From: Ivan Tashkinov Date: Mon, 30 Sep 2019 14:41:20 +0000 (+0300) Subject: [#1260] Merge remote-tracking branch 'remotes/upstream/develop' into 1260-rate-limite... X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=6ffa2b5f661c2db424334c6fb5de6f4d1bfeb745;p=akkoma [#1260] Merge remote-tracking branch 'remotes/upstream/develop' into 1260-rate-limited-auth-actions # Conflicts: # CHANGELOG.md --- 6ffa2b5f661c2db424334c6fb5de6f4d1bfeb745 diff --cc CHANGELOG.md index 2ef60ea9b,3d9424c8f..4ae1079fe --- a/CHANGELOG.md +++ b/CHANGELOG.md @@@ -93,9 -112,11 +112,12 @@@ The format is based on [Keep a Changelo - Pleroma API: Add `/api/v1/pleroma/accounts/confirmation_resend?email=` for resending account confirmation. - Pleroma API: Email change endpoint. - Admin API: Added moderation log + - Support for `X-Forwarded-For` and similar HTTP headers which used by reverse proxies to pass a real user IP address to the backend. Must not be enabled unless your instance is behind at least one reverse proxy (such as Nginx, Apache HTTPD or Varnish Cache). - Web response cache (currently, enabled for ActivityPub) - Mastodon API: Added an endpoint to get multiple statuses by IDs (`GET /api/v1/statuses/?ids[]=1&ids[]=2`) + - ActivityPub: Add ActivityPub actor's `discoverable` parameter. + - Admin API: Added moderation log filters (user/start date/end date/search/pagination) +- Authentication: Added rate limit for password-authorized actions / login existence checks. ### Changed - Configuration: Filter.AnonymizeFilename added ability to retain file extension with custom text