 James Smith
|
dca15404ec
|
send notifications to all new memberships
|
2026-01-22 22:57:37 +00:00 |
|
|
James Smith
|
a644e7cf20
|
refactor user invitation into match method
|
2026-01-22 16:11:33 +00:00 |
|
|
James Smith
|
c8c82e30fc
|
handle failed invite signups
|
2026-01-22 12:22:14 +00:00 |
|
|
James Smith
|
fa62107421
|
Require setting of username when invited
|
2026-01-22 11:55:18 +00:00 |
|
|
James Smith
|
02105ae551
|
fix altcha failure message key
|
2026-01-20 17:36:30 +00:00 |
|
|
James Smith
|
4b418fd17d
|
style invitation accept form and add altcha
|
2026-01-20 16:11:09 +00:00 |
|
|
James Smith
|
3e83b0ea3e
|
override invitations controller to configure authorization
|
2026-01-20 15:55:39 +00:00 |
|
|
James Smith
|
441a41e1b8
|
set group var on create
|
2026-01-20 12:30:16 +00:00 |
|
|
James Smith
|
5776612d2e
|
get membership and group in mailer
|
2026-01-20 12:18:26 +00:00 |
|
|
James Smith
|
c38a847ab9
|
send notifications after group create and update
|
2026-01-20 10:09:01 +00:00 |
|
|
James Smith
|
03036f9fab
|
basic sending of notification after a user is added to a group
|
2026-01-19 22:49:05 +00:00 |
|
|
James Smith
|
20f2bc3663
|
refactor user matching into user object itself
|
2026-01-16 16:54:39 +00:00 |
|
|
James Smith
|
7736229a61
|
Add users to permission lists and groups by fediverse address
|
2026-01-16 13:27:50 +00:00 |
|
|
James Smith
|
0aba2f2957
|
Remove adding users to groups by ID, to avoid enumeration
This was only ever a temporary capability until we had email.
|
2026-01-16 11:25:36 +00:00 |
|
|
James Smith
|
eccfaacd0b
|
refactor permittable user matching to use new shared method
|
2026-01-15 15:03:36 +00:00 |
|
|
James Smith
|
4a5d49c141
|
Allow matching users by email when adding to group
|
2026-01-15 15:02:22 +00:00 |
|
|
James Smith
|
3d4de3a828
|
refactor user matching for groups into applicationcontroller method
|
2026-01-15 15:01:26 +00:00 |
|
|
James Smith
|
c84431f7c7
|
test user addition/removal
|
2026-01-09 12:38:32 +00:00 |
|
|
James Smith
|
4983439b3e
|
add group update API
|
2026-01-07 23:35:58 +00:00 |
|
|
James Smith
|
20cde50c22
|
Add API for creating groups
|
2026-01-07 23:32:32 +00:00 |
|
|
James Smith
|
a40270ac94
|
Add group deletion API
|
2026-01-07 23:24:45 +00:00 |
|
|
James Smith
|
b725abe7a7
|
add API for getting group details
|
2026-01-07 23:22:40 +00:00 |
|
|
James Smith
|
83d28330ce
|
Add API for listing a creator's groups
|
2026-01-07 22:59:23 +00:00 |
|
|
James Smith
|
8722404c15
|
Change default development port to 3214, to match production
|
2026-01-07 12:51:10 +00:00 |
|
|
James Smith
|
9561732dfa
|
refactor typed id generation and matching for groups
|
2026-01-06 12:16:42 +00:00 |
|
|
James Smith
|
6b5fa2c4fb
|
remove show action for groups
|
2026-01-06 12:16:42 +00:00 |
|
|
James Smith
|
cfd2b2f187
|
Add basic UI framework for listing, editing and creating groups
|
2026-01-06 12:16:41 +00:00 |
|
|
James Smith
|
baaf4c4ea6
|
fall back to default tour state if nil
|
2026-01-05 15:15:07 +00:00 |
|
|
James Smith
|
095573edd3
|
add pagination for users
|
2025-12-18 14:50:16 +00:00 |
|
|
James Smith
|
89daae2432
|
add sort ordering to UI and controller
|
2025-12-18 14:41:01 +00:00 |
|
|
James Smith
|
19b31d6ead
|
Fix missing sidebar on oauth application pages
Resolves #5150
|
2025-12-11 21:58:56 +00:00 |
|
|
James Smith
|
63f1399176
|
add support for granting group permissions from forms
|
2025-12-10 23:05:40 +00:00 |
|
|
James Smith
|
ca2e5cdea5
|
controller support for adding and removing group members
|
2025-12-10 23:05:39 +00:00 |
|
|
James Smith
|
1e3036f1ae
|
groups have names!
|
2025-12-10 23:05:39 +00:00 |
|
|
James Smith
|
2c592478cc
|
add group CRUD HTML framework
|
2025-12-10 23:05:39 +00:00 |
|
|
James Smith
|
c5d3d65aea
|
remove unnecessary CSRF change from #5114
|
2025-11-28 11:06:15 +00:00 |
|
|
James Smith
|
ea6ada9617
|
Disable CSRF protection for omniauth callbacks
Just isn't needed there, probably should have always been off.
|
2025-11-28 09:08:08 +00:00 |
|
|
James Smith
|
b362adc59e
|
Fix oauth token rate limiting
|
2025-11-27 12:56:46 +00:00 |
|
|
James Smith
|
bf9840b290
|
add rate limit for model file upload
|
2025-11-26 17:45:00 +00:00 |
|
|
James Smith
|
bfda4eacce
|
rate limit all doorkeeper controllers
using the same limit as user sessions
|
2025-11-26 17:17:55 +00:00 |
|
|
James Smith
|
10bfcbdaf4
|
rate limit omniauth callbacks
using the same rate as sessions controller
|
2025-11-26 17:17:55 +00:00 |
|
|
James Smith
|
9378c93078
|
OIDC: Don't match accounts by unverified emails
|
2025-11-26 15:40:18 +00:00 |
|
|
James Smith
|
e517ab4731
|
remove unused caber params method
|
2025-11-25 15:54:10 +00:00 |
|
|
James Smith
|
04b42c0b1e
|
pass record to deserializers to check permissions
|
2025-11-25 15:54:09 +00:00 |
|
|
James Smith
|
8318030266
|
pass current user to form and API deserializers
|
2025-11-25 13:45:14 +00:00 |
|
|
James Smith
|
1e6e5c4534
|
Add another layer of path sanitization with zaru
|
2025-11-25 12:12:21 +00:00 |
|
|
James Smith
|
fabb5d0dc6
|
Sanitize upload filenames to prevent path traversal
|
2025-11-25 12:09:12 +00:00 |
|
|
James Smith
|
65a5ef0bd7
|
prevent downloading files with only preview access
|
2025-11-18 11:15:03 +00:00 |
|
|
James Smith
|
28999232c1
|
Change signed download URLs to end with original filename
|
2025-11-17 21:46:51 +00:00 |
|
|
James Smith
|
0a98923a1e
|
Add sort order to user settings form
|
2025-11-05 15:17:22 +00:00 |
|