Commit graph

628 commits

Author SHA1 Message Date
Matt Baer
af23e28d05 Pass OAuth requests through new OAuth handler
This gives us our standard logging and passes around errors with
impart.HTTPError.

Ref T705
2019-12-30 18:14:01 -05:00
Nick Gerakines
4266154749 Code cleanup from PR 255 feedback. T705 2019-12-27 13:35:48 -05:00
Nick Gerakines
bf3b6a5ba0 Unit tests, integration testing, and code cleanup for oauth support. Part of T705. 2019-12-23 14:30:32 -05:00
Nick Gerakines
7a0863f71b Added oauth handlers and tests with mocks. Part of T705. 2019-12-19 11:51:19 -05:00
Matt Baer
e16ea3b419
Merge pull request #224 from writeas/hotfix-0.11.2
v0.11.2 hotfix
2019-12-17 21:39:19 -05:00
Matt Baer
8dc1ef0fdb
Merge pull request #215 from writeas/prevent-fail-on-suspend-check
Prevent failed requests on failed user silence check
2019-12-17 21:12:58 -05:00
Matt Baer
ed40e9dea5
Merge pull request #222 from writeas/fix-template-typo
Fix password-protected page template
2019-12-17 21:11:33 -05:00
Matt Baer
6afafa4d67 Fix whitespace 2019-12-17 21:10:39 -05:00
Matt Baer
cfea887b78 Suppress "user not found" log when post not found
This also saves a user suspension check when a post isn't found.
2019-12-17 20:58:32 -05:00
Rob Loranger
4c0e4d04c1
404 for protected posts when previously authorized
a user who had previously authenticated on a protected collection would
still see the post after the owner was silenced, with a banner meant for
the owner displayed.
2019-12-17 10:42:31 -08:00
Matt Baer
aa405bc57c Remove "silenced" warning on password-collection.tmpl
Logged-in users never see this particular page, so it's not needed here.
2019-12-17 13:11:32 -05:00
Matt Baer
6f6204a849 Return 404 for suspended pass-protected colls
Previously, any password-protected collection on a suspended account
would prompt visitors for a password, and *then* take them to the "not
found" page. This fixes that.
2019-12-17 13:02:21 -05:00
Matt Baer
6a5d49eeb7
Merge pull request #218 from writeas/fix-empty-hostname-editing
Suppress log when editing a collection post or its metadata
2019-12-11 16:35:07 -05:00
Matt Baer
0b701c5f7f Update "account silenced" alert on edit-meta
Use "silenced" phrasing instead of "suspended"
2019-12-07 09:08:37 -05:00
Matt Baer
acb8f5fe5d Fix broken password-collection template
Fixed "user-supsended" to "user-suspended"
2019-12-07 09:06:31 -05:00
Matt Baer
d8f77585f5 Suppress log when editing post or its metadata
This adds the instance's Hostname to the collection data loaded when
editing a collection post or its metadata. While not technically needed
in this situation, it suppresses an alarming error log.

Resolves #216
2019-12-01 06:16:12 -05:00
Matt Baer
88a3ed7878
Merge pull request #214 from writeas/fix-hostname-fediverse
Fix fediverse post IDs
2019-11-27 17:02:20 -05:00
Matt Baer
59d892e486
Merge pull request #212 from writeas/fix-suspension-check
Fix suspension check in fetchPost()
2019-11-27 16:59:53 -05:00
Matt Baer
342c3cde89 Bump version to 0.11.2 2019-11-26 13:15:31 -05:00
Matt Baer
44a6703742 Prevent failed requests on failed user silence check 2019-11-26 13:14:52 -05:00
Matt Baer
c81927a69f Fix empty hostname when fetching AS post via ID
Previously, fetching ActivityStreams data about a post via
/api/posts/ID, instead of /api/collections/ALIAS/posts/SLUG wouldn't
include the instance's base URL. This fixes that.
2019-11-26 12:59:15 -05:00
Matt Baer
8d8e671a07 Fix suspension check in fetchPost()
Previously, this check would return a "user not found" error when
retrieving a collection post by its post ID, e.g. /api/posts/abc123
instead of /api/collections/demo/posts/my-slug -- this happens
particularly when `Announce`ing a post in the fediverse. This change
fixes that.
2019-11-19 09:59:13 +09:00
Matt Baer
bd99044e9c Fix 500 on tags page
This fixes a panic from a nil user when calling u.IsSuspended().
Instead, this checks and calls IsSuspended() on `owner`.
2019-11-12 20:01:14 +09:00
Matt Baer
2899d98cfd Fix collection post 500 when not logged in
This reverts some code from 5429ca4a, which broke collection post
loading on blog posts when not logged in.
2019-11-12 19:43:41 +09:00
Matt Baer
278e4f6242 Bump version to 0.11.1 2019-11-12 16:53:52 +09:00
Matt Baer
3d49baf39a Improve non-chorus site-wide header
This adds a Reader tab when necessary while logged in, and generally
keeps the navigation consistent for logged-in users, particularly in
regard to the Reader:

- Now includes user buttons and dropdown
- Makes header on user pages consistent with Reader page
2019-11-12 16:49:38 +09:00
Rob j Loranger
474a5d908d
Merge pull request #209 from writeas/fix-host-single-user-templates
Fix collection template issues introduced in #205
2019-11-11 15:26:38 -08:00
Matt Baer
80362000fe Skip logging default pad template fallback
This reduces unnecessary logging by not showing the "no template" line
when the `editor` config value is empty (default).
2019-11-12 08:07:51 +09:00
Matt Baer
79f35a0ccd Fix collection template issues introduced in #205
This fixes a template rendering issue caused by bad references to $.Host
in pinned posts links on single-user instances.

Closes #207
2019-11-12 08:03:00 +09:00
Matt Baer
bca678aee5
Merge pull request #174 from writeas/T661-disable-accounts
Add account suspension features
2019-11-12 02:08:30 +09:00
Matt Baer
53586d9cb8 Merge branch 'develop' into T661-disable-accounts 2019-11-12 01:46:37 +09:00
Matt Baer
5839c2ac4d
Merge pull request #192 from writeas/T695-reset-user-pass
Resolves T695
2019-11-12 01:39:09 +09:00
Matt Baer
8f24da94a6 Bump version to 0.11.0 2019-11-12 00:47:49 +09:00
Matt Baer
5644e8d251 Fix "silenced" alert styles on more pages
- Tagged posts
- Collection index

Ref T661
2019-11-12 00:41:45 +09:00
Matt Baer
7f96e8c384 Rename UserSuspended to UserSilenced
Some of the work needed to have the backend match user-facing wording.

Ref T661
2019-11-12 00:41:25 +09:00
Matt Baer
c3f76a3ab8 Change "suspend" to "silence" where user-facing
This puts the verbiage more in line with what the feature does, and
leaves room for other moderation controls in the future.

NOTE: this includes no backend refactoring, which may be confusing. We
should rename things to fit ASAP.

Ref T661
2019-11-12 00:22:33 +09:00
Matt Baer
f7550a0da8 Change more suspension check logic
From u.Status == UserSuspended to u.IsSuspended()

Ref T661
2019-11-12 00:04:36 +09:00
Matt Baer
d4206cd5f8 Move to web-core v1.2.0 2019-11-11 23:19:34 +09:00
Matt Baer
a9b5bb2f6b Fix reset user's email address display
Previously, this had bad template logic and showed the wrong email address.

Ref T695
2019-11-11 21:40:49 +09:00
Matt Baer
d5dd007ff7 Change Reset Password button style
Ref T695
2019-11-11 21:37:02 +09:00
Matt Baer
3e8d1014d9 Tweak admin reset confirmation copy
Also updates some whitespace in the JS.

Ref T695
2019-11-11 18:04:20 +09:00
Matt Baer
422c16f39a Tweak admin user pass reset success copy
This also adjusts the style and includes the user's password, so the
admin can easily notify them.

Ref T695
2019-11-11 18:03:19 +09:00
Matt Baer
f673f9b562 Reset password to sorta-sensical string
This resets user password to something random that also reminds the user
they should change it immediately after logging in, instead of a
completely random jumble of characters.

Ref T695
2019-11-11 18:01:08 +09:00
Matt Baer
6d4ec0b17d Remove extra OwnUserPage field
Move logic into template, rather than add another field to the page.

Ref T695
2019-11-11 16:06:03 +09:00
Matt Baer
6e09fcb9e2 Change password reset endpoint to /admin/user/{Username}/passphrase
Ref T695
2019-11-11 16:02:22 +09:00
Matt Baer
a65917ae2e
Merge pull request #205 from writeas/fix-csv-export
Fix URLs in CSV exports
2019-11-11 15:42:45 +09:00
Matt Baer
2c2ee0c00c Tweak "suspended" notification copy 2019-11-11 15:16:04 +09:00
Rob Loranger
f66d5bf1e8
use .Host instead of adding .Hostname 2019-11-09 11:41:39 -08:00
Rob Loranger
c0b75f6b65
pass hostname to canonical url in post templates
the change to take a hostname in Post.CanonicalURL broke a few template
using that function. This adds a Hostname string to the Post being
passed to templates and passes it to calls to Post.CanonicalURL
2019-11-08 08:47:03 -08:00
Matt Baer
e1149cd1e9 Fix URLs in CSV exports
This includes the instance's hostname in calls to export a CSV file and
PublicPost.CanonicalURL().

It also fixes a panic in that method during CSV export caused by draft
posts.
2019-11-07 17:25:42 +09:00