aitzol/Plume
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
831 Commits 24 Branches 9 Tags 21 MiB
9f1b37648e
Commit Graph

130 Commits

Author SHA1 Message Date
Baptiste Gelez
e26a150164 Make Authorization optional for read routes 
Only require it when reading draft articles.
 2018-10-30 18:13:49 +01:00
Baptiste Gelez
c341179150 ApiToken: rename what to scope 2018-10-30 18:13:49 +01:00
Baptiste Gelez
28fbf35779 Use PhantomData intead of two Options useless for Authorization 
And remove some warnings about unused parameters
 2018-10-30 18:13:49 +01:00
Baptiste Gelez
0dbf9f519e AppEndpoint.name is required for both the client and server 2018-10-30 18:13:49 +01:00
Baptiste Gelez
31641b1ea1 New request guard: Authorization<Action, Scope> 
Filter requests that don't have an API token authorized to read or write
a specific scope;
 2018-10-30 18:13:49 +01:00
Baptiste Gelez
9a13d804c5 impl FromRequest for ApiToken 
and use it for the posts API
 2018-10-30 18:13:49 +01:00
Baptiste Gelez
2394ff424b Add an ApiToken model, and an endpoint to get one 2018-10-30 18:13:49 +01:00
Baptiste Gelez
f2190adfc2 Add an API endpoint to register apps 2018-10-30 18:13:49 +01:00
Baptiste Gelez
4c8a727e9e Add a model for external apps 
Stores their name, website, and credentials
 2018-10-30 18:13:49 +01:00
Trinity Pointard
76ca76f068 Update tags and hashtags on remote post edition 2018-10-29 20:54:27 +01:00
Trinity Pointard
c4fc656809 Update mentions on remote post edition 2018-10-29 20:54:27 +01:00
Trinity Pointard
f147885f08 Detect if tags are hashtags when receiving new posts 2018-10-29 20:54:27 +01:00
Trinity Pointard
9d7ae694a8 Delete notification on post deletion 2018-10-29 20:54:27 +01:00
Trinity Pointard
2523f3b523 Prevent duplication of mention on post update 
and delete mentions and notifications of user no longer mentioned
 2018-10-29 20:54:27 +01:00
Trinity Pointard
0bb719830a Fix incorrect media link 
Fix #292
 2018-10-27 19:21:50 +02:00
Baptiste Gelez
fcf911fac9 ActivityPub: don't delete anything if the actor is not authorized 2018-10-22 16:29:25 +01:00
Baptiste Gelez
fc5acac861
Merge pull request #283 from Plume-org/hashtags 
Support hashtags
 2018-10-21 13:53:15 +01:00
Trinity Pointard
95ea248518 Add support for hashtag on user interface 
Add migration to fix typo
Add support for linking hashtags with posts
Rework tag search page so it says a nicer message than page not found
when no post use that tag
Add new string to translation
 2018-10-20 19:27:49 +02:00
Trinity Pointard
4fa3a0f6ee Add support for hashtags in md parser 2018-10-20 16:38:16 +02:00
Trinity Pointard
eca458b0e5 Add support for blog deletion 
fix #181
 2018-10-20 15:03:59 +02:00
Trinity Pointard
a6e73f4667 Allow tag deletion 
Fix #232
 2018-10-20 14:05:41 +02:00
Trinity Pointard
4e6f3209d5 Normalize panic message 
Change all unwrap to expect
Normalize expect's messages
Don't panic where it could be avoided easily
 2018-10-20 08:44:33 +02:00
Trinity Pointard
ed5bafbbc4 Update webfinger and reqwest 
Update webfinger to 0.3.1
Update reqwest to 0.9
Fix #257
 2018-10-11 13:51:45 +02:00
Baptiste Gelez
8fdb55a501
Merge pull request #256 from Plume-org/verify-signature 
Verify activity's signature
 2018-10-10 21:31:11 +01:00
Baptiste Gelez
09e7226c23 Don't lowercase URL for requests signatures 2018-10-10 20:23:39 +00:00
Trinity Pointard
ba4695f490 Add support for signature verification on pseudo header 
Add support for pseudo-header '(request-target)'
Add some logging for denied request
 2018-10-10 21:10:43 +02:00
Bat
3f18cdd38b Add .swp to .gitignore 2018-10-08 20:42:40 +01:00
Bat
4f84b2a3ed Impl SQL traits for SafeString only for the selected backend 
Fixes #269
 2018-10-08 18:58:15 +01:00
Baptiste Gelez
0469b8dae2
Merge pull request #266 from Plume-org/cc-by-sa 
Change default license to CC-BY-SA
 2018-10-07 21:28:43 +01:00
Bat
9cc795d8be Replace DB_URL with DATABASE_URL 
This way it is shared with diesel, which simplifies a lot the setup

Also fixes a few issues in the documentation, that are not directly related
 2018-10-07 11:00:50 +01:00
Bat
387efbf3e9 Change default license to CC-BY-SA 
Fixes #258
 2018-10-06 18:19:45 +01:00
Bat
d08c21d58d Delete posts when deleting account 2018-10-06 12:37:28 +01:00
Trinity Pointard
62c94ed463 Refactor and verify http signature on personnal inbox 
Verify signature on personnal inbox
Reduce code duplication
Put Headers in plume-models
 2018-10-03 20:48:25 +02:00
Trinity Pointard
0a5d435249 Verify http signatures 2018-10-03 09:31:38 +02:00
Bat
07f2c979ec Make the REST API compatible with SQlite 2018-09-30 14:21:07 +01:00
Bat
bd80430b1b
Document model macros 2018-09-30 14:13:56 +02:00
Bat
743620eb6a
Fix the SQlite build 2018-09-30 14:13:56 +02:00
Bat
38d737ed0c
Introduce features to choose between SQlite or Postgres 2018-09-30 14:13:54 +02:00
Igor Galić
88456faf84
align types between sqlite & postgres 
this one's achieved by adding "NOT NULL" at the *correct* position in
SQLite's create tables.
 2018-09-30 14:13:53 +02:00
Igor Galić
b28bef20a7
align types between sqlite & postgres 
use DATETIME for SQLite's time type. This way, Diesel picks up on what
it's supposed to be.
 2018-09-30 14:13:52 +02:00
Igor Galić
1f8680c4c5
add sqlite migrations 
we move our PostgreSQL specific migrations to a subdirectory.
The SQLite migrations have been created by running `diesel` against a
copy, and then fixing what's broken.
In the end i reduced all modifications to a single create, since we
*are* starting out fresh with SQLite.

n.b.: i'm not entirely happy with the results yet, because diesel
heavily modifies our `plume-models/src/schema.rs`.
I'll keep fiddling until we have the same types between the two
databases.
 2018-09-30 14:13:52 +02:00
Trinity Pointard
d610ed1641 Add verify() to the Signer trait 
And implement it for Blog and User
 2018-09-30 12:08:04 +02:00
Baptiste Gelez
236cf14406
Merge pull request #245 from Plume-org/rest-api 
Some API endpoints for articles
 2018-09-29 16:33:31 +01:00
Bat
472da486e9 Fix the canapi::Provider impl for Post 2018-09-25 20:10:18 +01:00
Bat
1500267125 Add canapi and try to use for the API 2018-09-19 15:49:34 +01:00
Trinity Pointard
fab6360100 Be less restrictive on authorized html tags 
Allow users to add ids to tags
Allow users to use iframes
 2018-09-19 10:51:27 +02:00
Igor Galić
06718a5c8a
directly use SafeString in InstanceSettingsForm 2018-09-14 20:25:16 +02:00
Igor Galić
d62c72dde0
allocate new SafeString in FromFormValue impl 
thanks to @fdb-hiroshima for this review!
 2018-09-14 19:50:59 +02:00
Igor Galić
0897088aa5
add implementation for FromFormValue for SafeString 
thanks again to @pwoolcoc for this!
 2018-09-14 18:26:42 +02:00
Igor Galić
65e213309b
do not allocate empty strings 
follow review from @pwoolcoc, and do not use

    SafeString::new(&<String>::new())

since this makes an allocation which will then just be thrown away.
Instead, we pass ""
 2018-09-14 18:24:27 +02:00