Commit Graph

108 Commits (6c0d869d9d46af12b2977842e4e1381871c49118)

Author SHA1 Message Date
Mark Felder d770cffce0 Merge branch 'develop' into issue/1280
5 years ago
Haelwenn (lanodan) Monnier 5c533e10e7
Bump credo to 1.1.5
5 years ago
Maksim Pechnikov 108a39c876 updated error messages for authentication process
5 years ago
Ivan Tashkinov 6c94b7498b [#1478] OAuth admin tweaks: enforced OAuth admin scopes usage by default, migrated existing OAuth records. Adjusted tests.
5 years ago
Ivan Tashkinov 51111e286b [#1427] Initial support for OAuth admin scopes.
5 years ago
lain 1ca7b877a1 Merge branch 'iss-1376' into 'develop'
5 years ago
Steven Fuchs 94627baa5c New rate limiter
5 years ago
AkiraFukushima e1fc6cb78f Check client and token in GET /oauth/authorize
5 years ago
Ivan Tashkinov 10ff01acd9 [#1304] Moved all non-mutes / non-blocks fields from User.Info to User. WIP.
5 years ago
Ivan Tashkinov 28fb98d69e Merge remote-tracking branch 'remotes/upstream/develop' into 1260-rate-limited-auth-actions
5 years ago
Ivan Tashkinov 06b3bb54c5 Merge remote-tracking branch 'remotes/upstream/develop' into 1234-mastodon-2-4-3-oauth-scopes
5 years ago
Ivan Tashkinov f459aabdfa Merge remote-tracking branch 'remotes/upstream/develop' into 1260-rate-limited-auth-actions
5 years ago
Egor Kislitsyn d3ac4e8083
Fix OAuthController
5 years ago
Ivan Tashkinov 64095961fe [#1234] Merge remote-tracking branch 'remotes/upstream/develop' into 1234-mastodon-2-4-3-oauth-scopes
5 years ago
Maxim Filippov 0f9c2c8b87 Send an identifier alongside with error message in OAuthController
5 years ago
Ivan Tashkinov 6ffa2b5f66 [#1260] Merge remote-tracking branch 'remotes/upstream/develop' into 1260-rate-limited-auth-actions
5 years ago
Maxim Filippov 6f25668215 Admin API: Add ability to force user's password reset
5 years ago
Ivan Tashkinov e7afb67c5c [#1260] Rate-limiting for create authentication and related requests.
5 years ago
Ivan Tashkinov b63faf9819 [#1234] Mastodon 2.4.3 hierarchical scopes initial support (WIP).
5 years ago
Ariadne Conill b93498eb52 constants: add as_public constant and use it everywhere
5 years ago
Egor Kislitsyn 5104f65b69 Wrap error messages into gettext helpers
5 years ago
Ivan Tashkinov 64bc7ac619 Minor edit (comment).
5 years ago
Ivan Tashkinov 9f45f93949 Added more `redirect_uri` checks to prevent redirect to not explicitly listed URI.
5 years ago
Ivan Tashkinov 4b2c29016c [#963] No redirect on OOB OAuth authorize request with existing authorization. OAuth-related refactoring.
5 years ago
Ivan Tashkinov 3eefb274f4 OAuth consumer: tests fix, comments, Keycloak config notes.
5 years ago
Maksim 52297920e7 Refactoring oauth response.
5 years ago
Mark Felder 498bfdf403 Switch to Jason over Poison
5 years ago
Alexander Strizhakov a2be420f94 differences_in_mastoapi_responses.md: fullname & bio are optionnal
5 years ago
Maksim 799e1f48b5 Refactoring functions for dealing with oauth scopes.
5 years ago
Maksim 1040caf096 fix format
5 years ago
Egor b9cdf6d3b9 Use `User.get_cached*` everywhere
5 years ago
Ivan Tashkinov 9256d2d4b4 [#923] Refactored OAuthController#authorize definitions, added test.
6 years ago
Ivan Tashkinov 128aae05f3 [#923] Minor semantic adjustment.
6 years ago
Ivan Tashkinov c3f12cf3c3 [#923] OAuth consumer params handling refactoring.
6 years ago
Ivan Tashkinov bffddf5e31 [#923] Merge remote-tracking branch 'remotes/upstream/develop' into twitter_oauth
6 years ago
eugenijm 7aa53d52bd Return 403 on oauth token exchange for a deactivated user
6 years ago
Ivan Tashkinov 47a236f753 [#923] OAuth consumer mode refactoring, new tests, tests adjustments, readme.
6 years ago
Ivan Tashkinov 3e7f2bfc2f [#923] OAuthController#callback adjustments (with tests).
6 years ago
Ivan Tashkinov f7cd9131d4 [#923] OAuth consumer controller tests. Misc. improvements.
6 years ago
Ivan Tashkinov 37925cbe78 Merge remote-tracking branch 'remotes/upstream/develop' into twitter_oauth
6 years ago
lambda 091baf9316 Merge branch 'features/mastoapi/2.6.0-force-login-option' into 'develop'
6 years ago
Egor Kislitsyn 1b3d921921 change `Repo.get(User, id)` => `User.get_by_id(id)`
6 years ago
Ivan Tashkinov 6910fb371b Fixed local MastoFE authentication / `force_login` option.
6 years ago
Ivan Tashkinov cbe09d94d1 Added `force_login` authentication option (previously applied by default).
6 years ago
Ivan Tashkinov eadafc88b8 [#923] Deps config adjustment (no `override` for `httpoison`), code analysis issues fixes.
6 years ago
Ivan Tashkinov baffdcc480 [#923] Merge remote-tracking branch 'remotes/upstream/develop' into twitter_oauth
6 years ago
Ivan Tashkinov 2a95014b9d [#923] OAuth consumer improvements, fixes, refactoring.
6 years ago
Ivan Tashkinov b0759f821b Comments split.
6 years ago
Ivan Tashkinov 263ca3dea2 Mastodon-based auth error messages. Defaulted User#auth_active?/1 to `true`.
6 years ago
Ivan Tashkinov af68a42ef7 [#923] Support for multiple OAuth consumer strategies.
6 years ago