vib/FoundKey
1
0
Fork 0
forked from FoundKeyGang/FoundKey
Code Issues Pull requests Projects Releases Packages Wiki Activity
22136 commits 12 branches 4 tags 106 MiB
Commit graph

1071 commits

Author SHA1 Message Date
Puniko
cdba5447e6
server: remove joins to avatar and banners in children endpoint 
Reviewed-on: FoundKeyGang/FoundKey#303
 2023-01-05 21:05:22 +01:00
Johann150
a0c2cf328e
server: fix redirected fetch 
Don't throw a StatusError on an intended redirect.
 2023-01-05 20:03:38 +01:00
Johann150
3efa7046bd
meta: don't type check dependencies 2023-01-04 20:59:31 +01:00
Johann150
48f8fb97df
activitypub: use quoteUri instead of quoteUrl 
It's not quite Mastodon, but still, I said they'd use a different approach...

Changelog: Changed
 2023-01-04 20:56:06 +01:00
Johann150
0230f819e2
fixup: wrong negation 
This is a fixup for commit 417d252e9d.
 2023-01-04 19:09:03 +01:00
Johann150
08af6fda37
fix some type errors 2023-01-03 22:18:01 +01:00
Johann150
0c8a3cfeec
server: fix lints 2023-01-03 03:51:38 +01:00
Johann150
8bc366fde0
server: fix comma-dangle lint 2023-01-03 02:47:58 +01:00
Johann150
417d252e9d
server: fix custom lint typeorm-prefer-count 2023-01-03 02:42:42 +01:00
Johann150
b54e07caec
enhance typeorm-prefer-count lint rule 2023-01-03 02:41:53 +01:00
Johann150
5b898c6c82
chore: update yarn files 2023-01-02 21:40:12 +01:00
Johann150
6010884e62
cleanup: translate japanese, use SECOND constant 2023-01-02 21:07:56 +01:00
Johann150
b423d23cf6
server: fix custom lint typeorm-prefer-count 2023-01-02 21:07:02 +01:00
Johann150
29714d1ae0
add custom eslint rule to prefer countBy over findBy 2023-01-02 20:58:33 +01:00
Johann150
7bf4d4426a
use count instead of find to check existence 2023-01-02 14:43:27 +01:00
Johann150
d28931bf00
server: remove dateUTC function 2023-01-02 12:45:30 +01:00
Johann150
2a46719f31
server: set file permissions after copy 
This explicitly sets the file permissions to allow everyone to read files
since apparently multer sometimes doesn't set the permissions we expect.

Ref: FoundKeyGang/FoundKey#202
Changelog: Fixed
 2023-01-02 12:44:09 +01:00
Johann150
7f564431be
server: fixup sql 
Fixup to 0b7c9095bf.
 2023-01-02 00:11:35 +01:00
Johann150
0fbd7fa492
client: fix 500 error in notifications 
closes FoundKeyGang/FoundKey#73

Changelog: Fixed
 2023-01-01 23:32:01 +01:00
Johann150
3aaa9facc6
translate japanese to english 2023-01-01 23:30:43 +01:00
Johann150
8f09b05e7c
chore: remove reversi database tables 
Changelog: Fixed
 2023-01-01 22:27:34 +01:00
Johann150
8b0b7ff525
server: change default value for api/admin/show-users origin param 
Changed from "local" to "combined" to fix a bug when the hostname is set
but origin is not.

Changelog: Changed
 2023-01-01 22:11:19 +01:00
Johann150
0b7c9095bf
server: don't return users twice in search 2023-01-01 21:22:53 +01:00
Johann150
ed27f61a4d
client: add mod tracker 
Squashed commit of the following:

commit 54f0b67b25bc6064b5c0ab3982e20943859aff76
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:27:15 2022 +0100

    use nextTick instead of setTimeout

commit 6998cae7e3a706b00c1b63320750dab279f13e3d
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:14:55 2022 +0100

    my absolute terrible fix to the unhide issue

commit 79f546d1509185c315a5db7e12985e01ed430b08
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 21:01:35 2022 +0100

    stop player on hide/unhide

commit 6b7f13e8ef48d74edb92441144051e4225b27f71
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 10:36:59 2022 +0100

    make webkit style range slider the same

commit 8a267c5cdc5c1e98d6dd1e038571d92d01985a98
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 01:16:18 2022 +0100

    restyling range inputs

commit c39e1671b2957326ff91746da44091d728f58e82
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:57:47 2022 +0100

    make module seekable

commit c1762f27ae2e4d342ede88018f777c75b8b31d4a
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:14:35 2022 +0100

    remove accesskey attribs

commit 08f75a01f1c2359799e4c2ec734a391d3abfc07c
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:12:23 2022 +0100

    v-else on play button

commit 9302a9faaa5a75c33314befb3f8e0f414e9d886b
Author: Puniko <me@absturztaube.ch>
Date:   Thu Dec 29 00:08:19 2022 +0100

    replace filter with some

commit bffd15daedf55f7623d6ebd777a12384274b89d6
Author: Puniko <me@absturztaube.ch>
Date:   Wed Dec 28 09:13:20 2022 +0100

    add chiptune2 and libopenmpt into COPYING

commit 794298c21c6fe09909136d141fd2a6b83eb64a89
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 15:32:43 2022 +0100

    little cleanup

commit f383aec1cd5a9f8a44539d9f802dee2d1332f64c
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 15:23:25 2022 +0100

    repeat only once and proper handling of track ending

commit fdaa9614c993de306789ecafc38d781d350fe1ab
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 14:52:20 2022 +0100

    prevent losing connection when downloading module

commit 6c5723c795a3610558111f5d0cd6f39dcfd06965
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 14:45:59 2022 +0100

    colours!!! 🌈

commit dba4f0a4a909b956d928bfb7e4f0321291a096e0
Author: Puniko <me@absturztaube.ch>
Date:   Tue Dec 27 13:01:06 2022 +0100

    replace  with i18n

commit 4234dfbdbc7f9b73fe07348af1fe2590db4e811d
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 15:47:10 2022 +0100

    retab

commit 0cc1ea8c3ec14fde81936ec3c9eed4d06ad52d95
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 15:19:28 2022 +0100

    include libopenmpt tracker to foundkey

commit c2437c696a5dabb8581fd81f7852cdd6091fe00f
Author: Puniko <me@absturztaube.ch>
Date:   Mon Dec 26 12:08:49 2022 +0100

    add libopenmpt

Reviewed-on: FoundKeyGang/FoundKey#306
Changelog: Added
 2022-12-29 21:36:44 +01:00
Chloe Kudryavtsev
ed9d4023d4 backend: add argon2 support 
Passwords will be automatically re-hashed on sign-in.
All new password hashes will be argon2 by default.

This uses argon2id and is not configurable.
In the very unlikely case someone has more specific needs,
a fork is recommended.

ChangeLog: Added

Co-authored-by: Chloe Kudryavtsev <code@toast.bunkerlabs.net>
Reviewed-on: FoundKeyGang/FoundKey#308
 2022-12-29 20:13:47 +00:00
Johann150
a673647fba
server: remove avatarColor and bannerColor properties 
According to comments next to those properties, they were kept for backward compatibility.
However they were always being set to null.

Changelog: Removed
 2022-12-26 18:52:16 +01:00
Johann150
eea2eb4919
use Promise.all instead of separate promises 2022-12-25 19:04:00 +01:00
Johann150
114d416de0
server: refactor password hashing & comparison to module 
For easier replacement should the hash algorithm ever be changed.
 2022-12-25 19:03:51 +01:00
Johann150
c2372315f7
server: improve error messages 
Refactor Error's to ApiError's.

Changelog: Changed
 2022-12-25 16:07:48 +01:00
Johann150
de3cdb5833
activitypub: block check for resolving collections 2022-12-24 18:39:44 -05:00
Francis Dinh
a732cdc1ad
activitypub: perform block check in performOneActivity 2022-12-24 18:39:44 -05:00
Francis Dinh
a8f82050c8
activitypub: perform resolver block check on objects as well 2022-12-24 18:39:44 -05:00
Francis Dinh
8e12b9a33e
server: restore original comment for skippedInstances 2022-12-24 15:01:32 -05:00
Francis Dinh
6583d0c43d
server: pass in resolved meta table to shouldBlockInstance 
This should make it more friendly to use in places where the meta table
has already been resolved for other reasons.
 2022-12-24 14:56:48 -05:00
Johann150
85419326f8
server: use prelude function instead of separate function 2022-12-23 13:55:15 +01:00
Johann150
eaa11647f0
server: rewrite drive usage queries in raw SQL 2022-12-23 13:54:12 +01:00
Johann150
61a2db49df
server: always use user id for calcDriveUsageOf 2022-12-23 13:38:29 +01:00
Norm
0e1459e5cf Merge pull request 'server: refactor follow request functions to be named exports' (#296) from refactor/follow-requests into main 
Reviewed-on: FoundKeyGang/FoundKey#296
 2022-12-23 02:06:31 +00:00
Francis Dinh
9690244848
server: add return type for all follow reject funcs 2022-12-22 17:52:30 -05:00
Francis Dinh
4db25e4b1f
server: add doc for cancelFollowRequest 2022-12-22 16:55:08 -05:00
Francis Dinh
549302e9c0
server: add doc for createFollowRequest 2022-12-22 16:55:07 -05:00
Francis Dinh
a3354904af
server: use named export for createFollowRequest 2022-12-22 16:52:52 -05:00
Francis Dinh
28f65bebfc
server: use named export for cancelFollowRequest 2022-12-22 16:52:52 -05:00
Francis Dinh
2204adc657
server: use named export for acceptAllFollowRequests 2022-12-22 16:52:52 -05:00
Francis Dinh
b11e4053db
server: use named export for acceptFollowRequest 2022-12-22 16:52:52 -05:00
Johann150
7b39483966
server: drive endpoint to fetch files and folders 
Changelog: Added
 2022-12-22 16:46:48 +01:00
Johann150
e2ef800708
server: dont use replace for file types 
No point in using replace if we already know which character we want to replace.
 2022-12-22 14:46:21 +01:00
Johann150
a7048f17f7
server: simplify duplicated code 2022-12-22 14:45:20 +01:00
Johann150
33f0b24c56
server: add v2 routes to notes endpoints 2022-12-22 11:02:04 +01:00
Andreas Nedbal
7685b92511
improve fetching of endpoint arguments 
including support for route parameters (e.g. '/v2/note/:noteId' giving us a 'noteId' value)

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2022-12-22 11:02:04 +01:00
Andreas Nedbal
8276bd3bdc
generate OpenAPI spec for v2 endpoints 2022-12-22 11:02:04 +01:00
Andreas Nedbal
aed2752470
server: make v2 meta endpoint support GET 2022-12-22 11:01:56 +01:00
Andreas Nedbal
4a3b91d658
server: add additional API v2 options to endpoints 
* improve type definitions for v2 method
The method has to be lowercase because it is used as an index to get
the respective method of the router.

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2022-12-22 11:00:46 +01:00
Johann150
9317d25078
server: expire notifications after 3 months 
closes FoundKeyGang/FoundKey#292

Changelog: Added
 2022-12-21 21:46:45 +01:00
Johann150
fc36bb8880
server: reduce code duplication in check-expired queue job 2022-12-21 21:46:27 +01:00
Johann150
711bb8be7d
fixup: add missing redirect argument 2022-12-21 21:23:23 +01:00
Johann150
275136cf8b
allow redirects in API ap/* endpoints 2022-12-21 20:45:55 +01:00
Johann150
aa33708b90
server: handle redirects in signed get 
part of FoundKeyGang/FoundKey#288

Changelog: Fixed
 2022-12-20 22:07:24 +01:00
Johann150
99c459a21a
server: better upload limit error 
Ref: FoundKeyGang/FoundKey#293
 2022-12-19 21:29:29 +01:00
Johann150
bd68096ea9
server: refactor API error 2022-12-19 21:24:39 +01:00
Johann150
6c7f1774e3
server: fix thread mutes not applying to renotes 
Changelog: Fixed
 2022-12-15 21:20:24 +01:00
Johann150
af43df15ca
reduce duplication in secureRndstr 2022-12-15 20:46:17 +01:00
Johann150
5f83383ab8
fix import error in tests 2022-12-15 20:45:55 +01:00
Johann150
8c759dde6c
server: fix error about duplicate resolve 2022-12-15 19:44:55 +01:00
Johann150
16d091497a
server: use extractDbHost instead of toPuny, translate comments 
Also swapped logical or for nullish coalescing operator in some places.
 2022-12-15 00:32:15 +01:00
Johann150
ef53ec276a
activitypub: simplify some URI/id related checks 
followup on previous commit
 2022-12-15 00:31:23 +01:00
Johann150
3582fd8260
activitypub: centrally check id matches URL in resolver 
This makes some duplicated checks in models/note and models/person
unnecessary.
 2022-12-15 00:29:39 +01:00
Johann150
9f1670d5fd
server: fix default not found error image 2022-12-14 19:05:41 +01:00
Francis Dinh
ff31b8b06d server: remove bios and cli 
The BIOS and CLI functionality were mainly for debugging purposes.
If a user has to use those to resolve an issue with the server, that
really should be fixed at the source instead.

Closes: FoundKeyGang/FoundKey#283
Changelog: Removed
 2022-12-14 17:59:25 +00:00
Johann150
ffff2ae5ef
server: fix missing import 
closes FoundKeyGang/FoundKey#286
 2022-12-14 18:08:44 +01:00
Johann150
ccc8bf0289
chore: fix more miscellaneous lints 2022-12-13 23:09:32 +01:00
Johann150
a231b36d59
chore: fix lint about unused variables in entities 2022-12-13 23:09:32 +01:00
Johann150
8e9c65fab0
chore: fix some import related lints 2022-12-13 23:09:31 +01:00
Francis Dinh
78a3051313
remove unneeded TODO 2022-12-13 16:46:29 -05:00
Francis Dinh
78717e85d3
server: change JSON.parse/stringify to structuredClone 
structuredClone is more typesafe than using JSON.parse and
JSON.stringify.

Now that Node 18.x is the new baseline, this should be safe to use now.

See https://developer.mozilla.org/en-US/docs/Web/API/structuredClone
for details.
 2022-12-13 16:45:38 -05:00
Francis Dinh
a9d3cae511
server: add return type to extractApMentions 2022-12-13 16:31:15 -05:00
Francis Dinh
bd27b7ca3a
server: add typing for renderFollowRelay 2022-12-13 16:06:18 -05:00
Francis Dinh
e28a9eb8e8
use tsc --noEmit for backend and client 
See https://github.com/misskey-dev/misskey/pull/9316
 2022-12-13 16:02:06 -05:00
Francis Dinh
e5a4c5d2d0
chore: update @typescript-eslint packages 2022-12-13 15:57:26 -05:00
Francis Dinh
6bba55c196
sw: add TypeScript type checking 
This implements the upstream changes from
https://github.com/misskey-dev/misskey/pull/9314 but updated to our
version of ESLint.

Also updates TypeScript to 4.9.4 for all packages.
 2022-12-13 15:42:08 -05:00
Francis Dinh
1d469f3c34
fix import typo 2022-12-13 15:12:29 -05:00
Francis Dinh
3f0228e14c
server: use color-convert KEYWORD instead of extracting parameter type 2022-12-13 15:11:29 -05:00
Johann150
5ea744b1b2
server: use configurable images 2022-12-13 20:54:49 +01:00
Johann150
ae6ba05306
add config for error images 
Changelog: Added
 2022-12-13 20:54:49 +01:00
Johann150
d4d1e03479
server: fix errors for replies and state when note doesnt exist 2022-12-13 20:35:46 +01:00
Francis Dinh
030394b30d
refactor: remove default export for boot 2022-12-11 14:42:55 -05:00
Johann150
768d9bbdfb
refactor: remove default export for perform 2022-12-11 18:23:19 +01:00
Johann150
3ef1a4b0f9
refactor: remove default export for Resolver 2022-12-11 18:23:07 +01:00
Johann150
ae59ce51b0
refactor: remove default export for DbResolver 2022-12-11 18:16:48 +01:00
Johann150
14a9b9bedd
refactor: remove default export for request 2022-12-11 18:16:45 +01:00
Johann150
985a13f47f
refactor: remove default export for DeliverManager 2022-12-11 17:56:25 +01:00
Johann150
507b328fdf
activitypub: also forward resolver to resolveNote 2022-12-10 11:23:10 +01:00
Francis Dinh
3cf673960b server: Fix typing for user token 
Also fix a comment in the User model that wrongly states that the token
is null if the user is local, when it's the opposite.
 2022-12-08 23:20:41 -05:00
Francis Dinh
cbfd866122 server: make fetcher key non-null 2022-12-08 23:19:39 -05:00
Francis Dinh
b23a8dbaed server: translate comments 2022-12-08 23:18:45 -05:00
Francis Dinh
80a73a7510 server: remove unused imports from suspend-user.ts 2022-12-08 23:18:45 -05:00
Francis Dinh
3dec9a47f0 server: fix various type errors in services 2022-12-08 23:18:45 -05:00
Francis Dinh
b8fb7a38cc server: improve Logger typing information and docs 2022-12-08 23:18:45 -05:00
Francis Dinh
fdc682e810 server: remove sendEmailNotification 
The functions have their bodies completely comented out,
which means they are doing nothing.
 2022-12-08 23:18:45 -05:00
Johann150
fde751df8f
fix: properly supply resolver (2) 2022-12-08 19:06:55 +01:00
Johann150
1faf1035f9
server: handle users getting deleted somewhere else 
I don't know why but several jobs got stuck in my inbox queue because
of errors like 'Could not find any entity of type "User" matching...'.
 2022-12-08 18:12:24 +01:00
Johann150
e2ce599aca
fix: properly supply resolver 2022-12-08 18:12:05 +01:00
Francis Dinh
350f21d955
server: fix typing for skippedInstances query 2022-12-07 16:41:34 -05:00
Francis Dinh
873e21f090
chore: update eslint 2022-12-07 16:27:53 -05:00
Francis Dinh
2afe54c121
eslint: allow backticks to avoid escaping single/double quotes 2022-12-07 16:27:39 -05:00
Francis Dinh
b66f7550ab
server: auto-fix lints 2022-12-07 13:39:21 -05:00
Johann150
18664dbca3
server: add missing paren 
How did this not break yet?
 2022-12-07 18:29:04 +01:00
Johann150
0f3f42eb39
remove rndstr dependency 
This dependency was unused in the client.

The use of it in the server can be replaced entirely by the
secureRndstr function, with some slight modifications.

That function could probably be refactored a bit more as well.
 2022-12-07 18:08:09 +01:00
Andreas Nedbal
d3f1ad9a88 chore: remove unused packages 2022-12-06 23:18:27 +01:00
Andreas Nedbal
1aa3898db5 server: remove unused import 2022-12-06 23:12:45 +01:00
Andreas Nedbal
b023741f50 server: remove integrations field from user 2022-12-06 23:00:08 +01:00
Andreas Nedbal
4cc5b734e7 activitypub: remove integration fields from person and nodeinfo 2022-12-06 21:49:19 +01:00
Andreas Nedbal
5d32872999 server: remove integration API routes 2022-12-06 21:48:31 +01:00
Andreas Nedbal
b4b1204f77 server: remove integration-related fields from meta 2022-12-06 21:47:59 +01:00
Norm
c1a51547a9 BREAKING: server: remove wildcard blocking and instead block subdomains (#269) 
Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: FoundKeyGang/FoundKey#269
Changelog: Changed
 2022-12-05 17:55:38 +00:00
Chloe Kudryavtsev
4e74d26e45 backend: fix ratelimit typo 
Changelog: Fixed
 2022-12-05 15:49:33 +01:00
Johann150
a421dd401c
activitypub: refactor to always apply recursion limit 
Refactor to remove as many "new Resolver" as possible.
 2022-12-04 21:11:44 +01:00
Johann150
c4211761e6
server: refactor resolveSelf to just return the webfinger href 
Since the href seems to be the only attribute that is used, and I didn't
want to add a full type definition this was the easier option.
 2022-12-04 21:11:43 +01:00
Johann150
03b673165f
server: refactor "authUser" functions into separate file 
They did not really fit into the DbResolver because they may fetch data
from remote instances even though DbResolver is only supposed to access
the database.
 2022-12-04 21:11:35 +01:00
Johann150
de18c8306d
server: fix token-permissions migration 
The table that is affected here was not properly purged of old entries. It only holds
data that is needed while a 3rd party authorization is in progress but not finished.

The code that typeorm generated for this migration is a bit wonky because it should
probably have dropped one column and created another one. But if we clear out all entries
it should work regardless and I'm feeling lazy right now. :P
 2022-12-04 19:05:02 +01:00
Johann150
11e4a8cb9b
remove erroneous space 2022-12-04 15:34:05 +01:00
Johann150
946e862ecd
server: implement OAuth 2.0 Authorization Code grant 
Changelog: Added
Reviewed-on: FoundKeyGang/FoundKey#205
 2022-12-04 14:06:36 +01:00
Johann150
97052b1f61
server: refactor fromHtml attribute handling 
Also try to recognize owncast hashtag links.
 2022-12-04 03:43:22 +01:00
Johann150
cda9197700
server: increase nodeinfo caching 
Changelog: Changed
 2022-12-04 03:26:50 +01:00
Chloe Kudryavtsev
2dde8273e2 implement separate web workers 
Reviewed-on: FoundKeyGang/FoundKey#252
 2022-12-03 13:33:23 +00:00
Johann150
de927e1f30 server: handle invalid URLs in comparison 2022-12-03 10:38:33 +00:00
Johann150
bdcec2b8a7 server: implement OAuth discovery (RFC 8414) 2022-12-03 10:38:33 +00:00
Johann150
5291f29581 implement OAuth PKCE 
This implements Proof Key for Code Exchange a.k.a. RFC 7636.
 2022-12-03 10:38:33 +00:00
Johann150
15b3ab6d13 check redirect URIs 2022-12-03 10:38:33 +00:00
Johann150
79e3c20189 server: allow to grant tokens with more restricted privileges 
This also simplifies API authentication a bit by not having to fetch
the App that is related to a token.

The restriction of 1 token per app is also lifted. This was not a
constraint in the database but it was enforced by the code and
kinda wrong schema the auth_session table had.
 2022-12-03 10:38:32 +00:00
Johann150
2f2e6a58a4 docs: read scope descriptions from locale strings 2022-12-03 10:38:32 +00:00
Johann150
c65fdebe26 server: add missing auth/deny endpoint 
This endpoint is hinted at in the client, but is not actually defined
in the backend. This commit defines it.
 2022-12-03 10:38:32 +00:00
Johann150
418c88bb8f expire AuthSessions after 15 min 2022-12-03 10:38:32 +00:00
Johann150
2b19b34196 update OpenAPI docs to OAuth 2022-12-03 10:38:32 +00:00
Johann150
7db7fdd9e2 add API route for OAuth access token retrieval 2022-12-03 10:38:32 +00:00
Johann150
a13e956af0 make authorization token granting OAuth 2.0 compatible 
This is basically a shim on top of the existing API.
Instead of the 3rd party, the web UI generates the authorization session.

The data that the API returns is slightly adjusted so that only one
API call is necessary instead of two.
 2022-12-03 10:38:32 +00:00
Francis Dinh
18cf228f89
server: readd "fetch meta only once in skippedInstances"" 
This reverts commit e446a11bb7.

Turns out this wasn't really the source of the referenced issue and
someone was able to run with the original commit fine, so adding this
back for now.
 2022-12-03 05:13:30 -05:00
Francis Dinh
bdf2e14a73
server: fix TypeError in registerOrFetchInstanceDoc 
Changelog: Fixed
 2022-12-03 04:01:51 -05:00
Francis Dinh
e446a11bb7
Revert "server: fetch meta only once in skippedInstances" 
This reverts commit 81d63720f2 since it
seems to cause a ReferenceError for some reason.

Ref: https://toot.site/@jeder/109447151582516733
 2022-12-03 02:13:18 -05:00
Johann150
194fff3603
activitypub: hashtags no longer displaying as links 
Some hashtags sent from Mastodon were erroneously displayed as links.
This is because Mastodon seems to mangle hashtags containing non-ASCII
codepoints (such as e.g. umlauts). This lead to the previous code which
depended on the list of hashtags to not recognize a hashtag. Instead,
the `rel="tag"` microformat is recognized instead.

This makes the `htmlToMfm` wrapper function unnecessary so it was removed.

Changelog: Fixed
 2022-12-02 19:31:57 +01:00
Johann150
b4080d788d
slight refactoring & translating japanese 2022-12-02 19:00:58 +01:00
Johann150
e49b8d0ef3
server: remove unnecessary apLogger aliases 2022-12-02 18:58:19 +01:00
Johann150
7d3d0f858c
increment versions in package.json 2022-12-02 16:59:47 +01:00
Francis Dinh
81d63720f2
server: fetch meta only once in skippedInstances 2022-12-02 09:26:14 -05:00
Francis Dinh
5e6b51094e
server: fix instance skipping 
This should actually make instance skipping work properly since
shouldBlockInstance is now properly awaited on now.
 2022-12-02 09:10:56 -05:00
Johann150
9ad37a12f8
server: fix rendering of Follow activity when removing follow 
closes FoundKeyGang/FoundKey#263

Changelog: Fixed
 2022-12-01 21:49:38 +01:00
Norm
e10700a2be Merge pull request 'server: add wildcard matching to blocked hosts' (#260) from wildcard-block-v2 into main 
Reviewed-on: FoundKeyGang/FoundKey#260
 2022-12-01 20:12:18 +00:00
Johann150
721a327192
fixup: remove unused import 2022-12-01 20:46:46 +01:00
Johann150
936cbf900b
use default argument value 
This unifies the style with the other function in that file and fixes
the lint "no-param-reassign".
 2022-12-01 20:32:57 +01:00
Francis Dinh
b3e34795c0
require punycode conversion beforehand for admins 2022-12-01 12:07:43 -05:00
Francis Dinh
a35c98bbd5
server: encode non-ascii domains in punycode in matchHost 2022-12-01 11:34:11 -05:00
Francis Dinh
075e251822
server: add wildcard matching to blocked hosts 
This adds in wildcard matching. For instance:
- `*.bad.tld` will match: `very.bad.tld`
- `bad.*` will match: `bad.something`
- `*.bad.*` will match: `very.bad.evil`

Changelog: Changed
 2022-12-01 11:29:02 -05:00
Derek Schmidt
11a6e706f4
server: Use shared resolver in featured and question accept 2022-12-01 04:40:14 -05:00
Derek Schmidt
d3af00a912
server: Add recursion limit to resolver 
Changelog: Security
 2022-12-01 04:40:07 -05:00
Norm
973bd4532b Merge pull request 'server: always enable push notifications' (#235) from enable-push-notifs into main 
Reviewed-on: FoundKeyGang/FoundKey#235
Changelog: Changed
 2022-11-29 21:51:10 +00:00
Francis Dinh
5733f127ca
backend: update re2 to 1.17.8 
This should fix Node 19 compatibility.

Fixes: FoundKeyGang/FoundKey#238
 2022-11-28 12:02:24 -05:00
Johann150
8130a2a9b1
server: remove deeplIsPro setting 
This setting is unnecessary because DeepL free keys can be detected
easily according to <https://www.deepl.com/docs-api/api-access/authentication/>:
> DeepL API Free authentication keys can be identified easily by the suffix ":fx"

Changelog: Removed
 2022-11-27 12:12:56 +01:00
Johann150
9fd23b5dae
server: remove quote urls, 3rd try 
First try was 66a7c62342 but classList is
not in parse5 DOM. Second try was 7ee6a09cf2
but forgot the contents of this commit.
 2022-11-27 09:30:51 +01:00
Chloe Kudryavtsev
6600f6e52e fixup: make cluster limit into a per-mode warning rather than error 2022-11-26 13:28:39 +01:00
Johann150
d0c504ec85
server: fix unknown variable in signin endpoint 2022-11-25 19:09:08 +01:00
Johann150
062cba1b3c
server: fix undefined variable for instance actor 2022-11-25 19:05:37 +01:00
Johann150
48a60b03ea
BREAKING: implement separate web workers 
There are now separate web and queue workers.

The configuration entry `clusterLimit` has been replaced by
`clusterLimits` which allows separate configuration of web and
queue workers.

Changelog: Changed
 2022-11-25 12:56:49 +01:00
Francis Dinh
f817d45210
update eslint and typescript-eslint 2022-11-25 02:07:21 -05:00
Francis Dinh
b67799ad3f
BREAKING: Remove support for Node 16.x and upgrade to TypeScript 4.9 
Now that Node 18 is the new LTS version of Node, it should be safe to
support ES2022 features. The install docs have already been updated to
recommend Node 18.x in 41a710854e.

This will break support on Node 16.x and earlier.

Also update TypeScript to 4.9 which contains various typechecking
improvements: https://devblogs.microsoft.com/typescript/announcing-typescript-4-9/

Ref: FoundKeyGang/FoundKey#238
Changelog: Changed
 2022-11-25 02:07:21 -05:00
Johann150
01fa4332c2
server: set vapid keys on initial setup 2022-11-21 22:30:34 +01:00
Johann150
563f3672a9
server: always enable push notifications 
The thing that previously presumably hindered this was that the VAPID
keys had to be set up. Previously admins had to do this, but this is a bad
idea for multiple reasons:
1) The meaning of "public key" and "private key" was not well documented
in the settings.
2) Giving out a private key over the API, even just for admins, sounds
like a bad idea.

Co-authored-by: Francis Dinh <normandy@biribiri.dev>
 2022-11-21 22:00:53 +01:00
Johann150
7ee6a09cf2
fix errors from quote string removal 
The parse5 tree does not have the full DOM methods and attributes.
 2022-11-21 19:43:56 +01:00
Johann150
9e2553909e
server: use time constants 2022-11-20 23:15:40 +01:00
Johann150
66a7c62342 activitypub: remove akkoma quote URLs 
Changelog: Fixed
 2022-11-20 20:48:15 +00:00
Norm
512351746f Merge pull request 'Add LibreTranslate support' (#224) from libretranslate into main 
Reviewed-on: FoundKeyGang/FoundKey#224
Changelog: Added
 2022-11-20 16:21:17 +00:00
kabo2468
b7f32be512
server: don't nyaize quoted lines 
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
Changelog: Changed
 2022-11-20 11:15:03 +01:00
Johann150
aefb11959f
fix: translator settings on admin/meta endpoint 2022-11-20 10:37:50 +01:00
Francis Dinh
8cde66b8ac
backend: Add LibreTranslate support 2022-11-19 23:00:33 -05:00
Johann150
7ffe2181a9
server: use host parameter in note search without elasticsearch 
Changelog: Fixed
 2022-11-19 17:33:27 +01:00
Johann150
4183c429e6
server: rewrite skipped instances query in raw SQL 
This should hopefully improve performance somewhat.

Reviewed-on: FoundKeyGang/FoundKey#230
Changelog: Changed
 2022-11-18 22:02:47 +01:00
Johann150
28aa440bcc
server: correctly await promises when updating server info 
When not awaiting promises, truncating the table and inserting again
can sometimes not work due to race conditions.
 2022-11-18 20:52:19 +01:00
Norm
71b3b5a60c backend: implement not forwarding block activities (#212) 
Fixes FoundKeyGang/FoundKey#211

Commits pulled from https://github.com/misskey-dev/misskey/pull/7799

Changelog: Added
Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk>
Co-authored-by: Johann150 <johann.galle@protonmail.com>
Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: FoundKeyGang/FoundKey#212
 2022-11-17 21:24:38 +00:00
Norm
110c645a97 Merge pull request 'backend: fix activitypub.ts lints' (#236) from refactor/activitypub-ts into main 
Reviewed-on: FoundKeyGang/FoundKey#236
 2022-11-17 19:48:08 +00:00
Johann150
ddeb5b25f1
translate comments in chart core 2022-11-17 20:23:17 +01:00
Francis Dinh
c0d5678039
backend: fix lints in various misc modules 
Mostly adding return types and also fixing a type error.
 2022-11-16 19:48:16 -05:00
Francis Dinh
629b865789
backend: add return type to getAntennas 2022-11-16 19:44:20 -05:00
Francis Dinh
021d523d5f
backend: fix activitypub.ts lints 2022-11-16 19:38:32 -05:00
Francis Dinh
848b9bcdf1
backend: partially revert repo url change in nodeinfo 2022-11-16 17:58:55 -05:00
Francis Dinh
b18c9b27a6
backend: minor cleanup of nodeinfo.ts 
Copy over the MONTH constant from the client code and the time constants
for active{Halfyear,Month}.

Also instead of adding and deleting `respository` from the nodeinfo for
version 2.0, only add in the repository URL in the 2.1 endpoint.
 2022-11-16 17:52:13 -05:00
Johann150
b958be77b6
fixup server: refactor meta caching 
fix: setting meta does not keep cache synced.
fix: handle initially empty meta table.
 2022-11-16 20:36:22 +01:00
Johann150
9f6be8d557
server: refactor meta caching 
This removes the "caching" that re-fetches the instance meta information
from the database every 10 seconds.
 2022-11-14 22:12:32 +01:00
Johann150
9d9b2da6cc
fix parameter for cache fetcher 2022-11-13 20:31:24 +01:00
Johann150
d1ec058d5c
server: refactor Cache to hold fetcher as attribute 
Instead of having to pass the fetcher every time you want to fetch
something, the fetcher is stored in an attribute of the Cache.
 2022-11-13 19:39:30 +01:00
Johann150
131c12a30b
server: refactor prefetchEmojis 
Exiting earlier might slightly improve performance.
 2022-11-13 18:24:15 +01:00
Johann150
8d6476af2a
server: remove localUserByIdCache 
The same data is stored in userByIdCache. Whether a user is local or not
can easily be determined from the cached object.
 2022-11-13 18:03:22 +01:00
Johann150
57299f0df6
server: simplify caching for instance actor 2022-11-13 17:14:33 +01:00
Johann150
b0489abd7f
translate japanese comments 2022-11-13 13:47:22 +01:00
Johann150
a3468491a7
fix import 2022-11-12 18:51:57 +01:00
Johann150
486be564e8
server: improve comments 2022-11-12 17:39:36 +01:00
Johann150
c49f529ccb
server: use DeliverManager for user deletion 2022-11-12 15:23:49 +01:00
Johann150
8979e779da
server: optimise follower inboxes query 
Use the distinct query thingy so we don't have to make the Set work
so hard. This is also uniform code with the "everyone" above so should
hopefully be easier to understand.
 2022-11-12 15:09:50 +01:00
Johann150
f3c38ad5c8
server: only add unique cascade-delete notes 2022-11-11 18:08:57 +01:00
Johann150
899b01a031
remove unnecessary checks 
These checks were made obsolete by commit
6df2f7c55c.
 2022-11-11 18:07:49 +01:00
Johann150
a27a29b371
server: redirect browsers to human readable page 
Also added/translated more comments.
 2022-11-11 17:54:11 +01:00
Johann150
66a9d27ab1
server: increase user description length to 2048 
Changelog: Changed
 2022-11-11 12:28:57 +01:00
Francis Dinh
d411ea6281
backend: make removeAds migration plain JS 2022-11-10 12:56:39 -05:00
Johann150
5d23aa9e69
translate some comments to english 2022-11-10 00:36:39 +01:00
Johann150
5b61941e4c
server: skip instances that proclaimed themself dead via HTTP 410 
Changelog: Fixed
 2022-11-10 00:23:30 +01:00
Johann150
ca90cedba0
server: reduce dead instance detection to 7 days 2022-11-09 18:47:28 +01:00
Johann150
54075789cd
server: remove content type bodge 
Now that the client should send the proper content type, this should not be
necessary any more.
 2022-11-08 20:57:38 +01:00
Johann150
609312bb82
server: refactor errors in signin endpoint 2022-11-08 20:57:08 +01:00
Francis Dinh
7939d130aa backend: update sharp to 0.31.2 
Changelog: Fixed
Fixes: FoundKeyGang/FoundKey#226
 2022-11-08 01:16:55 -05:00
Johann150
489eea0c67
server: improve API validation for creating apps 
Resolves a FIXME comment.
 2022-11-05 10:43:34 +01:00
Johann150
6f65326b32
chore: synchronize code and database schema 2022-11-03 21:50:55 +01:00
Norm
e8ecd71f8a backend: refactor server/nodeinfo.ts (#221) 
This fixes a few type errors like removing `software.respository` in
NodeInfo 2.0 and updating `metadata.repositoryUrl` to not use the
now removed meta `repositoryUrl` field.

Co-authored-by: Francis Dinh <normandy@biribiri.dev>
Reviewed-on: FoundKeyGang/FoundKey#221
 2022-11-02 21:42:51 +00:00
Francis Dinh
0db0db9a87
backend: fix types in getRedisFamily 2022-10-31 18:39:05 -04:00
Johann150
6df2f7c55c
server: refactor finding delete-cascaded notes 
Remove the several filter functions in different places by filtering
directly in the database.

Instead of a QueryBuilder, use the plain find function.

Refactor a for loop awaiting several promises individually, use
Array.map and await Promise.all to make better use of promises.
 2022-10-31 20:57:45 +01:00
Johann150
ac240eb58d
server: translate/add comments 2022-10-31 20:57:18 +01:00
Michcio
d725f93d40
backend: Provide type for signedGet 2022-10-31 10:10:29 +01:00
Michcio
6db9b76f46
Retouch types in server index 2022-10-31 10:10:29 +01:00
Michcio
f50b04b015
Fix type errors in withPackedNote 2022-10-31 10:10:28 +01:00
Michcio
3fe1f7e70e
Deal with withPackedNote(onNote) types in stream channels 2022-10-31 10:10:28 +01:00
Michcio
eff9dbb5ee
Reassure typechecker about token in authenticate 2022-10-31 10:10:28 +01:00
Michcio
fb80fd1fbd
Broaden type in authenticate as undefined is also nullable 2022-10-31 10:10:27 +01:00
Michcio
2a33d0ac83
Fix type import in stream emitter typing 2022-10-31 10:10:27 +01:00
Michcio
fb5f498641
Upgrade bull-board to unify misaligned types in its packages 2022-10-31 10:10:27 +01:00
Michcio
23fbdfdf1f
Fix typos in syslog initialization 2022-10-31 10:10:26 +01:00
Francis Dinh
5b7a7794ab
backend: fix type of IEndpointMeta.errors 
The errors array is supposed to be readonly.
 2022-10-31 03:35:47 -04:00
Johann150
bd0c06e2d0
server: fix RefereceError (again...) 2022-10-30 17:46:44 +01:00
Michcio
c282ed7683
Narrow type of isPureRenote 
As side effect of that, a non-null assertion can be removed.

Co-authored-by: Johann150 <johann.galle@protonmail.com>
 2022-10-30 17:38:56 +01:00
Johann150
240ad1cca6
server: fix ReferenceError 
The super constructor has to be called before accessing this.
 2022-10-30 16:22:12 +01:00
Johann150
2aafe8fc9f
server: avoid adding suspended instances to deliver queue 
This should reduce the performance hit when adding large numbers of
instances to the deliver queue by making the check for suspended and
dead instances a bulk operation.

Changelog: Changed
Reviewed-on: FoundKeyGang/FoundKey#215
 2022-10-29 22:58:04 +02:00
Johann150
7a64a3858d
fix erroneous quote 2022-10-28 23:49:30 +02:00
Johann150
d0564759a5
server: remove unnecessary argument 2022-10-28 23:36:47 +02:00
Johann150
735b9ab502
fix some lints 2022-10-28 16:57:56 +02:00
Johann150
fb76843c19
adapt OpenAPI documentation generation to new error definitions 2022-10-27 22:44:06 +02:00
Johann150
1dd935dc0c
fix endpoint type definition for errors 2022-10-27 22:44:06 +02:00
Johann150
934ee82b8f
server: refactor ApiError to store error descriptions centrally 
The UUIDs are no longer used for errors and all errors should now have
a descriptive message attached to them. Also, all errors should now have
the proper HTTP status code for a reply instead of the generic 400 and 500
response codes. Because the errors all have more specific error codes, the
"kind" of client or server is also abolished.
 2022-10-27 22:43:58 +02:00
Johann150
66d7b69377
server: refactor API handler and returning errors 
This refactors the API handler to not use default exports, be async
instead of constructing a promise and modify how errors are returned.
 2022-10-26 23:15:31 +02:00
Johann150
c3c7164dfb
fix merge of #213 2022-10-26 22:53:06 +02:00
Johann150
a991740e00
server: improve API definition for messaging/messages/create 2022-10-26 22:21:28 +02:00
Johann150
4dc97d5b65
server: enhance reset-password endpoint 
- Add a rate limit analogous to request-reset-password.
  See also a0ef32f4f6.
- Delete an expired reset request if found.
- Return a proper error.
- Use time constants.

Changelog: Changed
 2022-10-26 22:12:38 +02:00
Johann150
384e8c49b7
server: allow to like own gallery posts 
Since you are also allowed to react to your own notes, it seems sensible
that you should be allowed to like your own gallery posts.

Analogous to commit 4c5aa9e538.

Changelog: Changed
 2022-10-25 17:13:48 +02:00
Atsuko Karagi
c5e1c42d0a backend: require authentification for fetch-rss 
Changelog: Changed
 2022-10-25 08:56:34 -04:00
Atsuko Karagi
f74395c386 backend: remove unused endpoints 
Changelog: Removed
 2022-10-25 08:56:31 -04:00
Atsuko Karagi
b2c483faf5 backend: tweak endpoint permissions 
Changelog: Changed
 2022-10-25 08:36:39 -04:00
Atsuko Karagi
5bf1e5ad71 backend: federation information requires auth 
Changelog: Changed
 2022-10-25 08:36:37 -04:00
Johann150
a0ef32f4f6
server: properly delete expired password reset requests 
Changelog: Fixed
 2022-10-23 23:09:11 +02:00
Francis Dinh
7ec8729d90
backend: fix lint error in remove-note.ts 2022-10-21 17:52:15 -04:00
Francis Dinh
43644494d3
translate remaining comments 2022-10-21 13:33:03 -04:00
Francis Dinh
923c93da12
use await for notes.countBy 2022-10-20 21:22:52 -04:00
Francis Dinh
aa1e4d0fbc
change null assertion ternaries to use optional chaining 2022-10-20 21:22:52 -04:00
Francis Dinh
bfba54524d
backend: fix various type lints in services/note 
`createdAt` in `insertNote` now will default to the current date.

Also refactor poll insert:
Instead of testing hasPoll, just do a null check on data.poll since it's
a more reliable indicator for whether a poll exists (and also tsc won't
complain about data.poll being possibly null).
 2022-10-20 21:22:24 -04:00
Francis Dinh
d83c1c3851
backend: use named exports for services/note 2022-10-20 21:16:34 -04:00
Francis Dinh
3da7221eec
backend: mark elasticsearch as optional 2022-10-20 21:15:48 -04:00