aboutsummaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2019-07-31Disallow following locked accounts over OStatusrinpatch
2019-07-31test for Pleroma.Web.CommonAPI.Utils.get_by_id_or_ap_idMaksim
2019-07-31ostatus: explicitly disallow protocol downgrade from activitypubAriadne Conill
This closes embargoed bug #1135.
2019-07-31Add tests for counters being updated on followrinpatch
2019-07-31tests for TwitterApi/UtilControllerMaksim
2019-07-31StatusView: Return direct conversation id.lain
2019-07-31Fix credo issuesrinpatch
2019-07-31Merge branch 'develop' into feature/hide-follows-remoterinpatch
2019-07-30Admin changesAlexander Strizhakov
2019-07-29twitter api: utils: rework do_remote_follow() to use CommonAPIAriadne Conill
Closes #1138
2019-07-29Revert "Merge branch 'bugfix/clean-up-markdown-rendering' into 'develop'"kaniini
This reverts merge request !1504
2019-07-29markdown: clean up html generated by earmarkAriadne Conill
2019-07-29Merge branch 'refactor/use-constants' into 'develop'lain
refactoring: begin to use constants See merge request pleroma/pleroma!1500
2019-07-29Add `mailerEnabled` to the NodeInfo metadataEugenij
2019-07-29Redirect not logged-in users to the MastoFE login page on private instancesSergey Suprunenko
2019-07-29added tests for OstatusControllerMaksim
2019-07-29constants: add as_public constant and use it everywhereAriadne Conill
2019-07-28transmogrifier: use User.delete() instead of handrolled user deletion code ↵Ariadne Conill
for remote users Closes #1104
2019-07-28add account confirmation email resend in mastodon apiSachin Joshi
2019-07-28fixed User.update_and_set_cache for stale userMaksim
2019-07-28Merge branch 'develop' into 'develop'kaniini
Fix HTTP sig tweak on KeyId See merge request pleroma/pleroma!1496
2019-07-28Handle 303 redirectsSergey Suprunenko
2019-07-28Fix HTTP sig tweak on KeyIdThomas Sileo
2019-07-26[#1097] added redirect: /pleroma/admin -> /pleroma/admin/Maksim
2019-07-25Merge branch 'develop' into feature/hide-follows-remoterinpatch
2019-07-24Merge branch 'fix-remote-follow-from-ostatus-subscribe' into 'develop'kaniini
Fix remote follow from /ostatus_subscribe Closes #1103 See merge request pleroma/pleroma!1472
2019-07-24Show the url advertised in the Activity in the Status JSON responseSergey Suprunenko
2019-07-24Do not prepend /media/ when using base_urlfeld
This ensures admin has full control over the path where media resides.
2019-07-25Change to not require `magic-public-key` on WebFingerkPherox
2019-07-24tests WebFingerMaksim
2019-07-24Add `domain_blocking` to the relationship API (GET ↵Eugenij
/api/v1/accounts/relationships)
2019-07-24Revert "squash! Expose expires_at datetime in mastoAPI only for the activity ↵Mike Verdone
actor" This reverts commit 2981821db834448bf9b2ba26590314e36201664c.
2019-07-24squash! Expose expires_at datetime in mastoAPI only for the activity actorMike Verdone
NOTE: rewrite the commit msg
2019-07-24Merge branch 'develop' into feature/digest-emailRoman Chvanikov
2019-07-24Expose expires_at datetime in mastoAPI only for the activity actorMike Verdone
In the "pleroma" section of the MastoAPI for status activities you can see an expires_at item that states when the activity will expire, or nothing if the activity will not expire. The expires_at date is only visible to the person who posted the activity. This is the conservative approach in case some attacker decides to write a logger for expiring posts. However, in the future of OCAP, signed requests, and all that stuff, this attack might not be that likely. Some other pleroma dev should remove the restriction in the code at that time, if they're satisfied with the security implications of doing so.
2019-07-24Require that ephemeral posts live for at least one hourMike Verdone
If we didn't put some kind of lifetime requirement on these, I guess you could annoy people by sending large numbers of ephemeral posts that provoke notifications but then disappear before anyone can read them.
2019-07-24Add support for activity expiration to common and Masto APIMike Verdone
The "expires_at" parameter accepts an ISO8601-formatted date which defines when the activity will expire. At this point the API will not give you any feedback about if your post will expire or not.
2019-07-24Add activity expiration workerMike Verdone
This is a worker that runs every minute and deletes expired activities. It's based heavily on the scheduled activities worker.
2019-07-24Add activity expirations tableMike Verdone
Add a table to store activity expirations. An activity can have zero or one expirations. The expiration has a scheduled_at field which stores the time at which the activity should expire and be deleted.
2019-07-24check both item and parent domain blockssadposter
2019-07-24move domain block check to with blockSadposter
2019-07-24honour domain blocks on streaming notificationsSadposter
2019-07-23Merge branch 'feature/admin-api-user-statuses' into 'develop'kaniini
Admin API: Endpoint for fetching latest user's statuses See merge request pleroma/pleroma!1413
2019-07-23rich media: parser: splice the given URL into the resultAriadne Conill
2019-07-24Merge branch 'develop' into feature/admin-api-user-statusesMaxim Filippov
2019-07-24AdminAPI: Add "godmode" while fetching user statuses (i.e. admin can see ↵Maxim Filippov
private statuses)
2019-07-23Merge branch 'chore/adminapi-deprecated-endpoints' into 'develop'kaniini
Router: Remove deprecated AdminAPI endpoints See merge request pleroma/pleroma!1466
2019-07-23Router: Remove deprecated AdminAPI endpointsHaelwenn (lanodan) Monnier
2019-07-23Admin config fixAlexander Strizhakov
2019-07-23tests for Pleroma.Web.ActivityPub.PublisherMaksim