Commit Graph

1838 Commits (b3c27815788e4b47e7eb3fca727d817512cf26c2)

Author SHA1 Message Date
Gavin Mogan 70584b47c5 Fixes for items highlighted by review.ai
* Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks:
`abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid
state');`
* For better data integrity, consider adding a foreign key constraint to the user_id column: `$table-
>foreign('user_id')->references('id')->on('users')->onDelete('cascade');`
* Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a
null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`
7 months ago
Gavin Mogan 441c8e0d4c Generic OIDC Support
* Everything should be configurable by env variables
* Basic request tests
7 months ago
Mackenzie Morgan 9966260a91 use case insensitive search when tagging accounts 7 months ago
Daniel Supernault fc77a98f7b
Update CustomFilterController, remove statuses check as we dont support them yet 7 months ago
Daniel Supernault 5f5ed1e62d
Update ComposeController, fix tag mention bug. Closes #5885 7 months ago
Daniel Supernault 5a32bfe304
Update ApiV1Controller, add Custom Filters to home/public and hashtag feeds 7 months ago
Daniel Supernault c4a96da019
Update CustomFilterController, improve case-insentive handling, mastoAPI compatibility and custom config limits 7 months ago
Daniel Supernault b86102823b
Update CustomFilter model and CustomFilterController 7 months ago
Daniel Supernault 168816db2d
Update CustomFilterController 7 months ago
Daniel Supernault adc4cffc38
Add custom filter components 7 months ago
Daniel Supernault 437d742ac4
Add custom filters
Add custom filters, compatible with Mastodon `/api/v2/filters`

Todo:
- [ ] fix routes
- [ ] finish other context filtering
7 months ago
Daniel Supernault ccc7f2fc69
Update ReportController, fix type validation 7 months ago
Daniel Supernault 32fc3180c8
Update DiscoverController, improve public hashtag feed. Fixes #5866 7 months ago
Daniel Supernault 658fe6898e
Update ApiV1Controller, add better direct error message. Fixes #4789 7 months ago
Daniel Supernault 4732019087
Update instance config, return proper matrix limits. Fixes #4780 7 months ago
Daniel Supernault 8a86808a06
Update ApiV1Controller, fix notifications favourited/reblogged/bookmarked state. Fixes #5901 7 months ago
Daniel Supernault 3001365025
Update ProfileMigrationController.php 7 months ago
Daniel Supernault 537e179537
Update PublicApiController, fix visibility for guests 8 months ago
Daniel Supernault 5ddb6d8427
Update PublicApiController, use pixelfed entities for /api/pixelfed/v1/accounts/id/statuses with bookmarked state 8 months ago
Daniel Supernault 8082c004bc
Refactor following check 8 months ago
Daniel Supernault 0f1819125c
Update post pinning, and dispatch Notification cache warming to a job, and fix reblogged state on some endpoints 8 months ago
Daniel Supernault 2f655d0008
Fix pinned posts implementation 8 months ago
daniel c9a0fe0026
Merge pull request #5884 from eufelipemateus/pinned-posts
[Improvement] Pinned posts
8 months ago
Daniel Supernault 375858f09d
Update AccountImport, improve webp support 8 months ago
Daniel Supernault aa6f95b1cf
Update ApiV1Controller, improve query 8 months ago
Felipe Mateus cce4c41d97
pinned posts 8 months ago
Daniel Supernault 2cf3011816
Update ApiV1Controller, send UndoFollow when cancelling a follow request on remote accounts 8 months ago
Daniel Supernault 976a1873e1
Update ApiV1Controller, improve follower handling 8 months ago
Daniel Supernault c4af4d9921
Update ApiV1Controller.php 8 months ago
Daniel Supernault 244e86bad7
Update ApiV1Controller, add pagination to conversations endpoint with min/max/since id pagination and link header support 8 months ago
Daniel Supernault 717f17cdee
Update DM config, allow new users to send DMs by default, with a new env variable to enforce a 72h limit 8 months ago
Daniel Supernault cce657d9c8
Update ApiV1Controller, return empty statuses feed for private accounts instead of 403 response 8 months ago
Daniel Supernault 38e17a06e0
Update ApiV1Controller, fix max_id pagination on home and public timeline feeds 8 months ago
Daniel Supernault 01b445f6ea
Update AccountImports, add webp support 9 months ago
Daniel Supernault c36cc07b2c
Update avif support, and fix reply permalinks 9 months ago
Daniel Supernault 7ddbe0c473
Add AVIF support 9 months ago
daniel 622116b0cf
Merge pull request #5694 from maco/5645-domain-block
[Bug Fix] accept bare domains without http scheme in domain block controller
9 months ago
Daniel Supernault 5340649d04
Update AppRegisterController 9 months ago
Daniel Supernault 0844094b99
Update App Register to expire codes after 4 hours instead of 60 minutes 9 months ago
Daniel Supernault dbd1e17b25
Add app register email verify resends 9 months ago
Daniel Supernault 8c7a71ee73
Update DirectMessageController, fix query 9 months ago
Daniel Supernault 4ec9f990ed
Update DirectMessageController, fix performance issue 9 months ago
Daniel Supernault 4960421073
Update CuratedOnboarding, add new app:curated-onboarding command, extend email verification window to 7 days and fix resend verification mails 9 months ago
Mackenzie Morgan 1f7a1bd72b accept bare domains without http scheme in domain block controller
Fixes #5645
9 months ago
Daniel Supernault dc4e683f0a
Update MediaController, fix redirect bug 9 months ago
Daniel Supernault 42173245fc
Update ApiV1Controller.php 10 months ago
Daniel Supernault c8ba73f11b
Update ApiV1Controller.php 10 months ago
Daniel Supernault 67f3951e9a
Update ApiV1Controller, add mobile_registration attribute 10 months ago
Daniel Supernault cc78dfc650
Refactor based on @jippi review 10 months ago
Daniel Supernault 509a50b8e0
Update AppRegisterController.php 10 months ago