aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/plugs
AgeCommit message (Collapse)Author
2019-02-17[#468] Merged `upstream/develop`, resolved conflicts.Ivan Tashkinov
2019-02-15[#468] Defined OAuth restrictions for all applicable routes.Ivan Tashkinov
Improved missing "scopes" param handling. Allowed "any of" / "all of" mode specification in OAuthScopesPlug. Fixed auth UI / behavior when user selects no permissions at /oauth/authorize.
2019-02-14[#468] User UI for OAuth permissions restriction. Standardized storage ↵Ivan Tashkinov
format for `scopes` fields, updated usages.
2019-02-12Plugs.HTTPSecurityPlug: Add webpacker to connect-srcHaelwenn (lanodan) Monnier
2019-02-12Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev modeHaelwenn (lanodan) Monnier
This is needed to run dev mode mastofe at the same time
2019-02-12Use url[:scheme] instead of protocol to determine if https is enabledshibayashi
2019-02-09de-group alias/esHaelwenn (lanodan) Monnier
2019-02-09[#468] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions.Ivan Tashkinov
2019-02-09Credo fixes: alias grouping/orderingHaelwenn (lanodan) Monnier
2019-02-09Credo fixes: parameter consistencyHaelwenn (lanodan) Monnier
2019-02-01Serve sw-pleroma.js properlyhref
2019-01-26Join on preloads to avoid N+1 querieshref
2018-12-31update copyright years to 2019William Pitcock
2018-12-23add license boilerplate to pleroma coreWilliam Pitcock
2018-12-18Add a way to use the admin api without a user.lain
2018-12-17Instance/Static runtime plughref
This allows to set-up an arbitrary directory which overrides most of the static files: index.html static/ emoji/ packs/ sounds/ images/ instance/ favicon.png. If the files are not present in the directory, the bundled ones in priv/static will be used.
2018-12-16More put_view.href
2018-12-14fix and improve web push; add configuration docsEgor Kislitsyn
2018-12-09fix compile warningsMaksim Pechnikov
2018-12-06Merge branch 'develop' into feature/compat/push-subscriptionsEgor Kislitsyn
# Conflicts: # lib/pleroma/application.ex # lib/pleroma/plugs/oauth_plug.ex
2018-12-06Merge branch 'develop' into feature/compat/push-subscriptionsEgor Kislitsyn
# Conflicts: # lib/mix/tasks/sample_config.eex # lib/pleroma/web/twitter_api/controllers/util_controller.ex # mix.exs # mix.lock
2018-12-05fix/273Maksim Pechnikov
2018-12-01More fixes for Info schema.lain
2018-12-01Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into ↵lain
validate-user-info
2018-12-01Fix admin api.lain
2018-11-30reverse proxy / uploadshref
2018-11-30Merge remote-tracking branch 'origin' into validate-user-infolain
2018-11-26Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there ↵Haelwenn (lanodan) Monnier
is https This fixes running mastofe with MIX_ENV=dev
2018-11-26Add manifest-src to allow manifest.jsonshibayashi
2018-11-20oauth plug: fix deactivated checkWilliam Pitcock
2018-11-17lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not ↵Haelwenn (lanodan) Monnier
admin.”
2018-11-17[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, ↵Haelwenn (lanodan) Monnier
fix error reporting
2018-11-17lib/pleroma/plugs/user_is_admin_plug.ex: CreateHaelwenn (lanodan) Monnier
2018-11-16http security: remove form-action from CSP definitionsWilliam Pitcock
2018-11-12http security: allow referrer-policy to be configuredWilliam Pitcock
2018-11-12rename CSPPlug to HTTPSecurityPlug.William Pitcock
2018-11-11csp plug: add support for certificate transparencyWilliam Pitcock
2018-11-11csp plug: add sts supportWilliam Pitcock
2018-11-11plugs: add CSPPlugWilliam Pitcock
2018-11-05Runtime configured routerhref
2018-09-22Assign token to connectionMartin Kühl
2018-09-05Update legacy passwords automatically.lain
2018-09-05Add UserEnabledPlug.lain
2018-09-05Add SetUserSessionIdPlug.lain
2018-09-05Add EnsureUserKeyPlug, smaller fixeslain
2018-09-05Simplify AuthenticationPluglain
2018-09-05Add SessionAuthenticationPlug.lain
2018-09-05Add LegacyAuthenticationPluglain
2018-09-05Add EnsureAuthenticatedPluglain
2018-09-05Add UserFetcherPlug.lain