0e2b5a3e6a
WIP
5 years ago
55341ac717
tests WebFinger
5 years ago
4504135894
Add `domain_blocking` to the relationship API (GET /api/v1/accounts/relationships)
5 years ago
2c83eb0b15
Revert "squash! Expose expires_at datetime in mastoAPI only for the activity actor"
...
This reverts commit 2981821db8
5 years ago
2981821db8
squash! Expose expires_at datetime in mastoAPI only for the activity actor
...
NOTE: rewrite the commit msg
5 years ago
d2da3d30f3
Merge branch 'develop' into feature/digest-email
5 years ago
3cb471ec06
Expose expires_at datetime in mastoAPI only for the activity actor
...
In the "pleroma" section of the MastoAPI for status activities you can
see an expires_at item that states when the activity will expire, or
nothing if the activity will not expire.
The expires_at date is only visible to the person who posted the
activity. This is the conservative approach in case some attacker
decides to write a logger for expiring posts. However, in the future of
OCAP, signed requests, and all that stuff, this attack might not be that
likely. Some other pleroma dev should remove the restriction in the code
at that time, if they're satisfied with the security implications of
doing so.
5 years ago
36012ef6c1
Require that ephemeral posts live for at least one hour
...
If we didn't put some kind of lifetime requirement on these, I guess you
could annoy people by sending large numbers of ephemeral posts that
provoke notifications but then disappear before anyone can read them.
5 years ago
704960b3c1
Add support for activity expiration to common and Masto API
...
The "expires_at" parameter accepts an ISO8601-formatted date which
defines when the activity will expire.
At this point the API will not give you any feedback about if your post
will expire or not.
5 years ago
378f5f0fbe
Add activity expiration worker
...
This is a worker that runs every minute and deletes expired activities.
It's based heavily on the scheduled activities worker.
5 years ago
666514194a
Add activity expirations table
...
Add a table to store activity expirations. An activity can have zero or
one expirations. The expiration has a scheduled_at field which stores
the time at which the activity should expire and be deleted.
5 years ago
8ba7a151ad
Cleanup: fix a comment
5 years ago
f5d574f4ed
check both item and parent domain blocks
5 years ago
4af4f6166b
honour domain blocks on streaming notifications
5 years ago
9c6357324e
Merge branch 'feature/admin-api-user-statuses' into 'develop'
...
Admin API: Endpoint for fetching latest user's statuses
See merge request pleroma/pleroma!1413
5 years ago
d3bdb8e704
rich media: parser: splice the given URL into the result
5 years ago
f46805bb40
Merge branch 'develop' into feature/admin-api-user-statuses
5 years ago
03471151d6
AdminAPI: Add "godmode" while fetching user statuses (i.e. admin can see private statuses)
5 years ago
5e72554f3c
Admin config fix
5 years ago
c49a09ed88
tests for Pleroma.Web.ActivityPub.Publisher
5 years ago
8d3cf7e519
Merge branch 'bugfix/unauthed-liked-by' into 'develop'
...
Bugfix: don't error out on unauthorized request to liked/favourited_by
See merge request pleroma/pleroma!1474
5 years ago
03d89e182e
Merge branch 'fix/subscriber-notifications' into 'develop'
...
Do not notify subscribers for messages from users which are replies to others
See merge request pleroma/pleroma!1477
5 years ago
ec7b085b76
Fix test
5 years ago
fd287387a0
Do not notify subscribers for messages from users which are replies to others
5 years ago
e7c64f106e
signature: properly deduce the actor from misskey key IDs
5 years ago
c400565427
fix test names because i cannot type
5 years ago
299c0e965b
actually reblog on the reblog test
5 years ago
7026018c8c
Use correct URL for tests
5 years ago
452980652d
Mix format
5 years ago
fd1fa5a2ec
add tests for unauthed reqs to liked/reblogged_by
5 years ago
14ab2fd0f4
remove pry
5 years ago
9340896c9e
Exclude tests that use :crypt.crypt/2 on macOS
5 years ago
b70e659304
Feature/1087 wildcard option for blocks
5 years ago
674ad5e1df
Merge branch 'hardening/stop-misusing-sharedinbox' into 'develop'
...
activitypub: publisher: align sharedinbox usage with AP specification rules
See merge request pleroma/pleroma!1464
5 years ago
f712ee879a
Bugfix: muted/blocked user notification streaming
5 years ago
05b5af8075
Add tests for users tasks and PleromaAuthenticator
5 years ago
a5d6287ba8
Hide blocked users from interactions
5 years ago
56019d53a8
activitypub: publisher: align sharedinbox usage with AP specification rules
...
While debugging the follow breakage, I observed that our sharedInbox usage
did not match the rules in the specification. Accordingly, I have better
aligned our usage of sharedInbox with the rules outlined in the ActivityPub
specification.
5 years ago
196cad46f3
Resolve merge conflicts
5 years ago
8292331b35
Merge branch 'develop' into feature/digest-email
5 years ago
43a7cd27fe
[tests] Mock :crypt.crypt/2 function in AuthenticationPlugTest
5 years ago
36049f08ef
Merge develop
5 years ago
33729bbb28
Merge branch 'feature/richmedia-ttl' into 'develop'
...
add the rich media ttl based on image exp time
See merge request pleroma/pleroma!1438
5 years ago
716afc83ce
Merge branch 'refactor/http-signature-plug' into 'develop'
...
http signature plug: separation of concerns
See merge request pleroma/pleroma!1449
5 years ago
c2e2aadc42
#1110 fixed /api/pleroma/healthcheck
5 years ago
de9906ad56
change the structure of image ttl parsar
5 years ago
9570a5be40
Merge branch 'develop' into feature/admin-api-user-statuses
5 years ago
c947cfec5a
mapped signature plug: use `user` assign like authentication plug
5 years ago
f435217e50
tests for Plugs.AuthenticationPlug
5 years ago
621cacf667
tests: add tests for mapped signature plug
5 years ago
88d064d80e
http signature plug: remove redundant checks handled by HTTPSignatures library
...
the redundant checks assumed a POST request, which will not work for signed GETs.
this check was originally needed because the HTTPSignatures adapter assumed that
the requests were also POST requests. but now, the adapter has been corrected.
5 years ago
f9a0014681
Merge branch 'feature/signed-object-fetches' into 'develop'
...
signed object fetches
See merge request pleroma/pleroma!1446
5 years ago
b6b748d3e7
tests for Uploader with webhook
5 years ago
1345e0c2bf
tests: add tests for signed object fetches
5 years ago
1e48af9acf
Merge branch 'feature/instance-fetch-actor' into 'develop'
...
instance fetch service actor
See merge request pleroma/pleroma!1440
5 years ago
60b54ee64a
Merge branch 'feature/http-signatures-keyid' into 'develop'
...
http signatures: derive actor from key IDs
See merge request pleroma/pleroma!1442
5 years ago
f84fb340b7
http signatures: derive actor ID from key ID.
...
Almost all AP servers return their key ID as the actor URI with #main-key
added. Hubzilla, which doesn't, uses a URL which refers to the actor
anyway, so worst case, Hubzilla users get refetched.
5 years ago
4bf2bb9cff
Fix password reset for non-test env
...
Fixes `Plug.Conn.NotSentError` that causes a 5xx error in response
instead of 404 and 400.
Fixes pattern matching error caused by different response format
in test and non-test env: `Pleroma.Emails.Mailer.deliver_async` returns
:ok when PleromaJobQueue is enabled and `{:ok, _}` when it's disabled.
In tests, it's disabled.
5 years ago
3d23a12d75
tests: add test for fetching the internal fetch actor
5 years ago
62e5ff624e
user: add is_internal_user? helper function
5 years ago
ce73d5f6a5
Merge branch 'feature/mention-mrf' into 'develop'
...
Add MRF MentionPolicy for dropping posts which mention specific actors
See merge request pleroma/pleroma!1439
5 years ago
96a2890a9e
Add MRF MentionPolicy for dropping posts which mention specific actors
5 years ago
10f82c88b8
mastoapi password reset
...
added rate limit to password reset
configure rate limit in runtime
5 years ago
21e3f9ac69
added tests for Pleroma.Upload.Filter
5 years ago
18234cc44e
add the rich media ttl based on image exp time
5 years ago
9bca70b10a
Merge develop
5 years ago
520ee6c591
Add `pleroma.deactivated` to the Account entity (Mastodon API)
5 years ago
c4ca142e14
Add the `blocked_by` attribute to the relationship API (`GET /api/v1/accounts/relationships`)
5 years ago
996fd58ac4
Merge branch 'bugfix/poll-id-as-string' into 'develop'
...
Status View: Poll ids are strings.
See merge request pleroma/pleroma!1430
5 years ago
7a24def473
Mastodon Controller: Fix tests.
5 years ago
1ed24bcc76
Status View: Poll ids are strings.
...
All ids in mastodon are strings, in general.
5 years ago
9f987dd017
Merge branch 'match-file-name' into 'develop'
...
try to always match the filename for proxy url
See merge request pleroma/pleroma!1405
5 years ago
b74300bc7a
Add more tests for MastodonAPIController and CommonAPI
5 years ago
1d906ffa82
Merge branch 'develop' into match-file-name
...
# Conflicts:
# lib/pleroma/web/media_proxy/media_proxy_controller.ex
5 years ago
03c4ea44ad
Merge branch 'admin-configure-atom-keys' into 'develop'
...
admin configure - atom keys with leading :
See merge request pleroma/pleroma!1424
5 years ago
c32384c1ea
tests for Pleroma.Signature
5 years ago
b8607c151c
migrating task refactor
5 years ago
c66044b923
atom keys with leading :
5 years ago
de13c9bb8f
List messages must be visible for mentioned users
5 years ago
64a946643e
Merge remote-tracking branch 'pleroma/develop' into feature/addressable-lists
5 years ago
a87c313309
Support `list` visibility in StatusView
5 years ago
fa17879c20
added tests for Web.MediaProxy
5 years ago
dce8ebc9ea
Unfollow should also unsubscribe
5 years ago
841314c2d5
tests: fix object containment violations in the transmogrifier tests
...
Some objects were not completely rewritten in the tests, which caused object
containment violations. Fix them by rewriting the object IDs to be in an
appropriate namespace.
5 years ago
c729883936
Merge branch 'develop' into feature/digest-email
5 years ago
739bbe0d3b
security: detect object containment violations at the IR level
...
It is more efficient to check for object containment violations at the IR
level instead of in the protocol handlers. OStatus containment is especially
a tricky situation, as the containment rules don't match those of IR and
ActivityPub.
Accordingly, we just always do a final containment check at the IR level
before the object is added to the IR object graph.
5 years ago
cef4337f95
Merge branch 'bugfix/llal-object-containment' into 'develop'
...
Object.Fetcher: Handle error on Containment.contain_origin/2
See merge request pleroma/pleroma!1414
5 years ago
a2c601acb5
FetcherTest: Containment refute called(OStatus.fetch_activity_from_url)
5 years ago
e7c39b7ac8
Feature/1072 muting notifications
5 years ago
f00562ed6b
HttpRequestMock: Add 404s on OStatus fetching for info.pleroma.site
5 years ago
efa9a13d4e
HttpRequestMock: Add missing mocks for object containment tests
5 years ago
0c2dcb4c69
Add follow information refetching after following/unfollowing
5 years ago
183da33e00
Add tests for fetch_follow_information_for_user and check object type
...
when fetching the page
5 years ago
418ae6638d
Merge branch 'develop' into feature/admin-api-user-statuses
5 years ago
a9459ff98f
Admin API: Endpoint for fetching latest user's statuses
5 years ago
80c46d6d8b
nodeinfo: implement MRF transparency exclusions
5 years ago
e8fa477793
Refactor Follows/Followers counter syncronization
...
- Actually sync counters in the database instead of info cache (which got
overriden after user update was finished anyway)
- Add following count field to user info
- Set hide_followers/hide_follows for remote users based on http status
codes for the first collection page
5 years ago
369e9bb42f
[ #1041 ] Rate-limited status actions (per user and per user+status).
5 years ago
095117a58c
Merge branch 'develop' into fix/ap-hide-follows
5 years ago
97b79efbcd
ActivityPub Controller: Actually pass for_user to following/followers
...
views and give 403 errors when trying to request hidden follower pages
when unauthenticated
5 years ago
f8e3ae6154
try to always match the filename for proxy url
5 years ago
92055941bd
Pleroma.Web.Metadata - tests
5 years ago
1f6ac7680d
ActivityPub User view: Following/Followers refactoring
...
- Render the collection items if the user requesting == the user
rendered
- Do not render the first page if hide_{followers,follows} is set, just
give the URI to it
5 years ago
360e4cdaa2
Move these to pleroma namespace in Mastodon API
5 years ago
27ed260eed
AP user view: Add a test for hiding totalItems in following/followers
5 years ago
6a6c4d134b
preserve the original path/filename (no encoding/decoding) for proxy
5 years ago
eae991b06a
merge develop
5 years ago
4198c3ac39
Extend Pleroma.Pagination to support offset-based pagination, use async/await to execute status and account search in parallel
5 years ago
846ad9a463
admin api configure changes
5 years ago
e4e3fd7e55
Merge branch 'fix/1019-refactor' into 'develop'
...
Fix/1019 refactor
See merge request pleroma/pleroma!1397
5 years ago
9e06873d58
Add `list` to Visibility
5 years ago
958fb9aa80
Add "listMessage"
5 years ago
182f7bbb11
Merge branch 'develop' into feature/addressable-lists
5 years ago
a237c6a2d4
support for idna domains
5 years ago
252e129b1e
MastoAPI: Add categories to custom emojis
...
Note: This isn’t in a release yet, can be seen in mastofe on the
rebase/glitch-soc branch.
5 years ago
beba7bbc85
removing synchronization worker
5 years ago
ade213cb35
robots txt test fix
5 years ago
f8786fa6f2
adding following_address field to user
5 years ago
ff55e3c16f
Create mentions only for explicitly mentioned users
5 years ago
c2a589d9a3
Fix credo warning
5 years ago
0d54a571ca
Add SetLocalePlug
5 years ago
008c55e4e9
add test for search_controller/ 100% coverage
5 years ago
12b1454245
[ #1062 ] added option to disable send email
5 years ago
2d2b50ccca
Send and handle "Delete" activity for deleted users
5 years ago
75be90a6d1
Merge branch 'release/listener' into 'develop'
...
add listener port and ip option for 'pleroma.instance gen' and enable its test
See merge request pleroma/pleroma!1393
5 years ago
93a0eeab16
Add license/copyright to all project files
5 years ago
bb8065a1fd
tests MRF filters
5 years ago
6d0ae264fc
add listener port and ip option for 'pleroma.instance gen' and enable its test
5 years ago
8a41d34673
[ #878 ] Tests improvements per code review.
5 years ago
6fc0c27be3
[ #878 ] Uncommented test statement.
5 years ago
829e997223
[ #878 ] Merge remote-tracking branch 'remotes/upstream/develop' into 878-activity-object-decoupling-in-tests
...
# Conflicts:
# lib/pleroma/object.ex
# test/web/activity_pub/transmogrifier_test.exs
# test/web/ostatus/ostatus_test.exs
5 years ago
371d39e160
Merge develop
5 years ago
1417627d07
Merge branch 'remove-avatar-header' into 'develop'
...
Ability to reset avatar, profile banner and backgroud
See merge request pleroma/pleroma!1187
5 years ago
d6b0fce6e9
Fix/1019 correct count remote users
5 years ago
4948117fcf
Merge branch 'remove-swift' into 'develop'
...
Remove Uploaders.Swift and `httpoison` dependency
Closes #1051
See merge request pleroma/pleroma!1374
5 years ago
4e6e5d8042
reverse proxy tests
5 years ago
1179a13533
Merge branch 'features/sec-websocket-protocol-header' into 'develop'
...
Features: MastoAPI streaming Sec-WebSocket-Protocol header
See merge request pleroma/pleroma!1381
5 years ago
167f810ff1
Merge branch 'proxy-error' into 'develop'
...
make sure the url used by proxy is same as original url
See merge request pleroma/pleroma!1383
5 years ago
e143747445
Add test for URLs with Unicode characters too
5 years ago
95c085174d
Merge branch 'test-speedup' into 'develop'
...
Testing: Don't federate in testing.
See merge request pleroma/pleroma!1391
5 years ago
ce3ffad13a
Remove duplicated test. New one is more comprehensive.
5 years ago
31a59d6f23
Merge branch 'develop' into proxy-error
5 years ago
98f13eac9e
Capitalize
5 years ago
4213a4e2aa
Test that all ASCII encoded characters are preserved
5 years ago
376a55c97f
Merge branch '161-incoming-replies-depth-limit' into 'develop'
...
[#161 ] Limited replies depth on incoming federation (memory leaks fix)
Closes #161
See merge request pleroma/pleroma!1361
5 years ago
23d4781e73
change for local user search
5 years ago
abe2e8881f
Testing: Don't federate in testing.
5 years ago
46cf81a544
[ #878 ] Formatting fix.
5 years ago
daff85a985
[ #878 ] Refactored assumptions on embedded object presence in tests. Adjusted note factory to not embed object into activity.
5 years ago
72b88c82bc
Mastodon API: Fix embedded relationships not being rendered inside of statuses
5 years ago
f5ad430974
make sure the url used by proxy is same as origin url
...
encoding or decoding it breaks some of the signed url
5 years ago
b5ba41a725
mastodon_websocket_test.exs: Test for Sec-WebSocket-Protocol header
5 years ago
ad8d86e7c6
Merge remote-tracking branch 'remotes/upstream/develop' into 161-incoming-replies-depth-limit
5 years ago
6dadf5d6f4
[ #1043 ] fix search accounts.
5 years ago
11143c542a
Remove `httpoison` from dependencies
5 years ago
ab50c6b3ca
Add fallback value to the admin report view.
...
This is to avoid 500 error when the reported user no longer exists
in the database.
5 years ago
d2cb18b2a3
Merge branch 'develop' into feature/digest-email
5 years ago
a799418573
[ #161 ] Merge remote-tracking branch 'remotes/upstream/develop' into 161-incoming-replies-depth-limit
...
# Conflicts:
# CHANGELOG.md
5 years ago
2b9d914089
[ #161 ] Refactoring, documentation.
5 years ago
1f76740e10
Add hashtag filter to user statuses (GET /api/v1/accounts/:id/statuses)
5 years ago
acd20f166b
[ #1026 ] Filter.AnonymizeFilename added ability to retain file extension with custom text
5 years ago
4c60a562a7
Fix not being able to pin unlisted posts
...
Closes #1038
5 years ago
5b7b1040b3
[ #161 ] Limited replies depth on incoming federation in order to prevent memory leaks on recursive replies fetching.
5 years ago
d1549a6375
Merge branch 'feature/merge-mastodon-admin-views-for-reports' into 'develop'
...
Merge admin and mastodon user views for reports
See merge request pleroma/pleroma!1346
5 years ago
c22f0bfb80
test: add tests for mediaproxy warming policy
5 years ago
657277ffc0
Resolve conflicts
5 years ago
90927e6a9a
Kowalski, analysis!
5 years ago
452ca5250d
Merge admin and mastodon user views for reports
5 years ago
0369a5db16
Merge branch 'idempotency-plug' into 'develop'
...
Add IdempotencyPlug and use it in all of the api
Closes #1003
See merge request pleroma/pleroma!1339
5 years ago
c6705144a2
don't delete config settings on admin update
5 years ago
889a9c3a3f
Polish IdempotencyPlug
5 years ago
825077a5b0
Add Idempotency plug
5 years ago
d53fb55bb7
Return correct response when reply to a direct message is not direct itself
5 years ago
4ad15ad2a9
add ignore hosts and TLDs for rich_media
5 years ago
0cb8e710fb
add test
5 years ago
a0c4ebb4d7
[ #184 ] small refactoring reset password
5 years ago
2c63c67512
Rework user deletion
5 years ago
f2c03425b0
Broadcast conversation update when DM is deleted
5 years ago
27b9605de0
Merge branch 'rich_media_titles_two' into 'develop'
...
Rich media titles two
See merge request pleroma/pleroma!1325
5 years ago
b37ede5df3
log capturing
5 years ago
982cad0268
support for config groups
5 years ago
a0c65bbd6c
Merge branch 'develop' into 'remove-avatar-header'
...
# Conflicts:
# CHANGELOG.md
5 years ago
410add1c30
support for tuples with more than 2 values
5 years ago
0e415921cd
Rich Media Parser: Do not return just a title if nothing else is there.
5 years ago
58c4d5312b
Revert "Revert "Merge branch 'fix/ogp-title' into 'develop'""
...
This reverts commit b6af80f769
5 years ago
f0fccb7578
fix for int and modules
5 years ago
55742d978d
Merge branch 'feature/mrf-anti-link-spam' into 'develop'
...
implement anti link spam MRF
See merge request pleroma/pleroma!1307
5 years ago
e3534f5b3c
Merge branch 'oauth_secure_redirect' into 'develop'
...
OAuth security improvements (`redirect_uri` listing enforcement)
See merge request pleroma/pleroma!1302
5 years ago
720412bf24
Merge branch 'revert-6f5a0cc1' into 'develop'
...
Revert "Merge branch 'fix/ogp-title' into 'develop'"
See merge request pleroma/pleroma!1317
5 years ago
b6af80f769
Revert "Merge branch 'fix/ogp-title' into 'develop'"
...
This reverts merge request !1277
5 years ago
fc6e661672
Fix rate limiter tests
5 years ago
32320c1ee9
Fixes for dynamic configuration
5 years ago
21dacd4b15
unbreak polls
5 years ago
736d8ad6be
implement anti link spam MRF
5 years ago
e4fa6b99ac
aliases for mix tasks
...
ecto.migrate
ecto.rollback
5 years ago
5c6c4ce634
Merge branch 'fix/rich-media-hashtags-again' into 'develop'
...
Rich Media: Skip Microformats hashtags
See merge request pleroma/pleroma!1304
5 years ago
035368d363
Rich Media: Skip Microformats hashtags
...
When fixing this problem I incorrectly assumed a.hashtag is
the proper way for detecting hashtags, but it is just something Pleroma and
Mastodon add. Per microformats it should be detected by the presense of rel=tag.
This MR adds a check for rel=tag, but I still left a.hashtag just in case
5 years ago
9f45f93949
Added more `redirect_uri` checks to prevent redirect to not explicitly listed URI.
5 years ago
c7acca2abb
Mastodon API: Sanitize display names
...
Closes #1000
5 years ago
49a49d3763
Merge branch 'removing-test-errors' into 'develop'
...
Removing test errors
See merge request pleroma/pleroma!1296
5 years ago
Mike Verdone