Julia Johannesen
cbf8cc376e
fix: primitive 18: ap/get bypasses access checks
...
One might argue that we could make this one actually preform access
checks against the returned activity object, but I feel like that's a
lot more work than just restricting it to administrators, since, to me
at least, it seems more like a debugging tool than anything else.
2024-11-20 19:17:25 -05:00
Julia Johannesen
c04f344049
fix: primitive 13: check attribution against actor in notes
2024-11-20 19:17:25 -05:00
Hazel K
37fd454f70
factor out shared code
2024-11-02 17:39:16 -04:00
Hazel K
3a72bf453a
respect following privacy settings
2024-11-02 17:39:16 -04:00
Hazel K
65d81a4ae2
Revert "fix incorrect populated object in followers endpoint"
...
This reverts commit 7b9473bf4c0b55facede0e1d1e33297d14184110.
2024-11-02 17:39:16 -04:00
Hazel K
8f0df1f01c
check for blocks in following / followers endpoints
2024-11-02 17:39:16 -04:00
Hazel K
c566fa1f36
require auth for followers & following endpoints
2024-11-02 17:39:16 -04:00
Marie
d786e96c2b
upd: add FriendlyCaptcha as a captcha solution
...
FriendlyCaptcha is a german captcha solution which is GDPR compliant and has a non-commerical free license
2024-11-02 02:20:35 +01:00
Hazelnoot
ade801ec58
check token permissions in admin/accounts/create.ts
2024-11-01 10:12:28 -04:00
Hazelnoot
f36a1a5701
allow admins to create approved users
2024-11-01 09:29:40 -04:00
Hazelnoot
ca1cdc4ea3
fix poll option limit in masto API
2024-10-26 10:38:29 -04:00
Hazelnoot
01e98c75ab
add separate limits for CW length
2024-10-26 10:04:23 -04:00
Hazelnoot
10d3d9f382
fix unit tests
2024-10-26 09:49:28 -04:00
Hazel K
67185a5d5d
fix UUID format
2024-10-26 09:49:28 -04:00
Hazel K
560ee43dcf
separate character limits for local and remote notes
2024-10-26 09:49:28 -04:00
Lhc_fl
67f977f4ff
fix: return getfromdb when FanoutTimeline is not enabled
2024-10-23 23:14:46 +08:00
dakkar
60be692a0a
merge: fix: should use invite limit cycle to calculate invite/limit ( !706 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/706
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: dakkar <dakkar@thenautilus.net>
2024-10-22 14:07:17 +00:00
Lhc_fl
6aaeda13b9
fix: should use invite limit cycle to calculate invite/limit
2024-10-22 18:48:24 +08:00
Hazelnoot
04654b2f84
add "followers" tab to following feed
2024-10-21 17:55:06 -04:00
Hazelnoot
053b47d78a
return error when calling following feed with both includeReplies and filesOnly
2024-10-21 17:55:06 -04:00
Hazelnoot
6430a191f7
fix duplicate users in the following feed
2024-10-21 17:55:06 -04:00
Marie
65ac5fef46
fix: default sensitive not letting users unmark files
2024-10-20 11:04:48 +02:00
dakkar
2a4c91efcc
Merge branch 'develop' into feature/2024.9.0
2024-10-18 22:09:11 +01:00
Marie
290bfd2075
merge: Allow logged in users to refresh polls ( !686 )
...
View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/686
Closes #743
Approved-by: Hazelnoot <acomputerdog@gmail.com>
Approved-by: dakkar <dakkar@thenautilus.net>
2024-10-18 21:03:07 +00:00
dakkar
52e291af67
Merge branch 'develop' into feature/2024.9.0
2024-10-18 22:00:07 +01:00
Marie
fea7889e0c
upd: add recommended checks
2024-10-17 21:56:43 +02:00
Marie
42530b5a39
upd: add additional check from delete endpoint
2024-10-17 20:15:20 +02:00
Marie
360a127ad7
chore: indent
2024-10-17 20:14:25 +02:00
Marie
1d9cb4fad9
upd: add decline endpoint and free up username on decline
2024-10-17 20:11:10 +02:00
Marie
dedb24fe74
chore: change permission kind
2024-10-15 18:21:09 -04:00
Marie
61cb46b171
upd: hide refresh if logged out and if local, change blocked error message
2024-10-15 18:21:08 -04:00
Marie
dd58a4aa92
upd: add ability to refresh poll
2024-10-15 18:21:08 -04:00
Hazelnoot
8a34d8e9d2
Merge branch 'develop' into feature/2024.9.0
...
# Conflicts:
# locales/en-US.yml
# locales/ja-JP.yml
# packages/backend/src/core/NoteCreateService.ts
# packages/backend/src/core/NoteDeleteService.ts
# packages/backend/src/core/NoteEditService.ts
# packages/frontend-shared/js/config.ts
# packages/frontend/src/boot/common.ts
# packages/frontend/src/pages/following-feed.vue
# packages/misskey-js/src/autogen/endpoint.ts
2024-10-15 18:09:11 -04:00
Hazelnoot
9b1bae653d
add "show bots" toggle to following feed
2024-10-15 14:16:46 -04:00
Hazel K
fb7ac68ece
match following endpoint default values with frontend defaults
2024-10-15 14:16:46 -04:00
Hazel K
463b9ac59d
add filters for following feed
2024-10-15 14:16:46 -04:00
Hazel K
56e7d7e0b1
remove un-necessary assignment to query
2024-10-15 14:16:46 -04:00
Hazel K
fea993f6b2
correct name of SkLatestNote
2024-10-15 14:16:46 -04:00
Lhc_fl
1eacf0772c
FEAT: Allow users to view pending follow requests they sent
...
This commit implements the `following/requests/sent` interface firstly
implemented on Firefish, and provides a UI interface to view the pending
follow requests users sent.
2024-10-13 01:04:40 -04:00
dakkar
98f1f30e72
fix "federation allowed" check in our code
2024-10-12 09:35:45 +01:00
dakkar
fb9b6b1208
thank you linters
2024-10-11 12:20:08 +01:00
dakkar
9ea618c4a5
fix some DI mistakes after the merge
2024-10-10 13:55:52 +01:00
dakkar
ebe5f678f6
fix imports in channels bubble-timeline
2024-10-09 17:57:58 +01:00
dakkar
dec81d32d3
fix type in channel.ts
2024-10-09 17:56:40 +01:00
dakkar
43bdae4cc4
use injected meta in search-by-tag
2024-10-09 17:19:50 +01:00
dakkar
3b3bd68645
use injected meta in MastodonApiServerService
2024-10-09 17:18:38 +01:00
dakkar
9200d35f57
use injected meta in stream bubble-timeline
2024-10-09 17:17:27 +01:00
dakkar
7b7bc8b7b3
use injected meta in claim-achievement.ts
2024-10-09 17:15:27 +01:00
dakkar
96e77f8d39
use injected meta in like.ts
...
also, add extra errors copied from reactions/create.ts
2024-10-09 17:15:04 +01:00
dakkar
81376bcd1b
use injected meta in SigninApiService
2024-10-09 17:10:02 +01:00
