0ee85d5a0b
fix : #9950 , rename account export routes to remove `uid/` prefix
3 years ago
60352eca54
fix: double invocation of authenticateRequest
3 years ago
6a976a9db0
fix : #9945 , call authenticateRequest middleware for mount points in /api
3 years ago
d4da98404c
refactor: add missing helpers.tryRoute
3 years ago
2ea468daa3
test: clear cache between runs, require middleware later in helpers
4 years ago
a9978fcfd2
feat: rate limit file uploads
4 years ago
e3b2c00db1
fix: request authentication called twice in account routes
4 years ago
7da061f0d7
refactor: automatically authenticate all requests setup through route helpers ( #9357 )
...
* refactor: automatically authenticate all requests setup through route helpers
* fix: removed connect-ensure-login dependency
* fix: bug with some middlewares not defined outside route helper methods
4 years ago
dab3b23575
chore: eslint no-var, vars-on-top
4 years ago
2ad0d0d0d8
chore: remove deprecated getObject routes [breaking]
...
`/api/post/pid/:pid`, `/api/topic/tid/:tid`, `/api/category/cid/:cid` have now been removed in favour of routes in the Write API (`/api/v3/(posts|topics|categories)/:id`)
4 years ago
cdff8d286a
chore(api): add deprecation notices re: #9123
4 years ago
340387c18a
fix : #9055 , non-standard API response from addThumbs route
...
Also removed old thumb upload router handler, and updated uploadPost handling in composer to match new response schema
4 years ago
dde5b6b814
fix: unable to register async method as response hook listener
...
Also fixes #8723 , /api/config now runs middleware.authenticateOrGuest
4 years ago
af43f0e48e
fix : #8656 , rename /api/me to /api/self
4 years ago
e53a18f219
fix : #8437 , #8433
5 years ago
842b8abb84
feat: add buildHeaderAsync ( #8367 )
...
* feat: add buildHeaderAsync
make helphers.notAllowed async
* fix: remove csrf from buildHeader
* fix: remove unused method, use middleware
* fix: /post/pid redirect doesn't need buildHeader
use buildHeaderAsync
5 years ago
ef52461fb6
fix: remove dead picture upload code #8260
5 years ago
8f55ab1340
fix : #7494
6 years ago
c72da5595a
fix : #6806
...
3 new global privileges
view:users
view:tags
view:groups
6 years ago
9f5062682d
fix: unread badge
...
- only increase unread badge if topic or category is watched
- fix logic for "there are new posts/topics" on /unread and /recent
6 years ago
99e0895e99
fix: move the check to get methods
...
all .post methods will have csrf
6 years ago
4fba1492c1
feat: added new middleware authenticateOrGuest
6 years ago
eeaee8ccef
fix: not calling authenticate middleware on resource direct access
...
routes
6 years ago
64b9dabff8
chore(deps): update dependency eslint-config-airbnb-base to v13 ( #6599 )
...
* chore(deps): update dependency eslint-config-airbnb-base to v13
* chore: #6599 , linting 😬
6 years ago
ccad95cf73
closes #6579
7 years ago
229e49cf8f
closes #6523 , closes #6524
7 years ago
67dec83011
profile export for #6441 + integration
7 years ago
a6564b7b4e
endpoint to download user attachments, #6441
7 years ago
2e6e7f7484
posts export endpoint for GDPR, re: #6441
7 years ago
923bd86662
Widgets refactor ( #5817 )
...
* widgets refactor
render widgets server side
widgets can use all the data the template can use
* fix tests
8 years ago
e0de922ede
Revert "widgets refactor"
...
This reverts commit 9e94edb5aa
8 years ago
9e94edb5aa
widgets refactor
...
render widgets server side
widgets can use all the data the template can use
8 years ago
b1b87d339f
more refactors
8 years ago
3b0dd2d1ef
ESlint padded-blocks
8 years ago
a038c66549
ESlint quotes
8 years ago
604358ecc4
ESlint keyword-spacing, no-multi-spaces
8 years ago
a15aaaf389
closes #5394
...
dont allow socket.emits during maintenance mode
8 years ago
4a3c31b2dc
Fix space-before-function-paren linter rule
8 years ago
d2cbd7e6dc
new priv for uploads
9 years ago
7b86fd3dc0
closes #4835
9 years ago
69e25fe4d5
closes #4612
9 years ago
217f0c5652
Switch to a named filter for unread to allow future expansion.
...
Don't use the query string as it is not passed to infinite scroll.
9 years ago
0e5830d6f2
add api endpoints to get user by username and by email
...
Signed-off-by: Dustin Falgout <[email protected] >
9 years ago
8cf6fe3aa1
closes #3808
9 years ago
f19043d046
profile cover photos
9 years ago
61b1f5fe32
allow regular uploading (modal) of cover photo
9 years ago
1dcdba9b2a
moved api route to api.js
10 years ago
e5e41e85f2
accounts refactor #2
...
and various 404 fixes
10 years ago
f3b6a5fbb9
generic getObject
10 years ago
c139dfa843
closes #3631
10 years ago
Julian Lam
Barış Soner Uşaklı
psychobunny
Peter Jaszkowiak
renovate[bot]
Barış Soner Uşaklı
HeeL
Ben Lubar
Dustin Falgout
psychobunny