href
|
b19597f602
|
reverse proxy / uploads
|
6 years ago |
|
Haelwenn (lanodan) Monnier
|
04daa0fa44
|
Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there is https
This fixes running mastofe with MIX_ENV=dev
|
6 years ago |
|
shibayashi
|
591b11eafc
|
Add manifest-src to allow manifest.json
|
6 years ago |
|
Haelwenn (lanodan) Monnier
|
4a79b89dba
|
lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not admin.”
|
6 years ago |
|
Haelwenn (lanodan) Monnier
|
c8b8f1d32c
|
[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, fix error reporting
|
6 years ago |
|
Haelwenn (lanodan) Monnier
|
7076d45cb6
|
lib/pleroma/plugs/user_is_admin_plug.ex: Create
|
6 years ago |
|
William Pitcock
|
c07464607d
|
http security: remove form-action from CSP definitions
|
6 years ago |
|
William Pitcock
|
ee5932a504
|
http security: allow referrer-policy to be configured
|
6 years ago |
|
William Pitcock
|
fe67665e19
|
rename CSPPlug to HTTPSecurityPlug.
|
6 years ago |
|
William Pitcock
|
df72978dce
|
csp plug: add support for certificate transparency
|
6 years ago |
|
William Pitcock
|
331cf6ada1
|
csp plug: add sts support
|
6 years ago |
|
William Pitcock
|
f516e317ea
|
plugs: add CSPPlug
|
6 years ago |
|
href
|
6fe23c5458
|
Runtime configured router
|
6 years ago |
|
lain
|
44b094908c
|
Update legacy passwords automatically.
|
6 years ago |
|
lain
|
e601165426
|
Add UserEnabledPlug.
|
6 years ago |
|
lain
|
5ce1ebb179
|
Add SetUserSessionIdPlug.
|
6 years ago |
|
lain
|
12bc73dd28
|
Add EnsureUserKeyPlug, smaller fixes
|
6 years ago |
|
lain
|
32465b9939
|
Simplify AuthenticationPlug
|
6 years ago |
|
lain
|
9a96c93be7
|
Add SessionAuthenticationPlug.
|
6 years ago |
|
lain
|
a3f54fca4d
|
Add LegacyAuthenticationPlug
|
6 years ago |
|
lain
|
3cf17dc402
|
Add EnsureAuthenticatedPlug
|
6 years ago |
|
lain
|
faf5347748
|
Add UserFetcherPlug.
|
6 years ago |
|
lain
|
42bd985e66
|
Add BasicAuthDecoderPlug
|
6 years ago |
|
Moon Man
|
8b020e03a6
|
change cond to if else
|
6 years ago |
|
Moon Man
|
1a8bc26e52
|
auth against sha512-crypt password hashes, upgrade to pbkdf2
|
6 years ago |
|
William Pitcock
|
8da406afa2
|
activitypub: verify remote http signature digests by recomputing the digest and replacing the digest header
|
6 years ago |
|
lain
|
dd9bb37893
|
Rename id helper method.
|
6 years ago |
|
William Pitcock
|
4d2c6707c2
|
activitypub: normalize the actor to ensure we have its URI
|
6 years ago |
|
Mark Felder
|
ab4aa5720a
|
Fix a bunch of unused variable warnings
|
6 years ago |
|
lain
|
0a14d155d6
|
Fail faster.
|
7 years ago |
|
lain
|
4afbef39f4
|
Format the code.
|
7 years ago |
|
lain
|
d2099c849d
|
More Jason changes.
|
7 years ago |
|
lain
|
f29902a241
|
More signature debugging.
|
7 years ago |
|
lain
|
5ea6d96dbe
|
Fix signing bug.
|
7 years ago |
|
lain
|
ac67453e8a
|
More logging for signature problems.
|
7 years ago |
|
lain
|
2757682894
|
More logging.
|
7 years ago |
|
lain
|
38b61fddfe
|
HttpSignature Plug: Skip if already valid.
|
7 years ago |
|
Roger Braun
|
a9c23e1c32
|
Add plug to validate signed http requests.
|
7 years ago |
|
Lain Iwakura
|
0ec5aeb8a7
|
Don't log in deactivated users.
|
7 years ago |
|
eal
|
c1fa1e8844
|
Fix basic auth for passwords with a colon.
|
7 years ago |
|
Thog
|
59770c3f5c
|
Fix all compilation warnings
|
7 years ago |
|
Roger Braun
|
d293ceb1b5
|
Add Mastodon frontend.
|
7 years ago |
|
Roger Braun
|
2a298d70f9
|
Add very basic oauth and mastodon api support.
|
7 years ago |
|
Roger Braun
|
70024632ba
|
AP refactoring.
|
7 years ago |
|
dtluna
|
6cf7c13228
|
Refactor code to comply with credo suggestions
|
8 years ago |
|
Roger Braun
|
32aa83f3a2
|
Short circuit user verification if cookie is present.
|
8 years ago |
|
Roger Braun
|
142e8f8f3e
|
Don't use fetch access in plug.
This makes it work with structs.
|
8 years ago |
|
Roger Braun
|
e32dbfc9a5
|
Add basic auth.
|
8 years ago |
