Previously due to bad logic it was impossible for cache entries to ever
be evicted. Ideally this should not be done again but should just use redis
but that can be done another day.
Changelog: Fixed
The backend depends on argon2 since it is used for hashing passwords. Since
it is not used for building the package, the dependency is by the backend
package itself.
Some errors in the queue are not properly handled. For example a blocked instance
will cause the respective queue job to be retried. this should of course not happen
and instead the job should be dropped. This is trying to correct that.
Changelog: Fixed
This adds a check for inbox and sharedInbox URLs to be both
valid and also absolute URLs. If the normal inbox URL is invalid,
the actor will be rejected. If the sharedInbox URL is invalid, it
will be ignored.
Changelog: Fixed
Previously, if a property of the `MkTime` component was changed the displayed value
would not update because the necessary values were computed once on setup and not
made `$computed` so they would be re-computed when necessary.
This is an optimized version made by Volpeon that should run faster if
the instance has a lot of notes.
See <https://is-a.wyvern.rip/notes/9habqldl6j> for a comparison of the
EXPLAIN ANALYZE of the old and new queries.
Co-authored-by: Volpeon <git@volpeon.ink>
Reviewed-on: FoundKeyGang/FoundKey#403
- The `timeout` parameter does not exist in `node-fetch`, so the timeout was not
working properly.
- Refactor the User-Agent header to be set in a central place instead of several
different places.
- Refactor more places to use getResult which handles the timeout and everything
else already instead of the normal `fetch` provided by `node-fetch`.
This fixes federating notes with advanced mfm usage, that looked weird/wrong otherwise.
See also c174f23389
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
Changelog: Changed
The unzipper package did not seem to work any more and was
mangling the meta.json file in its extracted form and potentially
other files which lead to the emoji import not working properly.
Changelog: Fixed
Because findBy returns an array which is always truthy, this would
mean the user is not actually created as requested and instead an
empty array is returned.
Turning the MFM render container into a div changes it to display
as a block which messes up rendering in some places, e.g. when
it is used to render user names in "Renoted by".
Enforces HTTP signatures on object fetches, and rejects fetches from blocked
instances. This should mean proper and full blocking of remote instances.
This is now default behavior, which makes it a breaking change. To disable
it (mostly for development purposes), the configuration item
`allowUnsignedFetches` can be set to true. It is not the default for
development environments as it is important to have as close as possible
behavior to real environments for ActivityPub development.
Co-authored-by: nullobsi <me@nullob.si>
Co-authored-by: Norm <normandy@biribiri.dev>
Changelog: Added