aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs
AgeCommit message (Expand)Author
2020-04-14fix logger messageMaksim Pechnikov
2020-04-06Enforcement of OAuth scopes check for authenticated API endpoints, :skip_plug...Ivan Tashkinov
2020-03-15Merge branch '1560-non-federating-instances-routes-restrictions' into 'develop'lain
2020-03-15Merge branch 'fix/rate-limiter-remoteip-behavior' into 'develop'Haelwenn
2020-03-14Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-14Merge branch 'fix/cache-control-headers' into 'develop'rinpatch
2020-03-13uploaded media plug: do not inject compile-time params on every requestrinpatch
2020-03-13Merge branch 'static-accept-missing' into 'develop'rinpatch
2020-03-13rate limiter: disable based on if remote ip was found, not on if the plug was...rinpatch
2020-03-13Synchronize cache-control header for local media with the mediaproxyMark Felder
2020-03-13Set correct Cache-Control header for local mediaMark Felder
2020-03-09[#1560] Ensured authentication or enabled federation for federation-related r...Ivan Tashkinov
2020-03-06Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-05[#1560] Misc. improvements in ActivityPubController federation state restrict...Ivan Tashkinov
2020-03-03Update CopyrightsMark Felder
2020-03-03[#1560] ActivityPubController federation state restrictions adjustments. Adju...Ivan Tashkinov
2020-03-02Merge remote-tracking branch 'remotes/origin/develop' into 1560-non-federatin...Ivan Tashkinov
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
2020-02-29Fix static FE plug to handle missing Accept header.Phil Hagelberg
2020-03-01rate limiter: Fix a race conditionrinpatch
2020-02-29[#2250] Tiny refactoring per merge request review.Ivan Tashkinov
2020-02-28Apply suggestion to lib/pleroma/plugs/rate_limiter/rate_limiter.exIvan Tashkinov
2020-02-27Runtime configurability of RateLimiter. Refactoring. Disabled default rate li...Ivan Tashkinov
2020-02-22[#1560] Restricted AP- & OStatus-related routes for non-federating instances.Ivan Tashkinov
2020-02-20Merge branch 'require-signature' into 'develop'lain
2020-02-07Actually fix upload limit on OTP releasesrinpatch
2020-01-30Merge branch 'fix/disable-rate-limiter-for-socket-localhost' into 'develop'rinpatch
2020-01-30Merge branch 'develop' into fix/disable-rate-limiter-for-socket-localhostrinpatch
2020-01-30Merge branch 'reenable-rate-limit-and-remote-ip' into 'develop'lain
2020-01-30Update http_security_plug.exfeld
2020-01-30RemoteIp: only trust X-Forwarded-Forrinpatch
2020-01-29Fix credo warningEgor Kislitsyn
2020-01-29Make the warning more scarierEgor Kislitsyn
2020-01-28Warn if HTTPSecurityPlug is disabledEgor Kislitsyn
2020-01-17updated error messages for authentication processMaksim Pechnikov
2020-01-10Merge remote-tracking branch 'remotes/origin/develop' into 1478-oauth-admin-s...Ivan Tashkinov
2020-01-10[#1478] OAuth admin tweaks: enforced OAuth admin scopes usage by default, mig...Ivan Tashkinov
2019-12-19Verify HTTP signatures only when request accepts "activity+json" typeEgor Kislitsyn
2019-12-16Add an option to require fetches to be signedEgor Kislitsyn
2019-12-15OAuthScopesPlug: disallowed nil token (unless with :fallback option). WIP: co...Ivan Tashkinov
2019-12-14Disable rate limiter for socket/localhost (unless RemoteIp is enabled)Maxim Filippov
2019-12-11[#1427] Fixed `:admin` option handling in OAuthScopesPlug, added tests.Ivan Tashkinov
2019-12-10Merge remote-tracking branch 'remotes/upstream/develop' into 1427-oauth-admin...Ivan Tashkinov
2019-12-08OTP: Fix runtime upload limit config being ignoredrinpatch
2019-12-07[#1427] Extra check that admin OAuth scope is used by admin. Adjusted tests.Ivan Tashkinov
2019-12-06[#1427] Fixes / improvements of admin scopes support. Added tests.Ivan Tashkinov
2019-12-06[#1427] Bugfix for `enforce_oauth_admin_scope_usage`. Admin API documentation...Ivan Tashkinov
2019-12-06[#1427] Reworked admin scopes support.Ivan Tashkinov
2019-11-19Support authentication via `x-admin-token` HTTP headerEgor Kislitsyn
2019-11-15Merge branch 'bugfix/1395-email-activation' into 'develop'rinpatch