f6be980f4f
activitypub: object view: avoid leaking private details
6 years ago
98795172a7
ostatus controller: respond with AS2 objects instead of activities to notice URIs
6 years ago
dfcfb184b1
activitypub: transmogrifier: make deletes secure
6 years ago
0d1375f274
federator: return :ok or :error depending on if an AP doc was accepted or not
6 years ago
3d9266a8cb
federator: do origin containment when processing inbound messages
6 years ago
c88533209c
activitypub: user fetching: use fetch_and_contain_remote_object_from_id()
6 years ago
daa8ec3d62
activitypub: factor out AP object fetching to it's own function and add ID-based containment
6 years ago
603fccf175
activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing
6 years ago
f87b315618
TwitterAPI: Fix dm_timeline displaying only half of the conversation.
6 years ago
2f639ea129
Merge branch 'feature/pleromafe-usersearch' into 'develop'
...
Add Twitter / Pleroma API user search
See merge request pleroma/pleroma!452
6 years ago
27aa136aac
Format.
6 years ago
7b170cd616
Add Pleroma user search api for PleromaFE.
6 years ago
cc45797f4e
Merge branch 'fix-media-proxy-filename' into 'develop'
...
media_proxy: use path only to retrieve filename
See merge request pleroma/pleroma!450
6 years ago
69d557e86d
Merge branch 'twitter-api-direct-messages' into 'develop'
...
Twitter api direct messages
See merge request pleroma/pleroma!449
6 years ago
f52a1d1ec5
media_proxy: use path only to retrieve filename
6 years ago
ea9a776d7b
TwitterApi: Add direct message endpoint
6 years ago
2cf40237ff
MastodonAPI: Add pagination to private messages.
6 years ago
9b553a1087
media_proxy: CSP, content-disposition
...
* Adds CSP headers to the media proxy endpoint
* Sends `content-disposition: attachment; …` for non-image/video/audio
content types
The default list can be overwritten with `:media_proxy,
:safe_content_types` in the configuration.
* Also now appends the filename to the proxy URL (fixes some mobile apps,
it was requested a while ago)
6 years ago
87c76a9a2f
Add __Host- prefix when secure flag is enabled
6 years ago
0ce5623134
Merge branch 'twitter-api-null-display-name' into 'develop'
...
Twitter API: Fall back to user.nickname if user has no name
Closes #375
See merge request pleroma/pleroma!444
6 years ago
cb6fd73861
Twitter API: Fall back to user.nickname if user has no name
6 years ago
54923c2e55
Merge branch 'feature/csp-plug' into 'develop'
...
migrate CSP management to CSPPlug
See merge request pleroma/pleroma!441
6 years ago
fe67665e19
rename CSPPlug to HTTPSecurityPlug.
6 years ago
1592fa2bea
Mastodon API: Fix list streaming
6 years ago
f516e317ea
plugs: add CSPPlug
6 years ago
419ed3a0ca
oauth: fix token decode regression
6 years ago
97e50f3191
activitypub: transmogrifier: sanitize internal representation details from outgoing objects
...
this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside
projects which tried to parse our internal data. accordingly, it seems better to just remove
it.
6 years ago
f8310114a6
activitypub: object view: sanitize both the activity and the object when an activity is given for rendering
6 years ago
c9c1f9dee2
Merge branch 'bugfix/ostatus-as2-reflection' into 'develop'
...
ostatus: only federate activities concerning note objects
See merge request pleroma/pleroma!437
6 years ago
7daa102fa4
Merge branch 'bugfix/local-jsonld-context' into 'develop'
...
Host LitePub JSON-LD context locally
See merge request pleroma/pleroma!435
6 years ago
4f87b8362b
endpoint: move CORSPlug in front of Plug.Static
6 years ago
03a9990baf
endpoint: fix formatting
6 years ago
e6d246882d
federator: don't federate anything other than Note objects to OStatus
6 years ago
e4971553c7
activitypub: utils: use same object type list for mention extraction as insertion
6 years ago
b9871e7e5a
activitypub: utils: wrap Note objects in a Create when extracting mentions
6 years ago
6cadfcb21e
activitypub: utils: switch to using new Notification.get_notified_from_activity().
6 years ago
6b4064fa5d
activitypub: transmogrifier: unify mention extraction
6 years ago
2fab32ab61
Pleroma.Web.Endpoint: Whitelist schemas directory
6 years ago
934125695d
Move /litepub-1.0.jsonld to /schemas/litepub-0.1.jsonld
6 years ago
4e93d6ae14
common api: utils: flip to/cc for mentions
6 years ago
3e33479c05
activitypub: transmogrifier: only consider `to` users as mention targets
6 years ago
abcacec97d
Pleroma.Web.ActivityPub.Utils: Use locally-served JSON-LD Litepub context instead of Github-hosted one
6 years ago
da16ada424
utils: use litepub @context instead of that huge mess
6 years ago
f733470037
user view: unify a @context entry that was missed
6 years ago
59cf7cf235
Merge branch 'small-jsonld-refactor' into 'develop'
...
Small jsonld refactor
See merge request pleroma/pleroma!433
6 years ago
34bd411781
Unify json ld header handling.
6 years ago
3b02fd9fb7
Small refactor.
6 years ago
4d627a5117
Merge branch 'feature/qvitter-notifications-dismiss' into 'develop'
...
qvitter notifications: add new "read notifications" API
See merge request pleroma/pleroma!431
6 years ago
b451a92d78
Merge branch 'runtime-config' into 'develop'
...
Runtime configuration
See merge request pleroma/pleroma!430
6 years ago
e42f2efae4
/api/v1/accounts/relationships Return an empty array if no id in params
...
This copies Mastodon API behaviour & fixes Mastalab app.
6 years ago
William Pitcock