15843 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Oneric	7fa29fc12e	workers: make custom filtering ahead of enqueue possible	2024-12-21 04:35:14 +01:00
Oneric	be73435764	validators/add_remove: don't crash on failure to resolve reference ... It allows for informed error handling and retry/discard job decisions lateron which a future commit will add.	2024-12-21 04:35:14 +01:00
Oneric	f7a1e2d5d9	federator: don't fetch the user for no reason ... The return value is never used here; later stages which actually need it fetch the user themselves and it doesn't matter wheter we wait for the fech here or later (if needed at all). Even more, this early fetch always fails if the user was already deleted or never known to begin with, but we get something referencing it; e.g. the very Delete action carrying out the user deletion. This prevents processing of the Delete, but before that it will be reattempted several times, each time attempring to fetch the non-existing profile, wasting resources.	2024-12-21 04:35:14 +01:00
Oneric	622b690ad3	add_remove_validator: limit refetch rate to 1 per 5s ... This matches the maximum_age used when processing Move activities	2024-12-21 04:35:14 +01:00
Oneric	6be199406f	Drop ap_enabled indicator from atom feeds	2024-12-21 04:35:14 +01:00
Haelwenn (lanodan) Monnier	00f1bb1dc6	Purge obsolete ap_enabled indicator ... It was used to migrate OStatus connections to ActivityPub if possible, but support for OStatus was long since dropped, all new actors always AP and if anything wasn't migrated before, their instance is already marked as unreachable anyway. The associated logic was also buggy in several ways and deleted users got set to ap_enabled=false also causing some issues. This patch is a pretty direct port of the original Pleroma MR; follow-up commits will further fix and clean up remaining issues. Changes made (other than trivial merge conflict resolutions): - converted CHANGELOG format - adapted migration id for Akkoma’s timeline - removed ap_enabled from additional tests Ported-from: https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3880	2024-12-21 04:35:14 +01:00
Oneric	294de939cb	signing_key: refactor nested case into with statement ... The error branches were already effectively identical before. This change is purely cosmetic.	2024-12-08 20:43:57 +00:00
Oneric	7583eceb38	Make SigningKey data migration future-proof ... Bug originally discovered by tudbut	2024-12-08 20:43:10 +00:00
Floatingghost	834edfcf96	add changelog	2024-11-26 09:50:04 +00:00
Floatingghost	79b282dea6	bump version	2024-11-26 09:36:20 +00:00
Floatingghost	d1d82782db	add signing key index	2024-11-26 09:35:56 +00:00
Haelwenn (lanodan) Monnier	2b1a252cc7	User: truncate remote user fields instead of rejecting	2024-11-26 09:29:44 +00:00
Floatingghost	c0a99df06a	Merge remote-tracking branch 'oneric/varfixes' into develop	2024-10-30 15:15:00 +00:00
floatingghost	0cb4c35ee4	Merge pull request 'Extract keys to their own table, match keyID' (#816) from keys-extraction into develop ... Reviewed-on: #816	2024-10-30 15:08:11 +00:00
Floatingghost	c9b3fcc1d3	allow for OTP code changes in :zip	2024-10-30 14:43:18 +00:00
Floatingghost	11c5838947	standardise local key id generation	2024-10-30 12:44:01 +00:00
Floatingghost	180dc8b472	downgrade earmark	2024-10-26 08:50:38 +01:00
Floatingghost	d330c57cda	make sure we correctly match key objects	2024-10-26 08:42:07 +01:00
Floatingghost	bd64d07082	ensure migration actually works	2024-10-26 07:51:41 +01:00
Floatingghost	9d2c558f64	remove unused import	2024-10-26 07:42:43 +01:00
Floatingghost	ac25b051ae	remove previous "allow user routes" functionality	2024-10-26 07:28:43 +01:00
Floatingghost	c5a44a59db	remove unneeded index	2024-10-26 07:00:38 +01:00
Floatingghost	58d5d9d7bf	fix tests, contain object	2024-10-26 06:58:47 +01:00
Floatingghost	b6e8fde4dd	Merge branch 'develop' into keys-extraction	2024-10-26 06:11:29 +01:00
Floatingghost	bee10eab5e	correct minor zip behaviour	2024-10-26 06:11:12 +01:00
Floatingghost	13215f5f06	remove public key field	2024-10-26 05:28:55 +01:00
Floatingghost	430b376ded	mix format	2024-10-26 05:05:48 +01:00
Floatingghost	ccf1007883	Fix about a million tests	2024-10-26 05:05:48 +01:00
Floatingghost	6da783b84d	Fix http signature plug tests	2024-10-26 05:05:48 +01:00
Floatingghost	8f322456a0	Allow unsigned fetches of a user's public key	2024-10-26 05:05:48 +01:00
Floatingghost	9c876cea21	Fix some tests	2024-10-26 05:05:48 +01:00
Floatingghost	9728e2f8f7	adjust logic to use relation :signing_key	2024-10-26 05:05:47 +01:00
Floatingghost	b0f7da9ce0	remove now-unused Keys module	2024-10-26 05:05:28 +01:00
Floatingghost	fc99c694e6	Add signing key modules	2024-10-26 05:05:28 +01:00
Floatingghost	fbb13fde76	Merge branch 'develop' of akkoma.dev:AkkomaGang/akkoma into develop	2024-10-26 05:04:27 +01:00
Floatingghost	cbd236aeb5	mix format	2024-10-26 05:04:20 +01:00
floatingghost	71d3bbd7be	Merge pull request 'Fix wrong type when importing emojis' (#841) from tudbut/akkomafixes:emojis into develop ... Reviewed-on: #841	2024-10-26 04:00:12 +00:00
floatingghost	98a3dab10a	Merge pull request 'Fix fs error while unpacking frontends' (#839) from tudbut/akkomafixes:frontends into develop ... Reviewed-on: #839	2024-10-26 03:58:40 +00:00
TudbuT	661b7fedb6	fix wrong type when importing emojis	2024-10-18 14:57:31 +02:00
TudbuT	8b5aca9619	fix fs error while unpacking frontends	2024-10-18 14:50:28 +02:00
floatingghost	f101886709	Merge pull request 'Federate emoji as anonymous objects' (#815) from Oneric/akkoma:emoji-id into develop ... Reviewed-on: #815	2024-10-16 14:58:46 +00:00
floatingghost	09fa7227f6	Merge pull request 'Tweak fetch security checks' (#819) from Oneric/akkoma:id-refetch into develop ... Reviewed-on: #819	2024-10-16 14:16:14 +00:00
Oneric	d5b0720596	Allow cross-domain redirects on AP requests ... Since we now remember the final location redirects lead to and use it for all further checks since 3e134b07fa, these redirects can no longer be exploited to serve counterfeit objects. This fixes: - display URLs from independent webapp clients redirecting to the canonical domain - Peertube display URLs for remote content (acting like the above)	2024-10-14 01:42:51 +02:00
Oneric	940792f8ba	Refetch on AP ID mismatch ... As hinted at in the commit message when strict checking was added in 8684964c5d, refetching is more robust than display URL comparison but in exchange is harder to implement correctly. A similar refetch approach is also employed by e.g. Mastodon, IceShrimp and FireFish. To make sure no checks can be bypassed by forcing a refetch, id checking is placed at the very end. This will fix: - Peertube display URL arrays our transmogrifier fails to normalise - non-canonical display URLs from alternative frontends (theoretical; we didnt’t get any actual reports about this) It will also be helpful in the planned key handling overhaul. The modified user collision test was introduced in https://git.pleroma.social/pleroma/pleroma/-/merge_requests/461 and unfortunately the issues this fixes aren’t public. Afaict it was just meant to guard against someone serving faked data belonging to an unrelated domain. Since we now refetch and the id actually is mocked, lookup now succeeds but will use the real data from the authorative server making it unproblematic. Instead modify the fake data further and make sure we don’t end up using the spoofed version.	2024-10-14 01:42:43 +02:00
floatingghost	3c72b48a05	Merge pull request 'Fix busywait on docker-entrypoint script' (#832) from cevado/akkoma:fix-busy-wait-docker-entrypoint into develop ... Reviewed-on: #832	2024-09-24 23:52:07 +00:00
floatingghost	6475cf127e	Merge pull request 'Overhaul OpenRC service file and disable busy wait by default' (#834) from Oneric/akkoma:openrc-upd into develop ... Reviewed-on: #834	2024-09-24 23:50:48 +00:00
Oneric	a8a231c5b2	Don't busy wait in default from-source service files	2024-09-24 17:36:54 +02:00
Oneric	2901fda29c	openrc: recompile with lower CPU prio	2024-09-24 16:58:54 +02:00
Oneric	bd14440386	openrc: overhaul service file ... - pass env vars the proper™ way - write log to file - drop superfluous command_background - make settings easily overwritable via conf.d to avoid needing to edit the service file directly if e.g. Akkoma was installed to another location	2024-09-24 16:58:35 +02:00
cevado	b312edac4c	Fix busywait on docker-entrypoint script	2024-08-20 19:29:11 -03:00