Commit Graph

1920 Commits

Author SHA1 Message Date
Julian Lam
8a0afd8683 fix: allow unread state toggling in chats dropdown too 2023-02-06 16:08:17 -05:00
Julian Lam
b79627a8ed refactor: allow frontend to mark chats as unread, use new API v3 routes instead of socket calls, better frontend event handling 2023-02-06 15:56:07 -05:00
Julian Lam
44ea9da022 refactor: remove calls to getUserDataByUserSlug for most account routes, since it is populated via middleware now 2023-01-25 12:04:28 -05:00
Julian Lam
61bab38b2b Merge branch 'develop' into bootstrap5 2023-01-19 15:51:53 -05:00
Julian Lam
a344e6ec0c Fix for #11119, restore password reset rate limiting (#11120)
* chore: incrementing version number - v2.8.1

* chore: update changelog for v2.8.1

* fix: accidental clearing of reset rate limiting on reset send

* test: move user reset tests to its own file, add failing test for user reset locks

* fix: #11119, counter attempted flooding of user reset route

* test: fix password reset socket test to check for error now

* test: same user sending multiple reset emails

should work after waiting the correct amount of time

* lint: fixes

* chore: rename outdated `cleanTokensAndUids` method

* test: no need to create user for new test

Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2023-01-04 11:24:46 -05:00
Barış Soner Uşaklı
586eed1407 fix: vulnerability in socket.io nested namespaces (#11117) 2022-12-30 09:49:22 -05:00
Barış Soner Uşaklı
d1087106e4 refactor: topics.markAsUnreadForAll
fix fork test
2022-12-22 09:53:04 -05:00
Julian Lam
2144650dd5 Merge remote-tracking branch 'origin/develop' into bootstrap5 2022-12-21 17:20:42 -05:00
Barış Soner Uşaklı
48d1439217 fix: prototype vulnerability in socket.io onMessage 2022-11-27 19:32:35 -05:00
Barış Soner Uşaklı
efcb1c2618 fix: prototype vulnerability in socket.io onMessage 2022-11-27 19:31:08 -05:00
Julian Lam
f426e7efe6 style: linting for some reason 2022-10-24 14:54:30 -04:00
Julian Lam
96b46411b1 Merge branch 'master' into develop 2022-10-18 15:38:36 -04:00
Julian Lam
dac71c84cb chore: remove socketUser.emailConfirm again 2022-10-18 15:26:28 -04:00
Julian Lam
c1081f7039 Merge branch 'master' into bootstrap5 2022-10-18 15:21:20 -04:00
Julian Lam
9ee30fe7d2 fix: revert breaking change, add back SocketUser.emailConfirm 2022-10-18 15:16:52 -04:00
Julian Lam
9c576a0758 Email confirmation QOL updates (#10987)
* breaking: remove `SocketUser.emailConfirm`, re: #10954

* chore: move email confirmation related configs to own section in Settings > Email

* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.

* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)

* fix: update getValidationExpiry to return ms

* test: use emailConfirmInterval for tests, for now

* fix: throw friendly error when attempting an email change within email confirmation window

* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for

* test: additional tests for user email methods

* fix: add back missing handling of  option

* test: fix tests
2022-10-18 15:12:13 -04:00
Barış Soner Uşaklı
78935f7338 Merge branch 'master' into bootstrap5 2022-10-18 10:41:28 -04:00
Barış Soner Uşaklı
b879b6a0c2 fix: use admin:groups priv for groups (#10960) 2022-10-12 10:02:45 -04:00
Julian Lam
ee77ce0789 chore: remove deprecated socket.io user export methods [breaking] 2022-09-27 13:34:00 -04:00
Julian Lam
dcfcc5ea2c Merge remote-tracking branch 'origin/develop' into bootstrap5 2022-09-21 12:12:27 -04:00
Barış Soner Uşaklı
ebd7c05c4c feat: paginate recentposts.rss and
category/1/recentposts.rss
2022-09-14 09:27:08 -04:00
Julian Lam
f75838c906 refactor: buildAvatar helper to take css variable for size instead of hardcoded xs, sm, etc., fixed up picture selection modal 2022-09-13 15:19:52 -04:00
Julian Lam
d05705183f refactor: move export generation logic to v3 controller, GET/HEAD routes for exports
re: #10384
2022-08-22 17:03:43 -04:00
Opliko
a9bbb586fc feat: allow plugins to add to admin cache list (#10833)
* feat: allow plugins to add to admin cache list

resolves  #10820

plugins will have to use `filter:admin.cache.get` hook and just add their own cache to the object there.

* feat: add dump to ttlCache and expose properties

* feat: also expose properties under their current names

* feat: display TTL if set
2022-08-13 20:35:59 -04:00
Opliko
23cb67a112 feat: Allow defining active plugins in config (#10767)
* Revert "Revert "feat: cross origin opener policy options (#10710)""

This reverts commit 46050ace1a.

* Revert "Revert "chore(i18n): fallback strings for new resources: nodebb.admin-settings-advanced""

This reverts commit 9f291c07d3.

* feat: closes #10719, don't trim children if category is marked section

* feat: fire hook to allow plugins to filter the pids returned in a user profile

/cc julianlam/nodebb-plugin-support-forum#14

* fix: use `user.hidePrivateData();` more consistently across user retrieval endpoints

* feat: Allow defining active plugins in config

resolves #10766

* fix: assign the db result to files properly

* test: add tests with plugins in config

* feat: better theme change handling

* feat: add visual indication that plugins can't be activated

* test: correct hooks

* test: fix test definitions

* test: remove instead of resetting nconf to avoid affecting other tests

* test: ... I forgot how nconf worked

* fix: remove negation

* docs: improve wording of error message

* feat: reduce code duplication

* style: remove a redundant space

* fix: remove unused imports

* fix: use nconf instead of requiring config.json

* fix: await...

* fix: second missed await

* fix: move back from getActiveIds to getActive

* fix: use paths again?

* fix: typo

* fix: move require into the function

* fix: forgot to change back to getActive

* test: getActive returns only id

* test: accedently commented out some stuff

* feat: added note to top of plugins page if \!canChangeState

Co-authored-by: Julian Lam <julian@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2022-07-26 14:27:17 -04:00
Julian Lam
ece733eddc feat: pass absolute url to post into post tools response, #10566 2022-06-10 13:54:42 -04:00
Barış Soner Uşaklı
f07b4484cf feat: add post to hook params 2022-05-11 10:34:29 -04:00
Barış Soner Uşaklı
b9f9164308 fix: #10502, allow unblocking admin/mod
if they were blocked before becoming admin/mod it wasn't possible to unblock them
2022-04-17 18:15:49 -04:00
chadjw
fe072d6091 Allows socket authentication to be handled within plugins (#10428) 2022-03-30 14:58:08 -04:00
Barış Soner Uşaklı
29b86b3276 refactor: :trollface: 2022-03-18 15:58:29 -04:00
Barış Soner Uşaklı
421ba6e1a2 feat: new admin events, closes #10405 2022-03-18 15:54:40 -04:00
Barış Soner Uşaklı
3acd2ac850 refactor: wrap around if at end
remove debug log
dont focus input on mobile
2022-02-17 11:19:43 -05:00
Barış Soner Uşaklı
b517b376ac feat: ability to go through your posts in a topic
because I am 👴 useful for large topics
2022-02-16 22:07:52 -05:00
Julian Lam
165a1d8b76 Revert "fix: update usage of emailer.send to not catch (as errors are no longer thrown), email error throttler"
This reverts commit d4e5259fcf.
2022-01-28 15:41:27 -05:00
Julian Lam
d4e5259fcf fix: update usage of emailer.send to not catch (as errors are no longer thrown), email error throttler 2022-01-28 15:16:41 -05:00
Magnus
7bd3e31dec Fullname in notifications (#10157)
* init - fullname notifications setting

* fullname in topic reply

* fullname for group-request-membership

* fullname for group-leave notification

* fullname for new-post-flag & new-user-flag

* removed log

* fullname for user follow

* fullname in message notification

* fullname in follow

* fullname for sendNotificationToPostOwner

* fullname in sendNotificationToTopicOwner

* fullname in doExport

* shorthand name set

* shorter name set

* fullname in notifications

* displayname for notifications

* removed unused require
2022-01-19 10:19:11 -05:00
Barış Soner Uşaklı
f9279b636b fix: post indices if there is a blocked user in topic 2022-01-18 20:31:06 -05:00
Barış Soner Uşaklı
6a75ed50fa fix: #10172, fix postqueue accept/reject notification text 2022-01-16 16:13:42 -05:00
Julian Lam
d960f601a1 style: eslint 2021-12-22 15:37:23 -05:00
Julian Lam
2fe53cf849 feat: GET /api/v3/chats/:roomId/messages 2021-12-22 15:19:37 -05:00
Julian Lam
16ba16cdc4 fix: deprecate chats.leave 2021-12-22 10:59:36 -05:00
Julian Lam
fe17c94c35 feat: DELETE /api/v3/chats/:roomId/users and DELETE /api/v3/chats/:roomId/users/:uid 2021-12-22 10:59:36 -05:00
Julian Lam
d62ee84637 feat: POST /chats/:roomId/users 2021-12-22 10:59:36 -05:00
Julian Lam
6eea6451d2 feat: GET /chats/:roomId/users [breaking] 2021-12-22 10:59:36 -05:00
Julian Lam
d5fd098ecf feat: POST /chats/:roomId/:mid and DELETE /chats/:roomId/:mid 2021-12-22 10:59:36 -05:00
Julian Lam
f48ed3658a feat: PUT /chats/:roomId/:mid 2021-12-22 10:59:36 -05:00
Julian Lam
9a4fd5dc7e feat: PUT /api/v3/chats/:roomId 2021-12-22 10:59:36 -05:00
Julian Lam
eeffb9d978 feat: POST /api/v3/chats/:roomId 2021-12-22 10:59:36 -05:00
Julian Lam
09cf9c7770 feat: GET /api/v3/chats/:roomId 2021-12-22 10:59:36 -05:00
Julian Lam
40b4544e70 feat: POST /api/v3/chats, chat room creation, plus openAPI docs update 2021-12-22 10:59:36 -05:00