Commit Graph

903 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
6073a25bb5 fix: closes #13056, guard against undefined keyid,compare 2025-01-15 17:19:27 -05:00
Julian Lam
0ad8ed9d4e fix: #13014, possible fix for peertube incompatibility: strip hash value from key IDs during check 2024-12-30 17:06:08 -05:00
Barış Soner Uşaklı
7585517a28 Merge branch 'master' into develop 2024-12-25 17:08:59 -05:00
Barış Soner Uşaklı
e4dd697ae8 refactor: get rid of RegExp 2024-12-25 17:08:45 -05:00
Barış Soner Uşaklı
9190721865 Merge branch 'master' into develop 2024-12-25 09:03:53 -05:00
Barış Soner Uşaklı
25655d5a5f fix: #13011, catch errors 2024-12-25 09:03:47 -05:00
Julian Lam
2ab72ada3f Merge remote-tracking branch 'origin/develop' into activitypub 2024-12-11 10:12:33 -05:00
Barış Soner Uşaklı
fe811537e9 refactor: remove "password" in comments 2024-12-09 14:40:49 -05:00
Julian Lam
fc3243d617 fix: #12865, crash on liking a chat message 2024-10-25 12:11:48 -04:00
Julian Lam
13c048a515 feat: normalization middleware to ensure incoming objects' data types are as expected (simplifies later logic) 2024-10-17 13:45:56 -04:00
Julian Lam
b472c58946 fix: backend logic fixes for #12853 2024-10-16 15:22:49 -04:00
Julian Lam
a226ee9e91 fix: re-enable logging only for dev mode 2024-10-12 22:49:24 -04:00
Julian Lam
8ef0df57e6 refactor: check HTTP signatures on all activitypub requests
- `validate` is now renamed `assertPayload`
- HTTP signature checking is now in new middleware `verify`
- `verify` is now called on all routes in activitypub controller
- Rejects on signature failure for POST requests
2024-10-07 14:08:57 -04:00
Julian Lam
2b71434ef4 feat: update mdidleware.assert.message so roomId is optional 2024-10-07 14:02:15 -04:00
Julian Lam
d42d3b1c39 fix: crash when AP S2S call made to retrieve a remote user account (not allowed); now returning 404 2024-09-10 11:37:56 -04:00
Julian Lam
7e23e192d8 chore: restore activity history check in AP inbox middleware now that NodeBB sends unique IDs with applicable activities 2024-07-04 14:59:10 -04:00
Barış Soner Uşaklı
6b33faac54 Merge branch 'develop' into activitypub 2024-06-27 10:40:14 -04:00
Barış Soner Uşaklı
61e5293a76 test: dont track session for api/v3 (#12660)
since they get destroyed when the request ends
2024-06-27 10:26:06 -04:00
Julian Lam
6e2178b0dc feat: instance-level allow andd deny list for federatioN 2024-06-17 15:50:27 -04:00
Julian Lam
d0a1ebcff7 feat: store encountered instances by last seen date 2024-06-17 15:08:22 -04:00
Julian Lam
f6d4d5630e chore: lint 2024-06-14 11:49:25 -04:00
Barış Soner Uşaklı
f075a8c148 Merge branch 'develop' into activitypub 2024-06-11 18:28:34 -04:00
Barış Soner Uşaklı
35710e6551 catch all deleted/missing and 404 2024-06-11 18:28:10 -04:00
Barış Soner Uşaklı
04b4c16e27 Merge branch 'develop' into activitypub 2024-06-11 18:18:14 -04:00
Barış Soner Uşaklı
9ecee78293 test: fix path replace 2024-06-11 17:56:45 -04:00
Barış Soner Uşaklı
1c44f55d3c handle sub account pages in redirect 2024-06-11 16:56:04 -04:00
Barış Soner Uşaklı
17cd3b684c move slug handling to middleware #12632 2024-06-11 16:24:56 -04:00
Barış Soner Uşaklı
66adfa2999 fix: closes #12632, dont load data twice 2024-06-11 15:38:40 -04:00
Julian Lam
bb0360bf01 chore: commenting out logic that drops requests if the id has already been seen, due to a regression in interoperability between NodeBB instances 2024-06-11 14:17:40 -04:00
Barış Soner Uşaklı
4430de8c4a fix: don't error if file required too early
Exception during run: TypeError: ttl must be positive integer or Infinity if set
    at new TTLCache (/home/runner/work/NodeBB/NodeBB/node_modules/@isaacs/ttlcache/index.js:35:13)
2024-06-11 12:09:24 -04:00
Barış Soner Uşaklı
1ac793ec2b Merge branch 'develop' into activitypub 2024-06-08 16:50:54 -04:00
Barış Soner Uşaklı
2d86552b85 refactor: #12623, add filter:config.get.admin
to add admin only config values
add /api/admin/config to retrieve config object with admin values included
2024-06-08 13:42:43 -04:00
Barış Soner Uşaklı
869df3c2bc refactor: unused winston 2024-06-08 12:44:01 -04:00
Julian Lam
539300ffec feat: remote user deletion logic, #12611 2024-06-07 12:55:54 -04:00
Barış Soner Uşaklı
2ae5857005 refactor: remove verbose logs, 2024-06-07 12:13:28 -04:00
Barış Soner Uşaklı
119230d7ec Merge branch 'develop' into activitypub 2024-06-06 13:18:12 -04:00
Barış Soner Uşaklı
ca4a7751e2 fix: dont load chat rooms for quests/spiders 2024-06-06 12:14:08 -04:00
Julian Lam
e536223ed0 Merge remote-tracking branch 'origin/develop' into activitypub 2024-05-21 13:49:28 -04:00
Barış Soner Uşaklı
2c0f8c913b refactor: render 2024-05-16 07:47:49 -04:00
Julian Lam
4e9cd8efc0 feat: track incoming requests by id, analytics increment for some metrics, ignore repeated requests by id
closes #12574
2024-05-14 12:07:18 -04:00
Julian Lam
ccd187e000 feat: Note deletion logic and refactoring, #12551 2024-05-09 15:49:03 -04:00
Julian Lam
596a5e4ba2 fix: update signature parsing logic to handle values with equal signs in them, closes #12538 2024-04-28 23:25:46 -04:00
Barış Soner Uşaklı
91c3434fda Merge branch 'develop' into activitypub 2024-04-25 11:16:42 -04:00
Barış Soner Uşaklı
14f5774f6a fix: is user doesnt have view:users privilege
dont redirect uid/1 to userslug
2024-04-12 12:50:51 -04:00
Julian Lam
c3365908b8 fix: save modified actor back to req.body 2024-04-12 11:08:31 -04:00
Opliko
18ba2e38ec feat: noremalize actor property in middleware 2024-04-12 16:42:54 +02:00
Barış Soner Uşaklı
ca07e51730 fix: if you have chat:privileged the chat icons should show up 2024-04-11 09:55:57 -04:00
Opliko
c92b5e07a7 fix: use a slightly better error code to indicate object resolution failure 2024-04-10 18:15:50 +02:00
Opliko
102c174e03 feat: resolve objects from ids in middleware 2024-04-09 23:58:00 +02:00
Opliko
c30c12881c fix: support ldjson with ActivityStreams profile in actor queries 2024-04-08 20:06:26 +02:00