johan/FoundKey
1
0
Fork 0
forked from FoundKeyGang/FoundKey
Code Issues Pull requests Projects Releases Packages Wiki Activity
22100 commits 3 branches 2 tags 109 MiB
Commit graph

2154 commits

Author SHA1 Message Date
Chloe Kudryavtsev
6a40ef3569 fix typo 
tfw no building before push
 2023-02-10 20:35:09 -05:00
syuilo
09fe55379e
client: check input for aiscript 
af1c9251fc
5f3640c7fd

Co-authored-by: Johann150 <johann.galle@protonmail.com>
Changelog: Fixed
 2023-02-10 20:06:31 +01:00
Johann150
27b912b9b0
security: check schema for URL previews 
Changelog: Fixed
 2023-02-10 20:06:18 +01:00
Johann150
48fd543d0f
security: check URL schema of AP URIs 
Changelog: Fixed
 2023-02-10 20:06:12 +01:00
syuilo
af272ce358
fix(server): validate filename and emoji name to improve security 
0d7256678e

Co-authored-by: Johann150 <johann.galle@protonmail.com>
Changelog: Fixed
 2023-02-10 20:05:53 +01:00
Johann150
c1ae134c0a
security: make sure there is no SQL insertion 2023-02-10 18:31:23 +01:00
Johann150
3ad6323c23
fix registry migration 
closes FoundKeyGang/FoundKey#337
 2023-02-05 20:37:06 +01:00
Johann150
3489c8ac3a
fix: loading config 2023-02-04 23:24:05 +01:00
Johann150
44f02fa3ec
update documents for new release 2023-02-04 22:22:00 +01:00
Johann150
d655bda30c
add foundkey floofer 2023-02-04 22:15:28 +01:00
Johann150
839daea887
remove mi-white.png asset 2023-02-04 18:08:19 +01:00
Johann150
41c42f96f0
BREAKING server: disable deliver rate limit by default 
The deliver rate limit seems to cause a lot of performance problems,
presumably because of the overhead the rate limit has. It also does
not really make sense to rate limit outgoing because we are requesting
from different servers anyway.

fixes FoundKeyGang/FoundKey#190

Changelog: Changed
 2023-02-04 17:57:52 +01:00
Johann150
9a6bb8be7d
server: default config items on load 2023-02-04 17:56:15 +01:00
Johann150
1adf88b090
fixup: OpenGraph data generation 
This is a fixup for commits 39fb7e5946 and be30e70344.
 2023-02-04 16:44:30 +01:00
Johann150
28c11ca7af
refactor isPureRenote to foundkey-js 2023-02-04 16:42:36 +01:00
Johann150
9458045c8f
server: refactor note/renote rendering to separate file 2023-02-04 15:32:25 +01:00
Mia Herkt
a8c0e1f827
fix migration for note.url unique index 
fixes FoundKeyGang/FoundKey#331

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2023-02-04 11:03:29 +01:00
Johann150
63665e8bd1
client: replace array concat with Array.prototype.flat 2023-02-04 00:33:23 +01:00
Johann150
85a68a5eee
activitypub: properly render CW only quotes 
Changelog: Fixed
 2023-02-04 00:27:43 +01:00
Johann150
0bb4a6af50
client: fix quotes with only a CW 
Changelog: Fixed
 2023-02-04 00:22:52 +01:00
Johann150
a45908c1cb
client: check quoteId for canPost computation 
fixes FoundKeyGang/FoundKey#334

Changelog: Fixed
 2023-02-03 23:12:12 +01:00
Johann150
ca257d7d0c
server: remove application level websocket ping 
Changelog: Removed
 2023-02-03 11:48:46 +01:00
Johann150
30c26abde7
server: add websocket ping mechanism 
fixes FoundKeyGang/FoundKey#336

Changelog: Fixed
 2023-02-03 11:47:54 +01:00
Johann150
17324e1e94
server: add unique constraint for registry items 
fixes FoundKeyGang/FoundKey#335
 2023-02-03 00:27:33 +01:00
Johann150
8b98c9f2f4
server: remove unused 'domain' column 2023-02-02 23:29:24 +01:00
Johann150
be30e70344
server: add more OpenGraph data, remove custom misskey meta tags 
Changelog: Changed
 2023-02-01 23:18:10 +01:00
Johann150
39fb7e5946
server: improve OpenGraph data for note attachments 
With this change, not all files will be proclaimed to be image files. Only
images, videos and audio files will be represented with OpenGraph data.

More properties for these files will also be represented, e.g. image alt text.

However, if the note has a CW or any of the files are marked sensitive, none
of the files will be used.

The users profile picture will not be used any more.

Changelog: Changed
 2023-02-01 22:53:32 +01:00
Johann150
75b14124f2
server: improve variable naming 2023-02-01 11:30:53 +01:00
Johann150
7480e27c0c
server: remove twitter links from HTML templates 
Since the twitter integration has been removed, this will never be true
and can therefore be removed.
 2023-02-01 11:27:27 +01:00
Johann150
2d32bc33d7
server: fix error for invalid URLs in profile fields 
Co-authored-by: Chloe Kudryavtsev <code@code.bunkerlabs.net>
 2023-01-30 19:24:15 +01:00
Chloe Kudryavtsev
bb3ec8bafe Revert "server: fix user deletion race condition" 
This reverts commit cc83cbe523, reversing
changes made to 8abd3ebec7.

This changeset contains:
* multiple type errors
* a foreign key incompatibility
* breaks outgoing note federation (in at least two ways)
 2023-01-30 14:59:24 +01:00
Johann150
6fd80816fa
client: remove unused property from MFM component 2023-01-29 14:29:58 +01:00
Johann150
cc83cbe523
server: fix user deletion race condition 
Changelog: Fixed
Ref: https://github.com/misskey-dev/misskey/issues/7506
 2023-01-29 12:53:29 +01:00
Johann150
8abd3ebec7
client: remove notification forwarding to service worker 
This was an interim measure, but now that push notifications are always enabled,
this should not be necessary any more and the service worker should receive
all notifications automatically.
 2023-01-29 12:39:26 +01:00
Johann150
36031c083a
docs: adjust parameters for v2 methods other than POST 2023-01-26 13:34:13 +01:00
Johann150
05f8172ce9
docs: describe /ap/ endpoints 2023-01-26 13:25:50 +01:00
Johann150
151053897d
server: lower rate limit for deletion activities 
Changelog: Changed
 2023-01-26 13:25:50 +01:00
Johann150
95a9027a66
docs: show rate limit information 
Changelog: Added
 2023-01-26 13:25:49 +01:00
Johann150
57cf6c7163
server: indicate Retry-After when rate limiting 
This refactors the rate limiting code to throw an ApiError directly.

Changelog: Added
 2023-01-26 08:37:07 +01:00
Johann150
9b76c805ec
fix: DriveFile folder & user undefined instead of null when unrequested 2023-01-25 22:14:53 +01:00
Johann150
21b20920c2
docs: use endpoint stability to mark endpoints deprecated 2023-01-23 20:13:17 +01:00
Johann150
e7644eb757
server: add index to human readable URL 2023-01-23 19:58:07 +01:00
Johann150
66ec875624
server: also search human readable URL 
Changelog: Fixed
 2023-01-23 18:09:04 +01:00
Johann150
78f5ca3792
server: fix empty array in quote detection 2023-01-22 21:47:02 +01:00
Johann150
c792e4199c
server: add missing return in extractQuoteUrl 2023-01-22 21:42:49 +01:00
Johann150
afa4094050
BREAKING: Remove galleries 
Existing gallery posts will be made into normal notes.
If a user has gallery posts, a clip with all gallery posts will be created.

Changelog: Removed
 2023-01-22 20:18:57 +01:00
Johann150
c4b5952788
migrate galleries to notes/clips 2023-01-22 19:44:39 +01:00
Johann150
5893a44ff5
server: parse quote tag syntax 
Ref: FEP-e232
 2023-01-17 21:45:57 +01:00
Johann150
9bdf24d3a5
enhance: add tag for quotes 
Ref: FEP-e232
 2023-01-17 21:45:49 +01:00
Johann150
2bbb85b472
backend: remove galleries 2023-01-16 18:53:57 +01:00
Johann150
70fb1e9a5c
foundkey-js: remove galleries 2023-01-16 18:47:29 +01:00
Johann150
48163872ed
client: remove galleries 2023-01-16 18:39:50 +01:00
Johann150
7170b86724
fixup: websocket data parsing + logger 2023-01-14 13:22:09 +01:00
Johann150
3d2cfc075a
fixup: actually check whether the group joining is from the user 2023-01-13 21:55:14 +01:00
Johann150
f9c360d59f
client: remove duplicated check 
Since the enclosing block already checks for moderator, this check is unnecessary.
 2023-01-12 20:09:24 +01:00
Johann150
2a8792fe07
client: add button to delete all files for moderators 
The functionality was already there, there was just no button to access it
for some reason.

closes FoundKeyGang/FoundKey#243

Changelog: Added
 2023-01-12 19:42:57 +01:00
Johann150
1319dc93d9
server: switch websocket to ws 2023-01-11 23:57:37 +01:00
Johann150
80e2851378
fixup: remove trailing comma in JSON 2023-01-11 20:58:38 +01:00
Johann150
14b48fb07c
client: remove unused dependencies 2023-01-11 20:32:51 +01:00
Johann150
5e2a9224f3
add "fungus" as alias to emoji list 2023-01-11 19:50:29 +01:00
Johann150
624628d582
client: remove unused websocket libraries 
The websocket functionality is provided by foundkey-js so there is no need to import
any websocket libraries.
 2023-01-11 19:45:18 +01:00
Johann150
e68eeba7a6
fixup: remove admin/delete-account endpoint from foundkey-js 
This is a fixup for commit c7ab8839dc.
 2023-01-11 19:12:58 +01:00
Johann150
ee2fa2e0be
fixup: import 2023-01-10 20:35:03 +01:00
Johann150
57d1af1117
remove default export in streaming API 2023-01-10 20:30:47 +01:00
Johann150
8c2b7e20b2
translating comments, cleanup 2023-01-09 20:44:01 +01:00
Johann150
fdf30f60e6
server: remove SQL boolean comparisons 2023-01-09 20:43:12 +01:00
Johann150
b245d39b6e
server: delete records of fully deleted users 2023-01-08 21:22:03 +01:00
Johann150
80f72e21cd
server: track deletion completion 2023-01-08 21:22:03 +01:00
Johann150
85e985d13f
server: change data structure to track deletion completion 2023-01-08 21:21:54 +01:00
Johann150
4fe288f17c server: rewrite user status queries in SQL 2023-01-08 20:02:21 +00:00
Johann150
cd26e3a35c
fixup: missing parenthesis 2023-01-08 19:34:03 +01:00
Johann150
c7ab8839dc
BREAKING: remove admin/delete-account, change admin/accounts/delete 
You should use the API endpoint admin/accounts/delete.
It has the same parameter and the same behaviour.

The admin/accounts/delete endpoint now requries administrator privileges
instead of just moderator privileges.

Changelog: Removed
 2023-01-07 23:53:48 +01:00
Johann150
1eda1760d1
server: refactor to always use deleteAccount service 
This should reduce code duplication around how deletion of an actor is
handled.
 2023-01-07 19:46:05 +01:00
Johann150
8772181b6f
server: refactor remote host check to validateActor 
Instead of checking that an actor is not from the local host separately,
it seems like a good idea to do it in the central place that is supposed
to validate an actor.
 2023-01-07 19:46:05 +01:00
Francis Dinh
5102d0bc2e
chore: remove unused user_group_invite table 
Based on `1558257926829-UserGroupInvite.js` but switched `up` and `down`
migrations around.

Closes #314
 2023-01-06 02:51:44 -05:00
Puniko
cdba5447e6
server: remove joins to avatar and banners in children endpoint 
Reviewed-on: FoundKeyGang/FoundKey#303
 2023-01-05 21:05:22 +01:00
Johann150
4bb814adfc
client: add space between endpoint and code in error message 2023-01-05 20:55:03 +01:00
Johann150
35e9d7f958
client: fix null i18n interpolation values 
Fixed the occurence that was reported in
<FoundKeyGang/FoundKey#317> along with a similar one.

Fixes <FoundKeyGang/FoundKey#317>

Also changed the i18n code so this should not happen any more in the general case.
 2023-01-05 20:50:25 +01:00
Johann150
a0c2cf328e
server: fix redirected fetch 
Don't throw a StatusError on an intended redirect.
 2023-01-05 20:03:38 +01:00
Johann150
334368f6e2
fix: allow to pick higher visibility than chosen before 
If you selected a lower visibility that one would then be used as
the parent visibility. Instead it is necessary to use two separate
variables, one for parent and one for the preselected visibility.
 2023-01-04 21:39:33 +01:00
Johann150
3efa7046bd
meta: don't type check dependencies 2023-01-04 20:59:31 +01:00
Johann150
48f8fb97df
activitypub: use quoteUri instead of quoteUrl 
It's not quite Mastodon, but still, I said they'd use a different approach...

Changelog: Changed
 2023-01-04 20:56:06 +01:00
Johann150
0230f819e2
fixup: wrong negation 
This is a fixup for commit 417d252e9d.
 2023-01-04 19:09:03 +01:00
Johann150
08af6fda37
fix some type errors 2023-01-03 22:18:01 +01:00
Johann150
0c8a3cfeec
server: fix lints 2023-01-03 03:51:38 +01:00
Johann150
8bc366fde0
server: fix comma-dangle lint 2023-01-03 02:47:58 +01:00
Johann150
417d252e9d
server: fix custom lint typeorm-prefer-count 2023-01-03 02:42:42 +01:00
Johann150
b54e07caec
enhance typeorm-prefer-count lint rule 2023-01-03 02:41:53 +01:00
Johann150
e0560dbe9e
client: dont display tooltip if software name unknown 
Changelog: Fixed
 2023-01-02 21:51:13 +01:00
Johann150
5b898c6c82
chore: update yarn files 2023-01-02 21:40:12 +01:00
Johann150
6010884e62
cleanup: translate japanese, use SECOND constant 2023-01-02 21:07:56 +01:00
Johann150
b423d23cf6
server: fix custom lint typeorm-prefer-count 2023-01-02 21:07:02 +01:00
Johann150
29714d1ae0
add custom eslint rule to prefer countBy over findBy 2023-01-02 20:58:33 +01:00
Johann150
7bf4d4426a
use count instead of find to check existence 2023-01-02 14:43:27 +01:00
Johann150
d28931bf00
server: remove dateUTC function 2023-01-02 12:45:30 +01:00
Johann150
2a46719f31
server: set file permissions after copy 
This explicitly sets the file permissions to allow everyone to read files
since apparently multer sometimes doesn't set the permissions we expect.

Ref: FoundKeyGang/FoundKey#202
Changelog: Fixed
 2023-01-02 12:44:09 +01:00
Johann150
7f564431be
server: fixup sql 
Fixup to 0b7c9095bf.
 2023-01-02 00:11:35 +01:00
Johann150
0fbd7fa492
client: fix 500 error in notifications 
closes FoundKeyGang/FoundKey#73

Changelog: Fixed
 2023-01-01 23:32:01 +01:00
Johann150
3aaa9facc6
translate japanese to english 2023-01-01 23:30:43 +01:00
Johann150
8f09b05e7c
chore: remove reversi database tables 
Changelog: Fixed
 2023-01-01 22:27:34 +01:00
Johann150
8b0b7ff525
server: change default value for api/admin/show-users origin param 
Changed from "local" to "combined" to fix a bug when the hostname is set
but origin is not.

Changelog: Changed
 2023-01-01 22:11:19 +01:00
Johann150
0b7c9095bf
server: don't return users twice in search 2023-01-01 21:22:53 +01:00
Johann150
338e898f56
client: disable unavailable visibilities 2023-01-01 21:02:55 +01:00
Puniko
3a9d283630
client: make mod patterns display when seeking on stopped track 2022-12-29 21:43:34 +01:00
Johann150
ed27f61a4d
client: add mod tracker 
Squashed commit of the following:

commit 54f0b67b25bc6064b5c0ab3982e20943859aff76
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:27:15 2022 +0100

    use nextTick instead of setTimeout

commit 6998cae7e3a706b00c1b63320750dab279f13e3d
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:14:55 2022 +0100

    my absolute terrible fix to the unhide issue

commit 79f546d1509185c315a5db7e12985e01ed430b08
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:01:35 2022 +0100

    stop player on hide/unhide

commit 6b7f13e8ef48d74edb92441144051e4225b27f71
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 10:36:59 2022 +0100

    make webkit style range slider the same

commit 8a267c5cdc5c1e98d6dd1e038571d92d01985a98
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 01:16:18 2022 +0100

    restyling range inputs

commit c39e1671b2957326ff91746da44091d728f58e82
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:57:47 2022 +0100

    make module seekable

commit c1762f27ae2e4d342ede88018f777c75b8b31d4a
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:14:35 2022 +0100

    remove accesskey attribs

commit 08f75a01f1c2359799e4c2ec734a391d3abfc07c
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:12:23 2022 +0100

    v-else on play button

commit 9302a9faaa5a75c33314befb3f8e0f414e9d886b
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:08:19 2022 +0100

    replace filter with some

commit bffd15daedf55f7623d6ebd777a12384274b89d6
Author: Puniko <me@absturztaube.ch>
Date:   Wed Dec 28 09:13:20 2022 +0100

    add chiptune2 and libopenmpt into COPYING

commit 794298c21c6fe09909136d141fd2a6b83eb64a89
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 15:32:43 2022 +0100

    little cleanup

commit f383aec1cd5a9f8a44539d9f802dee2d1332f64c
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 15:23:25 2022 +0100

    repeat only once and proper handling of track ending

commit fdaa9614c993de306789ecafc38d781d350fe1ab
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 14:52:20 2022 +0100

    prevent losing connection when downloading module

commit 6c5723c795a3610558111f5d0cd6f39dcfd06965
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 14:45:59 2022 +0100

    colours!!! 🌈

commit dba4f0a4a909b956d928bfb7e4f0321291a096e0
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 13:01:06 2022 +0100

    replace  with i18n

commit 4234dfbdbc7f9b73fe07348af1fe2590db4e811d
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 15:47:10 2022 +0100

    retab

commit 0cc1ea8c3ec14fde81936ec3c9eed4d06ad52d95
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 15:19:28 2022 +0100

    include libopenmpt tracker to foundkey

commit c2437c696a5dabb8581fd81f7852cdd6091fe00f
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 12:08:49 2022 +0100

    add libopenmpt

Reviewed-on: FoundKeyGang/FoundKey#306
Changelog: Added
 2022-12-29 21:36:44 +01:00
Chloe Kudryavtsev
ed9d4023d4 backend: add argon2 support 
Passwords will be automatically re-hashed on sign-in.
All new password hashes will be argon2 by default.

This uses argon2id and is not configurable.
In the very unlikely case someone has more specific needs,
a fork is recommended.

ChangeLog: Added

Co-authored-by: Chloe Kudryavtsev <code@toast.bunkerlabs.net>
Reviewed-on: FoundKeyGang/FoundKey#308
 2022-12-29 20:13:47 +00:00
Johann150
76a8e000a3
client: only catch erroneous key errors in i18n.ts 2022-12-27 21:47:34 +01:00
Johann150
a673647fba
server: remove avatarColor and bannerColor properties 
According to comments next to those properties, they were kept for backward compatibility.
However they were always being set to null.

Changelog: Removed
 2022-12-26 18:52:16 +01:00
Johann150
eea2eb4919
use Promise.all instead of separate promises 2022-12-25 19:04:00 +01:00
Johann150
114d416de0
server: refactor password hashing & comparison to module 
For easier replacement should the hash algorithm ever be changed.
 2022-12-25 19:03:51 +01:00
Johann150
c2372315f7
server: improve error messages 
Refactor Error's to ApiError's.

Changelog: Changed
 2022-12-25 16:07:48 +01:00
Johann150
de3cdb5833
activitypub: block check for resolving collections 2022-12-24 18:39:44 -05:00
Francis Dinh
a732cdc1ad
activitypub: perform block check in performOneActivity 2022-12-24 18:39:44 -05:00
Francis Dinh
a8f82050c8
activitypub: perform resolver block check on objects as well 2022-12-24 18:39:44 -05:00
Francis Dinh
8e12b9a33e
server: restore original comment for skippedInstances 2022-12-24 15:01:32 -05:00
Francis Dinh
6583d0c43d
server: pass in resolved meta table to shouldBlockInstance 
This should make it more friendly to use in places where the meta table
has already been resolved for other reasons.
 2022-12-24 14:56:48 -05:00
Johann150
c02a03168d
fixup tooltip: use this instead of self 2022-12-24 13:48:58 +01:00
Johann150
85419326f8
server: use prelude function instead of separate function 2022-12-23 13:55:15 +01:00
Johann150
eaa11647f0
server: rewrite drive usage queries in raw SQL 2022-12-23 13:54:12 +01:00
Johann150
61a2db49df
server: always use user id for calcDriveUsageOf 2022-12-23 13:38:29 +01:00
Johann150
79ddbafd0d
client: fix tooltips not closing 
closes FoundKeyGang/FoundKey#120

Changelog: Fixed
 2022-12-23 11:06:07 +01:00
Norm
0e1459e5cf Merge pull request 'server: refactor follow request functions to be named exports' (#296) from refactor/follow-requests into main 
Reviewed-on: FoundKeyGang/FoundKey#296
 2022-12-23 02:06:31 +00:00
Johann150
e8e82dac82
fixup: confusing commas 2022-12-23 02:30:57 +01:00
Johann150
02aaee6050
client: select folder when entering it 
As a convenience when a user is in the "select a folder" dialog,
opens a folder an then clicks on the checkmark, the currently open folder
is selected.
 2022-12-23 02:21:52 +01:00
Johann150
d26e2588e3
client: combine selection of files & folders 2022-12-23 02:20:36 +01:00
Johann150
df9064c284
client: remove driveFolderBg theme color 
Changelog: Removed
 2022-12-23 02:02:20 +01:00
Francis Dinh
9690244848
server: add return type for all follow reject funcs 2022-12-22 17:52:30 -05:00
Francis Dinh
4db25e4b1f
server: add doc for cancelFollowRequest 2022-12-22 16:55:08 -05:00
Francis Dinh
549302e9c0
server: add doc for createFollowRequest 2022-12-22 16:55:07 -05:00
Francis Dinh
a3354904af
server: use named export for createFollowRequest 2022-12-22 16:52:52 -05:00
Francis Dinh
28f65bebfc
server: use named export for cancelFollowRequest 2022-12-22 16:52:52 -05:00
Francis Dinh
2204adc657
server: use named export for acceptAllFollowRequests 2022-12-22 16:52:52 -05:00
Francis Dinh
b11e4053db
server: use named export for acceptFollowRequest 2022-12-22 16:52:52 -05:00
Johann150
f7c4107ca4
client: drive uses grid instead of flexbox 2022-12-22 18:55:06 +01:00
Johann150
c983c4860c
client: use combined drive endpoint 2022-12-22 17:55:13 +01:00
Johann150
d96070bc80
client: fix duplicate folder when creating new folder 2022-12-22 17:32:05 +01:00
Johann150
240cf98920
client: refactor drive drag&drop 2022-12-22 17:06:52 +01:00
Johann150
7b39483966
server: drive endpoint to fetch files and folders 
Changelog: Added
 2022-12-22 16:46:48 +01:00
Johann150
e2ef800708
server: dont use replace for file types 
No point in using replace if we already know which character we want to replace.
 2022-12-22 14:46:21 +01:00
Johann150
a7048f17f7
server: simplify duplicated code 2022-12-22 14:45:20 +01:00
Johann150
ddf3e2c3db
client: refactor tooltip directive 
Using the beforeUnmount hook should hopefully improve issues with
tooltips being left behind.
 2022-12-22 14:12:25 +01:00
Johann150
33f0b24c56
server: add v2 routes to notes endpoints 2022-12-22 11:02:04 +01:00
Andreas Nedbal
7685b92511
improve fetching of endpoint arguments 
including support for route parameters (e.g. '/v2/note/:noteId' giving us a 'noteId' value)

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2022-12-22 11:02:04 +01:00
Andreas Nedbal
8276bd3bdc
generate OpenAPI spec for v2 endpoints 2022-12-22 11:02:04 +01:00
Andreas Nedbal
aed2752470
server: make v2 meta endpoint support GET 2022-12-22 11:01:56 +01:00
Andreas Nedbal
4a3b91d658
server: add additional API v2 options to endpoints 
* improve type definitions for v2 method
The method has to be lowercase because it is used as an index to get
the respective method of the router.

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2022-12-22 11:00:46 +01:00
Johann150
9317d25078
server: expire notifications after 3 months 
closes FoundKeyGang/FoundKey#292

Changelog: Added
 2022-12-21 21:46:45 +01:00
Johann150
fc36bb8880
server: reduce code duplication in check-expired queue job 2022-12-21 21:46:27 +01:00
Johann150
711bb8be7d
fixup: add missing redirect argument 2022-12-21 21:23:23 +01:00
Johann150
275136cf8b
allow redirects in API ap/* endpoints 2022-12-21 20:45:55 +01:00
Johann150
aa33708b90
server: handle redirects in signed get 
part of FoundKeyGang/FoundKey#288

Changelog: Fixed
 2022-12-20 22:07:24 +01:00
Johann150
99c459a21a
server: better upload limit error 
Ref: FoundKeyGang/FoundKey#293
 2022-12-19 21:29:29 +01:00
Johann150
bd68096ea9
server: refactor API error 2022-12-19 21:24:39 +01:00
Johann150
c411669133
client: fix token-generate-window component 2022-12-18 20:42:05 +01:00
Johann150
639fa74d43
client: restyle app token view 2022-12-18 19:37:52 +01:00
Johann150
3bf7deb233
client: remove unused styling classes 2022-12-18 00:50:02 +01:00
Johann150
2520633210
client: move MFM animations to MFM component 2022-12-18 00:49:28 +01:00
Johann150
4574db523a
client: add default margin to FormSwitch and MkButton 2022-12-18 00:11:32 +01:00
Johann150
263fb94f3f
client: unify import names of form ui components 2022-12-18 00:04:53 +01:00
Johann150
0e3321c106
client: unify import names of MkButton component 2022-12-17 23:32:25 +01:00
Johann150
677ee537d1
client: remove unused component 2022-12-17 22:39:18 +01:00
Johann150
1e539e6af5
client: add missing space 
see FoundKeyGang/FoundKey#291
 2022-12-17 22:34:49 +01:00
Johann150
0e5f744560
client: 2fa is not its own settings page 2022-12-17 22:34:49 +01:00
Johann150
6c7f1774e3
server: fix thread mutes not applying to renotes 
Changelog: Fixed
 2022-12-15 21:20:24 +01:00
Johann150
af43df15ca
reduce duplication in secureRndstr 2022-12-15 20:46:17 +01:00
Johann150
5f83383ab8
fix import error in tests 2022-12-15 20:45:55 +01:00
Johann150
8c759dde6c
server: fix error about duplicate resolve 2022-12-15 19:44:55 +01:00
Johann150
84d83d908a
client: add button to unrenote 
Changelog: Added
 2022-12-15 17:52:19 +01:00
Johann150
16d091497a
server: use extractDbHost instead of toPuny, translate comments 
Also swapped logical or for nullish coalescing operator in some places.
 2022-12-15 00:32:15 +01:00
Johann150
ef53ec276a
activitypub: simplify some URI/id related checks 
followup on previous commit
 2022-12-15 00:31:23 +01:00
Johann150
3582fd8260
activitypub: centrally check id matches URL in resolver 
This makes some duplicated checks in models/note and models/person
unnecessary.
 2022-12-15 00:29:39 +01:00
Johann150
6256ddbd30
client: remove unused variables 2022-12-14 22:09:29 +01:00
Johann150
00fcc238f7
client: remove broken instance ticker from landing page 2022-12-14 22:08:27 +01:00
Johann150
9f1670d5fd
server: fix default not found error image 2022-12-14 19:05:41 +01:00
Francis Dinh
ff31b8b06d server: remove bios and cli 
The BIOS and CLI functionality were mainly for debugging purposes.
If a user has to use those to resolve an issue with the server, that
really should be fixed at the source instead.

Closes: FoundKeyGang/FoundKey#283
Changelog: Removed
 2022-12-14 17:59:25 +00:00
Johann150
398ee6435b
client: replace repo link with foundkey link 2022-12-14 18:21:24 +01:00
Johann150
ffff2ae5ef
server: fix missing import 
closes FoundKeyGang/FoundKey#286
 2022-12-14 18:08:44 +01:00
Johann150
ccc8bf0289
chore: fix more miscellaneous lints 2022-12-13 23:09:32 +01:00
Johann150
a231b36d59
chore: fix lint about unused variables in entities 2022-12-13 23:09:32 +01:00
Johann150
8e9c65fab0
chore: fix some import related lints 2022-12-13 23:09:31 +01:00
Francis Dinh
78a3051313
remove unneeded TODO 2022-12-13 16:46:29 -05:00
Francis Dinh
78717e85d3
server: change JSON.parse/stringify to structuredClone 
structuredClone is more typesafe than using JSON.parse and
JSON.stringify.

Now that Node 18.x is the new baseline, this should be safe to use now.

See https://developer.mozilla.org/en-US/docs/Web/API/structuredClone
for details.
 2022-12-13 16:45:38 -05:00
Francis Dinh
a9d3cae511
server: add return type to extractApMentions 2022-12-13 16:31:15 -05:00
Francis Dinh
bd27b7ca3a
server: add typing for renderFollowRelay 2022-12-13 16:06:18 -05:00
Francis Dinh
e28a9eb8e8
use tsc --noEmit for backend and client 
See https://github.com/misskey-dev/misskey/pull/9316
 2022-12-13 16:02:06 -05:00
Francis Dinh
e5a4c5d2d0
chore: update @typescript-eslint packages 2022-12-13 15:57:26 -05:00
Francis Dinh
6bba55c196
sw: add TypeScript type checking 
This implements the upstream changes from
https://github.com/misskey-dev/misskey/pull/9314 but updated to our
version of ESLint.

Also updates TypeScript to 4.9.4 for all packages.
 2022-12-13 15:42:08 -05:00
Francis Dinh
1d469f3c34
fix import typo 2022-12-13 15:12:29 -05:00
Francis Dinh
3f0228e14c
server: use color-convert KEYWORD instead of extracting parameter type 2022-12-13 15:11:29 -05:00
Johann150
73f81177b4
foundkey-js: adjust type definition 2022-12-13 20:54:50 +01:00
Johann150
6a26da3516
client: use configurable images 2022-12-13 20:54:49 +01:00
Johann150
5ea744b1b2
server: use configurable images 2022-12-13 20:54:49 +01:00
Johann150
ae6ba05306
add config for error images 
Changelog: Added
 2022-12-13 20:54:49 +01:00
Sam Smucny
21069223e3
client: add tooltips to visibility icons 
Changelog: Changed
 2022-12-13 20:49:17 +01:00
Johann150
d4d1e03479
server: fix errors for replies and state when note doesnt exist 2022-12-13 20:35:46 +01:00
Francis Dinh
030394b30d
refactor: remove default export for boot 2022-12-11 14:42:55 -05:00
Johann150
768d9bbdfb
refactor: remove default export for perform 2022-12-11 18:23:19 +01:00
Johann150
3ef1a4b0f9
refactor: remove default export for Resolver 2022-12-11 18:23:07 +01:00
Johann150
ae59ce51b0
refactor: remove default export for DbResolver 2022-12-11 18:16:48 +01:00
Johann150
14a9b9bedd
refactor: remove default export for request 2022-12-11 18:16:45 +01:00
Johann150
985a13f47f
refactor: remove default export for DeliverManager 2022-12-11 17:56:25 +01:00
Johann150
507b328fdf
activitypub: also forward resolver to resolveNote 2022-12-10 11:23:10 +01:00
Francis Dinh
3cf673960b server: Fix typing for user token 
Also fix a comment in the User model that wrongly states that the token
is null if the user is local, when it's the opposite.
 2022-12-08 23:20:41 -05:00
Francis Dinh
cbfd866122 server: make fetcher key non-null 2022-12-08 23:19:39 -05:00
Francis Dinh
b23a8dbaed server: translate comments 2022-12-08 23:18:45 -05:00
Francis Dinh
80a73a7510 server: remove unused imports from suspend-user.ts 2022-12-08 23:18:45 -05:00
Francis Dinh
3dec9a47f0 server: fix various type errors in services 2022-12-08 23:18:45 -05:00
Francis Dinh
b8fb7a38cc server: improve Logger typing information and docs 2022-12-08 23:18:45 -05:00
Francis Dinh
fdc682e810 server: remove sendEmailNotification 
The functions have their bodies completely comented out,
which means they are doing nothing.
 2022-12-08 23:18:45 -05:00
Johann150
fde751df8f
fix: properly supply resolver (2) 2022-12-08 19:06:55 +01:00
Johann150
1faf1035f9
server: handle users getting deleted somewhere else 
I don't know why but several jobs got stuck in my inbox queue because
of errors like 'Could not find any entity of type "User" matching...'.
 2022-12-08 18:12:24 +01:00
Johann150
e2ce599aca
fix: properly supply resolver 2022-12-08 18:12:05 +01:00
Johann150
73870e85cd
client: make headlines in queue widget links 
The headlines "inbox queue" and "deliver queue" are now links to the
admin panel page about the queue.

Changelog: Changed
 2022-12-07 23:23:16 +01:00
Francis Dinh
350f21d955
server: fix typing for skippedInstances query 2022-12-07 16:41:34 -05:00
Francis Dinh
873e21f090
chore: update eslint 2022-12-07 16:27:53 -05:00
Francis Dinh
2afe54c121
eslint: allow backticks to avoid escaping single/double quotes 2022-12-07 16:27:39 -05:00
Johann150
501cf834c8
client: fix issue of search only working once 
closes FoundKeyGang/FoundKey#274

Changelog: Fixed
 2022-12-07 21:56:27 +01:00
Francis Dinh
b66f7550ab
server: auto-fix lints 2022-12-07 13:39:21 -05:00
Johann150
18664dbca3
server: add missing paren 
How did this not break yet?
 2022-12-07 18:29:04 +01:00
Johann150
0f3f42eb39
remove rndstr dependency 
This dependency was unused in the client.

The use of it in the server can be replaced entirely by the
secureRndstr function, with some slight modifications.

That function could probably be refactored a bit more as well.
 2022-12-07 18:08:09 +01:00
Andreas Nedbal
d3f1ad9a88 chore: remove unused packages 2022-12-06 23:18:27 +01:00
Andreas Nedbal
1aa3898db5 server: remove unused import 2022-12-06 23:12:45 +01:00
Andreas Nedbal
96c3744555 client: remove integration settings menu entry 2022-12-06 23:00:32 +01:00
Andreas Nedbal
b023741f50 server: remove integrations field from user 2022-12-06 23:00:08 +01:00
Andreas Nedbal
7e8d5c3b79 foundkey-js: remove integration fields from instance type 2022-12-06 21:52:16 +01:00
Andreas Nedbal
c785fbab6e client: remove integration signin options 2022-12-06 21:51:01 +01:00
Andreas Nedbal
547a1f81d4 client: remove integration settings 2022-12-06 21:50:34 +01:00
Andreas Nedbal
95384d0bb2 client: remove integration admin settings 2022-12-06 21:50:20 +01:00
Andreas Nedbal
4cc5b734e7 activitypub: remove integration fields from person and nodeinfo 2022-12-06 21:49:19 +01:00
Andreas Nedbal
5d32872999 server: remove integration API routes 2022-12-06 21:48:31 +01:00
Andreas Nedbal
b4b1204f77 server: remove integration-related fields from meta 2022-12-06 21:47:59 +01:00
Norm
c1a51547a9 BREAKING: server: remove wildcard blocking and instead block subdomains (#269) 
Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: FoundKeyGang/FoundKey#269
Changelog: Changed
 2022-12-05 17:55:38 +00:00
Chloe Kudryavtsev
4e74d26e45 backend: fix ratelimit typo 
Changelog: Fixed
 2022-12-05 15:49:33 +01:00
Johann150
a421dd401c
activitypub: refactor to always apply recursion limit 
Refactor to remove as many "new Resolver" as possible.
 2022-12-04 21:11:44 +01:00
Johann150
c4211761e6
server: refactor resolveSelf to just return the webfinger href 
Since the href seems to be the only attribute that is used, and I didn't
want to add a full type definition this was the easier option.
 2022-12-04 21:11:43 +01:00
Johann150
03b673165f
server: refactor "authUser" functions into separate file 
They did not really fit into the DbResolver because they may fetch data
from remote instances even though DbResolver is only supposed to access
the database.
 2022-12-04 21:11:35 +01:00
Johann150
de18c8306d
server: fix token-permissions migration 
The table that is affected here was not properly purged of old entries. It only holds
data that is needed while a 3rd party authorization is in progress but not finished.

The code that typeorm generated for this migration is a bit wonky because it should
probably have dropped one column and created another one. But if we clear out all entries
it should work regardless and I'm feeling lazy right now. :P
 2022-12-04 19:05:02 +01:00
Johann150
38df8dc734
client: set display name limit same as server 
Changelog: Fixed
 2022-12-04 15:35:43 +01:00
Johann150
11e4a8cb9b
remove erroneous space 2022-12-04 15:34:05 +01:00
Johann150
d1e0d79c19
client: unify different error dialogs 
Changelog: Fixed
 2022-12-04 14:27:53 +01:00
Johann150
946e862ecd
server: implement OAuth 2.0 Authorization Code grant 
Changelog: Added
Reviewed-on: FoundKeyGang/FoundKey#205
 2022-12-04 14:06:36 +01:00
Johann150
97052b1f61
server: refactor fromHtml attribute handling 
Also try to recognize owncast hashtag links.
 2022-12-04 03:43:22 +01:00
Johann150
cda9197700
server: increase nodeinfo caching 
Changelog: Changed
 2022-12-04 03:26:50 +01:00
Chloe Kudryavtsev
2dde8273e2 implement separate web workers 
Reviewed-on: FoundKeyGang/FoundKey#252
 2022-12-03 13:33:23 +00:00
Johann150
de927e1f30 server: handle invalid URLs in comparison 2022-12-03 10:38:33 +00:00
Johann150
bdcec2b8a7 server: implement OAuth discovery (RFC 8414) 2022-12-03 10:38:33 +00:00
Johann150
5291f29581 implement OAuth PKCE 
This implements Proof Key for Code Exchange a.k.a. RFC 7636.
 2022-12-03 10:38:33 +00:00
Johann150
15b3ab6d13 check redirect URIs 2022-12-03 10:38:33 +00:00
Johann150
79e3c20189 server: allow to grant tokens with more restricted privileges 
This also simplifies API authentication a bit by not having to fetch
the App that is related to a token.

The restriction of 1 token per app is also lifted. This was not a
constraint in the database but it was enforced by the code and
kinda wrong schema the auth_session table had.
 2022-12-03 10:38:32 +00:00
Johann150
2f2e6a58a4 docs: read scope descriptions from locale strings 2022-12-03 10:38:32 +00:00