Thomas Citharel
78e3bcb2f8
Add proper error message when accessing followers/followings w/ auth
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-11-02 18:11:27 +01:00
Thomas Citharel
6cda3c0a94
Don't allow remote comments to be inserted if parent event doesn't allow it
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-11-02 10:49:58 +01:00
Thomas Citharel
01f746a5d2
Allow to use Mix tasks inside Releases
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-31 02:42:06 +01:00
Thomas Citharel
3e700a03df
Fix resource metadata test with JMZ
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-27 16:09:27 +01:00
Thomas Citharel
4a11d4adcc
Add more tests to upload filters
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-25 12:00:00 +01:00
Thomas Citharel
85aa9df4f8
Fix webfinger not following redirections by using a custom dedicated Tesla client
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-21 11:20:15 +02:00
Thomas Citharel
e6b2e91ced
Fix resource tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-20 10:25:00 +02:00
Thomas Citharel
23dcb47ce5
Make sure only group moderators can update/delete events, posts
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-20 09:58:17 +02:00
Thomas Citharel
fc1d392211
Couple of fixes for groups
...
- Fix posts update federation and add tests
- Fix posts deletion federation and add tests
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-20 09:44:04 +02:00
Thomas Citharel
cf9b8d5f46
Fix events from former followed instances showing up
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-14 11:45:32 +02:00
Thomas Citharel
bba9e6bf59
Fix tests with user tasks
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-13 15:53:18 +02:00
Thomas Citharel
71476ee587
Don't sent reset email when user is disabled
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-13 15:21:00 +02:00
Thomas Citharel
3c6916360d
Completely delete user when user request self destruction
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-13 15:10:27 +02:00
Thomas Citharel
cd5418825b
Make sure a person profile page returns 404
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-12 13:38:25 +02:00
Thomas Citharel
ff51c5bd1e
Fix upload test with non allowed content-type
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-12 11:14:35 +02:00
Thomas Citharel
dad9623482
Make sure only proper pictures are uploaded
...
Closes #384
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-09 19:29:12 +02:00
Thomas Citharel
c296381ed6
[Security] Fix events being editable by other users that organizers
...
Closes #385
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-09 18:12:35 +02:00
Thomas Citharel
75fc1f125a
Show a proper error message on creating/updating an event
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-09 16:09:45 +02:00
Thomas Citharel
9430f1145f
Fix profiles not administrators able to edit a group
...
Related to #385
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-09 16:09:44 +02:00
Thomas Citharel
f338867345
Merge branch 'add-error-page' into 'master'
...
Introduce support for custom nginx error pages
See merge request framasoft/mobilizon!598
2020-10-09 15:06:43 +02:00
Thomas Citharel
07a5d10421
Introduce support for custom nginx error pages
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-09 14:48:49 +02:00
Thomas Citharel
154b9e9e3c
Skip test sometimes failing
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-08 16:21:39 +02:00
Thomas Citharel
f4b777c3d6
Make sure event update notification email gets sent to anonymous
...
participants
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-08 08:53:25 +02:00
Thomas Citharel
02eac30c9b
Expose more statistics
...
* differenciate local & all events/comments/groups
* add instance follows/followings
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-07 10:52:29 +02:00
Thomas Citharel
6b5ac19c54
Fix an indentation warning
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-06 12:35:46 +02:00
Thomas Citharel
8eca9d9702
Make sure only organizer actor can comment if event comments are
...
disabled
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-05 17:42:53 +02:00
Thomas Citharel
d41aa3b2fd
Disallow accessing identity page when logged in
...
And disallow calls to fetchPerson when not our own profile or unlogged
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-02 09:53:32 +02:00
Thomas Citharel
aced4d039b
Fix posts and rework graphql errors
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-10-01 15:07:15 +02:00
Thomas Citharel
dc8faa12bd
Sent notification that the event participation has been confirmed when
...
anonymous
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-09-30 10:44:01 +02:00
Thomas Citharel
49a5725da3
Improve and activate groups
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-09-29 10:25:00 +02:00
setop
bd3087d121
Fix geospatial clients
...
add json plus to base client and rename to geospacial client
geospatial http client with json plug
2020-09-21 14:46:07 +02:00
Thomas Citharel
b0e8a32d2a
Improvements to group page
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-09-21 11:18:49 +02:00
Thomas Citharel
93728cb9d7
Add a noindex HTTP header on unlisted resources
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-09-02 10:57:18 +02:00
Thomas Citharel
489fd74545
Allow to refresh instance outbox when they accept subscription
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-09-02 10:57:18 +02:00
Thomas Citharel
1984f71cbf
Add group admin profiles
...
And other fixes
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-27 12:12:54 +02:00
Thomas Citharel
4782221ef4
Allow to update a member role
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-20 10:54:58 +02:00
Thomas Citharel
bdb4350624
Add an authenticated fetch route for members
...
If the member is remote, it redirects to original instance
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-19 11:29:02 +02:00
Thomas Citharel
ea9748190c
Fix comments tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-18 15:06:56 +02:00
Thomas Citharel
156eba0551
Improve member adding and excluding flow
...
Allow to exclude a member
Send emails to the member when it's excluded
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-18 14:37:31 +02:00
Thomas Citharel
1de802a36c
Merge branch 'feature/sitemap' into 'master'
...
Introduce sitemap and upgrade oban
See merge request framasoft/mobilizon!538
2020-08-12 16:36:37 +02:00
Thomas Citharel
c56fb710b6
Introduce Sitemaps
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-12 16:29:34 +02:00
Thomas Citharel
9a0068dfea
Upgrade oban to 2.0
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-12 16:06:09 +02:00
Thomas Citharel
c09deb5bc6
Fix remote group visibility and use Mastodon's discoverable attribute
...
Make sure actor visibility is :public or :unlisted
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-12 10:45:48 +02:00
Thomas Citharel
3c077c59ad
Allow to search groups by location
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:24 +02:00
Thomas Citharel
214400aaea
Fix API test
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:22 +02:00
Thomas Citharel
b4f500532f
Allow to filter by begins_on and ends_on. Redirect explore to search
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:21 +02:00
Thomas Citharel
d725393fd4
Fix events test for new search signature
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:20 +02:00
Thomas Citharel
2198b2cb87
Allow to filter search by multiple tags
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:19 +02:00
Thomas Citharel
3807ab1b63
Allow events to be searched by location and period
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-08-10 15:40:18 +02:00
Thomas Citharel
9c9f1385fb
Introduce group posts
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-07-30 16:55:35 +02:00
Thomas Citharel
e0fad9ddd1
Update Instance Actor when updating instance settings
...
Also fix an issue when publishing activities to followers/group members
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-07-07 16:55:59 +02:00
Thomas Citharel
9a080c1f10
Introduce support for 3rd-party auth (OAuth2 & LDAP)
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-07-06 15:42:59 +02:00
setop
2749b6b2d4
fix addok - country and region
2020-06-30 09:16:32 +02:00
Thomas Citharel
83aa005faf
Drop HTMLSanitizeEx and fix title sanitizing
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-24 16:37:00 +02:00
Thomas Citharel
4cd0ff2533
Fix resource tests by changing URL
...
https://framagit.org/framasoft/accueil/-/issues/4
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-24 12:14:58 +02:00
Thomas Citharel
b61d12b5fd
Participation panel revamp and fixes
...
Apollo is a pain in the ass with pagination & filters, so this removes
the tabs system and uses a <select> to filter instead
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-18 15:52:19 +02:00
Thomas Citharel
ef6a1a21ac
Even more fixes
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-15 19:41:11 +02:00
Thomas Citharel
beb35a09c6
Introduce basic user and profile management
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-12 19:16:40 +02:00
Thomas Citharel
ecbc5993c4
Fix lang not detected on fallback pages
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-09 17:45:41 +02:00
Thomas Citharel
dac47d2abb
Add config option to allow anonymous reporting
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-09 14:07:49 +02:00
Thomas Citharel
3e74f59ee8
Send Notifications when participation approval
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-08 13:59:27 +02:00
Thomas Citharel
09ad687403
Merge branch 'validate-number-of-places' into 'master'
...
Validate number of places being a positive integer
Closes #286
See merge request framasoft/mobilizon!440
2020-06-05 11:52:33 +02:00
Thomas Citharel
c56e299a09
Validate number of places being a positive integer
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-05 11:38:49 +02:00
Thomas Citharel
f627477662
Merge branch 'event-address-update-trigger-change' into 'master'
...
Also send event updates if physical address changed
See merge request framasoft/mobilizon!438
2020-06-05 11:02:46 +02:00
Thomas Citharel
44e08c4319
Add weekly notification
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-05 10:27:02 +02:00
Thomas Citharel
9e3107e3aa
Also send event updates if physical address changed
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-05 10:18:08 +02:00
Thomas Citharel
5e6bdb92fb
Fix tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-03 16:55:34 +02:00
Thomas Citharel
4144e9ffd0
Introduce group basic federation, event new page and notifications
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-06-03 16:01:26 +02:00
Thomas Citharel
c732ec7f87
Add ability to add message for participation and improve participation
...
management interface
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-03-06 09:00:48 +01:00
Thomas Citharel
39b7afd1cd
Blind key rotation and stale duration for profiles
...
See https://blog.dereferenced.org/the-case-for-blind-key-rotation
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-02-14 18:21:18 +01:00
Thomas Citharel
3a753312c1
Validate Date header in HTTPSignatures
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-02-14 09:22:17 +01:00
Thomas Citharel
9f007da286
Allow to edit account email and delete account
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-02-13 16:21:26 +01:00
Thomas Citharel
18c8b7bc14
Fix event online URL AP attachment
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2020-02-07 18:41:36 +01:00
Thomas Citharel
2ed9050a90
Add anonymous and remote participations
2020-01-29 17:28:11 +01:00
rustra
3505736705
Fix Credo code readability issues
2020-01-28 20:15:59 +01:00
rustra
97651e88e9
Implement Credo software design suggestions
2020-01-28 19:18:33 +01:00
rustra
bc31e2f0c2
Fix mix format
2020-01-26 21:53:17 +01:00
rustra
8856cc2f55
Rename MobilizonWeb to Mobilizon.Web
2020-01-26 21:39:49 +01:00
rustra
b3f8d52bc9
Move API under GraphQL context
2020-01-26 21:15:04 +01:00
rustra
ba3ad713c0
Split GraphQL as separate context
2020-01-26 20:34:25 +01:00
rustra
3577fe42e1
Improve Federation boundaries
2020-01-24 22:02:10 +01:00
rustra
8ca5c0b320
Separate Web modules related to Federation
2020-01-23 01:03:33 +01:00
rustra
d1251280c5
Put HTTPSignatures, WebFinger and ActivityStream alongside with ActivityPub
2020-01-22 22:40:40 +01:00
rustra
cdb520a95b
Split Federation as separate context
2020-01-22 02:14:42 +01:00
Thomas Citharel
d552fcb2d3
Add a config option to whitelist users registration
...
Through whole email or domain email
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-12-17 12:09:24 +01:00
Thomas Citharel
b17716f8ae
Add one test to transmogrifier
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-12-17 09:28:44 +01:00
Thomas Citharel
334d66bf5d
Add admin interface to manage instances subscriptions
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-12-15 21:56:16 +01:00
Thomas Citharel
dc07f34d78
Introduce comments below events
...
Also add tomstones
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-28 12:33:58 +01:00
Thomas Citharel
5e9c91e659
Added mix commands to manage users and view actors
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-21 15:51:13 +01:00
Thomas Citharel
634a0b851e
Validate ends_on being after begins_on
...
Closes #315
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-18 18:56:36 +01:00
Thomas Citharel
a197e1acb2
Wrap offline tests into cassette
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-17 19:13:54 +01:00
Thomas Citharel
c599a47d58
Introduce Mimirsbrunn geocoder and improve addresses & maps
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-12 14:10:18 +01:00
Thomas Citharel
0e7cf89492
Remove floor
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-08 19:39:02 +01:00
Thomas Citharel
33f7c14db6
Fixes with addresses and iCalendar
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-06 10:04:17 +01:00
Thomas Citharel
92d694acf4
Merge branch 'bug/fix-issue-when-updating-event' into 'master'
...
Fix issue when updating event and introduce background jobs
See merge request framasoft/mobilizon!300
2019-11-04 17:05:32 +01:00
Thomas Citharel
95ba76a0fa
Fix issue when updating event and introduce background jobs
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-04 16:40:36 +01:00
Thomas Citharel
0a844aa174
Open links from event URL and in event description in external window
...
And add rel='noopener noreferrer' on them
Closes #282 and #283
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-11-04 16:09:44 +01:00
Thomas Citharel
cc820d6b63
Refactor Core things, including Ecto handling, ActivityPub & Transmogrifier modules
...
* Data doesn't need anymore to be converted to ActivityStream format to
be saved (this was taken from Pleroma and not at all a good idea here)
* Everything saved when creating an event is inserted into PostgreSQL in
a single transaction
2019-10-31 10:06:11 +01:00
Thomas Citharel
b5f9518faf
Implement search engine & service in backend
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2019-10-23 15:27:11 +02:00
Thomas Citharel
4dcbf85d9a
Merge branch 'bug/fix-XSS-on-event-title' into 'master'
...
Make sure title is properly sanitized
Closes #247
See merge request framasoft/mobilizon!281
2019-10-16 19:17:27 +02:00