Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-01-15 | work around sprockets 4 being a jerk | multiple creatures | |
2020-01-14 | make the external login (ldap/pam/saml/etc) error informative for ↵ | multiple creatures | |
non-technical users | |||
2020-01-14 | skip duplicate redis check | multiple creatures | |
2020-01-14 | behave like `block anon` when checking whether local users can read a ↵ | multiple creatures | |
community or public post made in invisible mode | |||
2020-01-14 | fix check for "filter if in reply to blocker" setting | multiple creatures | |
2020-01-14 | fix the "include past roars" buttons | multiple creatures | |
2020-01-14 | differentiate local-only posts in the web app | multiple creatures | |
2020-01-13 | use `update` instead of assignment on `delete_after=` & `defederate_after=` | multiple creatures | |
2020-01-13 | set `MIN_DESTRUCT_OFFSET` (`30.seconds`) if `delete_after` or ↵ | multiple creatures | |
`defederate_after` values are too low | |||
2020-01-13 | make `:m` in `defed_in` & `delete_in` mean minutes not months | multiple creatures | |
2020-01-13 | fix setting `delete_after` and `defederate_after` on new posts | multiple creatures | |
2020-01-13 | add new privacy option to auto-defederate after a given timespan + add ↵ | multiple creatures | |
options to defederate and/or delete past posts + add `defed_in`/`parent:defed_in`/`thread:defed_in` bangtags + ui indicator for posts marked for auto-defederation | |||
2020-01-13 | remove duplicates from media gallery mode, attempt 2 | multiple creatures | |
2020-01-13 | update `updated_at` when boosting own old posts so the post can actually ↵ | multiple creatures | |
federate past the max public expiration window | |||
2020-01-13 | check `updated_at` instead of `created_at` against max public access ↵ | multiple creatures | |
expiration window | |||
2020-01-13 | `return false if direct?` | multiple creatures | |
2020-01-13 | `!!` truthiness test | multiple creatures | |
2020-01-13 | make `still_accessiblible?` only check posts with an `account.user` | multiple creatures | |
2020-01-12 | add privacy option to limit lifespan of public access to post & object urls ↵ | multiple creatures | |
beyond local followers, default to 90 days | |||
2020-01-12 | allow sharekeys to be used with the api status controller | multiple creatures | |
2020-01-11 | skip spam check if invite-only registration | multiple creatures | |
2020-01-11 | remove duplicate posts in gallery mode | multiple creatures | |
2020-01-11 | move parenthesis to correct place | multiple creatures | |
2020-01-11 | move parenthesis to correct place | multiple creatures | |
2020-01-11 | move `monsterpit_api` helper to the application controller | multiple creatures | |
2020-01-11 | expose `local` visibility flag only when monsterfork api exposure is set to ↵ | multiple creatures | |
`full` (inital state serializer) | |||
2020-01-11 | pass monsterfork api exposure setting to initial state serializer | multiple creatures | |
2020-01-11 | expose `local` visibility flag only when monsterfork api exposure is set to ↵ | multiple creatures | |
`full` | |||
2020-01-11 | use basic monsterfork api for anonymous clients | multiple creatures | |
2020-01-11 | normalize app name when comparing against monsterfork api env vars | multiple creatures | |
2020-01-11 | document `MONSTERFORK_API_FORCE_*` env vars | multiple creatures | |
2020-01-11 | pass monsterfork api exposure setting to all serializers + add ↵ | multiple creatures | |
`MONSTERFORK_API_FORCE_*` env vars to set api compatability modes for clients/apps | |||
2020-01-10 | make sure it is actually a local user before checking `monsterfork_api` prop | multiple creatures | |
2020-01-10 | add option for changing the monsterfork api exposure level, defaulting to ↵ | multiple creatures | |
`full` - if this gives your app indigestion change it to back to `basic` in preferences | |||
2020-01-10 | set caching backend to cache items for 1 hour | multiple creatures | |
2020-01-10 | speed up search with caching | multiple creatures | |
2020-01-10 | avoid double-filtering on search | multiple creatures | |
2020-01-10 | `account.filter_undescribed?` -> `account.user.filter_undescribed?` | multiple creatures | |
2020-01-10 | avoid checking filter cache twice | multiple creatures | |
2020-01-10 | add custom filter master toggle, add media gallery mode, & fix various ↵ | multiple creatures | |
filter logic + caching bugs | |||
2020-01-10 | clear filter cache when regenerating feeds | multiple creatures | |
2020-01-10 | trigger feed update after a filter is deleted | multiple creatures | |
2020-01-10 | remove duplicate `private` section | multiple creatures | |
2020-01-10 | add ability to toggle individual filters without deleting them | multiple creatures | |
2020-01-10 | don't try to apply filters when there's not any set | multiple creatures | |
2020-01-10 | bon voyage to that shitty text normalization code | multiple creatures | |
2020-01-10 | switch (back) to postgres fts engine for fast search & timeline filters | multiple creatures | |
2020-01-10 | dump schema to plain sql | multiple creatures | |
2020-01-04 | monsterpit says trans rights!!! | multiple creatures | |
2019-12-31 | LDAP & PAM added to OAuth password grant strategy (#7999) (#12390) | ntl-purism | |
When authenticating via OAuth, the resource owner password grant strategy is allowed by Mastodon, but (without this PR), it does not attempt to authenticate against LDAP or PAM. As a result, LDAP or PAM authenticated users cannot sign in to Mastodon with their email/password credentials via OAuth (for instance, for native/mobile app users). This PR fleshes out the authentication strategy supplied to doorkeeper in its initializer by looking up the user with LDAP and/or PAM when devise is configured to use LDAP/PAM backends. It attempts to follow the same logic as the Auth::SessionsController for handling email/password credentials. Note #1: Since this pull request affects an initializer, it's unclear how to add test automation. Note #2: The PAM authentication path has not been manually tested. It was added for completeness sake, and it is hoped that it can be manually tested before merging. |