94627baa5c
New rate limiter
5 years ago
f6056e9c9c
UserEnabledPlug: Don't authenticate unconfirmed users.
5 years ago
886a07ba57
Move static_fe config to its own section instead of in :instance.
5 years ago
8969c5522d
Make many of the improvements suggested in review.
5 years ago
e8bee35578
Static FE plug should only respond to text/html requests.
5 years ago
dc3b87d153
Move static FE routing into its own plug.
...
Previously it was piggybacking on FallbackRedirectController for users
and OStatusController for notices; now it's all in one place.
5 years ago
365657320c
Fix TrailingFormatPlug not being active for /api/oauth_tokens
5 years ago
10ff01acd9
[ #1304 ] Moved all non-mutes / non-blocks fields from User.Info to User. WIP.
5 years ago
64095961fe
[ #1234 ] Merge remote-tracking branch 'remotes/upstream/develop' into 1234-mastodon-2-4-3-oauth-scopes
...
# Conflicts:
# CHANGELOG.md
# lib/pleroma/web/mastodon_api/controllers/mastodon_api_controller.ex
# lib/pleroma/web/router.ex
5 years ago
f9380289eb
Add `remote_ip` plug
5 years ago
e4f3d7f69d
Apply suggestion to lib/pleroma/plugs/oauth_scopes_plug.ex
5 years ago
01c1078015
[ #1234 ] Merge remote-tracking branch 'remotes/upstream/develop' into 1234-mastodon-2-4-3-oauth-scopes
...
# Conflicts:
# lib/pleroma/web/activity_pub/activity_pub_controller.ex
5 years ago
efbc2edba1
[ #1234 ] Merge remote-tracking branch 'remotes/upstream/develop' into 1234-mastodon-2-4-3-oauth-scopes
...
# Conflicts:
# lib/pleroma/web/activity_pub/activity_pub_controller.ex
# lib/pleroma/web/router.ex
5 years ago
e6f43a831b
[ #1234 ] Permissions-related fixes / new functionality (Masto 2.4.3 scopes).
5 years ago
b0e6058021
Parse http signature for request to objects/activities
5 years ago
dabc4a00f5
Put the cache with the right key when using a tracking function
5 years ago
769fb778d4
Track object/create activity fetches
5 years ago
11e12b5761
Add Pleroma.Plugs.Cache
5 years ago
b63faf9819
[ #1234 ] Mastodon 2.4.3 hierarchical scopes initial support (WIP).
5 years ago
3523bdcf26
Call TrailingFormatPlug for /api/pleroma/emoji
...
Apparently Pleroma-FE still calls it with trailing '.json'
5 years ago
cc1d1ee406
Mastdon API: Add ability to get a remote account by nickname to
...
`/api/v1/accounts/:id`
5 years ago
55341ac717
tests WebFinger
5 years ago
716afc83ce
Merge branch 'refactor/http-signature-plug' into 'develop'
...
http signature plug: separation of concerns
See merge request pleroma/pleroma!1449
5 years ago
c947cfec5a
mapped signature plug: use `user` assign like authentication plug
5 years ago
f435217e50
tests for Plugs.AuthenticationPlug
5 years ago
a8af0ac053
mapped signature plug: fix user lookup
5 years ago
5ea0cd69f7
mapped signature plug: don't invalidate in cases where a signature is actually not present (testsuite)
5 years ago
184fa61fb3
plugs: add MappedSignatureToIdentityPlug
5 years ago
88d064d80e
http signature plug: remove redundant checks handled by HTTPSignatures library
...
the redundant checks assumed a POST request, which will not work for signed GETs.
this check was originally needed because the HTTPSignatures adapter assumed that
the requests were also POST requests. but now, the adapter has been corrected.
5 years ago
105f437ce9
formatting
5 years ago
f98f7ad1b9
detect and use sha512-crypt for stored password hash.
5 years ago
369e9bb42f
[ #1041 ] Rate-limited status actions (per user and per user+status).
5 years ago
ed8ce21a22
Fix unused import warning
5 years ago
a42da8f311
Fix response
5 years ago
5104f65b69
Wrap error messages into gettext helpers
5 years ago
0d54a571ca
Add SetLocalePlug
5 years ago
889a9c3a3f
Polish IdempotencyPlug
5 years ago
159630b21c
Fix credo warning
5 years ago
825077a5b0
Add Idempotency plug
5 years ago
c2ca1f22a2
it is changed in compile time
...
we can't change module attributes and endpoint settings in runtime
5 years ago
b22b10d3aa
Improve rate limiter documentation
...
Documents how to disable rate limiting
5 years ago
63ab3c30eb
Merge branch 'feature/rate-limiter' into 'develop'
...
Feature/Rate Limiter
Closes #943
See merge request pleroma/pleroma!1266
5 years ago
ad04d12de6
Replace `MastodonAPIController.account_register/2` rate limiter
5 years ago
2e5affce61
Add RateLimiter
5 years ago
92213fb87c
Replace Mix.env with Pleroma.Config.get(:env)
...
Mix.env/0 is not availible in release environments such as distillery or
elixir's built-in releases.
5 years ago
99f70c7e20
Use Pleroma.Config everywhere
5 years ago
aa11fa4864
add report uri and report to
5 years ago
62516be9c4
Merge branch 'fix/public-option-not-working' into 'develop'
...
Fix public option not working
Closes #873
See merge request pleroma/pleroma!1143
5 years ago
7b8dc99ef1
Implement Pleroma.Plugs.EnsurePublicOrAuthenticated
5 years ago
071f78733a
switch to pleroma/http_signatures library
5 years ago
a2be420f94
differences_in_mastoapi_responses.md: fullname & bio are optionnal
...
[ci skip]
5 years ago
acb04306b6
Standardize construction of websocket URL
...
This follows up on the change made in d747bd98
5 years ago
533d8cd581
Parse access_token from body parameters and URL parameters
5 years ago
88d3cb44c3
replace `Repo.get_by(User, nickname: nickname)` with `User.get_by_nickname(nickname)`
6 years ago
c708656b5e
Merge branch 'robotstxt' into 'develop'
...
Add robots.txt
Closes #723
See merge request pleroma/pleroma!929
6 years ago
3dadaa4432
robots.txt
...
Add default robots.txt that allows bots access to all paths.
Add mix task to generate robots.txt taht allows bots access to no paths.
Document custom emojis, MRF and static_dir
static_dir documentation includes docs for the robots.txt Mix task.
6 years ago
cbdd11c381
Merge develop to bump elixir version in the CI so I don't get failing formatting
6 years ago
e2fe796c63
Add some tests
6 years ago
c42d34b2ec
[Credo] fix Credo.Check.Readability.MaxLineLength
6 years ago
a3a9cec483
[Credo] fix Credo.Check.Readability.AliasOrder
6 years ago
92a69bddce
escape quotation marks in Content-Disposition header
6 years ago
5a73cae2be
WIP: Stop mangling filenames
6 years ago
fc37e5815f
Plugs.HTTPSecurityPlug: Add static_url to CSP's connect-src
...
Closes: https://git.pleroma.social/pleroma/pleroma/merge_requests/469
6 years ago
bc4f77b10b
[ #468 ] Merged `upstream/develop`, resolved conflicts.
6 years ago
2a4a4f3342
[ #468 ] Defined OAuth restrictions for all applicable routes.
...
Improved missing "scopes" param handling.
Allowed "any of" / "all of" mode specification in OAuthScopesPlug.
Fixed auth UI / behavior when user selects no permissions at /oauth/authorize.
6 years ago
063baca5e4
[ #468 ] User UI for OAuth permissions restriction. Standardized storage format for `scopes` fields, updated usages.
6 years ago
da4c662af3
Plugs.HTTPSecurityPlug: Add webpacker to connect-src
6 years ago
00e8f0b07d
Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev mode
...
This is needed to run dev mode mastofe at the same time
6 years ago
ea1058929c
Use url[:scheme] instead of protocol to determine if https is enabled
6 years ago
6a6a5b3251
de-group alias/es
6 years ago
4ad843fb9d
[ #468 ] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions.
6 years ago
60ea29dfe6
Credo fixes: alias grouping/ordering
6 years ago
106f4e7a0f
Credo fixes: parameter consistency
6 years ago
fa5ec765d9
Serve sw-pleroma.js properly
6 years ago
8018ae7ae5
Join on preloads to avoid N+1 queries
6 years ago
980b5288ed
update copyright years to 2019
6 years ago
2791ce9a1f
add license boilerplate to pleroma core
6 years ago
f3eb414e28
Add a way to use the admin api without a user.
6 years ago
b1860fe85a
Instance/Static runtime plug
...
This allows to set-up an arbitrary directory which overrides most of the
static files: index.html static/ emoji/ packs/ sounds/ images/ instance/
favicon.png.
If the files are not present in the directory, the bundled ones in
priv/static will be used.
6 years ago
5dcb7aecea
More put_view.
6 years ago
658edb166f
fix and improve web push; add configuration docs
6 years ago
074fa790ba
fix compile warnings
6 years ago
4944498133
Merge branch 'develop' into feature/compat/push-subscriptions
...
# Conflicts:
# lib/pleroma/application.ex
# lib/pleroma/plugs/oauth_plug.ex
6 years ago
8b4397c704
Merge branch 'develop' into feature/compat/push-subscriptions
...
# Conflicts:
# lib/mix/tasks/sample_config.eex
# lib/pleroma/web/twitter_api/controllers/util_controller.ex
# mix.exs
# mix.lock
6 years ago
c524c50509
fix/273
6 years ago
f18b86fd5f
More fixes for Info schema.
6 years ago
c443c9bd72
Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into validate-user-info
6 years ago
1c67277c80
Fix admin api.
6 years ago
b19597f602
reverse proxy / uploads
6 years ago
d0ec2812bd
Merge remote-tracking branch 'origin' into validate-user-info
6 years ago
04daa0fa44
Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there is https
...
This fixes running mastofe with MIX_ENV=dev
6 years ago
591b11eafc
Add manifest-src to allow manifest.json
6 years ago
3356c7d1e9
oauth plug: fix deactivated check
6 years ago
4a79b89dba
lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not admin.”
6 years ago
c8b8f1d32c
[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, fix error reporting
6 years ago
7076d45cb6
lib/pleroma/plugs/user_is_admin_plug.ex: Create
6 years ago
c07464607d
http security: remove form-action from CSP definitions
6 years ago
ee5932a504
http security: allow referrer-policy to be configured
6 years ago
fe67665e19
rename CSPPlug to HTTPSecurityPlug.
6 years ago
df72978dce
csp plug: add support for certificate transparency
6 years ago
Steven Fuchs