rinpatch [Sun, 2 Jun 2019 20:25:33 +0000 (23:25 +0300)]
Add tests for poll view
rinpatch [Sun, 2 Jun 2019 20:24:48 +0000 (23:24 +0300)]
Refresh the object in CommonAPI.vote instead of MastoAPI controller
rinpatch [Sat, 1 Jun 2019 18:49:18 +0000 (21:49 +0300)]
Remove index on object name used for excluding poll votes (replaced by just rewriting Note to Answer)
rinpatch [Sat, 1 Jun 2019 18:42:29 +0000 (21:42 +0300)]
Fix Credo issues
rinpatch [Sat, 1 Jun 2019 18:41:49 +0000 (21:41 +0300)]
Mastodon API: Refresh the object before rendering it after voting
rinpatch [Sat, 1 Jun 2019 18:41:23 +0000 (21:41 +0300)]
Mastodon API: actually check for poll votes
rinpatch [Sat, 1 Jun 2019 13:29:58 +0000 (16:29 +0300)]
Resolve merge conflicts
rinpatch [Sat, 1 Jun 2019 13:07:01 +0000 (16:07 +0300)]
Add poll votes
Also in this commit by accident:
- Fix query ordering causing exclude_poll_votes to not work
- Do not create notifications for Answer objects
feld [Fri, 31 May 2019 20:36:33 +0000 (20:36 +0000)]
Merge branch 'doc/mongoose-im-config' into 'develop'
Sample Mongoose IM config
See merge request pleroma/pleroma!1226
feld [Fri, 31 May 2019 20:36:33 +0000 (20:36 +0000)]
Sample Mongoose IM config.
Change domain, ensure paths to PEM files are correct, and this is good to go.
lambda [Fri, 31 May 2019 18:46:57 +0000 (18:46 +0000)]
Merge branch 'fix/mastodon-user-search' into 'develop'
Fix/mastodon user search
See merge request pleroma/pleroma!1224
feld [Fri, 31 May 2019 18:46:57 +0000 (18:46 +0000)]
Mastodon API search default value for "resolve" is false
https://docs.joinmastodon.org/api/rest/accounts/
https://docs.joinmastodon.org/api/rest/search/
lambda [Fri, 31 May 2019 13:26:48 +0000 (13:26 +0000)]
Merge branch 'hotfix/leaking-lists' into 'develop'
Mastodon API: Fix lists leaking private posts
See merge request pleroma/pleroma!1222
rinpatch [Fri, 31 May 2019 12:25:17 +0000 (15:25 +0300)]
Mastodon API: Fix lists leaking private posts
Our previous list visibility resolver grabbed posts if either follower
collection of the user in a list who is followed is in `to` or if
follower collection of the user in a list was in `cc`. This not only
missed unlisted posts but also lead to leaking private posts when
`fix_explicit_addressing` mistakingly started putting follower collections
to `cc` (also fixed in this MR).
Reported by @kurisu@iscute.moe via a DM
rinpatch [Fri, 31 May 2019 11:17:05 +0000 (14:17 +0300)]
Fix fix_explicit_addressing moving follower collection to cc and add tests for it
feld [Thu, 30 May 2019 21:35:31 +0000 (21:35 +0000)]
Merge branch 'fix/install-guide' into 'develop'
Formatting
See merge request pleroma/pleroma!1219
feld [Thu, 30 May 2019 21:35:31 +0000 (21:35 +0000)]
Formatting
feld [Thu, 30 May 2019 21:30:42 +0000 (21:30 +0000)]
Merge branch 'fix/install-guide' into 'develop'
Install docs should clone from master branch
See merge request pleroma/pleroma!1218
feld [Thu, 30 May 2019 21:30:42 +0000 (21:30 +0000)]
Install docs should clone from master branch
feld [Thu, 30 May 2019 21:03:31 +0000 (21:03 +0000)]
Merge branch 'fix/ogp-missing-data' into 'develop'
Replace missing non-nullable Card attributes with empty strings
See merge request pleroma/pleroma!1217
Sergey Suprunenko [Thu, 30 May 2019 21:03:31 +0000 (21:03 +0000)]
Replace missing non-nullable Card attributes with empty strings
lambda [Thu, 30 May 2019 13:16:08 +0000 (13:16 +0000)]
Merge branch 'use-pleroma-config' into 'develop'
Use Pleroma.Config everywhere
See merge request pleroma/pleroma!1214
Egor Kislitsyn [Thu, 30 May 2019 08:33:58 +0000 (15:33 +0700)]
Use Pleroma.Config everywhere
kaniini [Wed, 29 May 2019 22:19:13 +0000 (22:19 +0000)]
Merge branch 'revert-
57e58d26' into 'develop'
Revert "Merge branch 'feature/search-authenticated-only' into 'develop'"
See merge request pleroma/pleroma!1212
kaniini [Wed, 29 May 2019 22:10:16 +0000 (22:10 +0000)]
Revert "Merge branch 'feature/search-authenticated-only' into 'develop'"
This reverts merge request !1209
lambda [Wed, 29 May 2019 14:25:53 +0000 (14:25 +0000)]
Merge branch 'fix/mastodon-search-limit' into 'develop'
Default search limit should be 40
See merge request pleroma/pleroma!1210
lambda [Wed, 29 May 2019 14:04:58 +0000 (14:04 +0000)]
Merge branch 'issue/936' into 'develop'
[#936] fix tests
See merge request pleroma/pleroma!1208
Maksim [Wed, 29 May 2019 14:04:58 +0000 (14:04 +0000)]
[#936] fix tests
Mark Felder [Wed, 29 May 2019 13:06:26 +0000 (08:06 -0500)]
Default search limit should be 40
https://docs.joinmastodon.org/api/rest/search/
kaniini [Wed, 29 May 2019 11:33:37 +0000 (11:33 +0000)]
Merge branch 'feature/search-authenticated-only' into 'develop'
router: require oauth_read for searching
Closes #935
See merge request pleroma/pleroma!1209
William Pitcock [Wed, 29 May 2019 10:58:45 +0000 (10:58 +0000)]
router: require oauth_read for searching
Search calls are generally expensive and allow unauthenticated users to
crawl the instance for user profiles or posts which contain specified
keywords. An adversary can build a distributed search engine which not
only will consume significant instance resources, but also can be used
for undesirable purposes such as datamining.
Accordingly, require authenticated access to use the search API endpoints.
This acts as a nice balance as it allows guest users to make use of most
functionality available in Pleroma FE while ensuring that Pleroma
instances are reasonably protected from resource exhaustion. It also
removes Pleroma as a potential vector in distributed search engines.
feld [Tue, 28 May 2019 21:20:24 +0000 (21:20 +0000)]
Merge branch 'varnish-improvements' into 'develop'
More Varnish improvements
See merge request pleroma/pleroma!667
feld [Tue, 28 May 2019 21:20:24 +0000 (21:20 +0000)]
Improve Varnish config. We set sane headers from the backend now.
kaniini [Tue, 28 May 2019 06:49:54 +0000 (06:49 +0000)]
Merge branch 'respect-proxy-settings-federation' into 'develop'
Respect proxy settings federation
See merge request pleroma/pleroma!1206
jeff [Tue, 28 May 2019 06:49:53 +0000 (06:49 +0000)]
Respect proxy settings federation
lambda [Sun, 26 May 2019 13:33:11 +0000 (13:33 +0000)]
Merge branch 'refactor/die-httpoison-die' into 'develop'
remove @httpoison, @ostatus and @websub compile-time constants
See merge request pleroma/pleroma!1203
kaniini [Sun, 26 May 2019 02:10:31 +0000 (02:10 +0000)]
Merge branch 'fix/mrf-simple' into 'develop'
mrf: simple policy: fix matching imported activitypub and ostatus statuses
Closes #915
See merge request pleroma/pleroma!1205
William Pitcock [Sun, 26 May 2019 01:57:22 +0000 (01:57 +0000)]
mrf: simple policy: fix matching imported activitypub and ostatus statuses
William Pitcock [Sat, 25 May 2019 04:39:32 +0000 (04:39 +0000)]
remove @websub and @ostatus module-level constants
William Pitcock [Sat, 25 May 2019 04:34:16 +0000 (04:34 +0000)]
tests: websub: check only that signature validation succeeds or fails
William Pitcock [Sat, 25 May 2019 04:24:21 +0000 (04:24 +0000)]
kill @httpoison
kaniini [Sat, 25 May 2019 01:45:17 +0000 (01:45 +0000)]
Merge branch 'fix/nodeinfo-unavailable-when-not-federating' into 'develop'
Keep nodeinfo available when not federating
Closes #923
See merge request pleroma/pleroma!1202
Aaron Tinio [Sat, 25 May 2019 00:15:12 +0000 (08:15 +0800)]
Keep nodeinfo available when not federating
kaniini [Fri, 24 May 2019 20:34:23 +0000 (20:34 +0000)]
Merge branch 'bugfix/mention-all-people-in-beginning-dm' into 'develop'
Mention all people in the beginning of DM
Closes #924
See merge request pleroma/pleroma!1194
Sergey Suprunenko [Fri, 24 May 2019 20:34:23 +0000 (20:34 +0000)]
Mention all people in the beginning of DM
kaniini [Fri, 24 May 2019 20:33:55 +0000 (20:33 +0000)]
Merge branch 'feature/static-headers' into 'develop'
Improve serving of static assets
See merge request pleroma/pleroma!1200
feld [Fri, 24 May 2019 20:33:55 +0000 (20:33 +0000)]
Move the Cache Control header test to its own file
We can consolidate our cache control header tests here
lambda [Fri, 24 May 2019 09:54:45 +0000 (09:54 +0000)]
Merge branch 'reverse_proxy_upstream_v4_fix' into 'develop'
explicitly set reverse proxy upstream to IPv4
Closes #930
See merge request pleroma/pleroma!1197
Alfie Pates [Thu, 23 May 2019 21:33:27 +0000 (22:33 +0100)]
explicitly set reverse proxy upstream to IPv4
since Pleroma.Web.Endpoint binds on IPv4 only and `localhost.` resolves to
[::0] on some systems
fixes #930.
rinpatch [Thu, 23 May 2019 11:03:16 +0000 (14:03 +0300)]
Change the order of preloading when fetching activities for context
kaniini [Wed, 22 May 2019 19:03:14 +0000 (19:03 +0000)]
Merge branch 'feature/mrf-user-filter' into 'develop'
mrf: add support for filtering users
See merge request pleroma/pleroma!1188
rinpatch [Wed, 22 May 2019 18:57:46 +0000 (21:57 +0300)]
Fix credo issues
kaniini [Wed, 22 May 2019 18:57:34 +0000 (18:57 +0000)]
Merge branch 'ssh-fixes' into 'develop'
Ssh fixes
Closes #869 and #925
See merge request pleroma/pleroma!1191
William Pitcock [Wed, 22 May 2019 05:55:09 +0000 (05:55 +0000)]
update documentation for the new MRF features [no-ci]
William Pitcock [Wed, 22 May 2019 05:08:37 +0000 (05:08 +0000)]
tests: add tests for banner and avatar removal
William Pitcock [Wed, 22 May 2019 04:55:16 +0000 (04:55 +0000)]
mrf: simple policy: add the ability to strip avatars and banners from user profiles
William Pitcock [Wed, 22 May 2019 04:33:10 +0000 (04:33 +0000)]
activitypub: run user objects through MRF filters
William Pitcock [Wed, 22 May 2019 04:15:59 +0000 (04:15 +0000)]
mrf: defang policy modules for filtering user profile objects
rinpatch [Wed, 22 May 2019 18:49:19 +0000 (21:49 +0300)]
Exclude Answers from fetching by default
rinpatch [Wed, 22 May 2019 18:17:57 +0000 (21:17 +0300)]
Normalize poll votes to Answer objects
rinpatch [Wed, 22 May 2019 17:19:51 +0000 (17:19 +0000)]
Merge branch 'fix/prune-objects-times-out' into 'develop'
Disable timeouts for object pruning query
See merge request pleroma/pleroma!1193
rinpatch [Wed, 22 May 2019 17:10:52 +0000 (20:10 +0300)]
Disable timeouts for object pruning query
lambda [Wed, 22 May 2019 15:44:50 +0000 (15:44 +0000)]
Merge branch 'issue/699' into 'develop'
[#699] add worker to clean expired oauth tokens
See merge request pleroma/pleroma!1184
Maksim [Wed, 22 May 2019 15:44:50 +0000 (15:44 +0000)]
[#699] add worker to clean expired oauth tokens
lambda [Wed, 22 May 2019 11:07:51 +0000 (11:07 +0000)]
Update CHANGELOG.md
lambda [Wed, 22 May 2019 11:04:30 +0000 (11:04 +0000)]
Merge branch 'feature/object-pruning' into 'develop'
Object pruning
See merge request pleroma/pleroma!1181
lain [Wed, 22 May 2019 10:57:20 +0000 (12:57 +0200)]
Mix: Only start sshd when needed, second try.
lambda [Wed, 22 May 2019 10:05:05 +0000 (10:05 +0000)]
Merge branch 'bring-ecto-back-to-mainline' into 'develop'
Mix: Bring ecto-sql back to mainline.
See merge request pleroma/pleroma!1192
lain [Wed, 22 May 2019 09:44:17 +0000 (11:44 +0200)]
Mix: Bring ecto-sql back to mainline.
lain [Wed, 22 May 2019 09:01:10 +0000 (11:01 +0200)]
Changelog: Add tip for debian users.
rinpatch [Wed, 22 May 2019 08:56:53 +0000 (11:56 +0300)]
Add GIN index on object data->'name'
lain [Wed, 22 May 2019 08:44:26 +0000 (10:44 +0200)]
Documentation: Specify PEM format for SSH keys.
Otherwise openssh-client 7.9 will generate a different format that can't be used
by esshd.
lain [Wed, 22 May 2019 08:40:15 +0000 (10:40 +0200)]
Linting.
lain [Wed, 22 May 2019 08:28:50 +0000 (10:28 +0200)]
Mix: Don't start esshd application if we don't need it.
lain [Wed, 22 May 2019 08:17:32 +0000 (10:17 +0200)]
Changelog: Add SSH mode.
lambda [Wed, 22 May 2019 06:28:16 +0000 (06:28 +0000)]
Merge branch 'refactor/keys' into 'develop'
move key generation functions into Pleroma.Keys module
See merge request pleroma/pleroma!1186
William Pitcock [Wed, 22 May 2019 05:58:51 +0000 (05:58 +0000)]
salmon: fix credo
rinpatch [Wed, 22 May 2019 05:39:01 +0000 (05:39 +0000)]
Merge branch 'bugfix/account_view_source.note' into 'develop'
MastoAPI AccountView: fill source.note with plaintext version of note
Closes #926
See merge request pleroma/pleroma!1189
Haelwenn (lanodan) Monnier [Wed, 22 May 2019 05:22:19 +0000 (07:22 +0200)]
MastoAPI AccountView: fill source.note with plaintext version of note
Closes: https://git.pleroma.social/pleroma/pleroma/issues/926
kaniini [Wed, 22 May 2019 04:06:54 +0000 (04:06 +0000)]
Merge branch 'mongooseim-support' into 'develop'
MongooseIM: Add basic integration endpoints.
See merge request pleroma/pleroma!1172
kaniini [Wed, 22 May 2019 04:05:41 +0000 (04:05 +0000)]
Merge branch 'fix/api-fallback' into 'develop'
Do not fallback to index.html for /api/* routes
Closes #920
See merge request pleroma/pleroma!1182
kaniini [Wed, 22 May 2019 04:04:20 +0000 (04:04 +0000)]
Merge branch 'bugfix/dm-being-truncated' into 'develop'
Do not truncate DM when it contains newlines and safe_dm_mentions is set to true
Closes #904
See merge request pleroma/pleroma!1185
Sergey Suprunenko [Wed, 22 May 2019 04:04:20 +0000 (04:04 +0000)]
Do not truncate DM when it contains newlines and safe_dm_mentions is set to true
William Pitcock [Wed, 22 May 2019 03:58:15 +0000 (03:58 +0000)]
move key generation functions into Pleroma.Keys module
William Pitcock [Wed, 22 May 2019 03:12:48 +0000 (03:12 +0000)]
prune objects task: use Repo.delete_all()
Aaron Tinio [Tue, 21 May 2019 23:11:09 +0000 (07:11 +0800)]
Fix failing test
Aaron Tinio [Tue, 21 May 2019 01:40:29 +0000 (09:40 +0800)]
Respond with a 404 Not implemented JSON error message
when requested API is not implemented
Aaron Tinio [Tue, 21 May 2019 01:39:32 +0000 (09:39 +0800)]
Add tests for fallback routes
William Pitcock [Tue, 21 May 2019 01:22:27 +0000 (01:22 +0000)]
add changelog entry for object pruning
William Pitcock [Tue, 21 May 2019 01:21:28 +0000 (01:21 +0000)]
add mix task to prune the object database using a configured retention period
William Pitcock [Tue, 21 May 2019 00:41:58 +0000 (00:41 +0000)]
object: fetcher: add support for reinjecting pruned objects
William Pitcock [Tue, 21 May 2019 00:41:40 +0000 (00:41 +0000)]
object: add Object.prune()
rinpatch [Tue, 21 May 2019 17:40:35 +0000 (20:40 +0300)]
MastoAPI: Add GET /api/v1/polls/:id
lain [Tue, 21 May 2019 16:57:36 +0000 (18:57 +0200)]
MongooseIM: Add documentation.
rinpatch [Tue, 21 May 2019 14:33:54 +0000 (17:33 +0300)]
Accept question objects for conversations
rinpatch [Tue, 21 May 2019 14:30:51 +0000 (17:30 +0300)]
Accept strings in expires_in because sasuga javascript
rinpatch [Tue, 21 May 2019 14:12:38 +0000 (17:12 +0300)]
Change validation error status codes to be more appropriate
rinpatch [Tue, 21 May 2019 13:58:15 +0000 (16:58 +0300)]
Do not stream out poll replies
rinpatch [Tue, 21 May 2019 11:35:20 +0000 (14:35 +0300)]
Restrict poll replies when fetching activiites for context
rinpatch [Tue, 21 May 2019 11:27:09 +0000 (14:27 +0300)]
Actual vote count in poll view