3714925896
fix(groups): fix unauthenticated access to groups because of missing read:group:members permission
...
The permission in question is now removed
Closes #1311
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-21 18:09:45 +02:00
a1f5d1dacc
test(federation): fix APControllerTest failing because of datetime different when we reach 2nd page
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-20 17:40:50 +02:00
5cc5c9943c
fix(participant): handle re-confirming participation
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-20 16:55:37 +02:00
02098bbb3d
test(export): add basic test for ExportController
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-20 16:55:37 +02:00
ce15160e87
test(anti-spam): add tests for anti-spam detection command
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-01 14:49:39 +02:00
618b3d23d9
refactor(anti-spam): make anti-spam agnostic from Akismet
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-01 14:48:42 +02:00
5664625c1c
fix(apps): fix typo in redirect_uri parameter
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-05-30 14:24:51 +02:00
fe4fbc0bdf
test(emails): add test for group notification emails
...
Add test for Mobilizon.Web.Email.Group
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-05-25 12:08:27 +02:00
c4d60194a6
fix: include user role in moderator role
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-05-23 17:38:11 +02:00
1c1d0d47d7
fix(back): Improve error message when requesting reset passwords and new instructions
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-05-17 11:33:50 +02:00
f3a443138a
fix(feeds): Only provide future events in ICS/Atom feeds
...
Closes #1246
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-04-20 11:30:34 +02:00
ddba7d6fc5
test: Fix Mobilizon.Service.Notifications.SchedulerTest tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-04-20 09:54:11 +02:00
c07ba3a5d1
Add rate-limiting on queries with Hammer
...
Closes #67
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-24 15:32:27 +01:00
986ae45f52
Add worker to clean obsolete application data, token revokation and spec conformance
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-24 09:18:53 +01:00
59944603b7
Update deps and fix some front-end stuff
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-22 10:19:25 +01:00
8984bd7636
Introduce authorizations with Rajska
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-22 10:19:25 +01:00
b6875f6a4b
Introduce device flow
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-22 09:34:11 +01:00
2ee329ff7b
Introduce application tokens
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-03-22 09:34:10 +01:00
317a3434b2
feat(spam): Introduce checking new accounts, events & comments for spam with the help of Akismet
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-02-07 15:18:29 +01:00
a78cd16afe
Fix LDAP authentificator tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-01-16 12:00:06 +01:00
3e15048843
Prevent AP collection page number being < 1
...
Closes #1184
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-11-21 16:57:54 +01:00
a51b36fb75
Fix building CSP policy
...
You can't use 'none' as a CSP Policy if there's other things among
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-11-04 16:47:24 +01:00
57fac37347
Support CSP report_uri, report_to and the Report-To and Reporting-Endpoints headers
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-11-04 10:55:26 +01:00
a1726fc12e
Add sha-256 hash for toggling dark theme code and remove inlined phoenix digest
...
Follow-up to !1300
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-11-02 11:36:32 +01:00
470a3e594b
Correctly escape user-defined names in emails
...
Closes #1151
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-10-31 14:30:40 +01:00
082435129e
Fix tests after CLDR upgrade
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-10-27 16:08:15 +02:00
c9fffca046
Always lowercase the emails before trying to reset password
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-10-18 18:37:39 +02:00
6a9fba7db8
Fix tests for CI
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-09-21 08:32:42 +02:00
4213e1f1ec
Send activity recap emails outside of the transaction
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-11 11:24:20 +02:00
1eb111f52f
Make sure activity notification recaps can't be sent multiple times
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-10 13:15:11 +02:00
5bc63185fd
Add a CLI command to delete actors
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-09 18:27:51 +02:00
7a6a013d93
Make sure users can't create profiles or groups with non-valid patterns
...
Closes #1068
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-06 20:01:05 +02:00
0b49021f8b
Fix admin notification e-mails from instance follow for Mastodon
...
instances
Show an appropriate name in the body of the mail
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-06 16:36:04 +02:00
63a23748ac
Improve test coverage
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-03 12:58:07 +02:00
bf7ebfd989
Test refreshing instances does not update self relay actor
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-05-02 13:15:14 +02:00
f23f438763
Add test for the hashtag special cases
...
- Test that same hashtags with different casing are taken only once into
account
- Test that too long hashtags are not extracted from description
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-21 17:13:21 +02:00
00f4c0b02c
Make sure remote Update activities can't affect local actors other than
...
Groups
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-20 16:18:10 +02:00
e3adc0684f
Make FrontEndAnalytics provide CSP configuration
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-06 19:56:09 +02:00
da2254089c
Make sure suspended actors are not in the AP cache anymore
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-06 16:54:00 +02:00
4b9a38b2a7
Merge branch 'email-spam' into 'main'
...
Move mailer from Bamboo to Swoosh
Closes #491
See merge request framasoft/mobilizon!1203
2022-04-05 11:21:24 +00:00
e841fb6fbb
Move mailer from Bamboo to Swoosh
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-05 12:38:02 +02:00
d2864a22d9
Allow to exclude stale actors from group search (one week without refreshment)
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-04 15:42:16 +02:00
2bdce8b2fc
Handle address is invalid while rendering event preview
...
Closes #996
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-04-01 15:01:57 +02:00
c56b898379
Fix incoming Accept activities from participations we don't already have
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-31 11:24:22 +02:00
3c8a2a1313
Add details of object in exception when AP object as no
...
actor/attributedTo
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-31 10:49:15 +02:00
4983f2d695
Fix tests after category changes
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-29 09:29:15 +02:00
f5bdedf789
Introduce event categories
...
Closes #1056
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-28 17:42:59 +02:00
91f2b2bd6d
Format GraphQL block in test
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-23 15:22:56 +01:00
e4467ec4ad
Fix timeouts in tests by removing async: true for DB tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-23 15:22:14 +01:00
a461674f9d
Make GraphQL parameters strict following Absinthe 1.7 validating
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2022-03-23 12:35:26 +01:00
Thomas Citharel