Commit Graph

946 Commits

Author SHA1 Message Date
Cosmin Stejerean efd5f481e9
OAuth2 Fixes (#338)
This implements a few oauth2 fixes:

- passes along the state object
- enforces authorization code expiration (currently set to 1 minute, we could make this configurable)
- enforces redirect_uri
- properly checks for client_secret when granting a token
- handles pulling client authentication for token grant from basic auth
- implement token revocation
2023-01-01 11:46:55 -07:00
Tyler Kennedy b19f05859d
Apply image orientation metadata before resizing. (#345) 2023-01-01 11:40:56 -07:00
Michael Manfre 5f1d7b5253
Add indexes for Stator and some of its common tasks (#332) 2023-01-01 10:58:13 -07:00
Andrew Godwin 43ba09a16e Add warning when the MEDIA_URL is wrong
Fixes #343
2023-01-01 10:46:31 -07:00
Avi Flax 1e54a0b2be
Don’t run ‘publish dev image’ job in forks (#342)
My fork (and, I assume, most forks) doesn’t have the secrets defined, so this job just fails every night. So it’ll be less noisy and less wasteful of resources to disable this job for forks.
2023-01-01 10:32:25 -07:00
TAKAHASHI Shuuji 6e34313aaf
Fix incorrect character count (#340) 2022-12-31 20:17:48 -07:00
Cosmin Stejerean 6028232d3d
fix follow in relationship json (#339) 2022-12-31 20:17:05 -07:00
Andrew Godwin b522f43ffc Improve interaction fanout 2022-12-31 14:47:46 -07:00
Andrew Godwin 002276ab9a Fix footer styling 2022-12-31 14:12:39 -07:00
Andrew Godwin ae12aadd38 Include actor URI in another error
Fixes #331
2022-12-31 13:53:21 -07:00
Andrew Godwin 15159418df Handle CW classes for non-ascii characters
Fixes #337
2022-12-31 13:52:30 -07:00
Andrew Godwin 0fc8ff4965 Move like/boost/reply counts onto Post model 2022-12-31 13:52:30 -07:00
TAKAHASHI Shuuji e5ef34a1b9
Make accessibility text color to main/white (#334) 2022-12-31 12:02:44 -07:00
Andrew Godwin 63fcd0b665 Fix data integrity schema 2022-12-31 11:56:50 -07:00
Andrew Godwin b09e7187ce Actually implement the liveness file 2022-12-31 11:54:51 -07:00
Andrew Godwin 13fc4b42de Handle Diaspora's XML webfinger 2022-12-31 11:13:51 -07:00
Andrew Godwin 8fe99718f3 Don't complain on delete on unknown URIs 2022-12-31 10:49:45 -07:00
Andrew Godwin 4956c7cd7a Add more schemas into our local store 2022-12-31 10:46:38 -07:00
Andrew Godwin 8d6f78e29e Don't error on unknown notification types 2022-12-31 10:46:38 -07:00
TAKAHASHI Shuuji d8ff43dc28
Attach the first image of post to RSS feed (#333) 2022-12-31 10:29:51 -07:00
NaphalSec 05adbace24
email templates (#328) 2022-12-30 16:03:11 -07:00
Cosmin Stejerean eea83214cb
Option to show/hide boosts for a followed user (#317) 2022-12-30 15:03:11 -07:00
Andrew Godwin 0b208d3bf7 Releasing 0.6.1 2022-12-30 12:13:06 -07:00
Andrew Godwin 011c51b3c4 Implement progressive thread parent fetching 2022-12-30 11:48:42 -07:00
Tyler Kennedy a93f03d639
/v1/statuses/{id}/favourited_by (#324) 2022-12-30 11:19:38 -07:00
Andrew Godwin 52b4384cd6 Add follow notifications for local follows too
Fixes #326
2022-12-30 10:20:39 -07:00
Tyler Kennedy 7eff751224
A quick robots.txt to tell bots to stop crawling tags. (#321) 2022-12-30 10:14:12 -07:00
Andrew Godwin d247baa307 Serve webfinger and host-meta with correct mimetypes
Fixes #323 (hopefully!)
2022-12-30 10:12:48 -07:00
Michael Manfre 75c17c0766
Correctly handle response.raise_for_status() and guard search from bubbling parse errors (#322) 2022-12-30 01:02:33 -07:00
Michael Manfre 0250f2800b
Identity profile menus 2022-12-30 01:01:03 -07:00
Tyler Kennedy 6a1caae79b
Show a post button and fix selected logic for following/followers (#320) 2022-12-29 21:31:34 -07:00
Tyler Kennedy 9cea7bc124
/v1/accounts/{id}/following and /v1/accounts/lookup support. (#319) 2022-12-29 19:27:43 -07:00
Andrew Godwin 4d3b76612b Accept interactions as pagination anchors
Fixes #316
2022-12-29 14:00:37 -07:00
Andrew Godwin eb7297d743 Only auto refresh when at top of page 2022-12-29 13:23:47 -07:00
Andrew Godwin 9c3806a175 Refactor link header and fix empty page case 2022-12-29 11:46:25 -07:00
Andrew Godwin ea6f272047 Infinite scroll, and footer in sidebar if exists 2022-12-29 11:33:41 -07:00
Andrew Godwin d3fd365a37 Add boost JSON
(also fix hashtag URLs)
Fixes #313
2022-12-29 10:53:31 -07:00
Corry Haines 165d84abbf
Fixes developed from mypy_django script (#312) 2022-12-29 10:35:14 -07:00
Tyler Kennedy cc7824394b
Fixes for the Toot! client (#248) (#275)
* Various Toot! fixes
* Use a fallback 1x1 pixel image for missing headers, same as Mastodon. The header and header_static are _not_ optional nor nullable according to the spec.
* Try removing some fields which probably shouldn't be set.
* Pagination with next/prev.
2022-12-29 10:31:32 -07:00
Andrew Godwin b03d9f0e12 Handle deletions of post URIs
Fixes #306
2022-12-28 22:47:28 -07:00
Andrew Godwin 716b74404f Allow for follow accepts with object URIs only
Fixes #214
2022-12-28 22:25:34 -07:00
Kromonos d525a2f465
Quick fix for TAKAHE_SECRET_KEY in Dockerfile (#309) 2022-12-28 21:56:11 -07:00
Michael Manfre 6983763786
Fix negated autokey guard logic (#308) 2022-12-28 20:08:52 -07:00
Andrew Godwin a2f0634cb2 Include URI in post error
Fixes #307
2022-12-28 12:06:32 -07:00
Andrew Godwin 6137149f55 Improve cache busting proxy URLs with file exts
Fixes #287.
2022-12-28 11:57:54 -07:00
Corry Haines 296780d5cc
Use cache-busting URLs for proxied files (#294)
Migrates (in a backwards-compatible way) from `/proxy/identity_image/271/` to `/proxy/identity_image/271/f5d8e72f2b/`.
dently).
2022-12-28 11:39:40 -07:00
Andrew Godwin 161b1a8af1 Don't permit autogenerated secret keys in prod
Fixes #300
2022-12-28 11:27:40 -07:00
Michael Manfre 4df4f19856
Remove unneeded join from Post to Identity (#301) 2022-12-28 11:14:41 -07:00
Andrew Godwin e38e985e73 Fall post URLs back to their ID
Fixes #302
2022-12-28 11:12:40 -07:00
Andrew Godwin a3b6996413 Discard emoji reactions for now 2022-12-28 11:02:14 -07:00