dcb201dfa8
fix: https://github.com/NodeBB/NodeBB/issues/10242
3 years ago
e1e1d5223e
feat: push the theme name into body class
3 years ago
10949184ca
test: add failing guest csrf test ( #10169 )
...
* test: add failing guest csrf test
* test: use correct var
* fix: use applyCsrf for guests as well
3 years ago
e9ee843b27
fix: CSRF handler to go back to saving in session ( #10159 )
3 years ago
d89fc44c03
fix: move authenticateRequest before interstitial and maintenance mode middlewares, allowed plugins to disable authentication on certain routes
...
fixes #10112
3 years ago
d95b4ee29a
fix: assertion check to ensure messages are in the room when editing/deleting, etc
3 years ago
90fcbe4416
feat: middleware.assert.message
3 years ago
140f9d2481
fix: isFinite check for room assertion, more test migrating
3 years ago
74f1905ea8
feat: allow API checkRequired middleware error to be internationalized
3 years ago
02e878be72
feat: stub code for v3 chats api
3 years ago
c4042c70de
feat: #9506 , allow seeing and editing your queued posts
...
allow regular users access to post queue
allow regular users to edit their queued post/topic title
allow regular users to remove their post from post queue
ability to send a notification to user without removing from post queue
allow accessing single post queue items from notifications
3 years ago
41db9436e8
perf: only add middleware if relativePath is set
3 years ago
a3bdb70617
feat: ensure that all requests handled by NodeBB fall under the relative_path as configured
3 years ago
324262cbb5
refactor: DRY
3 years ago
1a7fffc7e9
breaking: remove deprecated user middlewares
3 years ago
941ecaf899
fix: keep query params on /me redirects
3 years ago
65c5504193
fix: 403/400/500 page not generating csrf_token
3 years ago
7434cbf66f
test: add api token tests
3 years ago
6c07433dea
refactor: use routePrefixMap instead of routeRegexpMap, +tests ( #10035 )
...
* refactor: use routePrefixMap instead of routeRegexpMap, +tests
Currently tests fail because privilege pages resolve if passed garbage... hmm
* fix: priv check paths
remove /v3 from path as well
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
3 years ago
29b3587d91
test: middleware/expose.js
3 years ago
fb363957d1
refactor: tab rules
3 years ago
e368feef51
refactor: dont expost entire res._locals to client side
3 years ago
1719bff89c
feat: use auto-generated meta and link tags in ACP, closes #9991
3 years ago
dd4e66e22c
fix: push back some deprecations, remove deprecated stuff scheduled for v1.18.0
3 years ago
3df79683f5
feat: create folders in ACP uploads #9638 ( #9750 )
...
* feat: create folders in ACP uploads #9638
* fix: openapi
* test: missing tests
* fix: eslint
* fix: tests
3 years ago
a288f51f42
fix: allow smaller than 5mins for admin relogin duration
...
setting the value to 1min in ACP wasn't working
4 years ago
d509a307f0
Remove some deprecated/unnecessary code ( #9688 )
...
* refactor: remove mkdirp promisify
* refactor: remove old session deletion API route
* refactor: remove middleware.isAdmin
* refactor: remove templateValues.config.bootswatchSkin
* fix: unused dependencies
4 years ago
afd2d8dab1
feat(emails): pass req in to filter:registration.interstitial
4 years ago
b4b65ecd98
fix(emails): remove debug log
4 years ago
087e6020e4
refactor(email): validation checking methods, +tests fix
4 years ago
69c96dd23c
refactor(emails): more work in update email interstitial, interstitial skipping, email change on confirmation, deprecation of requireEmailConfirmation
4 years ago
04b1f702cd
feat: add loggedin/guest class to body
4 years ago
cc6cbfcdc4
Flags API ( #9666 )
...
* feat: new routes for flags API
+ flag get
+ flag creation, migration from socket method
+ flag update, migration from socket method
* fixed bug where you could not unassign someone from a flag
* feat: tests for new flags API
added missing files for schema update
* fix: flag tests to use Write API instead of sockets
* feat: flag notes API + tests
* chore: remove debug line
* test: fix breaking test on mongo
4 years ago
7036c3751e
feat: internationalize API error messages
4 years ago
a54a3ee1ca
fix: return proper API-style response if exception caught by error handler on v3 routes [breaking]
4 years ago
3cd9434b56
fix: scope
4 years ago
1eda538da5
fix : #9615 , catch exceptions in renderOverride
4 years ago
3d5fef6e80
feat: pass req.query to getUnreadData
4 years ago
9ebfdeb7ee
fix : #9580 , proper 404 when ajaxifying
4 years ago
3d6bdeb3df
feat: add req.query to flags.list/getCount
4 years ago
f6b583bb9d
feat: #9533 , allow redirect in build hooks
4 years ago
6ed8890c2e
fix : #9512 , fix chat icon if no privileges
4 years ago
a478dc7ee8
feat: add filter:middleware.autoLocale
4 years ago
435067aa5f
test: remove logs
4 years ago
2ea468daa3
test: clear cache between runs, require middleware later in helpers
4 years ago
d15e27107e
test: log
4 years ago
354e0a822d
test: remove equals
4 years ago
4dd3844680
fix: logic is hard
4 years ago
2e9efc0e8a
fix: wrong variable for cache
4 years ago
fa0c92a7c4
fix: eslint
4 years ago
Barış Soner Uşaklı
Julian Lam
Barış Soner Uşaklı
gasoved
Opliko
psychobunny