590 commits

Author	SHA1	Message	Date
Johann150	677c1df597	rename foundkey-js imports to foundkey	2022-09-13 17:17:46 +02:00
Johann150	7ceb96b148	limit id length of all incoming activities	2022-09-12 18:30:53 +02:00
Francis Dinh	1120b6959d	backend: increase requestId max size for GNU Social ... GNU Social's follow request IDs are larger than the 128 character limit of the follow_request.requestId column. This prevents follow requests from GNU Social instances from being handled by Foundkey instances. The solution is to make the requestId column larger. Fixes #146	2022-09-12 11:38:55 -04:00
Johann150	515957ee74	render HTML mentions correctly ... Reviewed-on: #145 Changelog: Fixed	2022-09-11 21:39:49 +02:00
Francis Dinh	a2fad7ce61	backend: fix mentionedUsers and userInfo queries ... Turns out `getMany` doesn't work with the specific query used, so use `getRawMany` instead. Also fixup the predicate used in userInfo to use the correct field names.	2022-09-11 15:28:35 -04:00
syuilo	4b3cf7834b	server: ensure only own notifications can be marked as read ... Exploiting this before should already have been rather difficult because you would need to know or guess the notification's ID. It is also of relatively low security impact. Changelog: Fixed	2022-09-11 20:52:38 +02:00
Norm	c926b4fbcc	Merge pull request 'backend: Fix appendChildren TypeError' (#136) from fix/backend-to-html-typeerror into main ... Reviewed-on: #136 Changelog: Fixed	2022-09-11 18:31:22 +00:00
Francis Dinh	9bcc247421	backend: Fix appendChildren TypeError ... In #134, the mention `MfmNode` handler was made async to allow the mentionedUsers query to be used there. This however changed the return type of that handler to be a `Promise`, causing a `TypeError` in `appendChildren`. This fixes the `TypeError` by making every handler and the `appendChildren` function also async and awaiting on the processed children. This also attempts to fix the types issue with handlers by casting to the newly defined `HandlerFunc` type instead of to `any`.	2022-09-11 14:29:37 -04:00
Francis Dinh	8d5966c0bc	backend: add return types to load.ts functions	2022-09-10 13:52:23 -04:00
Norm	70c12158f7	Merge pull request 'backend: add types and use named exports for daemons' (#127) from fix/backend-daemons-types into main ... Reviewed-on: #127	2022-09-10 14:23:30 +00:00
Francis Dinh	9a34e0b2b1	build: update typescript and related packages	2022-09-08 23:00:36 -04:00
Norm	f50b31b847	Merge pull request 'backend: move mentionedUsers query to mention handler' (#134) from fix/backend-toHtml-mentionedUsers into main ... Reviewed-on: #134	2022-09-08 22:07:45 +00:00
Francis Dinh	199622b415	add check if ids.length > 0 before executing query	2022-09-08 17:47:23 -04:00
Norm	714ce60980	Merge pull request 'backend: fix types in boot/{master, worker}.ts' (#128) from fix/backend-boot-types into main ... Reviewed-on: #128	2022-09-08 21:29:01 +00:00
Francis Dinh	29c7e7e859	backend: fix types in boot/{master, worker}.ts	2022-09-08 17:28:15 -04:00
Johann150	42132963cf	refactor(backend): remove types.ts in favour of foundkey-js	2022-09-08 23:27:25 +02:00
Johann150	aa62c1d7a7	refactor(backend): use foundkey-js constants	2022-09-08 22:27:27 +02:00
Francis Dinh	19e29c3465	backend: move mentionedUsers query to mention handler ... The mentionedUsers query was being run on every post, regardless of whether a mention was in it or not. This resulted in an SQL query ending in `WHERE userId IN ()` which is not allowed in PostgreSQL. Reference: #132 Changelog: Fixed	2022-09-08 16:17:35 -04:00
Norm	c33655bc4f	backend: fix table name used in toHtml	2022-09-08 17:14:23 +00:00
Francis Dinh	55d20a72b7	backend: add types and use named exports for daemons	2022-09-08 01:33:47 -04:00
Francis Dinh	4ad53f232a	backend: move @types/pg to devDependencies	2022-09-07 14:20:22 -04:00
Francis Dinh	0e49c726ec	backend: add @types/pg for pg type definitions	2022-09-07 14:19:03 -04:00
Francis Dinh	f21e1afaa4	backend: fix query for mentionedUsers	2022-09-07 13:34:38 -04:00
Johann150	7a981de883	refactor: remove note.mentionedRemoteUsers column ... The column mentionedRemoteUsers on the note table in the database is firstly in the wrong type since it contains JSON data but is typed as text. Secondly it seems redundant, since that data can be acquired by using the note.mentions column to fetch the respective data instead. Co-authored-by: Francis Dinh <normandy@biribiri.dev>	2022-09-07 14:43:04 +02:00
Johann150	3bdbbcadd9	adjust MFM to HTML conversion ... Removed the misc/get-note-html module which was only used in one place. Instead of it, the general MFM to HTML functionality has been improved to take care of the use cases of that module as well. Co-authored-by: Francis Dinh <normandy@biribiri.dev>	2022-09-07 14:42:39 +02:00
Francis Dinh	7b4ebd2715	backend: remove room data from user ... Rooms were remove a while back in upstream Misskey. This removes the associated data left over in the database. Changelog: Removed	2022-09-07 08:30:28 +00:00
Michcio	abef030a24	build: Move resolutions sections to workspace package.json ... Yarn throws a warning on every `yarn install` that the resolutions from respective packages' manifests are ignored.	2022-09-06 23:18:15 +02:00
Francis Dinh	5939c90b84	update eslint plugins	2022-09-06 11:19:34 -04:00
Francis Dinh	5fb294e7d7	Use native shell commands for clean/clean-all	2022-09-05 04:43:40 -04:00
Francis Dinh	40683b0e10	update tsc-alias	2022-09-05 04:28:08 -04:00
Francis Dinh	892ea5e2bf	upgrade eslint and typescript-related dependencies ... Changelog: Changed	2022-09-05 03:15:16 -04:00
Michcio	13ce1f0d4e	backend: Fix async types in boot	2022-09-04 11:24:04 +02:00
Francis Dinh	e1ebd1f75f	revert tsconfig declaration to false	2022-09-03 17:50:33 -04:00
Michcio	c04b34ba67	Enable incremental builds	2022-09-03 15:37:54 -04:00
Johann150	2ed46aaebb	fix: check visibility when serving Like activity	2022-09-02 14:34:32 +02:00
Johann150	375323bc25	update parameter type and docs	2022-09-02 14:28:55 +02:00
Johann150	0c5869805a	fix type typo	2022-09-02 09:36:31 +02:00
Francis Dinh	2669fc4380	pin dependencies	2022-08-29 20:36:01 -04:00
Francis Dinh	97b9a00105	security: update dependencies ... - file-type: 17.1.2 -> 18.0.0 - got: 12.1.0 -> 12.3.1 - sharp: 0.29.3 -> 0.30.7	2022-08-29 20:33:40 -04:00
Francis Dinh	41414b4576	chore: remove s-age dependency ... This isn't being used anymore since 4e41fa8767. In any case, age calculation really doesn't need to involve a 3rd party library. Ref: #90	2022-08-28 11:35:18 -04:00
Francis Dinh	dd9dc497fb	fix some deps	2022-08-26 18:04:53 -04:00
Francis Dinh	bc0f0bf08f	add foundkey-js to each workspace package.json	2022-08-26 16:38:41 -04:00
Francis Dinh	247a01dfe6	remove subproject yarn.locks	2022-08-26 16:05:11 -04:00
Francis Dinh	6bb3f39c36	migrate to Yarn 3.2.3	2022-08-26 15:24:29 -04:00
Francis Dinh	6bccbc0d6d	switch to yarn for scripts and move start to backend	2022-08-26 12:48:55 -04:00
Francis Dinh	237c29a4b8	backend: move to foundkey-js	2022-08-26 01:34:22 -04:00
Francis Dinh	33146ffa5e	Fix paths for twemoji and font-awesome	2022-08-26 00:31:17 -04:00
Francis Dinh	b230dc98a9	fix import path for TreeAdapter	2022-08-26 00:15:21 -04:00
Francis Dinh	c1242cfde2	Fix build errors	2022-08-25 23:36:08 -04:00
Johann150	523d366ca3	refactor: remove unnecessary array map	2022-08-25 00:10:54 +02:00
Johann150	4f2a9f8911	refactor: adjust HTML mention microformat ... Adjust the federated HTML microformat to the one that is documented at <https://docs.joinmastodon.org/spec/microformats/>, namely adding the missing surrounding tag with the class `h-card`.	2022-08-25 00:06:11 +02:00
Johann150	f119914b98	refactor: use optional chaining and nullish coalescing	2022-08-25 00:06:11 +02:00
Francis Dinh	8e5a350f1b	Simplify fetching object in resolver.ts ... this.user will always be true, so we aren't doing unsigned fetches.	2022-08-21 13:13:34 -04:00
Francis Dinh	77bfc2450d	Remove signToActivityPubGet option ... Makes it so that all requests are signed, equivalent to signToActivityPubGet always being true.	2022-08-21 12:38:43 -04:00
Johann150	0965d3cbd9	merge: simplify pages ... #49	2022-08-19 09:16:49 +02:00
Norm	27c56a4dcc	Merge pull request 'security: update multer to 1.4.5-lts.1' (#69) from fix/multer-security into main ... Reviewed-on: #69	2022-08-18 17:39:33 +00:00
Johann150	5d41384708	fix: await promises in migration	2022-08-18 18:26:17 +02:00
Johann150	7ae5d6b1b8	backend: fix packing pages	2022-08-18 17:34:20 +02:00
Johann150	c0b0720ede	add best effort migration for pages	2022-08-18 17:34:20 +02:00
Johann150	90d35b951f	adjust types & api for pages	2022-08-18 17:32:01 +02:00
Johann150	b137a39160	merge: remove promo notes ... #62	2022-08-18 14:26:48 +02:00
Francis Dinh	f30e02dc73	security: update multer to 1.4.5-lts.1 ... This version of multer contains a fix for CVE-2022-24434 which affects a transitive dependency. > This affects all versions of package dicer. A malicious attacker can > send a modified form to server, and crash the nodejs service. An > attacker could sent the payload again and again so that the service > continuously crashes. Ref: https://nvd.nist.gov/vuln/detail/CVE-2022-24434	2022-08-18 01:37:39 -04:00
Johann150	f0bdd9666f	remove empty import statements	2022-08-14 12:26:18 +02:00
Johann150	c8afce6b2c	fix blocking of remote accounts ... The property name was misspelled.	2022-08-14 11:33:08 +02:00
Johann150	e028a852f6	remove more code referencing promo notes	2022-08-12 19:39:48 +02:00
Andreas Nedbal	c7bf29fd49	Remove promo entities and endpoints	2022-08-11 23:13:09 +02:00
Johann150	6ce4b3fe2f	fix some lints ... Many of these were fixed automatically with eslint --fix. Some of them (e.g. adding return types to functions) were done manually.	2022-08-11 00:09:29 +02:00
Johann150	961fb0d2df	fix: use correct variable ... Fixes an error introduced in commit 7a80015225.	2022-08-10 23:59:35 +02:00
Johann150	7a80015225	fix lint "no-param-reassign"	2022-08-10 16:36:54 +02:00
Johann150	09a7eabda1	backend: fix lint "no-throw-literal"	2022-08-04 11:00:02 +02:00
Johann150	e2bf2715a6	fix spelling error	2022-08-04 10:20:48 +02:00
Johann150	a3a3cb7258	remove --quiet flag from eslint ... This flag means to hide warnings which is not generally desirable. Even if warnings do not affect the end result of running CI it would still be nice to be able to see the warnings when running the lints normally or in CI.	2022-08-04 00:20:59 +02:00
Johann150	c8f49bae76	fix lint "object-shorthand"	2022-08-03 14:58:24 +02:00
Johann150	37e47a257e	fix lints "import/order" and "import/no-duplicate" ... Also simplified some import paths by replacing relative with absolute paths.	2022-08-03 14:05:50 +02:00
Johann150	bc1c66e16e	remove admin/drive/cleanup API ... This API endpoint is not working correctly and can cause unintended data loss: It may remove emojis that have been imported from other instances. See also https://github.com/misskey-dev/misskey/issues/8222	2022-08-03 11:00:48 +02:00
Johann150	2fa90e7f43	fix lints in backend boot	2022-08-03 00:18:31 +02:00
Johann150	a6df127d3b	fix lint "quotes"	2022-08-02 23:25:36 +02:00
Johann150	fbcea23ef6	fix ReferenceError in renote.ts	2022-08-02 21:23:16 +02:00
Johann150	ec4fe55acf	refactor: reusable function for pure renote detection ... There was some code to detect if a note is a quote renote. However this code was unused and it seems the kind of reversed detection of checking if something is a pure renote is more useful.	2022-08-01 00:05:10 +02:00
Francis Dinh	b7c0e26da9	fix: lint error in create.ts	2022-07-28 13:19:47 -04:00
Johann150	40d9aa6219	API: visiblity cannot be less restrictive ... Removed a now unnecessary provision from services/note/create as well.	2022-07-28 15:23:08 +02:00
Johann150	bf16b3699e	fix: packing app includes description	2022-07-28 11:59:10 +02:00
Johann150	233c39dbad	fix lints	2022-07-27 08:16:52 +02:00
Chloe Kudryavtsev	0f6d94f1e7	backend: improve mutes and blocks ... Mutes and blocks now also apply recursively to replies and renotes. Furthermore, any mentioned user being muted or blocked will also apply.	2022-07-26 08:12:49 -04:00
Francis Dinh	63c8992cb8	Add semicolon to children.ts	2022-07-25 22:07:23 -04:00
Johann150	4bc9610d8b	remove unnecessary joins ... These joins are no longer necessary as of commit c35372a20d. It seems they are bad enough for performance to break installs.	2022-07-25 21:46:45 +02:00
Johann150	9ee609d700	Merge: enhance privacy of notes ... #14	2022-07-25 18:15:21 +02:00
Johann150	c35372a20d	pack children without detail	2022-07-25 16:41:47 +02:00
Johann150	aca724e0bf	enable to fetch replies recursively	2022-07-25 16:41:46 +02:00
Johann150	aba5b27159	remove legacy permission parsing	2022-07-24 11:45:37 +02:00
Johann150	3fe351df6d	fix: catch errors from packing with detail ... Packing with detail can cause an error if the reply or renote are not visible to the user, even though the original note is visible to the user.	2022-07-23 22:28:41 +02:00
Johann150	b630cd7eac	refactor: add NoteReactions.packMany	2022-07-23 22:28:40 +02:00
Johann150	6775028b1e	adjust tests	2022-07-23 22:28:40 +02:00
Johann150	128d0f0d4e	remove isHidden and its uses ... The `isHidden` attribute is not being set any more and is thus removed. Handling in the client is no longer necessary.	2022-07-23 22:28:39 +02:00
Johann150	cfa371b52b	refactor: remove note re-packing in streaming API ... Instead of packing the note for public user before passing it to streams, the note is now either packed for the user the respective stream belongs to (`mainStream`) or not packed at all and then packed later (`notesStream`). Because this is a new common task between different channels, a shared implementation of packing a note from notesStream is created. This implementation will simply skip a note if it is not visible to the user that the channel belongs to.	2022-07-23 22:27:29 +02:00
Johann150	c6192ac95a	fix: handle exception in note favorites	2022-07-23 22:27:29 +02:00
Johann150	2486eff747	packing notes not visible to user raises an error ... Instead of just hiding specific fields, the entire note is hidden. This means that metadata of the note such as who is the author, when was it sent are completely hidden.	2022-07-23 22:27:29 +02:00
Johann150	3c6d9cc8ab	use getNote instead of Notes.find ... If a note is not visible to the requesting user, an error will be raised.	2022-07-23 22:27:28 +02:00
Johann150	97edaca351	getNote checks visibility ... Raise an error When a note is not visible to the requesting user.	2022-07-23 22:27:14 +02:00
Johann150	f3e196528f	Merge bearer-authentication ... foundKeyGang/foundKey#15	2022-07-20 15:10:47 +02:00