98795172a7
ostatus controller: respond with AS2 objects instead of activities to notice URIs
6 years ago
dfcfb184b1
activitypub: transmogrifier: make deletes secure
6 years ago
0ca00b3a07
Web.AdminAPI.AdminAPIController: Fixes bugs found with ExUnit
6 years ago
12ccf0c4f8
Change Relay from `status` to `{status, message}`
6 years ago
4634d99d0d
Web.Router: Change right to permission group (except for function names)
6 years ago
0d1375f274
federator: return :ok or :error depending on if an AP doc was accepted or not
6 years ago
3d9266a8cb
federator: do origin containment when processing inbound messages
6 years ago
c88533209c
activitypub: user fetching: use fetch_and_contain_remote_object_from_id()
6 years ago
daa8ec3d62
activitypub: factor out AP object fetching to it's own function and add ID-based containment
6 years ago
e0b0fde713
Web.AdminAPI.AdminAPIController: Change right to permission group (except for function names)
6 years ago
ccd6b1956d
lib/pleroma/web/admin_api/admin_api_controller.ex: Support status reply of Relay.{un,}follow
6 years ago
265c8c5209
Pleroma.Web.ActivityPub.Relay: make {un,}follow return :ok only if it worked, :error if it didn’t
6 years ago
4a79b89dba
lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not admin.”
6 years ago
f9d05902fe
lib/pleroma/web/admin_api/admin_api_controller.ex: An admin cannot un-admin themselves
6 years ago
a87ed2fad6
Pleroma.Web.AdminAPI.AdminAPIController: user_create statement format
6 years ago
f48062488e
Add get endpoints for rights [AdminAPI]
6 years ago
59ce7fedce
Fix connection returns make generic right endpoint [AdminAPI]
6 years ago
c5a2bd6a65
admin_api_controller.ex: fix remaining params at once
6 years ago
95b107b6cc
admin_api_controller.ex: Add documentation, fix get_invite_token
6 years ago
578a911737
admin_api_controller.ex: get_password_reset: fix params and response
6 years ago
5732eef16b
lib/pleroma/web/admin_api/admin_api_controller.ex: Pleroma.Web.AdminAPI.Controller → Pleroma.Web.AdminAPI.AdminAPIController
6 years ago
c8b8f1d32c
[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, fix error reporting
6 years ago
7076d45cb6
lib/pleroma/plugs/user_is_admin_plug.ex: Create
6 years ago
77d2fd54dd
admin_api_controller: Have some basic code
6 years ago
ee2e1328ad
admin_api_controller.ex: Create
6 years ago
603fccf175
activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing
6 years ago
05967472f2
Merge branch 'feature/uploader-mdii' into 'develop'
...
Feature / MDII Uploader
See merge request pleroma/pleroma!454
6 years ago
59e079f641
fallbacking into local uploader
6 years ago
8fd0556c78
better config reading
6 years ago
f87b315618
TwitterAPI: Fix dm_timeline displaying only half of the conversation.
6 years ago
2f639ea129
Merge branch 'feature/pleromafe-usersearch' into 'develop'
...
Add Twitter / Pleroma API user search
See merge request pleroma/pleroma!452
6 years ago
c07464607d
http security: remove form-action from CSP definitions
6 years ago
e8d8c84f79
Add better test for user search functionlity.
6 years ago
55abd8482e
better config
6 years ago
52224de39f
better extension detection
6 years ago
4fbfacf5e1
debug
6 years ago
8e707aba29
format
6 years ago
ebe658c169
debuf
6 years ago
698cb3587c
omplement mdii uploader
6 years ago
58af0787be
add mdii uploader
6 years ago
27aa136aac
Format.
6 years ago
7b170cd616
Add Pleroma user search api for PleromaFE.
6 years ago
cc45797f4e
Merge branch 'fix-media-proxy-filename' into 'develop'
...
media_proxy: use path only to retrieve filename
See merge request pleroma/pleroma!450
6 years ago
69d557e86d
Merge branch 'twitter-api-direct-messages' into 'develop'
...
Twitter api direct messages
See merge request pleroma/pleroma!449
6 years ago
f52a1d1ec5
media_proxy: use path only to retrieve filename
6 years ago
ea9a776d7b
TwitterApi: Add direct message endpoint
6 years ago
2cf40237ff
MastodonAPI: Add pagination to private messages.
6 years ago
9b553a1087
media_proxy: CSP, content-disposition
...
* Adds CSP headers to the media proxy endpoint
* Sends `content-disposition: attachment; …` for non-image/video/audio
content types
The default list can be overwritten with `:media_proxy,
:safe_content_types` in the configuration.
* Also now appends the filename to the proxy URL (fixes some mobile apps,
it was requested a while ago)
6 years ago
87c76a9a2f
Add __Host- prefix when secure flag is enabled
6 years ago
0ce5623134
Merge branch 'twitter-api-null-display-name' into 'develop'
...
Twitter API: Fall back to user.nickname if user has no name
Closes #375
See merge request pleroma/pleroma!444
6 years ago
cb6fd73861
Twitter API: Fall back to user.nickname if user has no name
6 years ago
54923c2e55
Merge branch 'feature/csp-plug' into 'develop'
...
migrate CSP management to CSPPlug
See merge request pleroma/pleroma!441
6 years ago
ee5932a504
http security: allow referrer-policy to be configured
6 years ago
fe67665e19
rename CSPPlug to HTTPSecurityPlug.
6 years ago
1592fa2bea
Mastodon API: Fix list streaming
6 years ago
df72978dce
csp plug: add support for certificate transparency
6 years ago
331cf6ada1
csp plug: add sts support
6 years ago
f516e317ea
plugs: add CSPPlug
6 years ago
419ed3a0ca
oauth: fix token decode regression
6 years ago
97e50f3191
activitypub: transmogrifier: sanitize internal representation details from outgoing objects
...
this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside
projects which tried to parse our internal data. accordingly, it seems better to just remove
it.
6 years ago
f8310114a6
activitypub: object view: sanitize both the activity and the object when an activity is given for rendering
6 years ago
c9c1f9dee2
Merge branch 'bugfix/ostatus-as2-reflection' into 'develop'
...
ostatus: only federate activities concerning note objects
See merge request pleroma/pleroma!437
6 years ago
7daa102fa4
Merge branch 'bugfix/local-jsonld-context' into 'develop'
...
Host LitePub JSON-LD context locally
See merge request pleroma/pleroma!435
6 years ago
4f87b8362b
endpoint: move CORSPlug in front of Plug.Static
6 years ago
03a9990baf
endpoint: fix formatting
6 years ago
e6d246882d
federator: don't federate anything other than Note objects to OStatus
6 years ago
e4971553c7
activitypub: utils: use same object type list for mention extraction as insertion
6 years ago
b3c360ce2c
notification: add fallback get_notified_from_activity()
6 years ago
b9871e7e5a
activitypub: utils: wrap Note objects in a Create when extracting mentions
6 years ago
8c805ada32
user: remove obsolete User.get_notified_from_activity().
6 years ago
6cadfcb21e
activitypub: utils: switch to using new Notification.get_notified_from_activity().
6 years ago
cdfdd77e30
notification: implement new Notification.get_notified_from_activity()
6 years ago
d26cd6c1bf
user: factor out user set fetching from User.get_notified_from_activity()
6 years ago
81d6ca1783
user: implement AS2 mention extraction + unify Announce handling
6 years ago
6b4064fa5d
activitypub: transmogrifier: unify mention extraction
6 years ago
0a2c1a3419
user: add optional local_only param to get_notified_from_activity()
6 years ago
2fab32ab61
Pleroma.Web.Endpoint: Whitelist schemas directory
6 years ago
934125695d
Move /litepub-1.0.jsonld to /schemas/litepub-0.1.jsonld
6 years ago
4e93d6ae14
common api: utils: flip to/cc for mentions
6 years ago
3e33479c05
activitypub: transmogrifier: only consider `to` users as mention targets
6 years ago
144dc048b8
user: only consider `to` recipients as mention targets
6 years ago
abcacec97d
Pleroma.Web.ActivityPub.Utils: Use locally-served JSON-LD Litepub context instead of Github-hosted one
6 years ago
da16ada424
utils: use litepub @context instead of that huge mess
6 years ago
f733470037
user view: unify a @context entry that was missed
6 years ago
59cf7cf235
Merge branch 'small-jsonld-refactor' into 'develop'
...
Small jsonld refactor
See merge request pleroma/pleroma!433
6 years ago
34bd411781
Unify json ld header handling.
6 years ago
3b02fd9fb7
Small refactor.
6 years ago
4d627a5117
Merge branch 'feature/qvitter-notifications-dismiss' into 'develop'
...
qvitter notifications: add new "read notifications" API
See merge request pleroma/pleroma!431
6 years ago
b451a92d78
Merge branch 'runtime-config' into 'develop'
...
Runtime configuration
See merge request pleroma/pleroma!430
6 years ago
e42f2efae4
/api/v1/accounts/relationships Return an empty array if no id in params
...
This copies Mastodon API behaviour & fixes Mastalab app.
6 years ago
9070588493
Runtime config: MRF changes
6 years ago
b2105a3131
twitterapi: add notification read endpoint
6 years ago
f16c2e0b1b
notification: add Notification.set_read_up_to()
6 years ago
5bb88fd174
Runtime configuration
...
Related to #85
Everything should now be configured at runtime, with the exception of
the `Pleroma.HTML` scrubbers (the scrubbers used can be
changed at runtime, but their configuration is compile-time) because
it's building a module with a macro.
6 years ago
a68c18f0ad
Merge branch 'unify-mastodon-oauth' into 'develop'
...
Unify Mastodon Login with OAuth login.
See merge request pleroma/pleroma!429
6 years ago
0f3e78addb
Merge branch 'runtime-router' into 'develop'
...
Runtime configured router
See merge request pleroma/pleroma!426
6 years ago
a8f1e30cb8
Formatting.
6 years ago
7d328c658d
Small wrapper module around Application.get_env/put_env
...
Same API as the old Pleroma.Config
6 years ago
4f640c43ed
Unify Mastodon Login with OAuth login.
...
This removes duplication in the login code.
6 years ago
2bc924ba45
Get rid of Pleroma.Config in favor of Application
...
Discussed in https://git.pleroma.social/pleroma/pleroma/merge_requests/426#note_7232
6 years ago
013f7ba8c1
Add federating plug & public tests
6 years ago
83911b1443
Fix wrong return when finmoji is disabled
6 years ago
fd0e7d18d9
handle_continue is OTP21+
6 years ago
6fe23c5458
Runtime configured router
6 years ago
d096bc17bf
revert endpoint position in supervision tree
6 years ago
763fc7b44f
Runtime configured emojis
...
The changes are a bit heavy since the emojis were loaded into module
attributes from filesystem.
This introduces a GenServer using an ETS table to cache in memory the
emojis, and allows a runtime-reload with `Pleroma.Emoji.reload()`.
6 years ago
007f1c73b1
Merge branch 'feature/cors-again' into 'develop'
...
Add CORSPlug to make web-based OAuth easier.
See merge request pleroma/pleroma!420
6 years ago
3e50bb667f
Pleroma.Web.MastodonAPI.StatusView: Content isn’t nullable
6 years ago
e954cfcc2c
Add CORSPlug to make web-based OAuth easier.
6 years ago
4bcdbb12a4
Merge branch 'fix_hashtag_search' into 'develop'
...
Fix hashtag search
See merge request pleroma/pleroma!418
6 years ago
0cca7edbe0
Fix hashtag search
...
When we lowercase the search it will succesfully do a case insenstive
match. Now #Linux will match #linux and #LINUX whereas previously it
would only match the exact case.
6 years ago
45ebc8dd9a
Check for empty string in_reply_to ids.
6 years ago
3c7d4ff271
Pleroma.Web.TwitterAPI.ActivityView: Harden TwitterAPI against remnant of prismo
6 years ago
24ba08de13
twitter api: add support for rendering Page objects
6 years ago
4d8f076125
mastodon api: add support for rendering Page objects
6 years ago
9f03b5c4f7
activitypub: transmogrifier: add support for Page objects
6 years ago
585b29337c
Ensure filters have a filter_id
6 years ago
eba9a62024
Merge branch 'feature/relay-tests' into 'develop'
...
relay tests
See merge request pleroma/pleroma!411
6 years ago
40676d7683
Merge branch 'bugfix/prismo.news_article_url' into 'develop'
...
Bugfix/prismo.news article url
Closes #352
See merge request pleroma/pleroma!410
6 years ago
1e9ced5af4
Test Relay, switch to runtime configuration.
6 years ago
e6ec01afb6
Start configuration manager.
6 years ago
9b77030d3c
Add basic configuration management module.
6 years ago
b2da5262ea
Pleroma.Web.ActivityPub.Transmogrifier: fix_url when not a string/empty
...
Thanks prismo.news, I hate it
6 years ago
755f166406
Pleroma.Web.MastodonAPI.StatusView: Do not fail when URL isn’t a string
6 years ago
2b3a40d038
object: split object_cache from user_cache
6 years ago
f584a603f9
user: make User.delete() return data consistent with Object.delete()
6 years ago
2c3bfd7f76
user: delete user_info data in User.invalidate_cache()
6 years ago
10f3958468
object: return the deleted object as well
6 years ago
2bf358d7b4
activitypub: use Object.delete() instead of mutating the database and cache directly
6 years ago
c4e43da63e
object: add safe object deletion function
6 years ago
558e6a84d6
[Pleroma.Web.CommonAPI]: Delete post cache entry when it’s deleted
...
Closes: https://git.pleroma.social/pleroma/pleroma/issues/346
6 years ago
47f76bf4b1
common api: allow self-liking objects
...
mastodon allows this, for whatever reason.
closes #347 .
6 years ago
5fea3d9eca
Merge branch 'allow-abbr' into 'develop'
...
Allow use of the `abbr` HTML tag.
See merge request pleroma/pleroma!405
6 years ago
795634c90f
Allow use of the `abbr` HTML tag.
6 years ago
b92e38d2d4
Add user reactivation task.
6 years ago
a880e0a527
Merge branch 'feature/upload-limits' into 'develop'
...
configurable media upload limits
Closes #118
See merge request pleroma/pleroma!401
6 years ago
676c97b8c7
nodeinfo: expose configured upload limits
6 years ago
36825932eb
s3 uploader: add new feature to force public attachment URIs to go through media proxy
6 years ago
f407831120
common api: prefer formatting attachments using the attachment's name instead of URI
6 years ago
784b3a615d
utils: fix another possible leak with private S3 backends using mediaproxy
...
same rationale as the other mediaproxy changes
6 years ago
181f3bb56a
mastodon api: enforce upload limits for avatars and banners
6 years ago
e12489e2fe
twitter api: enforce upload limits for avatars, banners and backgrounds
6 years ago
167d3789a5
activitypub: upload: pass through an upload limit if one is provided
6 years ago
fa483cd7c2
upload: add new optional argument designating an upload size limit
6 years ago
5c6ec2d9fc
twitter/mastodon api: always use mediaproxy URLs in attachments
...
if using local media, the mediaproxy will not replace the URL anyway.
6 years ago
72ea54de6e
activitypub: fix possible false positives with broken thread filtering
6 years ago
44762daf51
Merge branch 'feature/broken-thread-filtering' into 'develop'
...
broken thread filtering, part 1
See merge request pleroma/pleroma!394
6 years ago
c302c619b9
http: fix mediaproxy
6 years ago
26eb11c172
activitypub: add support for filtering broken threads out of timelines
6 years ago
7338368ad9
http: enable keepalive / connection pooling ( closes #336 )
6 years ago
William Pitcock