aboutsummaryrefslogtreecommitdiff
path: root/lib/pleroma/web
AgeCommit message (Collapse)Author
2019-07-24Merge branch 'develop' into feature/digest-emailRoman Chvanikov
2019-07-24Expose expires_at datetime in mastoAPI only for the activity actorMike Verdone
In the "pleroma" section of the MastoAPI for status activities you can see an expires_at item that states when the activity will expire, or nothing if the activity will not expire. The expires_at date is only visible to the person who posted the activity. This is the conservative approach in case some attacker decides to write a logger for expiring posts. However, in the future of OCAP, signed requests, and all that stuff, this attack might not be that likely. Some other pleroma dev should remove the restriction in the code at that time, if they're satisfied with the security implications of doing so.
2019-07-24Require that ephemeral posts live for at least one hourMike Verdone
If we didn't put some kind of lifetime requirement on these, I guess you could annoy people by sending large numbers of ephemeral posts that provoke notifications but then disappear before anyone can read them.
2019-07-24Add support for activity expiration to common and Masto APIMike Verdone
The "expires_at" parameter accepts an ISO8601-formatted date which defines when the activity will expire. At this point the API will not give you any feedback about if your post will expire or not.
2019-07-24check both item and parent domain blockssadposter
2019-07-24move domain block check to with blockSadposter
2019-07-24honour domain blocks on streaming notificationsSadposter
2019-07-23Merge branch 'feature/admin-api-user-statuses' into 'develop'kaniini
Admin API: Endpoint for fetching latest user's statuses See merge request pleroma/pleroma!1413
2019-07-23rich media: parser: splice the given URL into the resultAriadne Conill
2019-07-24Merge branch 'develop' into feature/admin-api-user-statusesMaxim Filippov
2019-07-24AdminAPI: Add "godmode" while fetching user statuses (i.e. admin can see ↵Maxim Filippov
private statuses)
2019-07-23Merge branch 'chore/adminapi-deprecated-endpoints' into 'develop'kaniini
Router: Remove deprecated AdminAPI endpoints See merge request pleroma/pleroma!1466
2019-07-23Router: Remove deprecated AdminAPI endpointsHaelwenn (lanodan) Monnier
2019-07-23Admin config fixAlexander Strizhakov
2019-07-23tests for Pleroma.Web.ActivityPub.PublisherMaksim
2019-07-23Fix functionMark Felder
2019-07-23Do not notify subscribers for messages from users which are replies to othersMark Felder
2019-07-23Use User.get_or_fetch/1 instead of OStatus.find_or_make_user/1kPherox
2019-07-22Feature/1087 wildcard option for blocksAlexander Strizhakov
2019-07-22Merge branch 'hardening/stop-misusing-sharedinbox' into 'develop'Haelwenn
activitypub: publisher: align sharedinbox usage with AP specification rules See merge request pleroma/pleroma!1464
2019-07-22Bugfix: muted/blocked user notification streamingSadposter
2019-07-22Add tests for users tasks and PleromaAuthenticatorSergey Suprunenko
2019-07-22Hide blocked users from interactionsSadposter
2019-07-22activitypub: publisher: align sharedinbox usage with AP specification rulesAriadne Conill
While debugging the follow breakage, I observed that our sharedInbox usage did not match the rules in the specification. Accordingly, I have better aligned our usage of sharedInbox with the rules outlined in the ActivityPub specification.
2019-07-21Merge branch 'fix/rich-media-ttl-fallback' into 'develop'kaniini
Fix rich media parser failing when no TTL can be found by image TTL setters See merge request pleroma/pleroma!1460
2019-07-21Fix rich media parser failing when no TTL can be found by image TTLrinpatch
setters
2019-07-21router: ensure the AP sharedinbox path is registered firstAriadne Conill
2019-07-20Resolve merge conflictsrinpatch
2019-07-20Merge branch 'develop' into feature/digest-emailRoman Chvanikov
2019-07-20Merge developRoman Chvanikov
2019-07-19Merge branch 'feature/matstodon-statuses-by-name' into 'develop'feld
Feature/matstodon statuses by name See merge request pleroma/pleroma!1211
2019-07-19Merge branch 'develop' into feature/matstodon-statuses-by-nameMark Felder
2019-07-19Merge branch 'feature/richmedia-ttl' into 'develop'kaniini
add the rich media ttl based on image exp time See merge request pleroma/pleroma!1438
2019-07-19Merge branch 'refactor/http-signature-plug' into 'develop'kaniini
http signature plug: separation of concerns See merge request pleroma/pleroma!1449
2019-07-19#1110 fixed /api/pleroma/healthcheckMaksim
2019-07-19change the structure of image ttl parsarSachin Joshi
2019-07-18Merge branch 'develop' into feature/admin-api-user-statusesMaxim Filippov
2019-07-18plugs: add MappedSignatureToIdentityPlugAriadne Conill
2019-07-18tests for Uploader with webhookMaksim
2019-07-17Merge branch 'feature/instance-fetch-actor' into 'develop'kaniini
instance fetch service actor See merge request pleroma/pleroma!1440
2019-07-17Fix password reset for non-test envEugenij
Fixes `Plug.Conn.NotSentError` that causes a 5xx error in response instead of 404 and 400. Fixes pattern matching error caused by different response format in test and non-test env: `Pleroma.Emails.Mailer.deliver_async` returns :ok when PleromaJobQueue is enabled and `{:ok, _}` when it's disabled. In tests, it's disabled.
2019-07-17activitypub: represent internal fetch actorAriadne Conill
2019-07-17activitypub: introduce internal fetch service actorAriadne Conill
2019-07-17webfinger: allow resolution of usernames with dots in them (internal actors)Ariadne Conill
2019-07-17activitypub: controller: rework the way the relay actor is presented so the ↵Ariadne Conill
code can be reused
2019-07-17user: refactor get_or_create_instance_user() into ↵Ariadne Conill
get_or_create_service_actor_by_id()
2019-07-17Merge branch 'feature/mention-mrf' into 'develop'kaniini
Add MRF MentionPolicy for dropping posts which mention specific actors See merge request pleroma/pleroma!1439
2019-07-17Add MRF MentionPolicy for dropping posts which mention specific actorsRX14
2019-07-16mastoapi password resetAlexander Strizhakov
added rate limit to password reset configure rate limit in runtime
2019-07-17add the rich media ttl based on image exp timeSachin Joshi