aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/web/oauth
AgeCommit message (Collapse)Author
2020-10-13oauth consistencyAlexander Strizhakov
2020-09-16[#2497] Media preview proxy: misc. improvements (`static` param support, ↵Ivan Tashkinov
dynamic fifo pipe path), refactoring.
2020-09-10Merge branch 'feature/1790-oban-overuse-clear-oauth-token' into 'develop'rinpatch
Feature/1790 removing expired tokens through Oban scheduled jobs See merge request pleroma/pleroma!2957
2020-09-10expire mfa tokens through ObanAlexander Strizhakov
2020-09-10schedule expired oauth tokens deletion with ObanAlexander Strizhakov
2020-09-09[#2130] Fixed OAuth OOB authentication for users with enabled MFA.Ivan Tashkinov
2020-08-06[#2025] Defaulted OAuth login scopes choice to all scopes when user selects ↵Ivan Tashkinov
no scopes.
2020-07-31[#1985] Prevented force login on registration if account approval and/or ↵Ivan Tashkinov
email confirmation needed. Refactored login code in OAuthController, reused in AccountController. Added tests.
2020-07-12Prevent unapproved users from logging inAlex Gleason
2020-06-29Credo fixes.lain
2020-06-29Token Response: Remove empty file.lain
2020-06-29OAuth: Extract view-type functions to a view.lain
2020-06-05Create Pleroma.Maps.put_if_present(map, key, value, value_fun // &{:ok, &1})Haelwenn
Unifies all the similar functions to one and simplify some blocks with it.
2020-05-25Add OpenAPI spec for AdminAPI.OAuthAppContollerEgor Kislitsyn
2020-05-18copyright updateAlexander Strizhakov
2020-05-07Pleroma.Web.TwitterAPI.TwoFactorAuthenticationController -> ↵Maksim
Pleroma.Web.PleromaAPI.TwoFactorAuthenticationController
2020-04-28Merge remote-tracking branch 'remotes/origin/develop' into ↵Ivan Tashkinov
automatic-authentication-and-instance-publicity-checks # Conflicts: # lib/pleroma/web/mastodon_api/controllers/account_controller.ex
2020-04-24[#2409] Tested all auth setup configs in AuthTestControllerTest. Adjusted ↵Ivan Tashkinov
:skip_plug definitions for some endpoints.
2020-04-24Support validation for inline OpenAPI schema and automatic tests for examplesEgor Kislitsyn
2020-04-17Merge branch 'feature/1584-client-captcha-options' into 'develop'Haelwenn
Creating trusted app from adminFE & mix task Closes #1584 See merge request pleroma/pleroma!2252
2020-04-15Merge remote-tracking branch 'remotes/origin/develop' into ↵Ivan Tashkinov
authenticated-api-oauth-check-enforcement
2020-04-06Enforcement of OAuth scopes check for authenticated API endpoints, ↵Ivan Tashkinov
:skip_plug plug to mark a plug explicitly skipped (disabled).
2020-04-01Add OpenAPIEgor Kislitsyn
2020-03-23creating trusted app from adminFE & mix taskAlexander Strizhakov
2020-03-03Update CopyrightsMark Felder
2020-03-02Bump copyright years of files changed after 2020-01-07Haelwenn (lanodan) Monnier
Done via the following command: git diff fcd5dd259a1700a045be902b43391b0d1bd58a5b --stat --name-only | xargs sed -i '/Pleroma Authors/c# Copyright © 2017-2020 Pleroma Authors <https:\/\/pleroma.social\/>'
2020-01-27Merge branch 'develop' into issue/1383Maksim Pechnikov
2020-01-26Merge branch 'develop' into issue/1280Mark Felder
2020-01-22Merge branch 'develop' into issue/1383Maksim Pechnikov
2020-01-20Bump credo to 1.1.5Haelwenn (lanodan) Monnier
2020-01-17updated error messages for authentication processMaksim Pechnikov
2020-01-10[#1478] OAuth admin tweaks: enforced OAuth admin scopes usage by default, ↵Ivan Tashkinov
migrated existing OAuth records. Adjusted tests.
2019-12-14Merge branch 'develop' into issue/1383Maksim Pechnikov
2019-12-12[#1427] Graceful clearance of OAuth admin scopes for non-admin users (no ↵Ivan Tashkinov
error raised). PleromaFE and other clients may safely request admin scope(s): if user isn't an admin, request is successful but only non-admin scopes from request are granted.
2019-12-10Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1427-oauth-admin-scopes # Conflicts: # CHANGELOG.md
2019-12-08OAuth token cleanup: Get rid of compile-time configurationrinpatch
2019-12-06[#1427] Reworked admin scopes support.Ivan Tashkinov
Requalified users.is_admin flag as legacy accessor to admin actions in case token lacks admin scope(s).
2019-11-29[#1427] Initial support for OAuth admin scopes.Ivan Tashkinov
2019-11-25moved OAuth.Token.CleanWorker to Oban Periodic jobsMaksim Pechnikov
2019-11-11Merge branch 'iss-1376' into 'develop'lain
Check client and token in GET /oauth/authorize See merge request pleroma/pleroma!1940
2019-11-11New rate limiterSteven Fuchs
2019-11-05Check client and token in GET /oauth/authorizeAkiraFukushima
2019-10-16[#1304] Moved all non-mutes / non-blocks fields from User.Info to User. WIP.Ivan Tashkinov
2019-10-07Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md
2019-10-06Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # CHANGELOG.md # lib/pleroma/web/mastodon_api/controllers/account_controller.ex # lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex # lib/pleroma/web/router.ex
2019-10-06Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md
2019-10-04Fix OAuthControllerEgor Kislitsyn
2019-10-02[#1234] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1234-mastodon-2-4-3-oauth-scopes # Conflicts: # CHANGELOG.md # lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex # lib/pleroma/web/router.ex
2019-10-01Send an identifier alongside with error message in OAuthControllerMaxim Filippov
2019-09-30[#1260] Merge remote-tracking branch 'remotes/upstream/develop' into ↵Ivan Tashkinov
1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md