93db265be7
Do not store last visited URL from API controllers ( #1330 )
...
Sign-in redirects you back to last visited URL, but in case of API requests,
this sometimes redirected users to an API URL that, of course, greeted them
with an {"error":"The access token is invalid"}
8 years ago
1fb3e8988b
Revert earlier fix due to new bug reports
8 years ago
8d93f0ca56
Increase max bitrate of converted webms, slightly optimized counter queries
...
(Because postgres can tell that count(*) needs no extra checks, but
counting a specific column requires them)
8 years ago
6b81d10030
Add digest e-mails
8 years ago
5f511324b6
Add validation of media attachments, clean up mastodon-own exception classes
8 years ago
1f5792c834
API now respects ?limit param as long as it's within 2x default limit
8 years ago
a1894786cf
Potentially fix notifications issue
8 years ago
2d2154ba75
Add "locked" flag to accounts, prevent blocked users from following, force-unfollow blocked users
8 years ago
4495baf451
X-RateLimit-Reset formatted with iso8601
8 years ago
4bdb6a0eaf
Rename "publish" to "toot" in english locale, fix lightbox showing old image
...
before loading new one, cache notifications API, fix missing follow button
on public profiles
8 years ago
5c78547198
More query optimizations
8 years ago
627a85f4e4
Better error message in doorkeeper json response
8 years ago
f88ca4a206
Performance improvement for notifications API
8 years ago
fdc17bea58
Fix rubocop issues, introduce usage of frozen literal to improve performance
8 years ago
448ab18a20
Replace setting custom CORS headers with rack-cors, set it on /oauth/token endpoint
8 years ago
b13e7dda1f
API pagination for all collections using Link header
8 years ago
9aecc0f48a
Move timelines API from statuses to its own controller, add a check for
...
resources that require a user context vs those that don't (such as public timeline)
/api/v1/statuses/public -> /api/v1/timelines/public
/api/v1/statuses/home -> /api/v1/timelines/home
/api/v1/statuses/mentions -> /api/v1/timelines/mentions
/api/v1/statuses/tag/:tag -> /api/v1/timelines/tag/:tag
8 years ago
9467b900a2
Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,
...
add permissive CORS to API controllers
8 years ago
a9e40a3d80
Adding OAuth access scopes, fixing OAuth authorization UI, adding rate limiting
...
to the API
8 years ago
04bbc57690
Fix #100 - Add "back" button to certain views
...
Also fix reloading of timelines after merge-type events
8 years ago
de1f3aab86
Fix #16 - Optimize n+1 queries when checking reblogged/favourited values for status lists in API
8 years ago
fe77921e47
Catching more exceptions that slipped through, removing AR logging from
...
production as it's very verbose and not very useful
8 years ago
96ad9b0db1
Meaningful validation errors in API response
8 years ago
7e14eefc81
Replace logo, fix #57 - delete/unreblog/unfavourite API, fix #45 - app
...
registration API
8 years ago
0e9c1a297a
Improved error handling for FollowRemoteService
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
10ba09f546
Upgrade to Rails 5.0.0.1
8 years ago
b640f35621
Writing out more tests, fixed some bugs
9 years ago
447cfef62d
Improving feed queries, switching API to doorkeeper authentication
9 years ago
ab6696e855
Adding doorkeeper, adding a REST API
...
POST /api/statuses Params: status (text contents), in_reply_to_id (optional)
GET /api/statuses/:id
POST /api/statuses/:id/reblog
GET /api/accounts/:id
GET /api/accounts/:id/following
GET /api/accounts/:id/followers
POST /api/accounts/:id/follow
POST /api/accounts/:id/unfollow
POST /api/follows Params: uri (e.g. user@domain)
OAuth authentication is currently disabled, but the API can be used with HTTP Auth.
9 years ago
3b4e04dc32
Fixing some bugs, adding pending test examples
9 years ago
Eugen