aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/web/oauth
AgeCommit message (Collapse)Author
2020-05-01Merge branch 'authenticated-api-oauth-check-enforcement' into 'develop'rinpatch
Enforcement of OAuth scopes check for authenticated API endpoints See merge request pleroma/pleroma!2349
2020-03-03Update CopyrightsMark Felder
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
Done via the following command: git diff fcd5dd259a1700a045be902b43391b0d1bd58a5b --stat --name-only | xargs sed -i '/Pleroma Authors/c# Copyright © 2017-2020 Pleroma Authors <https:\/\/pleroma.social\/>'
2020-01-27Merge branch 'develop' into issue/1383Maksim Pechnikov
2020-01-26Merge branch 'develop' into issue/1280Mark Felder
2020-01-22Merge branch 'develop' into issue/1383Maksim Pechnikov
2020-01-20Bump credo to 1.1.5Haelwenn (lanodan) Monnier
2020-01-17updated error messages for authentication processMaksim Pechnikov
2020-01-10[#1478] OAuth admin tweaks: enforced OAuth admin scopes usage by default, ↵Ivan Tashkinov
migrated existing OAuth records. Adjusted tests.
2019-12-14Merge branch 'develop' into issue/1383Maksim Pechnikov
2019-12-12[#1427] Graceful clearance of OAuth admin scopes for non-admin users (no ↵Ivan Tashkinov
error raised). PleromaFE and other clients may safely request admin scope(s): if user isn't an admin, request is successful but only non-admin scopes from request are granted.
2019-12-10Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1427-oauth-admin-scopes # Conflicts: # CHANGELOG.md
2019-12-08OAuth token cleanup: Get rid of compile-time configurationrinpatch
2019-12-06[#1427] Reworked admin scopes support.Ivan Tashkinov
Requalified users.is_admin flag as legacy accessor to admin actions in case token lacks admin scope(s).
2019-11-29[#1427] Initial support for OAuth admin scopes.Ivan Tashkinov
2019-11-25moved OAuth.Token.CleanWorker to Oban Periodic jobsMaksim Pechnikov
2019-11-11Merge branch 'iss-1376' into 'develop'lain
Check client and token in GET /oauth/authorize See merge request pleroma/pleroma!1940
2019-11-11New rate limiterSteven Fuchs
2019-11-05Check client and token in GET /oauth/authorizeAkiraFukushima
2019-10-16[#1304] Moved all non-mutes / non-blocks fields from User.Info to User. WIP.Ivan Tashkinov
2019-10-07Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md
2019-10-06Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # CHANGELOG.md # lib/pleroma/web/mastodon_api/controllers/account_controller.ex # lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex # lib/pleroma/web/router.ex
2019-10-06Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md
2019-10-04Fix OAuthControllerEgor Kislitsyn
2019-10-02[#1234] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # CHANGELOG.md # lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex # lib/pleroma/web/router.ex
2019-10-01Send an identifier alongside with error message in OAuthControllerMaxim Filippov
2019-09-30[#1260] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md
2019-09-26Merge branch 'develop' into tests/mastodon_api_controller.exMaksim Pechnikov
2019-09-26Merge branch 'hex-flake-id' into 'develop'kaniini
Replace `Pleroma.FlakeId` with `flake_id` hex package See merge request pleroma/pleroma!1692
2019-09-25Replace `Pleroma.FlakeId` with `flake_id` hex packageEgor Kislitsyn
2019-09-24Merge branch 'develop' into tests/mastodon_api_controller.exMaksim Pechnikov
2019-09-23Merge branch 'develop' into tests/mastodon_api_controller.exMaksim Pechnikov
2019-09-22Admin API: Add ability to force user's password resetMaxim Filippov
2019-09-19[#1234] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # lib/pleroma/web/admin_api/admin_api_controller.ex
2019-09-18Bump copyright years of files changed in 2019Haelwenn (lanodan) Monnier
Done via the following command: git diff 1e6c102bfcfe0e4835a48f2483f2376f9bf86a20 --stat --name-only | cat - | xargs sed -i 's/2017-2018 Pleroma Authors/2017-2019 Pleroma Authors/'
2019-09-17[#1234] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # lib/pleroma/web/activity_pub/activity_pub_controller.ex
2019-09-17[#1260] Rate-limiting for create authentication and related requests.Ivan Tashkinov
2019-09-08[#1234] Mastodon 2.4.3 hierarchical scopes initial support (WIP).Ivan Tashkinov
2019-09-06tests for mastodon_api_controller.exMaksim Pechnikov
2019-08-31[#1149] Refactored Oban workers API (introduced `enqueue/3`).Ivan Tashkinov
2019-08-31[#1149] Addressed code review comments (code style, jobs pruning etc.).Ivan Tashkinov
2019-08-22[#1149] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1149-oban-job-queue # Conflicts: # lib/pleroma/application.ex # lib/pleroma/scheduled_activity_worker.ex # lib/pleroma/web/federator/retry_queue.ex # lib/pleroma/web/oauth/token/clean_worker.ex # test/user_test.exs # test/web/federator_test.exs
2019-08-14Isolate OAuth.Token.CleanWorkerstwf
2019-08-14use default child_specsstwf
2019-08-13[#1149] Added more oban workers. Refactoring.Ivan Tashkinov
2019-07-29constants: add as_public constant and use it everywhereAriadne Conill
2019-07-10Wrap error messages into gettext helpersEgor Kislitsyn
2019-07-10Add license/copyright to all project filesfeld
2019-06-24[#184] small refactoring reset passwordMaksim
2019-06-18Minor edit (comment).Ivan Tashkinov