51 Commits (282ac61500a6246593e593ab515dec5807a336d4)

Author SHA1 Message Date
ThibG 28b482874a Improvements to signature verification (#9667) 6 years ago
Eugen Rochko 17cd91c777
Fix signature verification stoplight triggering on non-timeout errors (#9617) 6 years ago
ysksn 189a6b17fb Remove RemoteAccountControllerConcern never used (#9482) 6 years ago
Eugen Rochko 4615512285
Reduce connect timeout limit and limit signature failures by source IP (#9236) 6 years ago
Eugen Rochko fac529975b Improve signature verification safeguards (#8959) 6 years ago
Eugen Rochko 21ad21cb50
Improve signature verification safeguards (#8959) 6 years ago
Eugen Rochko a00ce8c92c
Remove dead code (#8919) 6 years ago
Eugen Rochko bb71538bb5
Redesign public profiles and toots (#8068) 6 years ago
Marty McGuire 8fea9cc311 Typo in signature verification failure logging (#7916) 7 years ago
Eugen Rochko dfb6907e08
HTTP signatures spec no longer requires algorithms field (#7525) 7 years ago
ThibG 352bae8c3e Update session activation time (fixes #5605) (#7408) 7 years ago
Yamagishi Kazutoshi 87e3f0a41d Fix spec for sr-Latn (#7203) 7 years ago
ThibG 1364e9e4ae Fix follow/unfollow buttons on public profile (fixes #7036) (#7040) 7 years ago
Eugen Rochko 39f27b6cf3
If DEFAULT_LOCALE is set, enforce it instead of HTTP request locale (#6817) 7 years ago
Akihiko Odaki 51d760960c Set the default locale in config (#6580) 7 years ago
puckipedia 8e4cf6282b Allow retrieval of private statuses (single or in outbox) using HTTP signatures (#6225) 7 years ago
Eugen Rochko 1cc44cba81
Fix #6331 (#6341) 7 years ago
Akihiko Odaki 613e7c7521 Rename ResolveRemoteAccountService to ResolveAccountService (#6327) 7 years ago
Eugen Rochko 9b3b40df66
Fix regeneration marker not expiring (#6290) 7 years ago
Eugen Rochko 38fc1b498d
Add more instance stats APIs (#6125) 7 years ago
Eugen Rochko feed07227b
Apply a 25x rate limit by IP even to authenticated requests (#5948) 7 years ago
Eugen Rochko a865b62efc
Rate limit by user instead of IP when API user is authenticated (#5923) 7 years ago
Eugen Rochko e84fecb7e9
Add logging of admin actions (#5757) 7 years ago
Eugen Rochko 7bb8b0b2fc
Add moderator role and add pundit policies for admin actions (#5635) 7 years ago
Eugen Rochko b8db386e05 Fix UserTrackingConcern firing on every request, optimize some queries (#5368) 7 years ago
Akihiko Odaki 63f0979799 Validate id of ActivityPub representations (#5114) 7 years ago
ThibG dfaa219f88 Fix HTTP responses for salmon and ActivityPub inbox processing (#5200) 7 years ago
Eugen Rochko 76f360c625 If HTTP signature is wrong and webfinger cache is stale, retry with resolve (#5129) 7 years ago
Eugen Rochko 72bb3e03fd Support more variations of ActivityPub keyId in signature (#4630) 7 years ago
Eugen Rochko a2aeacbfee Add alternate links to ActivityPub resources from HTML/HEAD variants (#4586) 7 years ago
Eugen Rochko fdea173237 Add Digest header to requests with body, handle acct and URI keyId (#4565) 7 years ago
Eugen Rochko 1618b68bfa HTTP signatures (#4146) 8 years ago
Eugen Rochko dc8a6244fc Fix #2619 - When redis feed is empty, fall back to database (#3721) 8 years ago
Akihiko Odaki (@fn_aki@pawoo.net) 4919b89ab8 Improve default language decision and spec (#3351) 8 years ago
Matt Jankowski f0634ba876 Coverage improvement and concern extraction for rate limit headers in API controller (#3625) 8 years ago
Matt Jankowski 0ebe7d6d23 Remove exports/base controller in favor of shared concern (#3444) 8 years ago
Jack Jennings 3a2003ba86 Extract authorization policy for viewing statuses (#3150) 8 years ago
Akihiko Odaki 922fb74197 Remove methods from ObfuscateFilename and spec (#3347) 8 years ago
HANATANI Takuma 388e70b881 Remove unnecessary keep file. (#2902) 8 years ago
yhirano 3988f2dade Fix Rubocop offences (#2630) 8 years ago
Matt Jankowski fdcf884cf7 Extract user tracking into concern (#2600) 8 years ago
alpaca-tc 9317ec8eb1 Localize with i18n for Devise::FailureApp (#2309) 8 years ago
Matt Jankowski 8bac0350d1 Restful refactor of accounts/ routes (#2133) 8 years ago
Matt Jankowski f5cd138323 Improve i18n chooser (#1804) 8 years ago
Matt Jankowski c44a700252 Quick best practice cleanup of views/helpers (#1546) 8 years ago
David Authier f0bd439486 Use HTTP Accept-Language to detect locale (#1166) 8 years ago
Eugen Rochko 4b621188ad Fix #1165 - before_action was called before protect_from_forgery 8 years ago
Eugen Rochko e3a3422a65 Allow setting of default language through config 8 years ago
Eugen Rochko 02349b3269 Obfuscate filenames better, double rate limits 8 years ago
Eugen Rochko 149887a0ff Make follow requests federate 8 years ago