4fb4721072
Merge pull request from GHSA-58x8-3qxw-6hm7
...
* Fix insufficient permission checking for public timeline endpoints
Note that this changes unauthenticated access failure code from 401 to 422
* Add more tests for public timelines
* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2 years ago
56b7d1a7b6
Fix not being able to block a subdomain of an already-blocked domain through the API ( #30119 )
2 years ago
0143c9d3e1
Fix results/query in `api/v1/featured_tags/suggestions` ( #29597 )
2 years ago
c0a9db3611
Fix potential redirection loop of streaming endpoint ( #28665 )
2 years ago
01caa18e5b
Fix streaming API redirection ignoring the port of `streaming_api_base_url` ( #28558 )
2 years ago
d7875adad2
Fix call to inefficient `delete_matched` cache method in domain blocks ( #28367 )
2 years ago
20666482ef
Added admin api for managing tags ( #26872 )
3 years ago
33c8708a1a
Change `GET /api/v1/directory` to use database replica rather than primary ( #26856 )
3 years ago
548c032dbb
Improve interaction modal error handling ( #26795 )
3 years ago
ccca542db1
Fix `/api/v1/timelines/tag/:hashtag` allowing for unauthenticated access when public preview is disabled ( #26237 )
3 years ago
a7d96e6aff
Improve error messages when DeepL quota is exceeded ( #26704 )
3 years ago
30c191aaa0
Add new public status index ( #26344 )
...
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
191d302b7f
Refactor `Api::V1::ProfilesController` into two separate controllers ( #26573 )
3 years ago
d24a87ce4f
Add ability to delete avatar or header picture via the API ( #25124 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
3a4d3e9d4b
Add `GET /api/v1/instance/languages` to REST API ( #24443 )
...
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
e258b4cb64
Refactor: replace whitelist_mode mentions with limited_federation_mode ( #26252 )
3 years ago
6c39125761
Change /api/v1/peers/search to be case-insensitive when using Elasticsearch ( #26268 )
3 years ago
b4e739ff0f
Change interaction modal in web UI ( #26075 )
...
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
3 years ago
4c18928a93
Wrong count in response when removing favourite/reblog ( #24365 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
943f27f437
Remove unfollowed hashtag posts from home feed ( #26028 )
3 years ago
41f65edb21
Fix embed dropdown menu item for unauthenticated users ( #25964 )
3 years ago
8d0c69529a
Change markers API to use a replica ( #25851 )
3 years ago
fdc3ff7c2d
Change notifications API to use a replica ( #25874 )
3 years ago
2e1391fdd2
Fix `Naming/MemoizedInstanceVariableName` cop ( #25928 )
3 years ago
c27b82a437
Add `forward_to_domains` parameter to `POST /api/v1/reports` ( #25866 )
3 years ago
e4cfe4b3db
First pass at multi-database for read replica using Rails native adapter ( #25693 )
...
Co-authored-by: emilweth <7402764+emilweth@users.noreply.github.com>
3 years ago
383c00819c
Fix `/api/v2/search` not working with following query param ( #25681 )
3 years ago
4fe2d7cb59
Fix HTTP 500 in `/api/v1/emails/check_confirmation` ( #25595 )
3 years ago
683ba5ecb1
Fix rails `rewhere` deprecation warning in directories api controller ( #25625 )
3 years ago
1d622c8033
Add POST /api/v1/conversations/:id/unread ( #25509 )
3 years ago
a5b6f6da80
Change /api/v1/statuses/:id/history to always return at least one item ( #25510 )
3 years ago
b9bc9d0bda
Fix incorrect pagination headers in `/api/v2/admin/accounts` ( #25477 )
3 years ago
ec59166844
Fix ArgumentError when loading newer Private Mentions ( #25399 )
3 years ago
4c9406bdb0
Add time zone preference ( #25342 )
3 years ago
bacb674921
Add exclusive lists ( #22048 )
...
Co-authored-by: Liam Cooke <liam@liamcooke.com>
Co-authored-by: John Holdun <john@johnholdun.com>
Co-authored-by: Effy Elden <effy@effy.space>
Co-authored-by: Lina Reyne <git@lina.pizza>
Co-authored-by: Lina <20880695+necropolina@users.noreply.github.com>
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
2b45fecde1
Fix multiple N+1s in ConversationsController ( #25134 )
3 years ago
9017df7178
Remove dead code in Api::V1::FeaturedTagsController ( #25073 )
3 years ago
785e650ab4
Fix uncaught TypeError in POST `/api/v1/featured_tags` ( #25072 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
45d98959ac
Fix uncaught NoMethodError in POST `/api/v1/featured_tags` ( #25063 )
3 years ago
ce8b5899ae
Fix POST `/api/v1/admin/domain_allows` returning 200 when no domain is specified ( #24958 )
3 years ago
45ba9ada34
Fix race condition when reblogging a status ( #25016 )
3 years ago
e60414792d
Add polling and automatic redirection to `/start` on email confirmation ( #25013 )
3 years ago
433ab0c9a3
Fix uncaught NoMethodError error in `/api/v1/admin/canonical_email_blocks/test` ( #24947 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
3 years ago
c0ea33e3fc
Make it possible to upload audio and video to Heroku app ( #24866 )
3 years ago
6e226f5a32
Fix Rails/ActionOrder cop ( #24692 )
3 years ago
1c61869eed
Fix /api/v1/custom_emojis being cached even when unauthenticated API access is disallowed ( #24665 )
3 years ago
b0bf6216e6
Fix /api/v1/instance/domain_blocks being unconditionally cached ( #24662 )
3 years ago
1419f90ef2
Fix some user-independent endpoints potentially reading session cookies ( #24650 )
3 years ago
276c39361b
Fix anonymous visitors getting a session cookie on first visit ( #24584 )
3 years ago
6084461cd0
Change unauthenticated responses to be cached in REST API ( #24348 )
3 years ago
Claire
Matt Jankowski
Robert R George
Daniel M Brasil
Lukas Martini
jsgoldstein
Emelia Smith
Christian Schmidt
Eugen Rochko
Kurtis Rainbolt-Greene
Darius Kazemi
zunda