76e970c856
Do not automatically login after password reset, as it would circumvent two-factor auth (if enabled)
...
Do not require e-mail address changes to be re-confirmed, it's only trouble for no real benefit
8 years ago
ba192f12e3
Added optional two-factor authentication
8 years ago
f6a5977f0b
Fix key names in statsd
8 years ago
d567f21d4f
Improve StatsD instrumentation
8 years ago
7329fbd8a4
Fix up timeout, improve contrast on "show more", add responsive style
...
for extremely wide monitors
8 years ago
cc5c1e5feb
Removed accidental n+1 query from notifications, updated some deps,
...
improved how "show more" link looks
8 years ago
07b9a10d4d
Add redirect for /admin => /admin/settings
8 years ago
999cde94a6
Instead of using spoiler boolean and spoiler_text, simply check for non-blank spoiler_text
...
Federate spoiler_text using warning attribute on <content /> instead of a <category term="spoiler" />
Clean up schema file from accidental development migrations
8 years ago
f392030ab8
Add /api/v1/notifications/clear, non-existing link cards for statuses will
...
now return empty hash instead of throwing a 404 error. When following,
merge into timeline will filter statuses
8 years ago
956da43e19
Fix error
8 years ago
61aee0006e
Override Rack::Request to use the same trusted proxy settings as Rails
8 years ago
67befe5463
Allow to specify trusted proxies through env
8 years ago
e028406db4
Fix code style
8 years ago
3a4b5961be
Method to fetch a single notification
8 years ago
5fef55c11a
Set remote dev environments to use letter_opener_web, add default .env.vagrant variables
8 years ago
f0de621e76
Fix #463 - Fetch and display previews of URLs using OpenGraph tags
8 years ago
f051c2e813
Fix statsd null backend not being initialized properly
8 years ago
306eb6e9c9
Add optional StatsD performance tracking
8 years ago
fcb5a85cdd
Add sounds for notifications. Boop by @jk@mastodon.social
8 years ago
ab4f5f5da5
Add Heroku deployment support
8 years ago
e9737c2235
Fix tests, add applications to eager loading/cache for statuses, fix
...
application website validation, don't link to app website if website isn't set,
also comment out animated boost icon from #464 until it's consistent with non-animated version
8 years ago
a097dd489b
Change default S3 ACL string used by Paperclip from 'public' (which is invalid) to 'public-read'
8 years ago
e45fed58cb
Add a textual 'Back to Mastodon' link in footer of settings pages
8 years ago
c01dd089ff
Adding about/more page with extended information that can be set up by an admin
8 years ago
e25170f960
Add extended about page stub
8 years ago
b11fdc3ae3
Migrate from ledermann/rails-settings to rails-settings-cached which allows global settings
...
with YAML-defined defaults. Add admin page for editing global settings. Add "site_description"
setting that would show as a paragraph on the frontpage
8 years ago
4292cf60ae
Fix env variable name
8 years ago
75f80bef10
Persist UI settings, add missing localizations for German
8 years ago
2e71bb031b
Fix Paperclip timeout setting. Fix bug introduced in #437
8 years ago
7ddec6e7c3
Add read timeout to paperclip when it's downloading remote images
8 years ago
bb033c1d37
"Reblog" -> "boost" in more places
...
A couple of places were using "reblog" rather than "boost" - this updates them to match the web UI
8 years ago
2b0b7ff1b8
Fix #385 - /web now loads a page
8 years ago
8f47f6a7ec
Adding remote follow button
8 years ago
a302e56f9a
Add API for retrieving favourites
8 years ago
49834a6e7f
Add API for retrieving blocked accounts
8 years ago
d7dc84439c
Add ability to use remote follow function on other sites
8 years ago
eca6110fc4
Add preferences for follow request notification e-mails
8 years ago
2146ac91a0
Follow requests send e-mail notifications, but are excluded from notifications API
...
Better initial state for unlisted/nsfw toggles
8 years ago
3689c119f0
Replacing follow requests in the settings area with in-UI column
8 years ago
004382e4d0
Adding follow requests API
8 years ago
b302b9202b
Add page for authorizing/rejecting follow requests
8 years ago
3c841c7306
Adjust wording
8 years ago
05b13c38b5
Re-enable Webfinger for locked accounts but don't handle "follow" events
...
coming in via Salmon.
Currently no way to prevent remote follows, but they will only receive public
and unlisted posts
8 years ago
b891a81008
Follow call on locked account creates follow request instead
...
Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts
8 years ago
2d2154ba75
Add "locked" flag to accounts, prevent blocked users from following, force-unfollow blocked users
8 years ago
6d71044c85
Don't use rack timeout in any but production environments
8 years ago
e09d3a2c66
Fix #249 - use window.location hack to let people login from sandboxed iOS homescreen
8 years ago
5ae1b39ec9
Adjusting public display of statuses to look similar to logged-in UI,
...
fix #361 with rich OEmbed display via iframe, fix #237 by hiding sensitive
content behind a spoiler on public pages
8 years ago
aed25932b5
Add OEmbed iframe HTML, convert emojis on public pages, increase size of attachment thumbnails
8 years ago
6de079a5af
Removing external hub completely, fix #333 fixing digit-only hashtags,
...
removing web app capability from non-webapp pages
8 years ago
Eugen Rochko