9698 Commits

Author	SHA1	Message	Date
lain	5f19fbc5a9	Merge branch 'phoenix1.7' into 'develop' ... Update to Phoenix 1.7 See merge request pleroma/pleroma!3900	2023-11-12 13:34:27 +00:00
Lain Soykaf	3d62c71edf	Credo fixes.	2023-11-12 17:13:27 +04:00
Lain Soykaf	59018d73c3	B Meilisearch: Update to current API responses.	2023-11-12 16:43:50 +04:00
Lain Soykaf	a1a25029da	B DatabaseSearch: Fix local-only search.	2023-11-12 16:19:54 +04:00
Lain Soykaf	d3f8950588	B MeiliSearch, SearchIndexingWorker: Use Config.Getting, make tests async.	2023-11-12 14:49:50 +04:00
Lain Soykaf	c1402af293	B Getting: Add default implementation, delegate, prepare test support.	2023-11-12 14:49:15 +04:00
Lain Soykaf	0c5cc51983	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-meilisearch	2023-11-12 13:53:18 +04:00
Marcin Mikołajczak	1e9333a9aa	Merge remote-tracking branch 'origin/develop' into instance-v2	2023-11-08 20:46:57 +01:00
Mark Felder	e23672d82f	Ensure benchee doesn't run unless we are executing benchmarks	2023-11-08 12:44:57 -05:00
Mark Felder	a0e08c6ec2	Merge branch 'develop' into phoenix1.7	2023-11-07 16:05:04 -05:00
Mark Felder	bf426c53b4	Fix digest email processing, consolidate Oban queues ... The email related jobs can all share a single Oban queue	2023-11-07 15:14:36 -05:00
marcin mikołajczak	c62696c8e7	Support /authorize-interaction route used by Mastodon ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-11-02 13:47:23 +01:00
marcin mikołajczak	50e7706b26	Verify link ownership with rel="me" ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-11-02 13:30:46 +01:00
marcin mikołajczak	93370b870a	Expose nonAnonymous field from Smithereen polls ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-28 23:58:39 +02:00
marcin mikołajczak	b6a9d87f16	Display reposted replies with exclude_replies: true ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-28 00:10:13 +02:00
marcin mikołajczak	c6cedbb810	InstanceV2: skip auth ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-28 00:07:18 +02:00
marcin mikołajczak	6b8c5e12df	Add contact account to InstanceView ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-26 23:32:08 +02:00
marcin mikołajczak	5ff3783d01	Use correct domain for fqn and InstanceView ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-10-25 00:38:10 +02:00
tusooa	b748efe66a	Fix mentioning punycode domains when using Markdown	2023-10-16 21:35:25 -04:00
tusooa	840dd01035	Fix duplicated schema names	2023-10-15 17:20:26 -04:00
tusooa	32de0683c4	Fix unsubscribe event type in streaming doc	2023-10-15 17:20:26 -04:00
tusooa	c13f0a8460	Add meta-info and query strings to streaming doc	2023-10-15 17:20:26 -04:00
tusooa	f393a15dd1	Fix some specs about server-sent events in streaming	2023-10-15 17:20:26 -04:00
tusooa	8829dcaee4	Document client-sent events in streaming	2023-10-15 17:20:25 -04:00
tusooa	dcef33f5f0	Document server-sent events of streaming	2023-10-15 17:20:25 -04:00
tusooa	844d1a14e0	Start writing api docs for streaming endpoint	2023-10-15 17:20:25 -04:00
tusooa	eebc605bc2	Clear up debug statement	2023-10-15 17:20:25 -04:00
tusooa	a348c2e4dd	Use pleroma: instead of pleroma. for ws events	2023-10-15 17:20:25 -04:00
tusooa	7d005e8c93	Return stream attribute in server-sent events	2023-10-15 17:20:23 -04:00
tusooa	21395aa509	Allow authenticating via client-sent events	2023-10-15 17:19:49 -04:00
tusooa	273cda63ad	Allow subscribing to streams	2023-10-15 17:19:49 -04:00
tusooa	2b5636bf12	Allow unified streaming endpoint	2023-10-15 17:19:40 -04:00
Haelwenn (lanodan) Monnier	2f6fc6a7ab	TwitterAPI: Return proper error when healthcheck is disabled	2023-09-24 23:32:17 +02:00
tusooa	08608afca5	Fix quote_visible attribute	2023-09-13 19:20:33 -04:00
tusooa	a8b2f9205d	Expose quote_id parameter on the api	2023-09-13 19:20:32 -04:00
tusooa	875b46d97d	Do not mention original poster when quoting	2023-09-13 19:20:32 -04:00
tusooa	87353e5ad1	Fix config descriptions for mrf inline quote	2023-09-13 19:20:32 -04:00
tusooa	8b98a98dfb	Make InlineQuotePolicy history aware	2023-09-13 19:20:32 -04:00
tusooa	e349e92a44	Add mrf to force link tag of quoting posts	2023-09-13 19:20:30 -04:00
tusooa	479a6f11db	Keep incoming Link tag	2023-09-13 19:19:44 -04:00
tusooa	e9cd004ba1	Parse object link as quoteUrl	2023-09-13 19:19:42 -04:00
tusooa	163e563733	Allow more flexibility in InlineQuotePolicy	2023-09-13 19:19:05 -04:00
tusooa	9bcec87aba	Allow local quote and private self-quote	2023-09-13 19:19:05 -04:00
tusooa	b0a7e795e7	Unify logic for normalizing quoteUri	2023-09-13 19:19:05 -04:00
Alex Gleason	f9697e68c2	InlineQuotePolicy: skip objects which already have an .inline-quote span	2023-09-13 19:19:05 -04:00
Alex Gleason	79fca39faf	Actually, don't send _misskey_quote anymore	2023-09-13 19:19:05 -04:00
Alex Gleason	4075eecca0	InlineQuotePolicy: improve the way Markdown quotes are displayed by other software	2023-09-13 19:19:05 -04:00
Alex Gleason	817e308c0d	Handle Fedibird's new quoteUri field	2023-09-13 19:19:05 -04:00
Alex Gleason	3c8319fe9f	Transmogrifier: federate quotes with _misskey_quote field	2023-09-13 19:19:04 -04:00
Alex Gleason	cf8e425883	StatusView: return quote post inside a reblog	2023-09-13 19:19:04 -04:00
Alex Gleason	bee7e41959	InlineQuotePolicy: don't add line breaks to markdown posts	2023-09-13 19:19:04 -04:00
Alex Gleason	74e0a4555f	StatusView: add quote_visible param	2023-09-13 19:19:04 -04:00
Alex Gleason	6f11f11519	StatusView: fix quote visibility	2023-09-13 19:19:04 -04:00
Alex Gleason	59326247aa	CommonAPI: disallow quoting private posts through the API	2023-09-13 19:19:04 -04:00
Alex Gleason	57ef1d1211	Add InlineQuotePolicy to force quote URLs inline	2023-09-13 19:19:04 -04:00
Alex Gleason	1f19dd76f6	ActivityDraft: mix format, defensive actor ID	2023-09-13 19:19:04 -04:00
Alex Gleason	54a9897938	ActivityDraft: mention the OP of a quoted post	2023-09-13 19:19:04 -04:00
Alex Gleason	80ab2572a4	Return quote_url through the API, don't render quotes more than 1 level deep	2023-09-13 19:19:04 -04:00
Alex Gleason	5716f88a1d	InstanceView: add "quote_posting" feature	2023-09-13 19:19:03 -04:00
Alex Gleason	9600973917	mix format	2023-09-13 19:19:03 -04:00
Alex Gleason	d4fea8b559	ActivityDraft: allow quoting	2023-09-13 19:19:03 -04:00
Alex Gleason	6ac19c3999	ActivityDraft: create quote posts	2023-09-13 19:19:03 -04:00
Alex Gleason	0d9c443e51	StatusView: render the whole quoted status	2023-09-13 19:19:03 -04:00
Alex Gleason	ce5eb31723	StatusView: show quoted posts through the API, probably	2023-09-13 19:19:03 -04:00
Alex Gleason	cc4badaf60	Transmogrifier: fix quoteUrl here too	2023-09-13 19:19:03 -04:00
Alex Gleason	b022d6635d	Transmogrifier: fetch quoted post	2023-09-13 19:19:03 -04:00
Alex Gleason	795736af16	ObjectValidators: improve quoteUrl compatibility	2023-09-13 19:19:03 -04:00
Alex Gleason	31eb3dc245	ObjectValidators: accept "quoteUrl" field	2023-09-13 19:19:02 -04:00
marcin mikołajczak	28ef5ebd3c	Update InstanceView.features ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-09-07 15:00:24 +02:00
Mint	1afde067b1	CommonAPI: Prevent users from accessing media of other users	2023-09-03 10:41:37 +02:00
tusooa	3d09bc320e	Make lint happy	2023-08-30 20:36:52 -04:00
Haelwenn	1e685c8302	Merge branch 'csp-flash' into 'develop' ... allow https: so that flash works across instances without need for media proxy See merge request pleroma/pleroma!3879	2023-08-16 13:37:49 +00:00
Haelwenn	d838d1990b	Apply lanodan's suggestion(s) to 1 file(s)	2023-08-16 13:34:32 +00:00
marcin mikołajczak	79e46ce73f	InstanceView: Add common_information function ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-08-11 13:57:22 +02:00
marcin mikołajczak	9effa24f30	Implement api/v2/instance route ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-08-11 00:08:05 +02:00
mae	48b1e9bdc7	Completely disable xml entity resolution	2023-08-05 14:17:04 +02:00
Mae	ca0859b90f	Prevent XML parser from loading external entities	2023-08-04 22:35:13 -04:00
Haelwenn (lanodan) Monnier	69caedc591	instance gen: Reduce permissions of pleroma directories and config files	2023-08-04 09:50:28 +02:00
Haelwenn (lanodan) Monnier	8cc8100120	Config: Restrict permissions of OTP config file	2023-08-04 09:50:28 +02:00
Mark Felder	2c79509453	Resolve information disclosure vulnerability through emoji pack archive download endpoint ... The pack name has been sanitized so an attacker cannot upload a media file called pack.json with their own handcrafted list of emoji files as arbitrary files on the filesystem and then call the emoji pack archive download endpoint with a pack name crafted to the location of the media file they uploaded which tricks Pleroma into generating a zip file of the target files the attacker wants to download. The attack only works if the Pleroma instance does not have the AnonymizeFilename upload filter enabled, which is currently the default. Reported by: graf@poast.org	2023-08-04 08:40:27 +02:00
Haelwenn	819fccb7d1	Merge branch 'tusooa/3154-attachment-type-check' into 'develop' ... Restrict attachments to only uploaded files only Closes #3154 See merge request pleroma/pleroma!3923	2023-08-03 10:01:32 +00:00
Faried Nawaz	e5e76ec445	cleaner ecto query to handle restrict_unauthenticated for activities ... This fix is for this case: config :pleroma, :restrict_unauthenticated, activities: %{local: true, remote: true}	2023-07-28 18:45:59 +05:00
faried nawaz	dc4de79d43	status context: perform visibility check on activities around a status ... issue #2927	2023-07-28 18:45:59 +05:00
tusooa	ea4225a646	Restrict attachments to only uploaded files only	2023-07-18 18:39:59 -04:00
Haelwenn	93ad16cca0	Merge branch '2023-06-deps-update' into 'develop' ... 2023-06 deps update + de-override plug See merge request pleroma/pleroma!3911	2023-07-17 20:37:47 +00:00
tusooa	1459d64508	Make regex-to-string descriptor reusable	2023-07-07 07:09:35 -04:00
tusooa	ba3aa4f86d	Fix edge cases	2023-07-07 06:58:32 -04:00
tusooa	ef8a6c539a	Make EmojiPolicy aware of custom emoji reactions	2023-07-07 06:58:31 -04:00
tusooa	20d193c91d	Improve config examples for EmojiPolicy	2023-07-07 06:58:31 -04:00
tusooa	f50422c380	Move emoji_policy.ex to the right place	2023-07-07 06:58:31 -04:00
tusooa	7eb8abf7bb	EmojiPolicy: Implement delist	2023-07-07 06:58:31 -04:00
tusooa	80ce6482f6	EmojiPolicy: implement remove by shortcode	2023-07-07 06:58:31 -04:00
tusooa	28ff828caa	Add emoji policy to remove emojis matching certain urls ... https://git.pleroma.social/pleroma/pleroma/-/issues/2775	2023-07-07 06:58:22 -04:00
Haelwenn (lanodan) Monnier	3d79ceb23a	Deprecate audio scrobbling	2023-07-04 03:40:11 +02:00
Haelwenn	a31a4c522f	Merge branch 'tusooa/3131-handle-report-from-deactivated-user' into 'develop' ... Fix handling report from a deactivated user Closes #3131 See merge request pleroma/pleroma!3915	2023-07-02 21:27:15 +00:00
tusooa	6e4de2383f	Fix handling report from a deactivated user	2023-07-02 11:15:34 -04:00
tusooa	a1621839cc	Fix user fetch completely broken if featured collection is not in a supported form	2023-07-02 11:03:09 -04:00
tusooa	48e490cd58	Merge branch 'bugfix/full-revert-media-host-validation' into 'develop' ... Merge Revert "Merge branch 'validate-host' into 'develop'" Closes #3136 See merge request pleroma/pleroma!3909	2023-07-01 21:54:18 +00:00
Haelwenn	043a00991d	Merge branch 'instance-nodeinfo-metadata' into 'develop' ... instances: Store some metadata based on NodeInfo See merge request pleroma/pleroma!3853	2023-06-27 18:58:04 +00:00
Haelwenn	ae0ca49451	Merge branch 'tusooa/3119-bio-update' into 'develop' ... Show more informative errors when profile exceeds char limits Closes #3119 See merge request pleroma/pleroma!3886	2023-06-27 18:49:43 +00:00
Haelwenn	41f2ee69a8	Merge branch 'from/upstream-develop/tusooa/backup-status' into 'develop' ... Detail backup states Closes #3024 See merge request pleroma/pleroma!3809	2023-06-27 12:08:11 +00:00
Haelwenn (lanodan) Monnier	d7e049d5e8	router: Fix usage of globs ... warning: doing a prefix match with globs is deprecated, invalid segment "pleroma*path". You can either replace by a single segment match: /foo/bar-:var Or by mixing single segment match with globs: /foo/bar-:var/*rest	2023-06-27 10:42:10 +02:00
Haelwenn (lanodan) Monnier	3a67b8f287	endpoint: Use custom Multipart module for dynamic configuration	2023-06-27 10:41:25 +02:00
Haelwenn (lanodan) Monnier	dd9f8150fc	Merge Revert "Merge branch 'validate-host' into 'develop'" ... This reverts commit d998a114e2, reversing changes made to da6b4003ac.	2023-06-22 21:28:25 +02:00
Sean King	a5a354a36e	Prevent bypassing authorized fetch mode with a json file	2023-06-21 23:10:56 -06:00
lain	4e6ea7cc91	Merge branch 'tusooa/3054-banned-delete' into 'develop' ... Fix deleting banned users' statuses See merge request pleroma/pleroma!3889	2023-06-11 13:17:12 +00:00
Lain Soykaf	6611c6ce4e	B ForceMentionsInContent: Fix test, refactor.	2023-06-11 16:45:31 +04:00
Lain Soykaf	55dd8ef1c7	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-double_mentions	2023-06-11 16:31:20 +04:00
lain	16313af7eb	Merge branch 'fix/metadata-tags' into 'develop' ... static frontend: fix meta tags See merge request pleroma/pleroma!3885	2023-06-11 11:57:16 +00:00
lain	1f4618d64b	Merge branch 'cleanup/ostatus-user-upgrade' into 'develop' ... Cleanup OStatus-era user upgrades and ap_enabled indicator See merge request pleroma/pleroma!3880	2023-06-11 11:13:57 +00:00
feld	75900f21f0	Merge branch 'revert-mediaproxy-host-validation' into 'develop' ... Revert MediaProxy Host header validation See merge request pleroma/pleroma!3902	2023-06-11 11:10:51 +00:00
lain	1db29f734f	Merge branch 'fep-fffd-url' into 'develop' ... CommonFields: Use BareUri for :url Closes #3121 See merge request pleroma/pleroma!3884	2023-06-11 11:02:39 +00:00
Mark Felder	fadcd7f1a9	Revert MediaProxy Host header validation ... Something is going wrong here even though the tests are correct.	2023-06-07 09:19:22 -04:00
Mark Felder	63ef1dcedc	Phoenix.Router.routes/1 is the public function we are meant to be using here	2023-06-03 14:17:49 -04:00
Lain Soykaf	cbc5b8cebd	B Preload: Make sure that the preloaded json is html safe	2023-06-02 17:03:21 +04:00
Mark Felder	f0e5f0e837	Fix compile warning ... warning: doing a prefix match with globs is deprecated, invalid segment "pleroma*path"	2023-05-31 22:23:36 +00:00
Mark Felder	2b8bbb288c	Phoenix.Socket.Transport.force_ssl/4 no longer exists	2023-05-31 22:11:17 +00:00
Mark Felder	62322f71e2	Clean up Plug.Parsers.MULTIPART deprecation warnings ... There is no need to the length setting to :multipart. The length setting is global for all of the parsers.	2023-05-31 16:22:40 -04:00
Mark Felder	ffee478ed0	Move websocket config for Shoutbox to the Endpoint ... This is the modern way of configuring it	2023-05-31 15:30:58 -04:00
Mark Felder	e3110cb34e	Fix deprecated calls to get_flash/2	2023-05-31 13:36:21 -04:00
Haelwenn	d998a114e2	Merge branch 'validate-host' into 'develop' ... Validate Host header for MediaProxy and Uploads See merge request pleroma/pleroma!3896	2023-05-31 00:50:01 +00:00
Mark Felder	b3c3bd99c3	Switch from serving a 400 to a 302	2023-05-30 16:56:09 -04:00
Mark Felder	9caa0b0be1	Add OnlyMedia Upload Filter to simplify restricting uploads to audio, image, and video types	2023-05-29 15:49:04 -04:00
Mark Felder	da7394f33b	Fix unused assignment	2023-05-29 15:09:31 -04:00
Mark Felder	a60dd0d92d	Validate Host header matches expected value before allowing access to Uploads	2023-05-29 14:16:03 -04:00
Mark Felder	843fcca5b4	Validate Host header matches expected value before allowing access to MediaProxy	2023-05-29 13:59:51 -04:00
faried nawaz	8b390d27dc	twitter card: handle case where image has no alt text	2023-05-29 02:52:49 +05:00
faried nawaz	52368e6702	fix meta tag for twitter cards and image attachments ... The name of the tag should be twitter:image, not twitter:player. Also, add twitter:image:alt meta tags.	2023-05-29 02:52:49 +05:00
faried nawaz	b6b7de2010	add url to Metadata.build_tags call ... If static_fe is enabled, going to https://pleroma/notice/some-id results in <meta content="https://pleroma/users/someuser" property="og:url"> With this fix, it is <meta content="https://pleroma/notice/some-id" property="og:url"> Additionally, Pleroma.Web.Metadata.Providers.OpenGraph now generates meta tags for attachments in the post.	2023-05-29 02:52:41 +05:00
Haelwenn (lanodan) Monnier	869f0d24a6	Merge branch 'release/2.5.2' into mergeback/2.5.2	2023-05-26 23:47:50 +02:00
Mark Felder	4505bc1e58	Filter OEmbed HTML tags	2023-05-26 19:56:36 +02:00
Mark Felder	0d68804aa7	Filter OEmbed HTML tags	2023-05-26 19:54:24 +02:00
tusooa	d0c2e0830b	Enforce unauth restrictions for public streaming endpoints	2023-05-26 19:24:08 +02:00
Haelwenn	b36263e5ff	Merge branch 'issue/3126' into 'develop' ... MediaProxyController: Apply CSP sandbox See merge request pleroma/pleroma!3890	2023-05-26 19:24:08 +02:00
Haelwenn	4339230f64	Merge branch 'tusooa/fix-object-test' into 'develop' ... Fix ObjectTest See merge request pleroma/pleroma!3887	2023-05-26 19:24:08 +02:00
Haelwenn	72833c84b5	Merge branch 'tusooa/rework-refetch' into 'develop' ... Make sure object refetching follows update rules See merge request pleroma/pleroma!3883	2023-05-26 19:24:08 +02:00
Mark Felder	38bcf6b19e	MediaProxyController: Apply CSP sandbox	2023-05-26 12:34:01 -04:00
Zero	279fd47b48	ForceMentionsInContent: fix double mentions for Mastodon/Misskey posts ... The code checked for duplicates using "ap_id", but in Mastodon and Misskey the look like that: Mastodon: https://mastodon.example.com/users/roger Misskey: https:///misskey.example.com/users/104ab42f11 The fix is to also check for "uri", which is what will be in the "explicitly_mentioned_uris" list: Mastodon: https://mastodon.example.com/@roger Misskey: https://misskey.example.com/@roger	2023-05-26 12:30:19 -04:00
tusooa	1fa196d8f7	Fix deleting banned users' statuses	2023-05-25 19:00:38 -04:00
tusooa	2c66f584b5	Show more informative errors when profile exceeds char limits	2023-05-25 08:22:33 -04:00
tusooa	819a82da99	Fix unused variable	2023-05-22 08:19:58 -04:00
tusooa	505e58d4eb	Fix ObjectTest	2023-05-22 08:14:20 -04:00
Haelwenn	0524e66a05	Merge branch 'accept-tags-2.5' into 'develop' ... TagValidator: Drop unrecognized Tag types Closes #2952 See merge request pleroma/pleroma!3823	2023-05-17 19:04:51 +00:00
Haelwenn	ce1c0f75cd	Merge branch 'tusooa/3065-scopes' into 'develop' ... OAuth scopes descriptions Closes #3065 See merge request pleroma/pleroma!3848	2023-05-17 18:51:26 +00:00
Haelwenn (lanodan) Monnier	a5066bb078	CommonFields: Use BareUri for :url ... Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3121	2023-05-17 17:25:46 +02:00
Haelwenn (lanodan) Monnier	fb3335ffe2	EctoType: Add BareUri	2023-05-17 17:14:38 +02:00
tusooa	e170fc40dd	Fix build warning	2023-05-09 21:38:28 -04:00
tusooa	be5c5118cb	Make sure object refetching follows update rules	2023-05-09 21:04:27 -04:00
Henry Jameson	2a07411b0c	keep the websocket url for all modes	2023-05-07 15:34:17 +03:00
Henry Jameson	f50fd9278f	reduce redundant reduntancy reduction	2023-05-07 15:29:19 +03:00
Henry Jameson	f8ef4924ec	fix whitespace	2023-05-07 15:24:09 +03:00
Henry Jameson	c0d11da2d8	conditionally set csp depnding on media-proxy state	2023-05-07 15:16:30 +03:00
Haelwenn (lanodan) Monnier	fcd49e3985	User: Remove ap_enabled field	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	238edc30de	User: Remove ap_enabled?/1	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	9dfa1c4be0	ActivityPub: Mark fetch_and_prepare_user_from_ap_id/1 as private	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	8181be89a2	Federator: Stop using ap_enabled?/1	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	e17265a7a2	TransmogrifierWorker: Remove obsolete worker	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	2ee483ba41	Transmogrifier: Remove upgrade_user_from_ap_id	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	3962253cf1	Publisher: Stop filtering via ap_enabled?/1	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	606f78f5e5	ActivityPub: Stop relying on ap_enabled and upgrade_user_from_ap_id	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	0903c41645	User: Stop relying on ap_enabled	2023-05-05 11:11:26 +02:00
Haelwenn (lanodan) Monnier	4fd96b24ae	AddRemoveValidator: Use User.fetch_by_ap_id instead of upgrade_user_from_ap_id	2023-05-05 11:11:26 +02:00
tusooa	6d0ebccdb0	Make webui use translated scope descriptions	2023-05-02 16:32:33 -04:00
tusooa	85bdbb102e	Add extraction process for oauth scopes	2023-05-02 16:32:10 -04:00
HJ	675639225a	allow https: so that flash works across instances without need for media proxy	2023-04-28 11:13:42 +00:00
tusooa	248f914e6e	Merge branch 'list-installed-frontends' into 'develop' ... List installed frontend refs in admin API See merge request pleroma/pleroma!3862	2023-04-27 02:56:19 +00:00
tusooa	ddf57596be	Merge branch 'bugfix/content-disposition' into 'develop' ... UploadedMedia: Add missing disposition_type to Content-Disposition Closes #3114 See merge request pleroma/pleroma!3873	2023-04-26 15:39:20 +00:00
duponin	0231a09310	Remove SSH/BBS feature from core ... And link to sshocial, the replacement client for this removed feature	2023-04-23 10:47:07 +02:00
Haelwenn (lanodan) Monnier	2148ef5e2f	UploadedMedia: Increase readability via ~s sigil	2023-04-18 00:12:42 +02:00
Haelwenn (lanodan) Monnier	8f0f58e28b	UploadedMedia: Add missing disposition_type to Content-Disposition ... Set it to `inline` because the vast majority of what's sent is multimedia content while `attachment` would have the side-effect of triggering a download dialog. Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3114	2023-04-18 00:09:19 +02:00
Haelwenn	3867b52aef	Merge branch 'tusooa/3027-dedupe-poll' into 'develop' ... Dedupe poll options Closes #3027 See merge request pleroma/pleroma!3860	2023-04-13 08:40:04 +00:00
Ekaterina Vaartis	6a63dced4a	Fix tests for frontend installation	2023-03-30 19:25:35 +03:00
Haelwenn	e4288df502	Merge branch 'background-timeout' into 'develop' ... Set background worker timeout to 15 minutes See merge request pleroma/pleroma!3857	2023-03-30 12:48:35 +02:00
tusooa	40f14fd31c	Merge branch 'remove-crypt' into 'develop' ... Remove crypt(3) support Closes #3030 and #3062 See merge request pleroma/pleroma!3847	2023-03-30 12:47:36 +02:00
Haelwenn	937df7e465	Merge branch 'fix/tag-feed-crashes' into 'develop' ... fix: atom/rss feed issues Closes #3045 See merge request pleroma/pleroma!3851	2023-03-30 12:46:35 +02:00
Haelwenn	d640df3927	Merge branch 'fix/static-fe-feed-500' into 'develop' ... fix: remove static_fe pipeline for /users/:nickname/feed See merge request pleroma/pleroma!3852	2023-03-30 12:45:39 +02:00
Haelwenn	22b72cd6b8	Merge branch 'tusooa/oban-common-pipeline' into 'develop' ... Stop oban from retrying if validating errors occur when processing incoming data See merge request pleroma/pleroma!3844	2023-03-30 12:43:58 +02:00
Ekaterina Vaartis	3037d2780c	Also list frontends that are not in the config file	2023-03-30 11:16:40 +03:00
Ekaterina Vaartis	d3b27d45a9	List installed frontend refs in admin API	2023-03-29 23:23:06 +03:00
tusooa	c5d946bc92	Fix emoji reactions for legacy 2-tuple formats	2023-03-26 15:12:40 -04:00
tusooa	10930f7507	Dedupe poll options	2023-03-25 23:20:07 -04:00
Haelwenn	6d0cc8fa2a	Merge branch 'features/image-object' into 'develop' ... Add support for Image objects Closes #1581 See merge request pleroma/pleroma!3145	2023-03-25 06:35:55 +00:00
anemone	f463b7570e	Set background worker timeout to 15 minutes	2023-03-23 23:14:52 -07:00
Haelwenn (lanodan) Monnier	9a2523a09a	instances: Store some metadata based on NodeInfo	2023-03-16 09:02:20 +01:00
Haelwenn	353538d16c	Merge branch 'pleroma-akkoma-emoji-port' into 'develop' ... Custom emoji reactions support See merge request pleroma/pleroma!3845	2023-03-16 08:00:00 +00:00
Haelwenn	c3600b6104	Merge branch 'feat/fields-rel-me-tag' into 'develop' ... feat: build rel me tags with profile fields See merge request pleroma/pleroma!3850	2023-03-16 07:53:27 +00:00
kPherox	83c7415803	fix: append field values to bio before parsing	2023-03-15 23:55:24 +09:00
tusooa	9145fd04f2	Merge branch 'remove-crypt' into 'develop' ... Remove crypt(3) support Closes #3030 and #3062 See merge request pleroma/pleroma!3847	2023-03-12 16:06:00 +00:00
Alexander Tumin	2c2ea16b50	Allow custom emoji reactions: Add pleroma_custom_emoji_reactions feature, review changes	2023-03-12 11:39:17 +03:00
Haelwenn (lanodan) Monnier	ea07ec51ef	Add support for Image objects	2023-03-09 14:21:12 +01:00
Haelwenn	f5c6e44731	Merge branch 'tusooa/block-rel' into 'develop' ... Allow with_relationships param for blocks See merge request pleroma/pleroma!3843	2023-03-09 13:13:14 +00:00
Haelwenn (lanodan) Monnier	197647a04e	MastoAPI Attachment: Use "summary" for descriptions if present	2023-03-09 11:10:02 +01:00
Haelwenn (lanodan) Monnier	2ae1b802f2	AttachmentValidator: Add support for Honk "summary" + "name" ... As used by Honk and supported by Mastodon	2023-03-09 10:26:33 +01:00
Haelwenn	5cc23dc382	Merge branch 'fix/tag-feed-crashes' into 'develop' ... fix: atom/rss feed issues Closes #3045 See merge request pleroma/pleroma!3851	2023-03-06 22:55:24 +00:00
faried nawaz	8241eff05b	remove static_fe pipeline for /users/:nickname/feed	2023-03-06 23:34:00 +05:00
faried nawaz	7b42ec5633	oops, remove unused import	2023-03-06 02:44:36 +05:00
faried nawaz	141146d1f1	use scrub_html_and_truncate instead of scrub_html for feed item title ... Sometimes this truncated properly encoded HTML entities in the wrong place. The new flow calls scrub_html, removes emojis, decodes entities (a second time), truncates, and then re-encodes. Fixes #3045.	2023-03-06 02:38:02 +05:00
faried nawaz	86ee4b72f3	modify Utils.scrub_html_and_truncate to take omission parameter	2023-03-06 02:30:52 +05:00
faried nawaz	117a53b88e	format feed_view.ex	2023-03-06 01:16:24 +05:00
faried nawaz	d3f22d24f6	feed eex templates: use published field from @data, not @activity.data	2023-03-06 00:23:31 +05:00
faried nawaz	f33e89765a	fix tag feeds: remote activities might not have a summary field	2023-03-06 00:20:57 +05:00
Haelwenn	c00a19f371	Merge branch 'tusooa/oban-common-pipeline' into 'develop' ... Stop oban from retrying if validating errors occur when processing incoming data See merge request pleroma/pleroma!3844	2023-03-05 06:37:59 +00:00
Haelwenn (lanodan) Monnier	5716654d12	Remove crypt(3) support ... This was used to support migration from GNU Social, which was used by at least shitposter.club, should be entirely irrelevant now. Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3030 Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/3062	2023-03-05 01:37:57 +01:00
Alexander Tumin	8d3b29aaba	Allow custom emoji reactions: add test for mixed emoji react, fix credo errors	2023-03-02 11:18:16 +03:00
Alexander Tumin	4b85d1c617	Allow custom emoji reactions: Fix tests, mixed custom and unicode reactions	2023-03-02 11:18:16 +03:00
floatingghost	787e30c5fd	Allow reacting with remote emoji when they exist on the post (#200) ... Co-authored-by: FloatingGhost <hannah@coffee-and-dreams.uk> Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/200	2023-03-02 11:18:16 +03:00
tusooa	1babd0798f	Stop oban from retrying if validating errors occur when processing incoming data	2023-03-01 21:03:30 -05:00
tusooa	f33401f54b	Merge remote-tracking branch 'upstream/stable' into mergeback/2.5.1	2023-03-01 20:09:50 -05:00
tusooa	e4925f813a	Sanitize filenames when uploading	2023-03-01 18:40:02 -05:00
tusooa	d83f16fe44	Allow with_relationships param for blocks	2023-02-28 22:16:01 -05:00
silverpill	98b9c1bcb1	Merge branch 'develop' into accept-tags-2.5	2023-02-27 23:10:36 +00:00
silverpill	5cfb0578a6	TagValidator: Drop unrecognized tags	2023-02-27 23:09:46 +00:00
tusooa	410d50afe5	Ignores in exiftool read descriptions	2023-02-20 12:30:36 -05:00
Alexander Tumin	c3a0703564	Require related object for notifications to filter on content	2023-02-20 12:27:50 -05:00
tusooa	8e8a0f005c	Fix inproper content being cached in report content	2023-02-20 12:26:16 -05:00
tusooa	1c225bfd6e	Allow customizing instance languages	2023-02-20 12:25:00 -05:00
Mark Felder	1b82fd95d4	Remove unwanted code specific to MIX_ENV=test	2023-02-20 12:24:38 -05:00
Mark Felder	88ce0e8b24	Fix rel="me" ... Cachex for this was not started	2023-02-20 12:24:32 -05:00
tusooa	3ab3404817	Fix block_from_stranger setting	2023-02-20 12:21:27 -05:00
Lain Soykaf	d5125e6ce7	B StripLocation: Add test, work for all svgs.	2023-02-20 12:21:04 -05:00
Dmytro Poltavchenko	e8fca8882a	Added SVG to formats not compatible with exiftool	2023-02-20 12:21:04 -05:00
marcin mikołajczak	92592c25c2	Merge remote-tracking branch 'pleroma/develop' into status-notification-type ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-02-19 22:02:03 +01:00
kPherox	d5d7648789	feat: build rel me tags with profile fields	2023-02-18 17:57:41 +09:00
tusooa	024bb27fc7	Ignores in exiftool read descriptions	2023-02-11 00:30:52 -05:00
lain	7abb248ceb	Merge branch 'notification-content-filtering-noobj' into 'develop' ... Require related object for content-filtering on notification See merge request pleroma/pleroma!3837	2023-02-09 19:54:59 +00:00
lain	00b39dea5d	Merge branch 'tusooa/3059-report-fake-create-render' into 'develop' ... Fix inproper content being cached in report content Closes #3059 See merge request pleroma/pleroma!3836	2023-02-09 19:52:01 +00:00
lain	755279e253	Merge branch 'tusooa/api-spec-property-map' into 'develop' ... OpenApiSpex: overhaul See merge request pleroma/pleroma!3832	2023-02-09 19:50:59 +00:00
lain	724bf7c647	Merge branch 'tusooa/3055-instance-languages' into 'develop' ... Allow customizing instance languages Closes #3055 See merge request pleroma/pleroma!3835	2023-02-09 19:23:29 +00:00
lain	50abb54d15	Merge branch 'fix-relme' into 'develop' ... Fix rel="me" See merge request pleroma/pleroma!3824	2023-02-09 19:09:54 +00:00
Alexander Tumin	55a8aa9787	Require related object for notifications to filter on content	2023-02-08 13:07:34 +03:00
tusooa	08132002d2	Fix inproper content being cached in report content	2023-02-03 16:00:39 -05:00
tusooa	bc7ec43179	Allow customizing instance languages	2023-01-26 20:17:13 -05:00
tusooa	7467b24730	Fix block_from_stranger setting	2023-01-18 18:36:52 -05:00
tusooa	97f947deaf	Fix tests	2023-01-15 21:39:05 -05:00
tusooa	5af9ce4a01	Fix type of admin_account.is_confirmed	2023-01-15 18:41:36 -05:00
tusooa	3b4b84b74c	Force spec for every operation to have a listed tag	2023-01-15 18:31:37 -05:00
tusooa	bddcb3ed68	Add names to additionalProperties	2023-01-15 17:28:32 -05:00
Lain Soykaf	fe00fbfd54	B StripLocation: Add test, work for all svgs.	2023-01-05 11:29:06 -05:00
Dmytro Poltavchenko	5b4962165e	Added SVG to formats not compatible with exiftool	2023-01-05 11:26:57 -05:00
lain	e853cfe7c3	Revert "Merge branch 'copyright-bump' into 'develop'" ... This reverts merge request !3825	2023-01-02 20:38:50 +00:00
marcin mikołajczak	10886eeaa2	Bump copyright year ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2023-01-01 12:13:06 +01:00
Mark Felder	39e4b788ad	Remove unwanted code specific to MIX_ENV=test	2022-12-30 15:36:21 -05:00
Mark Felder	bea43aba33	Fix rel="me" ... Cachex for this was not started	2022-12-29 19:42:14 +00:00
silverpill	c7dc5ce85c	TagValidator: Allow unrecognized Tag types	2022-12-29 14:21:20 +00:00
marcin mikołajczak	6e51845d44	Merge remote-tracking branch 'pleroma/develop' into secure-mode ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-12-27 16:41:16 +01:00
tusooa	179efd9467	Make backup parameters configurable	2022-12-24 00:20:25 -05:00
tusooa	7d3e4eaeb9	Log errors more extensively	2022-12-24 00:04:51 -05:00
tusooa	070fbb89e1	Lint	2022-12-24 00:04:51 -05:00
tusooa	a1b95922c5	Fix compile error	2022-12-24 00:04:50 -05:00
tusooa	46ab97d721	Simplify backup update clause	2022-12-24 00:04:50 -05:00
tusooa	bdd63d2a3a	Expose backup status via Pleroma API	2022-12-24 00:04:50 -05:00
tusooa	e4ac2a7cd6	Detail backup states	2022-12-24 00:04:32 -05:00
Haelwenn (lanodan) Monnier	3fbd42061c	Revert "Delete report notifs when demoting from superuser" ... This reverts commit 4504c81080.	2022-12-23 17:06:09 +01:00
Haelwenn (lanodan) Monnier	7d68d64d63	Merge back 2.4.5	2022-12-23 17:05:05 +01:00
Sean King	90681c720d	Make lint happy	2022-12-21 23:40:39 -07:00
Sean King	351b5a9df4	Use crazy hack to finally get pleroma:report notifications not visible after revoking privileges	2022-12-21 23:35:39 -07:00
Ekaterina Vaartis	398141da68	Merge remote-tracking branch 'upstream/develop' into meilisearch	2022-12-20 21:00:07 +03:00
Sean King	d5d4c7c11d	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into fine_grained_moderation_privileges	2022-12-19 18:48:26 -07:00
lain	c6dff687c0	Merge branch 'from/upstream/develop/tusooa/mrf-updates' into 'develop' ... MRFs with Updates See merge request pleroma/pleroma!3808	2022-12-20 00:51:41 +00:00
Sean King	1d95012758	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into fine_grained_moderation_privileges	2022-12-19 17:48:11 -07:00
lain	3dfa009ec3	Merge branch 'develop' into 'fix/2980-rss-feed-generation' ... # Conflicts: # CHANGELOG.md	2022-12-19 23:43:23 +00:00
Mark Felder	72d4d1b392	Fix TwitterCard meta tags ... TwitterCard meta tags are supposed to use the attributes "name" and "content". OpenGraph tags use the attributes "property" and "content". Twitter itself is smart enough to detect broken meta tags and discover the TwitterCard using "property" and "content", but other platforms that only implement parsing of TwitterCards and not OpenGraph may fail to correctly detect the tags as they're under the wrong attributes. > "Open Graph protocol also specifies the use of property and content attributes for markup while > Twitter cards use name and content. Twitter’s parser will fall back to using property and content, > so there is no need to modify existing Open Graph protocol markup if it already exists." [0] [0] https://developer.twitter.com/en/docs/twitter-for-websites/cards/guides/getting-started	2022-12-19 17:23:12 -05:00
Sean King	c58eb873dd	Fix CommonAPI delete function to use User.privileged? instead of User.superuser?	2022-12-18 22:05:07 -07:00
Sean King	60df2d8a97	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into fine_grained_moderation_privileges	2022-12-18 22:03:48 -07:00
faried nawaz	0f67eab384	remove pub_date() -- use to_rfc2822 instead ... _tag_activity.xml.eex used activity_content() instead of activity_description(), and did not escape html properly.	2022-12-19 01:44:46 +05:00
faried nawaz	3f63caee2a	fix: add xmlns:thr for in-reply-to refs	2022-12-19 01:44:46 +05:00
faried nawaz	8d500977a6	fix: feed item title was escaped twice	2022-12-19 01:44:46 +05:00
Mark Felder	f3253c0c6a	Implement RFC2822 timestamp formatting	2022-12-19 01:44:46 +05:00
faried nawaz	3f0783c0a5	fix atom and rss feeds for users and tags ... Changes: - make the XML closer to spec (RSS does not pass w3c's validator, but works) - fix dates (RFC3339 for Atom, doc says RFC822 for RSS but RFC1123 is closer) - fix attachment/enclosure links (but see below) - set feed item title to post's "summary" if present - pruned several elements that validators did not like - examples: ap_enabled, user banner urls. Specs: - https://www.rssboard.org/rss-specification - https://validator.w3.org/feed/docs/atom.html - https://www.intertwingly.net/wiki/pie/Rss20AndAtom10Compared Validators: - https://validator.w3.org/feed/ - https://rssatom.com/feedvalidator.php Attachment/enclosure links should have a "length" field (mandatory according to the spec). This is not present in the object's data map.	2022-12-19 01:44:41 +05:00
tusooa	a3985aac91	Merge branch 'fix-2856' into 'develop' ... Uploading an avatar media exceeding max size returns a 413 Closes #2856 See merge request pleroma/pleroma!3804	2022-12-16 16:15:36 +00:00
lain	301eb86b35	Merge branch 'update-deps' into 'develop' ... Update to Phoenix 1.6, Elixir 1.11, and chase dependencies See merge request pleroma/pleroma!3766	2022-12-16 00:36:59 +00:00
Lain Soykaf	bb27e4134b	AudioVideoValidator: Fix embedded attachment requirements	2022-12-15 18:06:28 -05:00
Lain Soykaf	4a32b584e1	StatusView: Fix warning	2022-12-15 18:02:33 -05:00
Lain Soykaf	9838790a7d	AttachmentValidator: Actually require url	2022-12-15 17:46:20 -05:00
Lain Soykaf	63d00f8123	Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into update-deps	2022-12-15 17:19:36 -05:00
tusooa	2554028097	Make SimplePolicy Update-aware ... This is inspired by d5828f1c5e	2022-12-15 11:57:45 -05:00
tusooa	dc7efcd08b	Make TagPolicy Update-aware ... This is inspired by d5828f1c5e	2022-12-15 11:08:24 -05:00
tusooa	62c27e0164	Fix failure when registering a user with no email when approval required	2022-12-14 01:04:42 -05:00
duponin	9876742358	Return 413 when an actor's banner or background exceeds the size limit	2022-12-11 23:15:08 +01:00
duponin	452595baed	Uploading an avatar media exceeding max size returns a 413 ... Until now it was returning a 500 because the upload plug were going through the changeset and ending in the JSON encoder, which raised because struct has to @derive the encoder.	2022-12-11 22:54:47 +01:00
Haelwenn	204fd6faae	Merge branch 'from/upstream-develop/tusooa/report-fake' into 'develop' ... Report an Object, not a Create Activity Closes #2986 See merge request pleroma/pleroma!3788	2022-12-09 14:25:24 +00:00
ave	0f88c2bca4	Change follow_operation schema to use type BooleanLike	2022-11-28 00:13:34 +00:00
Hélène	542bb17258	ArticleNotePageValidator: fix replies fixing ... Some software, like GoToSocial, expose replies as ActivityPub Collections, but do not expose any item array directly in the object, causing validation to fail via the ObjectID validator. Now, Pleroma will drop that field in this situation too.	2022-11-27 04:54:19 +01:00
FloatingGhost	747311f623	fix resolution of GTS user keys	2022-11-27 04:54:18 +01:00
Tusooa Zhu	11d5ad24c5	Make local-only posts stream in local timeline	2022-11-27 04:39:32 +01:00
Tusooa Zhu	e46c3a0595	Do not stream out Create of ChatMessage	2022-11-27 04:39:32 +01:00
Tusooa Zhu	09ab51eebb	Make mutes and blocks behave the same as other lists	2022-11-27 04:21:58 +01:00
Haelwenn (lanodan) Monnier	7ec3469bea	Transmogrifier: Use validating regex for "mediaType"	2022-11-27 04:21:31 +01:00
Haelwenn (lanodan) Monnier	8640d217b1	AttachmentValidator: Use custom ecto type and regex for "mediaType"	2022-11-27 04:21:31 +01:00
Haelwenn (lanodan) Monnier	da71092003	EctoType: Add MIME validator	2022-11-27 04:21:31 +01:00
Ilja	4504c81080	Delete report notifs when demoting from superuser ... When someone isn't a superuser any more, they shouldn't see the reporsts any more either. Here we delete the report notifications from a user when that user gets updated from being a superuser to a non-superuser.	2022-11-27 04:20:11 +01:00
Haelwenn	7f0b3161ea	Merge branch 'akoma/deactivated-users' into 'develop' ... Timeline query performance improvements See merge request pleroma/pleroma!3779	2022-11-20 23:40:58 +00:00
tusooa	9d99e76a3a	Fix unit tests	2022-11-20 00:57:04 -05:00
tusooa	0e0c316c76	Fix report api	2022-11-20 00:35:52 -05:00
tusooa	a69e9ae2ef	Flag an Object, not an Activity	2022-11-19 23:51:43 -05:00
HJ	a31d3589ed	Update http_security_plug.ex	2022-11-17 12:03:01 -05:00
HJ	79bd363a68	Update lib/pleroma/web/plugs/http_security_plug.ex	2022-11-17 12:03:01 -05:00
Henry Jameson	db76ea578a	try to fix ruffle on chrome	2022-11-17 12:03:01 -05:00
feld	a9d991d31e	Merge branch 'develop' into 'akoma/deactivated-users' ... # Conflicts: # CHANGELOG.md	2022-11-14 14:03:11 +00:00
lain	0e1356ef9c	Merge branch 'akkoma/delete-improvements' into 'develop' ... Alter priority of Delete activities to be lowest See merge request pleroma/pleroma!3782	2022-11-14 07:24:46 +00:00
lain	76ed0da09f	Merge branch 'bugfix/reset-unreachable-on-fetch' into 'develop' ... Object.Fetcher: Set reachable on successful fetch See merge request pleroma/pleroma!3780	2022-11-14 07:22:33 +00:00
Mark Felder	2e0089dd5c	Alter priority of Delete activities to be lowest ... This will prevent a user with a large number of posts from negatively affecting performance of the outgoing federation queue if they delete their account.	2022-11-13 14:11:48 -05:00
Haelwenn	a2db64b12b	Merge branch 'fix-typo-in-csp-report-to-header-name' into 'develop' ... Fix typo in CSP Report-To header name See merge request pleroma/pleroma!3768	2022-11-13 18:53:59 +00:00
Mark Felder	47b9847edd	Deletes do not generate notifications of any kind, so skip trying	2022-11-13 12:25:52 -05:00
Haelwenn (lanodan) Monnier	b2713357b9	Object.Fetcher: Set reachable on successful fetch	2022-11-13 16:51:12 +01:00
Mark Felder	edaf0a05f8	Add same optimized join for excluding invisible users	2022-11-12 18:06:28 -05:00
Mark Felder	749445dd50	Fix reports which do not have a user ... The check for deactivated users was being applied to report activities.	2022-11-12 17:54:11 -05:00
FloatingGhost	4d321be05c	Extract deactivated users query to a join	2022-11-12 17:52:28 -05:00
feld	3d1828f43b	Merge branch 'oban-timeouts' into 'develop' ... Define sane Oban Worker timeouts See merge request pleroma/pleroma!3777	2022-11-12 22:13:28 +00:00
tusooa	1b0e47b79b	Merge branch 'from/upstream-develop/tusooa/no-strip-report' into 'develop' ... Give admin the choice to not strip reported statuses Closes #2887 See merge request pleroma/pleroma!3773	2022-11-12 17:55:50 +00:00
Mark Felder	8be7f87e1f	Define sane Oban Worker timeouts	2022-11-11 13:46:27 -05:00
Mark Felder	6b87b3f2ea	Remove Quack logging backend	2022-11-11 12:36:29 -05:00
tusooa	717c5901f8	Render a generated reported activity properly	2022-11-09 23:02:27 -05:00
tusooa	6f047cc308	Do not strip reported statuses when configured not to	2022-11-09 22:36:57 -05:00
Haelwenn (lanodan) Monnier	648e012022	ObjectAgePolicy: Make strip_followers behavior for followers-only explicit	2022-11-07 14:58:47 +01:00
Thomas Citharel	bdedc41cbc	Fix typo in CSP Report-To header name ... The header name was Report-To, not Reply-To. In any case, that's now being changed to the Reporting-Endpoints HTTP Response Header. https://w3c.github.io/reporting/#header https://github.com/w3c/reporting/issues/177 CanIUse says the Report-To header is still supported by current Chrome and friends. https://caniuse.com/mdn-http_headers_report-to It doesn't have any data for the Reporting-Endpoints HTTP header, but this article says Chrome 96 supports it. https://web.dev/reporting-api/ (Even though that's come out one year ago, that's not compatible with Network Error Logging which's still using the Report-To version of the API) Signed-off-by: Thomas Citharel <tcit@tcit.fr>	2022-11-04 09:43:13 +01:00
Mark Felder	7c64f705f6	Update to Phoenix 1.6 and chase dependencies ... Also bump minimum Elixir to 1.11	2022-11-03 16:13:07 +00:00
Alexander Strizhakov	8407e26b0c	rebase fix	2022-11-03 10:06:36 -04:00
Alexander Strizhakov	5a9ea98baf	XML WebFinger user representation correct domain	2022-11-03 09:48:59 -04:00
Alexander Strizhakov	4121bca895	expanding WebFinger	2022-11-03 09:48:24 -04:00
Haelwenn	da0ef154a6	Merge branch 'from/upstream-develop/tusooa/2930-get-or-fetch' into 'develop' ... Fix User.get_or_fetch/1 with usernames starting with http Closes #2930 See merge request pleroma/pleroma!3751	2022-10-30 00:38:21 +00:00
tusooa	9fbf01f7a9	Merge branch 'push-updates' into 'develop' ... Push.Impl: support edits See merge request pleroma/pleroma!3760	2022-10-27 12:51:29 +00:00
feld	7a519b6a66	Merge branch 'fix-deprecation-text' into 'develop' ... Fix deprecation warning for Gun timeout See merge request pleroma/pleroma!3759	2022-10-24 14:22:49 +00:00
Haelwenn (lanodan) Monnier	16b06160ac	CommonAPI: generate ModerationLog for all admin/moderator deletes ... As a side-effect it also changes the ChatMessage delete ID to an Activity.id rather than MessageReference.id Closes: https://git.pleroma.social/pleroma/pleroma/-/issues/2958	2022-10-14 18:51:08 +02:00
Ekaterina Vaartis	5a39866388	Specifically strip mentions for search indexing	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	6256822afd	Check for updateId, not uid	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	5ac6763238	Make add_to_index and remove_from_index report errors	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	102ebb42bd	Make search a callback	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	119b2b847b	Instead of checking string length, explicitly check for "" and "."	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	e20f74c71b	Remove duplicate function call	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	84608be87e	Change updateId to uid because apparently that's the new name	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	1e23f527e3	Change the meilisearch key auth to conform to 0.25.0	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	3387935e83	Don't try removing deleted users and such from index as posts	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	d89dc5518b	Fix meilisearch tests and jobs for oban	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	2bc21c6f18	Use oban for search indexing	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	6f2f457751	Add a search backend behaviour	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	571533ae26	Don't support meilisearch < 0.24.0, since it breaks things	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	3179ed0921	Make chunk size configurable	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	a12f63bc81	Implement suggestions from the Meilisearch MR ... - Index unlisted posts - Move version check outside of the streaming and only do it once - Use a PUT request instead of checking manually if there is need to insert - Add error handling, sort of	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	a6946048fb	Rename Activity.Search to Search.DatabaseSearch	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	0fae71f88d	Rename search.ex to database_search.ex and add search/2	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	39e596a5b5	Style fixes	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	7009ef5672	Move the search.ex file so credo doesn't complain	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	9c1a930707	Support reindexing meilisearch >=0.24.0 ... It has has a different error code key	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	e928e307f3	Add a reindex option ... Signed-off-by: Ekaterina Vaartis <vaartis@kotobank.ch>	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	4445421297	Only add local posts to index in activity_pub ... Remote ones are already added in another place	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	0b4fd0d342	Set content-type to application/json	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	e4b7a3f51f	Modify some meilisearch variables	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	cf558208c2	Use proper deleted object for removing from index	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	95cb2bb694	Don't try removing from index again in common_api ... It's already removed in the side effects of the pipeline	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	6beef2d117	Move add_to_index / remove_from_index to Pleroma.Actitivy.Search	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	40280cc273	Reorder ranking rules for (maybe) better results	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	d9ef7e0758	Fix activity being passed to objec_to_search_data	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	09a1ae1b6e	Add the meilisearch.stats command	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	a67f9da5cc	Add a message with a count of posts to index	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	2c7d973af7	Implement meilisearch auth	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	410c8cb765	Make indexing logs rewrite themselves	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	35e9192ced	Rework task indexing to share code with the main module ... The code in the main module now scrubs new posts too	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	3dedadf192	Adjust content indexing to skip more unneeded stuff	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	9f16ca80e0	Mark only content as searchable for meilisearch	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	2b2e409ad7	Also index incoming federated posts	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	e35d87ea54	Make the chunk size smaller	2022-10-10 20:19:09 +03:00
Ekaterina Vaartis	00c48a33ac	Use content instead of source and scrub it	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	9beaebd97e	Tweak search ordering to hopefully return newer results	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	38996f551a	Make meilisearch sort on publish date converted to unix time	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	ea6a6a1287	Make the indexing batch differently and more, show number indexed	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	365024abec	Ensure only indexing public posts and implement clearing and delete	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	0318e9a599	Add logging to milisiearch index and make it use desc(id)	2022-10-10 20:19:08 +03:00
Ekaterina Vaartis	e154ebbf79	Initial meilisearch implementation, doesn't delete posts yet	2022-10-10 20:19:08 +03:00
Tusooa Zhu	dd82fd234f	Merge branch 'release/2.4.4' into mergeback/2.4.4	2022-10-08 22:15:09 -04:00
marcin mikołajczak	1b238a4fad	Push.Impl: support edits ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-10-01 23:28:02 +02:00
Mark Felder	1958f23fe7	Fix deprecation warning for Gun timeout	2022-09-30 12:22:06 -04:00
Haelwenn	3f1c31b7cd	Merge branch 'fix/exclude-deactivated-in-search' into 'develop' ... User: search: exclude inactive users from user search See merge request pleroma/pleroma!3755	2022-09-27 23:58:45 +00:00
Haelwenn	5d7d623390	Merge branch 'bugfix/elixir-1.14' into 'develop' ... Bugfix: Elixir 1.14 See merge request pleroma/pleroma!3740	2022-09-27 21:46:03 +00:00
Ilja	2d7ea263a1	Add extra routes to :users_manage_credentials privilege	2022-09-24 13:52:28 +02:00
tusooa	1a7107f4a5	Merge branch 'remove_from_followers' into 'develop' ... MastoAPI: POST /api/v1/accounts/:id/remove_from_followers See merge request pleroma/pleroma!3647	2022-09-16 23:24:13 +00:00
a1batross	7f63b4c315	User: search: exclude deactivated users from user search ... This way we don't pollute search results with deactivated and deleted users	2022-09-16 00:49:16 +03:00
Tusooa Zhu	ea60c4e709	Fix wrong relationship direction	2022-09-14 20:24:04 -04:00
Hélène	0b19625bfb	ObjectView: do not fetch an object for its ID ... Non-Create/Listen activities had their associated object field normalized and fetched, but only to use their `id` field, which is both slow and redundant. This also failed on Undo activities, which delete the associated object/activity in database. Undo activities will now render properly and database loads should improve ever so slightly.	2022-09-11 04:54:04 +02:00
Tusooa Zhu	50923f5438	Fix User.get_or_fetch/1 with usernames starting with http	2022-09-08 11:58:17 -04:00
Haelwenn	b8d6cb5845	Merge branch 'from/upstream-develop/tusooa/2892-backup-scope' into 'develop' ... Make backups require its own scope Closes #2892 See merge request pleroma/pleroma!3721	2022-09-05 15:42:02 +00:00
Haelwenn	346c130ddc	Merge branch 'fix/user-private-key-generation' into 'develop' ... User: generate private keys on user creation See merge request pleroma/pleroma!3737	2022-09-05 15:38:15 +00:00
tusooa	f7c2073103	Merge branch 'bump/min-elixir-1.10' into 'develop' ... Bump minimum Elixir version to 1.10 See merge request pleroma/pleroma!3741	2022-09-05 15:19:34 +00:00
tusooa	9874b4c985	Merge branch 'develop' into 'from/upstream-develop/tusooa/2892-backup-scope' ... # Conflicts: # CHANGELOG.md	2022-09-05 15:00:19 +00:00
Hélène	cd237d22f1	User: generate private keys on user creation ... This fixes a race condition bug where keys could be regenerated post-federation, causing activities and HTTP signatures from an user to be dropped due to key differences.	2022-09-05 03:51:17 +02:00
tusooa	f8afba95b2	Merge branch 'fix/gts-federation' into 'develop' ... GoToSocial federation fixes See merge request pleroma/pleroma!3725	2022-09-05 01:10:34 +00:00
tusooa	20347898e2	Merge branch 'fix/federation-context-issues' into 'develop' ... Fix reply context fixing (Pleroma replies to Misskey threads) and removal of context objects See merge request pleroma/pleroma!3717	2022-09-04 18:43:36 +00:00
Haelwenn	c63cf954de	Merge branch 'from/upstream-develop/tusooa/streaming-fix' into 'develop' ... Streaming fix Closes #2796 See merge request pleroma/pleroma!3738	2022-09-03 18:24:28 +00:00
Hélène	4477c6baff	Metadata/Utils: use summary as description if set ... When generating OpenGraph and TwitterCard metadata for a post, the summary field will be used first if it is set to generate the post description.	2022-09-03 17:17:48 +02:00
Haelwenn	257601d67d	Merge branch 'ssh-bbs-improvements' into 'develop' ... BBS: add functionnalities and readability See merge request pleroma/pleroma!3675	2022-09-03 11:15:07 +00:00
Haelwenn	299255b9bb	Merge branch 'from/upstream-develop/tusooa/assoc-object-id' into 'develop' ... Add function to calculate associated object id Closes #2307 See merge request pleroma/pleroma!3692	2022-09-03 02:50:40 +00:00
Haelwenn	e40c221c31	Merge branch 'from/upstream-develop/tusooa/edits' into 'develop' ... Editing Closes #1429, #2859, and #2288 See merge request pleroma/pleroma!3678	2022-09-03 02:16:42 +00:00
Haelwenn	07ef72f493	Merge branch 'from/develop/tusooa/2807-remote-xact-post' into 'develop' ... Remote interaction with posts Closes #2807 and #978 See merge request pleroma/pleroma!3587	2022-09-03 02:03:48 +00:00
Haelwenn (lanodan) Monnier	ec80a1e405	Bump minimum Elixir version to 1.10 ... 1.9 being end-of-life	2022-09-03 03:58:22 +02:00
Haelwenn (lanodan) Monnier	e124776d14	Elixir 1.14 formatting	2022-09-03 03:58:22 +02:00
Haelwenn (lanodan) Monnier	21ab7369ca	Bump minimum Elixir version to 1.10 ... With the release of Elixir 1.14, Elixir 1.9 is now end-of-life. Elixir 1.10 Release Notes: https://github.com/elixir-lang/elixir/releases/tag/v1.10.0	2022-09-02 22:53:54 +02:00
Tusooa Zhu	20a0dd6516	Exclude Announce instead of restricting to Create in visibility_tags	2022-08-31 22:14:54 -04:00
Tusooa Zhu	ffd379456b	Do not stream out Announces to public timelines	2022-08-31 15:57:06 -04:00
Tusooa Zhu	f9b86c3c22	Make local-only posts stream in local timeline	2022-08-27 19:34:56 -04:00
Tusooa Zhu	3afa1903ee	Do not stream out Create of ChatMessage	2022-08-27 17:51:41 -04:00
tusooa	a546e6f042	Merge branch 'feature/emoji-15-support' into 'develop' ... emoji-test: update to latest 15.0 draft See merge request pleroma/pleroma!3726	2022-08-27 00:59:22 +00:00
tusooa	59109f8f74	Merge branch 'fix_flaky_test_user_relationship_test.exs_81' into 'develop' ... fix flaky test_user_relationship_test.exs:81 See merge request pleroma/pleroma!3697	2022-08-24 15:24:07 +00:00
Ilja	47e3a72b6e	fix flaky test_user_relationship_test.exs:81	2022-08-24 15:24:07 +00:00
Hélène	439c1baf25	OAuthPlug: use user cache instead of joining ... As this plug is called on every request, this should reduce load on the database by not requiring to select on the users table every single time, and to instead use the by-ID user cache whenever possible.	2022-08-24 03:40:05 +02:00
Tusooa Zhu	c59ee1f172	Expose availability of GET /main/ostatus via instance	2022-08-20 21:19:31 -04:00
Tusooa Zhu	4ec9eeb3f8	Make remote interaction page translatable	2022-08-20 21:14:26 -04:00
Tusooa Zhu	1218adacc5	Display status link in remote interaction form	2022-08-20 21:13:52 -04:00
Tusooa Zhu	b7c75db0f7	Lint	2022-08-20 21:13:51 -04:00
Tusooa Zhu	779457d9a4	Add GET endpoints for remote subscription forms ... There are two reasons for adding a GET endpoint: 0: Barely displaying the form does not change anything on the server. 1: It makes frontend development easier as they can now use a link, instead of a form, to allow remote users to interact with local ones.	2022-08-20 21:13:51 -04:00
Tusooa Zhu	a243a217a7	Fix form item name in status_interact.html	2022-08-20 21:13:51 -04:00
Tusooa Zhu	2701628786	Add remote interaction ui for posts	2022-08-20 21:13:51 -04:00
Tusooa Zhu	3885ee182a	Switch to associated_object_id index	2022-08-20 20:43:46 -04:00
Tusooa Zhu	a31d6bb52c	Execute session disconnect in background	2022-08-19 20:24:24 -04:00
Tusooa Zhu	f459c1260b	Lint	2022-08-19 20:24:24 -04:00
Tusooa Zhu	c62a4f1c17	Disconnect streaming sessions when token is revoked	2022-08-19 20:22:45 -04:00
Hélène	0cee3c6e93	emoji-test: update to latest 15.0 draft	2022-08-20 00:21:07 +02:00
Hélène	4661b56720	ArticleNotePageValidator: fix replies fixing ... Some software, like GoToSocial, expose replies as ActivityPub Collections, but do not expose any item array directly in the object, causing validation to fail via the ObjectID validator. Now, Pleroma will drop that field in this situation too.	2022-08-19 02:45:49 +02:00
Hélène	61254111e5	HttpSignaturePlug: accept standard (request-target) ... The (request-target) used by Pleroma is non-standard, but many HTTP signature implementations do it this way due to a misinterpretation of the draft 06 of HTTP signatures: "path" was interpreted as not having the query, though later examples show that it must be the absolute path with the query part of the URL as well. This behavior is kept to make sure most software (Pleroma itself, Mastodon, and probably others) do not break, but Pleroma now accepts signatures for a (request-target) containing the query, as expected by many HTTP signature libraries, and clarified in the draft 11 of HTTP signatures. Additionally, the new draft renamed (request-target) to @request-target. We now support both for incoming requests' signatures.	2022-08-18 17:01:34 +02:00
FloatingGhost	f41d970a59	fix resolution of GTS user keys	2022-08-16 18:51:34 +02:00
Hélène	88c1c76d3e	Migrations: delete contexts with BaseMigrator ... Due to the lengthiness of this task, the migration has been adapted into a BaseMigrator migration, running in the background instead.	2022-08-15 01:47:09 +02:00
Hélène	bb02ee99f5	CommonFixes: more predictable context generation ... `context` fields for objects and activities can now be generated based on the object/activity `inReplyTo` field or its ActivityPub ID, as a fallback method in cases where `context` fields are missing for incoming activities and objects.	2022-08-15 01:46:55 +02:00
Haelwenn	06f9324afe	Merge branch 'from/upstream-develop/tusooa/2912-receiver-reject-mrf' into 'develop' ... Treat MRF rejects as success in Oban worker Closes #2912 See merge request pleroma/pleroma!3720	2022-08-12 01:37:40 +00:00
Haelwenn	837d4dc87f	Merge branch 'fix_flaky_tests_where_we_sometimes_loose_db_connections' into 'develop' ... Fix flaky tests with DB connections; Allow higher amount of restarts for Pleroma.Repo during testing See merge request pleroma/pleroma!3696	2022-08-12 01:36:11 +00:00
Haelwenn	93f12c0d0d	Merge branch 'from/upstream-develop/tusooa/sync-settings' into 'develop' ... Synchronized settings for apps (frontends) See merge request pleroma/pleroma!3698	2022-08-12 01:34:36 +00:00
Haelwenn	6ce3f76b5d	Merge branch 'from/upstream-develop/floatingghost/follow-state' into 'develop' ... Backport: bugfix/follow-state Closes #2902 See merge request pleroma/pleroma!3718	2022-08-12 01:32:20 +00:00
Mark Felder	cbdc13b767	Fix Varnish 7 support by ensuring Media Preview Proxy fetches headers with a capitalized HEAD verb	2022-08-10 17:09:58 -04:00
Hélène	3b6784b1de	CreateGenericValidator: fix reply context fixing ... Incoming Pleroma replies to a Misskey thread were rejected due to a broken context fix, which caused them to not be visible until a non-Pleroma user interacted with the replies. This fix properly sets the post-fix object context to its parent Create activity as well, if it was changed.	2022-08-10 02:29:38 +02:00
Hélène	def0f5dc2e	StatusView: implement pleroma.context field ... This field replaces the now deprecated conversation_id field, and now exposes the ActivityPub object `context` directly via the MastoAPI instead of relying on StatusNet-era data concepts.	2022-08-10 02:29:38 +02:00
Tusooa Zhu	738ca484fd	Update api spec to reflect OAuth scope change	2022-08-09 18:15:25 -04:00
Hélène	a9111bcaf2	StatusView: clear MSB on calculated conversation_id ... This field seems to be a left-over from the StatusNet era. If your application uses `pleroma.conversation_id`: this field is deprecated. It is currently stubbed instead by doing a CRC32 of the context, and clearing the MSB to avoid overflow exceptions with signed integers on the different clients using this field (Java/Kotlin code, mostly; see Husky and probably other mobile clients.) This should be removed in a future version of Pleroma. Pleroma-FE currently depends on this field, as well.	2022-08-09 20:10:43 +02:00
Hélène	7f71e3d0fe	CommonFields: remove context_id	2022-08-09 20:10:43 +02:00
Hélène	f3e061c964	Object: remove context_id field ... 30 to 70% of the objects in the object table are simple JSON objects containing a single field, 'id', being the context's ID. The reason for the creation of an object per context seems to be an old relic from the StatusNet era, and has only been used nowadays as an helper for threads in Pleroma-FE via the `pleroma.conversation_id` field in status views. An object per context was created, and its numerical ID (table column) was used and stored as 'context_id' in the object and activity along with the full 'context' URI/string. This commit removes this field and stops creation of objects for each context, which will also allow incoming activities to use activity IDs as contexts, something which was not possible before, or would have been very broken under most circumstances. The `pleroma.conversation_id` field has been reimplemented in a way to maintain backwards-compatibility by calculating a CRC32 of the full context URI/string in the object, instead of relying on the row ID for the created context object.	2022-08-09 20:10:43 +02:00
Tusooa Zhu	a7f01ffc1d	Make backups require its own scope	2022-08-09 00:34:04 -04:00
Tusooa Zhu	d487e0160c	Treat containment failure as cancel in ReceiverWorker	2022-08-08 08:41:33 -04:00
Tusooa Zhu	a0166e92fa	Treat MRF rejects as success in Oban worker	2022-08-06 00:33:18 -04:00
marcin mikołajczak	c899af1d6a	Reject requests from specified instances if authorized_fetch_mode is enabled ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-08-05 11:06:30 +02:00
floatingghost	f2a9285ff0	bugfix/follow-state (#104) ... Reviewed-on: https://akkoma.dev/AkkomaGang/akkoma/pulls/104	2022-08-03 01:07:53 -04:00
Tusooa Zhu	a4fa286d20	Use actor_types() to determine whether the Update is for user	2022-08-02 10:37:28 -04:00
Haelwenn	b2ba307f4d	Merge branch 'from/upstream-develop/tusooa/2871-fix-local-public' into 'develop' ... local only fixes Closes #2871 See merge request pleroma/pleroma!3660	2022-08-02 05:39:50 +00:00
Haelwenn	7299795eb4	Merge branch 'from/upstream-develop/tusooa/backup-without-email' into 'develop' ... Allow users to create backups without providing email address See merge request pleroma/pleroma!3665	2022-08-02 05:23:49 +00:00
tusooa	c80096522c	Merge branch 'develop' into 'from/develop/tusooa/emit-move' ... # Conflicts: # CHANGELOG.md # test/pleroma/user_test.exs	2022-07-31 21:32:49 +00:00
marcin mikołajczak	5d3d6a58f7	Use duration param for mute expiration duration ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-07-31 17:22:34 +02:00
Haelwenn	0814d0e0cb	Merge branch 'fix/proper-emoji-qualification' into 'develop' ... Emoji: implement full-qualifier using combinations See merge request pleroma/pleroma!3709	2022-07-28 04:46:15 +00:00
Haelwenn	0f9f3d2897	Merge branch 'from/upstream-develop/tusooa/2384-pagination' into 'develop' ... Make mutes and blocks behave the same as other lists Closes #2384 See merge request pleroma/pleroma!3693	2022-07-28 04:37:10 +00:00
Hélène	7167de592e	Emoji: apply recommended tail call changes ... Behavior matches previous code. Co-authored-by: Tusooa Zhu <tusooa@kazv.moe>	2022-07-27 02:08:46 +02:00
Hélène	b99f5d6183	Emoji: split qualification variation into a module	2022-07-26 02:04:12 +02:00
Hélène	fb3f6e1975	EmojiReactValidator: use new qualification method	2022-07-25 16:49:23 +02:00
Hélène	01d396585e	Emoji: implement full-qualifier using combinations ... This implements fully_qualify_emoji/1, which will return the fully-qualified version of an emoji if it knows of one, or return the emoji unmodified if not. This code generates combinations per emoji: for each FE0F, all possible combinations of the character being removed or staying will be generated. This is made as an attempt to find all partially-qualified and unqualified versions of a fully-qualified emoji. I have found *no cases* for which this would be a problem, after browsing the entire emoji list in emoji-test.txt. This is safe, and, sadly, most likely the sanest too.	2022-07-25 16:20:12 +02:00
Hélène	388bbc4978	EmojiReactValidator: fix emoji qualification ... Tries fully-qualifying emoji when receiving them, by adding the emoji variation sequence to the received reaction emoji. This issue arises when other instance software, such as Misskey, tries reacting with emoji that have unqualified or minimally qualified variants, like a red heart. Pleroma only accepts fully qualified emoji in emoji reactions, and refused those emoji. Now, Pleroma will attempt to properly qualify them first, and reject them if checks still fail. This commit contains changes to tests proposed by lanodan. Co-authored-by: Haelwenn <contact+git.pleroma.social@hacktivis.me>	2022-07-24 13:36:06 +02:00
Tusooa Zhu	997f08b350	Make AntiLinkSpamPolicy history-aware	2022-07-24 00:18:09 -04:00
Tusooa Zhu	d877d2a4e7	Make HashtagPolicy history-aware	2022-07-24 00:02:39 -04:00
Tusooa Zhu	82c8fc1ede	Make NoEmptyPolicy work with Update	2022-07-23 23:24:25 -04:00
Tusooa Zhu	46a5c06853	Make NormalizeMarkup history-aware	2022-07-23 22:50:38 -04:00
Tusooa Zhu	fc7ce5f93c	Make NoPlaceholderTextPolicy history-aware	2022-07-23 22:41:04 -04:00
Tusooa Zhu	dce7e42928	Make MediaProxyWarmingPolicy history-aware	2022-07-23 22:34:03 -04:00
Tusooa Zhu	0a337063e1	Make ForceMentionsInContent history-aware	2022-07-23 22:23:57 -04:00
Tusooa Zhu	cd19537f39	Make EnsureRePrepended history-aware	2022-07-23 17:48:39 -04:00
Tusooa Zhu	eba9b0760f	Make MRF Keyword history-aware	2022-07-23 15:56:36 -04:00
tusooa	301ce5bc62	Merge branch 'mute-expiration' into 'develop' ... MastoAPI: Show mutes expiration date See merge request pleroma/pleroma!3682	2022-07-23 00:34:15 +00:00
Haelwenn	cfb21d011f	Revert "Merge branch 'fix/emoji-react-qualification' into 'develop'" ... This reverts merge request !3684	2022-07-22 23:19:49 +00:00
Haelwenn (lanodan) Monnier	eba1666575	AttachmentValidator: fix_media_type/1 fallback to application/octet-stream	2022-07-22 20:30:45 +02:00
Haelwenn (lanodan) Monnier	be98900904	ArticleNotePageValidator: Fix when attachments are a Map (ie. owncast)	2022-07-22 20:30:45 +02:00
tusooa	c589b8445f	Merge branch 'birthday_fix' into 'develop' ... Allow to unset birthday See merge request pleroma/pleroma!3702	2022-07-21 21:27:16 +00:00
Haelwenn	454f892f37	Merge branch 'fix/emoji-react-qualification' into 'develop' ... EmojiReactValidator: fix emoji qualification See merge request pleroma/pleroma!3684	2022-07-21 17:45:47 +00:00
Tusooa Zhu	4350a205a4	Merge remote-tracking branch 'upstream/develop' into HEAD	2022-07-21 13:44:16 -04:00
Haelwenn	1f18ab36b5	Merge branch 'resolve/notice-compatibility-routes-nginx' into 'develop' ... Document way to do notice compatibility routes with Nginx reverse-proxy, fixes #2900 Closes #2900 See merge request pleroma/pleroma!3701	2022-07-20 16:57:05 +00:00
marcin mikołajczak	fb268c4378	Allow to unset birthday ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-07-17 19:46:29 +02:00
Haelwenn	bb4860e222	Merge branch 'from/upstream-develop/tusooa/config-translatable' into 'develop' ... Translatable config descriptions Closes pleroma-meta#65 See merge request pleroma/pleroma!3695	2022-07-17 17:34:21 +00:00
Sean King	64e16e6a4b	Document way to do notice compatibility routes with Nginx reverse-proxy instead	2022-07-16 23:44:37 -06:00
tusooa	8aba7c08d1	Merge branch 'notification_types' into 'develop' ... MastoAPI: Use `types` for filtering notifications See merge request pleroma/pleroma!3648	2022-07-17 03:17:43 +00:00
marcin mikołajczak	597f56b4c4	Use :utc_datetime ... Signed-off-by: marcin mikołajczak <git@mkljczk.pl>	2022-07-16 16:28:22 +02:00
Tusooa Zhu	8371fd8ca2	Implement settings api	2022-07-16 01:20:25 -04:00
Tusooa Zhu	1d7e8d6e01	Pass in msgctxt for config translation strings	2022-07-14 17:41:33 -04:00
floatingghost	28626eafc1	Allow higher amount of restarts for Pleroma.Repo during testing ... This was done by floatingghost as part of a bigger commit in Akkoma. See <37ae047e16/lib/pleroma/application.ex (L83)>. As explained in <https://ihatebeinga.live/objects/860d23e1-dc64-4b07-8b4d-020b9c56cff6> > there are so many caches that clearing them all can nuke the supervisor, which by default will become an hero if it gets more than 3 restarts in <5 seconds And further down the thread > essentially we've got like 11 caches (37ae047e16/lib/pleroma/application.ex (L165)) > then in test we fetch them all (https://akkoma.dev/AkkomaGang/akkoma/src/branch/develop/test/support/data_case.ex#L50) and call clear on them > so if this clear fails on any 3 of them, the pleroma supervisor itself will die How it fails? > idk maybe cachex dies, maybe :ets does a weird thing > it doesn't log anything, it just consistently dies during cache clearing so i figured it had to be that > honestly my best bet is locksmith and queuing > https://github.com/whitfin/cachex/blob/master/lib/cachex/actions/clear.ex#L26 > clear is thrown into a locksmith transaction > locksmith says > >If the process is already in a transactional context, the provided function will be executed immediately. Otherwise the required keys will be locked until the provided function has finished executing. > so if we get 2 clears too close together, maybe it locks, then doesn't like the next clear?	2022-07-14 13:50:44 +02:00
Ilja	c045a49909	Add privilege for announcements	2022-07-14 08:40:26 +02:00
Ilja	44d14e8a9c	Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into fine_grained_moderation_privileges	2022-07-14 07:07:19 +02:00
Tusooa Zhu	7473868880	Fix compile error	2022-07-13 18:46:21 -04:00
Tusooa Zhu	20588517fc	Make admin api use translated config descriptions	2022-07-13 18:31:35 -04:00
Tusooa Zhu	b2a0718e83	Extract config descriptions for translation	2022-07-13 18:01:47 -04:00
tusooa	fdc71f6051	Merge branch 'short-description' into 'develop' ... Add short_description instance field Closes #2865 See merge request pleroma/pleroma!3651	2022-07-13 04:42:24 +00:00
Tusooa Zhu	c1874bc8f9	Make mutes and blocks behave the same as other lists	2022-07-12 19:03:18 -04:00
tusooa	311fda32f3	Merge branch 'fix/case-sensitivity-restricted-nicknames-blacklisted-domains' into 'develop' ... Make checking blacklisted domains and restricted nicknames case-insensitive Closes #2894 and #2888 See merge request pleroma/pleroma!3687	2022-07-11 04:04:36 +00:00
Tusooa Zhu	8bb2e52d2e	Make lint happy	2022-07-10 23:43:49 -04:00
Haelwenn	420da14b61	Merge branch 'from/upstream-develop/tusooa/2830-remote-fo-mp' into 'develop' ... Pass remote follow avatar into media proxy Closes #2830 See merge request pleroma/pleroma!3690	2022-07-10 16:19:16 +00:00
Tusooa Zhu	2efc0ffcf0	Pass remote follow avatar into media proxy	2022-07-10 00:12:53 -04:00
Tusooa Zhu	04ded94a50	Fix remote emoji in subject disappearing after edits	2022-07-09 18:00:42 -04:00
Tusooa Zhu	069554e925	Guard against outdated Updates ... It is possible for an earlier Update to be received by us later. For this, we now (1) only allows Updates to poll counts if there is no updated field, or the updated field is the same as the last updated date or creation date; (2) does not allow updating anything if the updated field is older than the last updated date or creation date; (3) allows updating updatable fields otherwise (normal updates); (4) if only the updated field is changed, it does not create a new history item on its own.	2022-07-07 15:11:29 -04:00
Claudio Maradonna	254f2ea854	ipfs: remove unused alias ... fix analysis job	2022-07-07 06:29:15 +02:00
Claudio Maradonna	98f268e5ec	ipfs: small refactor and more tests	2022-07-07 06:29:15 +02:00
Claudio Maradonna	7c1af86f97	ipfs: refactor final_url generation. add tests for final_url ... fix lint	2022-07-07 06:29:13 +02:00
Claudio Maradonna	44659ecd65	ipfs: revert to String.replace for cid placeholder ... ipfs: fix lint	2022-07-07 06:29:12 +02:00
Claudio Maradonna	43dfa58ebd	added tests for ipfs uploader. adapted changelog.md accordingly. improved ipfs uploader with external suggestions ... fix lint description.exs	2022-07-07 06:29:10 +02:00
Claudio Maradonna	fa2a6d5d6b	feat: simple, but not stupid, uploader for IPFS ... fix: format fix with credo	2022-07-07 06:29:01 +02:00
Sean King	6e7b919637	Make validation functions for restricted nicknames and blacklisted domains; do restricted nickname validation in LDAP account registration	2022-07-06 20:15:49 -06:00
Tusooa Zhu	f84ed44cea	Fix cannot get full history on object fetch	2022-07-06 01:19:53 -04:00
Sean King	0d4aceb9b0	Make checking blacklisted domains and restricted nicknames case-insenstive	2022-07-05 20:36:47 -06:00
Ilja	f88ed1df75	Merge branch 'develop' of https://git.pleroma.social/pleroma/pleroma into fine_grained_moderation_privileges	2022-07-05 12:05:19 +02:00
Tusooa Zhu	5ce118d970	Validate object data for incoming Update activities ... In Create validator we do not validate the object data, but that is because the object itself will go through the pipeline again, which is not the case for Update. Thus, we added validation for objects in Update activities.	2022-07-03 20:21:46 -04:00
Tusooa Zhu	4367489a3e	Pass history items through ObjectValidator for updatable object types	2022-07-03 20:02:52 -04:00
Tusooa Zhu	4edc867b87	Merge branch 'develop' into 'from/upstream-develop/tusooa/edits' ... # Conflicts: # lib/pleroma/constants.ex	2022-07-03 22:24:57 +00:00
Haelwenn	de37583c49	Merge branch 'image_description_from_exif_data' into 'develop' ... Use EXIF data of image for image description See merge request pleroma/pleroma!3535	2022-07-03 21:14:25 +00:00
Haelwenn	a15b45a589	Merge branch 'bugfix/mime-validation-no-list' into 'develop' ... Bugfix: Validate mediaType only by it's format See merge request pleroma/pleroma!3597	2022-07-03 21:04:41 +00:00
Haelwenn	6b937d1473	Merge branch 'from/upstream-develop/tusooa/server-announcements' into 'develop' ... Server announcements (1st pass) See merge request pleroma/pleroma!3643	2022-07-03 20:58:20 +00:00
Ilja	42d4bd3a5d	Rename pipelines and add forgotten tags ... I renamed some tags before, but forgot to rename the pipelines I also had some tags which I forgot to add to the config, description, etc. These have now been done/added	2022-07-02 08:55:14 +02:00
Ilja	c0e4b1b3e2	Fix typo's ... priviledge |-> privilege	2022-07-02 07:52:39 +02:00
Mark Felder	6b74a55274	InstanceStatic should have reasonable caching ... While here fix the naming convention of the old module attribute restricting caching and add a new one for the default cache value All frontends should be shipped with versioned assets. There be dragons if you don't.	2022-07-01 15:40:40 -05:00
Ilja	56227ef7ba	Descriptions from exif data with only whitespeces are considered empty ... I noticed that pictures taken with Ubuntu-Touch have whitespace in one of the fields This should just be ignored imo	2022-07-01 13:47:23 +02:00
Ilja	8c761942b1	update moduledoc	2022-07-01 12:15:02 +02:00
Ilja	81afaee374	Better way of getting keys ... I used keyword_list[:key], but if the key doesn't exist, it will return nil. I actually expect a list and further down the code I use that list. I believe the key should always be present, but in case it's not, it's better to return an empty list instead of nil. That way the code wont fail further down the line.	2022-07-01 12:15:02 +02:00
Ilja	d0d48a9e88	Add deprecation warnings	2022-07-01 12:15:02 +02:00
Ilja	8303af84ce	Rename the Exiftool module ... No migrations or checks yet	2022-07-01 12:15:02 +02:00
Ilja	551721e41a	Rename the new module	2022-07-01 12:13:46 +02:00
Ilja	cd316d7269	Use EXIF data of image to prefill image description ... During attachment upload Pleroma returns a "description" field. Pleroma-fe has an MR to use that to pre-fill the image description field, <https://git.pleroma.social/pleroma/pleroma-fe/-/merge_requests/1399> * This MR allows Pleroma to read the EXIF data during upload and return the description to the FE * If a description is already present (e.g. because a previous module added it), it will use that * Otherwise it will read from the EXIF data. First it will check -ImageDescription, if that's empty, it will check -iptc:Caption-Abstract * If no description is found, it will simply return nil, just like before * When people set up a new instance, they will be asked if they want to read metadata and this module will be activated if so This was taken from an MR i did on Pleroma and isn't finished yet.	2022-07-01 12:13:46 +02:00
Ilja	37fdf148b0	Rename privilege tags ... I first focussed on getting things working Now that they do and we know what tags there are, I put some thought in providing better names I use the form <what_it_controls>_<what_it_allows_you_to_do> :statuses_read => :messages_read :status_delete => :messages_delete :user_read => :users_read :user_deletion => :users_delete :user_activation => :users_manage_activation_state :user_invite => :users_manage_invites :user_tag => :users_manage_tags :user_credentials => :users_manage_credentials :report_handle => :reports_manage_reports :emoji_management => :emoji_manage_emoji	2022-07-01 10:28:09 +02:00
Hélène	11f9f2ef27	EmojiReactValidator: fix emoji qualification ... Tries fully-qualifying emoji when receiving them, by adding the emoji variation sequence to the received reaction emoji. This issue arises when other instance software, such as Misskey, tries reacting with emoji that have unqualified or minimally qualified variants, like a red heart. Pleroma only accepts fully qualified emoji in emoji reactions, and refused those emoji. Now, Pleroma will attempt to properly qualify them first, and reject them if checks still fail.	2022-06-28 21:33:57 +02:00
Tusooa Zhu	014096aeef	Make outbound transmogrifier aware of edit history	2022-06-25 11:20:46 -04:00
Tusooa Zhu	5321fd0012	Do not put meta[:object_data] for local Updates	2022-06-25 10:03:19 -04:00
Tusooa Zhu	9c6dae942d	Fix local updates causing emojis to be lost	2022-06-25 09:23:09 -04:00
Tusooa Zhu	40953a8f5c	Reuse formerRepresentations from remote if possible	2022-06-25 01:03:46 -04:00
Tusooa Zhu	99a6f50316	Unify the logic of updating objects	2022-06-25 00:32:22 -04:00
Tusooa Zhu	e0d6da4e7d	Fix CommonAPITest	2022-06-24 10:54:11 -04:00
Tusooa Zhu	ee07383191	Use meta[:object_data] in SideEffects for Update	2022-06-24 10:28:58 -04:00
Tusooa Zhu	01321c88b5	Convert incoming Updated object into Pleroma format	2022-06-24 10:25:22 -04:00
Tusooa Zhu	06da000c5d	Add editing to features	2022-06-21 12:32:44 -04:00
Ilja	4e4eb81749	Add nodes and privileges to nodeinfo ... I didn't add it to /api/v1/instance I was wondering if I should, but since it e.g. also didn't show staff, it felt better not to	2022-06-21 12:10:27 +02:00
Ilja	211e561e2a	Show privileges to FE ... I added an extra key We already had is_admin and is_moderator, now we have an extra privileges key	2022-06-21 12:10:27 +02:00
Ilja	143ea7b80a	Add deactivated status for privileged users ... Deactivated users are only visible to users privileged with :user_activation since fc317f3b17 Here we also make sure the users who are deactivated get the status deactivated for users who are allowed to see these users	2022-06-21 12:10:27 +02:00
Ilja	e21ef5aef3	report notifications for privileged users ... Instead of `Pleroma.User.all_superusers()` we now use `Pleroma.User.all_superusers(:report_handle)` I also changed it for sending emails, but there were no tests.	2022-06-21 12:10:27 +02:00
Ilja	34adea8d28	Add Pleroma.User.all_users_with_privilege/1 ... This should eventually replace the Pleroma.User.all_superusers/0 function * I added a new param `is_privileged` in User.query * Now we can fetch all users with a specified privilege	2022-06-21 12:10:27 +02:00
Ilja	a1c8aa4721	Remove function superuser? ... Everything now happens with privileged?/2	2022-06-21 12:10:27 +02:00
Ilja	eab13fed3e	Hide pleroma:report for non-privileged users ... Before we deleted the notifications, but that was a side effect and didn't always trigger any more. Now we just hide them when an unprivileged user asks them.	2022-06-21 12:10:27 +02:00
Ilja	e45faddb38	Revert "Delete report notifs when demoting from superuser" ... This reverts commit 89667189b8 and cdc5bbe836. This is a side effect when changing user role. The goal was to not have report notifications when someone isn't admin or moderator any more. But this won't be triggered when we change the privilege tags for a role, so we can't use this sollution any more. There was another solution to filter out report notifications during fetch. It wasn't merged because this seemed 'cleaner' at the time, but now it seems the better sollution. I'll add it in the next commit.	2022-06-21 12:10:27 +02:00
Ilja	edf0013ff3	User.visible_for/2 ... According to the tests, this was only used for unconfirmed accounts. So this just needed to be restricted to users with privilege :user_activation	2022-06-21 12:10:27 +02:00
Ilja	bb61cfee8d	Validator for deleting statusses is now done with priviledge instead of superuser	2022-06-21 12:10:27 +02:00
Ilja	7cf473c500	delete statusses is now privileged by :status_delete ... Instead of superusers, you now need a role with privilige :status_delete to delete other users statusses I also cleaned up some other stuff I saw	2022-06-21 12:10:27 +02:00
Ilja	7adfc2e0f4	Add Pleroma.User.privileged?/2 ... This should eventually replace Pleroma.User.superuser?/1	2022-06-21 12:10:27 +02:00
Ilja	c842e62675	Add last priviliges ... I still had three endpoints I didn't really know what to do with them. I added them under separate tags * :instance_delete * :moderation_log_read * :stats_read I also checked and these are the last changes done by MR https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3480/diffs this is trying to fix	2022-06-21 12:10:27 +02:00
Ilja	ecd42a2ce1	Add privilige :emoji_management	2022-06-21 12:10:27 +02:00
Ilja	0ee8f33250	Add privilige :status_delete ... It also allows to update a message, so it's not just deleting. I need a better name...	2022-06-21 12:10:27 +02:00
Ilja	34a98990db	last off :statuses_read ... From the endpoints left to do, I believe these should be under :statuses_read. These should be the last for that privilege for this MR	2022-06-21 12:10:27 +02:00
Ilja	cbb26262a5	Add privileges for :user_read	2022-06-21 12:10:27 +02:00
Ilja	3f26f1b30f	Add privileges for :report_handle	2022-06-21 12:10:27 +02:00
Ilja	14e697a64f	Add privileges for :user_invite	2022-06-21 12:10:27 +02:00
Ilja	e102d25d23	Add privileges for :user_activation	2022-06-21 12:10:27 +02:00
Ilja	cb60cc4e02	Add privileges for :user_tag	2022-06-21 12:10:27 +02:00
Ilja	5a65e2dac5	Remove privileged_staff ... Everything that was done through this setting, can now be set by giving the proper privileges to the roles.	2022-06-21 12:10:27 +02:00
Ilja	b1ff5241c2	Add priviledges for :statuses_read ... This was the last in :require_privileged_staff. I'll remove that in the next commit	2022-06-21 12:10:27 +02:00
Ilja	8a9144ca8b	Add priviledges for :user_credentials ... I only moved the ones from the :require_privileged_staff block for now	2022-06-21 12:10:27 +02:00
Ilja	9f6c364759	Add privilege :user_deletion	2022-06-21 12:10:27 +02:00
Ilja	5b19543f0a	Add new setting and Plug to allow for privilege settings for staff	2022-06-21 12:10:26 +02:00