Commit Graph

222 Commits (b950fb01db51f14a9fd3a827b90573418a5b95da)

Author SHA1 Message Date
Haelwenn (lanodan) Monnier 00e8f0b07d
Plugs.HTTPSecurityPlug: Add unsafe-eval to script-src when in dev mode
6 years ago
shibayashi ea1058929c
Use url[:scheme] instead of protocol to determine if https is enabled
6 years ago
Haelwenn (lanodan) Monnier 6a6a5b3251
de-group alias/es
6 years ago
Ivan Tashkinov 4ad843fb9d [#468] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions.
6 years ago
Haelwenn (lanodan) Monnier 60ea29dfe6
Credo fixes: alias grouping/ordering
6 years ago
Haelwenn (lanodan) Monnier 106f4e7a0f
Credo fixes: parameter consistency
6 years ago
href fa5ec765d9
Serve sw-pleroma.js properly
6 years ago
href 8018ae7ae5
Join on preloads to avoid N+1 queries
6 years ago
William Pitcock 980b5288ed update copyright years to 2019
6 years ago
William Pitcock 2791ce9a1f add license boilerplate to pleroma core
6 years ago
lain f3eb414e28 Add a way to use the admin api without a user.
6 years ago
href b1860fe85a
Instance/Static runtime plug
6 years ago
href 5dcb7aecea
More put_view.
6 years ago
Egor Kislitsyn 658edb166f
fix and improve web push; add configuration docs
6 years ago
Maksim Pechnikov 074fa790ba fix compile warnings
6 years ago
Egor Kislitsyn 4944498133 Merge branch 'develop' into feature/compat/push-subscriptions
6 years ago
Egor Kislitsyn 8b4397c704 Merge branch 'develop' into feature/compat/push-subscriptions
6 years ago
Maksim Pechnikov c524c50509 fix/273
6 years ago
lain f18b86fd5f More fixes for Info schema.
6 years ago
lain c443c9bd72 Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into validate-user-info
6 years ago
lain 1c67277c80 Fix admin api.
6 years ago
href b19597f602
reverse proxy / uploads
6 years ago
lain d0ec2812bd Merge remote-tracking branch 'origin' into validate-user-info
6 years ago
Haelwenn (lanodan) Monnier 04daa0fa44
Plugs.HTTPSecurityPlug: Activate upgrade-insecure-requests only when there is https
6 years ago
shibayashi 591b11eafc
Add manifest-src to allow manifest.json
6 years ago
William Pitcock 3356c7d1e9 oauth plug: fix deactivated check
6 years ago
Haelwenn (lanodan) Monnier 4a79b89dba
lib/pleroma/plugs/user_is_admin_plug.ex: change 403 string to “User is not admin.”
6 years ago
Haelwenn (lanodan) Monnier c8b8f1d32c
[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, fix error reporting
6 years ago
Haelwenn (lanodan) Monnier 7076d45cb6
lib/pleroma/plugs/user_is_admin_plug.ex: Create
6 years ago
William Pitcock c07464607d http security: remove form-action from CSP definitions
6 years ago
William Pitcock ee5932a504 http security: allow referrer-policy to be configured
6 years ago
William Pitcock fe67665e19 rename CSPPlug to HTTPSecurityPlug.
6 years ago
William Pitcock df72978dce csp plug: add support for certificate transparency
6 years ago
William Pitcock 331cf6ada1 csp plug: add sts support
6 years ago
William Pitcock f516e317ea plugs: add CSPPlug
6 years ago
href 6fe23c5458
Runtime configured router
6 years ago
Martin Kühl c2d592c9c5 Assign token to connection
6 years ago
lain 44b094908c Update legacy passwords automatically.
6 years ago
lain e601165426 Add UserEnabledPlug.
6 years ago
lain 5ce1ebb179 Add SetUserSessionIdPlug.
6 years ago
lain 12bc73dd28 Add EnsureUserKeyPlug, smaller fixes
6 years ago
lain 32465b9939 Simplify AuthenticationPlug
6 years ago
lain 9a96c93be7 Add SessionAuthenticationPlug.
6 years ago
lain a3f54fca4d Add LegacyAuthenticationPlug
6 years ago
lain 3cf17dc402 Add EnsureAuthenticatedPlug
6 years ago
lain faf5347748 Add UserFetcherPlug.
6 years ago
lain 42bd985e66 Add BasicAuthDecoderPlug
6 years ago
Moon Man 8b020e03a6 change cond to if else
6 years ago
Moon Man 1a8bc26e52 auth against sha512-crypt password hashes, upgrade to pbkdf2
6 years ago
William Pitcock 8da406afa2 activitypub: verify remote http signature digests by recomputing the digest and replacing the digest header
6 years ago
lain dd9bb37893 Rename id helper method.
6 years ago
William Pitcock 4d2c6707c2 activitypub: normalize the actor to ensure we have its URI
6 years ago
Mark Felder ab4aa5720a Fix a bunch of unused variable warnings
6 years ago
lain 0a14d155d6 Fail faster.
7 years ago
lain 4afbef39f4 Format the code.
7 years ago
lain d2099c849d More Jason changes.
7 years ago
lain f29902a241 More signature debugging.
7 years ago
lain 5ea6d96dbe Fix signing bug.
7 years ago
lain ac67453e8a More logging for signature problems.
7 years ago
lain 2757682894 More logging.
7 years ago
lain 38b61fddfe HttpSignature Plug: Skip if already valid.
7 years ago
Roger Braun a9c23e1c32 Add plug to validate signed http requests.
7 years ago
Lain Iwakura 0ec5aeb8a7 Don't log in deactivated users.
7 years ago
eal c1fa1e8844 Fix basic auth for passwords with a colon.
7 years ago
Thog 59770c3f5c
Fix all compilation warnings
7 years ago
Roger Braun d293ceb1b5 Add Mastodon frontend.
7 years ago
Roger Braun 2a298d70f9 Add very basic oauth and mastodon api support.
7 years ago
Roger Braun 70024632ba AP refactoring.
7 years ago
dtluna 6cf7c13228 Refactor code to comply with credo suggestions
8 years ago
Roger Braun 32aa83f3a2 Short circuit user verification if cookie is present.
8 years ago
Roger Braun 142e8f8f3e Don't use fetch access in plug.
8 years ago
Roger Braun e32dbfc9a5 Add basic auth.
8 years ago