple photos

* in notifications sidebar, show popover on shared posts too, not just liked posts

* use case insensitive search when tagging accounts

* New translations web.php (Portuguese, Brazilian)
[ci skip]

* Generic OIDC Support

* Everything should be configurable by env variables
* Basic request tests

* Fixes for items highlighted by review.ai

* Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks:
`abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid
state');`
* For better data integrity, consider adding a foreign key constraint to the user_id column: `$table-
>foreign('user_id')->references('id')->on('users')->onDelete('cascade');`
* Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a
null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`

* field isnt accessTokenResourceOwnerId but responseResourceOwnerId

* New translations web.php (Dutch)
[ci skip]

* Fix components

* Update LandingService and Config util to properly support the legal_notice setting

* Update footer to use legalNotice i18n

* Update i18n

* Update sidebar with gap padding for footer links

* Update compiled assets

* Update i18n json

* Update OIDC config with comments, and disable tests as we dont have db tests configured

* Update remove_from_followers api endpoint

* Update i18n

* Update compiled assets

* Update changelog

* New supported formats, Preserve ICC Color Profiles, libvips support

Update image pipeline to handle avif, heic and webp and preserve ICC color profiles and added libvips support.

* Fix tests

* Update CHANGELOG.md

---------

Co-authored-by: Samy Elshamy <elshamy@coderbutze.de>
Co-authored-by: Felipe Mateus <eu@felipemateus.com>
Co-authored-by: Mathieu <385764+Casmo@users.noreply.github.com>
Co-authored-by: Mackenzie Morgan <macoafi@gmail.com>
Co-authored-by: Gavin Mogan <git@gavinmogan.com>
2 months ago
Daniel Supernault 437d742ac4
Add custom filters
Add custom filters, compatible with Mastodon `/api/v2/filters`

Todo:
- [ ] fix routes
- [ ] finish other context filtering
3 months ago
Daniel Supernault a7f0c45505
Update AppServiceProvider.php 4 months ago
Daniel Supernault dbd1e17b25
Add app register email verify resends 5 months ago
Anil Kulkarni 972b299025
Prevent pulse crash when it is not configured 5 months ago
Daniel Supernault 4e6e6b4ab7
Update routes 5 months ago
Daniel Supernault f8dc50ebd3
Update AppServiceProvider.php 5 months ago
Daniel Supernault 3c249616ef
Add rate limits, fix typo and styling 5 months ago
Daniel Supernault ea17e24281
Update asp 6 months ago
Daniel Supernault 3d67d5a369
Add Pulse 6 months ago
Daniel Supernault 8afbdb03a8
Fix oauth oob (urn:ietf:wg:oauth:2.0:oob) support. Fixes #2522 6 months ago
daniel 1dbcdee289
Merge branch 'staging' into feat/implement-admin-domain-blocks-api 12 months ago
Daniel Supernault a5946f590b
Update AppServiceProvider 12 months ago
Emelia Smith fcdfc73eaf
Remove production environment check in AuthServiceProvider
This check resulted in the /oauth/scopes route returning nothing, meaning in development you couldn't use access tokens with scopes; It probably also affected other logic
1 year ago
Emelia Smith 4afe72e62f
Add oauth protection to admin domain blocks API 1 year ago
Daniel Supernault ce228f7fa4
Update oauth setting, use config_cache 1 year ago
Daniel Supernault bc4d223714
Update routes 1 year ago
Daniel Supernault 7a7b4bc717
Update AuthServiceProvider 1 year ago
Emelia Smith 9330cd02f7
Implement proper OAuth authorization on Admin API endpoints 1 year ago
Daniel Supernault 7dbdbf15a5
Add Roles & Parental Controls 2 years ago
Daniel Supernault add5eaf094
Fix CI 2 years ago
Daniel Supernault 637cdca27a
Fix CI 2 years ago
Daniel Supernault fb4ac4ebd6
Add php 8.2 support. Bump laravel version, v9 => v10 2 years ago
Daniel Supernault 81f7d17263
Update FollowerService, improve cache invalidation 3 years ago
Daniel Supernault 0cdab339ff
Add default value for forceHttps in AppServiceProvider 3 years ago
Daniel Supernault a31bdec750
Allow forceHttps to be disabled, fixes #3710 3 years ago
daniel f776c79284
Merge pull request #3710 from thisislawatts/fix/opt-out-of-forcing-https
fix: add opt of forceScheme(https)
3 years ago
Daniel Supernault 18f3fcc663
Update Laravel 8 => 9 3 years ago
Luke Watts d1dca5a1f1
fix: add opt of forceScheme(https)
When running the application locally with
APP_URL=http://localhost it is unexpected for
all route URLs returned by `route('route-name')`
to use the https prefix.

Configuring SSL for your local environment should
not be a required step to development locally.

The new logic checks the configured URL for presence
of https:// OR that this the application is running
in a production environment.
3 years ago
Daniel Supernault d122c2d042
Add StatusObserver 3 years ago
Daniel Supernault 020f810a7e
Add TelescopeServiceProvider 3 years ago
Daniel Supernault 1c02afb1a1
Update oauth flow 3 years ago
Daniel Supernault 80d9b9399a
Refactor following & relationship logic. Replace FollowerObserver with FollowerService and added RelationshipService to cache results. Removed NotificationTransformer includes and replaced with cached services to improve performance and reduce database queries. 4 years ago
Daniel Supernault 38e5fc43eb
Add FollowObserver 4 years ago
Daniel Supernault d3157f2a2d
Add LikeObserver 4 years ago
Daniel Supernault 178ed63d0a
Update AuthServiceProvider, increase default token + refresh token lifetime 4 years ago
Daniel Supernault 68a21de57c
Update admin settings 4 years ago
Daniel Supernault 868cea96ca
Update AuthServiceProvider 4 years ago
Daniel Supernault 3e52458889
Update config() to config_cache() 4 years ago
Daniel Supernault b299da9311
Update AccountService, cache object and observe changes 5 years ago
Daniel Supernault 8aa5d42d8b
Update laravel framework to v8 5 years ago
Daniel Supernault 7cfae612db
Updated AuthServiceProvider, added support for configurable OAuth tokens and refresh tokens lifetime 5 years ago
delthas 748a3be46d Add support for configurable OAuth tokens and refresh tokens lifetime
Previously, the lifetime of tokens and refresh tokens was hardcoded at
15 and 30 days.

Some instances administrators may wish to change these values.

This makes these two values configurable with the two .env variables:
OAUTH_TOKEN_DAYS and OAUTH_REFRESH_DAYS which are the lifetime in days
for these two tokens and refresh tokens.
5 years ago
Daniel Supernault 344b0c94cd
Update cors dep 5 years ago
Daniel Supernault 51642fc40d
Add modlog notifications 5 years ago
Daniel Supernault 7faa9d8e61
Add S3 + Stories 6 years ago
Daniel Supernault 43d4517f71
Update AuthServiceProvider 6 years ago
Daniel Supernault 4fa5ca4f82
Update AuthServiceProvider 6 years ago
Daniel Supernault 0397c959f0
Update AuthServiceProvider 6 years ago
Daniel Supernault dbcd5ff2e4
Update AuthServiceProvider 6 years ago