a0164b1c38
fix: use header/footer cache in prod
5 years ago
2e44639210
fix: guest header/footer cache
...
allow clearing individual caches
5 years ago
4b63f9937c
fix: check is banned in buildHeader
...
remove unused banReason
remove generateHeader function
5 years ago
87bff6cd65
fix: broken test
5 years ago
dda5d42610
fix: restore old behaviour of empty json w/ 401 code in admin middleware
5 years ago
15e0731dd9
fix: deprecate middleware.isAdmin
...
Also, handle admin logout timer in middleware.admin.checkPrivileges
5 years ago
57ed6be78b
fix : #8805 define our own name for write API v3
5 years ago
266d7587b2
refactor: remove usage of middlewares
...
Specifically, middleware.isAdmin|exposePrivilegeSet|exposePrivileges
5 years ago
a05905f196
performance improvements ( #8795 )
...
* perf: nconf/winston/render
cache nconf.get calls
modify middleware.pageView to call next earlier
don't call winston.verbose on every hook see https://github.com/winstonjs/winston/issues/1669
translate header/footer separately and cache results for guests
* fix: copy paste fail
* refactor: style and fire hook only log in dev mode
* fix: cache key, header changes based on template
* perf: change replace
* fix: add missing await
* perf: category
* perf: lodash clone
* perf: remove escapeRegexChars
5 years ago
d68ffea80d
feat: send 'Vary' header when ACAO header set
5 years ago
bbafa1b82a
Revert "fix: [breaking] send configured config URL as origin if not custom"
...
This reverts commit 205a10308e
5 years ago
205a10308e
fix: [breaking] send configured config URL as origin if not custom
...
This is a breaking change if your install uses multiple URLs to access. You will need to update the Access-Control-Allow-Origin header in ACP > Advanced > Headers to supply all URLs you use to access your site
5 years ago
ff4fcc23b6
Update bundled logos with new branding ( #8702 )
...
* feat: updating logo assets, square logos missing still
* fix: squared logo for touch icon and notification fallback
* fix: update link to favicon
* feat: add default touch icon sizes, if one isn't uploaded
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
5 years ago
1fd2eba6f2
refactor: async/await
...
src/cli/manage.js
src/meta/build.js
src/meta/css.js
src/meta/js.js
5 years ago
1e07886f30
feat: require csrf token if not using bearer token
5 years ago
dc29f4dca2
refactor: switch to using slugify module
5 years ago
fda2aedfd8
feat: #8734 , jquery-ui, jquery-form, timeago ( #8748 )
...
* feat: #8734 , jquery-ui, jquery-form, timeago
get rid of forum/footer.js move that code to app.js & wait for app to load before calling ajaxify.end
make sockets.js a requirejs module
move jquery-ui to node_modules and load via requirejs
move jquery-form to node_modules and load via requirejs
move timeago to node_modules and load via requirejs
only include the css for needed jquery-ui widgets
* feat: keep socket/io global for backwards compat
* refactor: move socket listener to chat
5 years ago
8ecef7b891
refactor: middleware.assert.*
5 years ago
f870721fca
feat(writeapi): file deletion route
5 years ago
2ec838fc59
feat(writeapi): token generation/delete routes, ACP updates
5 years ago
414169fdfa
feat(writeapi): post delete/restore/purge
5 years ago
8e89f34dbf
fix: bad logic in group assertion middleware
5 years ago
8e7baac6ef
fix(writeapi): calls to profile editing routes 200 even if user DNE
5 years ago
549ca11056
fix: bug where middlewares seemingly ran in parallel
5 years ago
4c833d0bf0
feat(writeapi): topic posting and replying
5 years ago
952dc211dd
feat(writeapi): added group joining and deletion
5 years ago
ba345e53e8
feat(writeapi): added POST /api/v1/groups
5 years ago
a1ddc210b2
feat: added DELETE /api/v1/users/:uid and DELETE /api/v1/users
5 years ago
bba2a4638c
fix: user creation POST route returns user data, updated openapi spec
5 years ago
7b6d43bcc8
feat: added checkRequired middleware for API calls
5 years ago
fd67355b03
fix(writeapi): authenticate middleware logic to work better with await
5 years ago
f6433ef2c5
fix(refactor): merging write-api auth middlewares with core middlewares
5 years ago
ec5c48b188
feat: migrating write-api skeleton into core
5 years ago
46ab2711d4
fix : #8432 , add CSP frame-ancestors
5 years ago
6fc31df033
feat: use const/let
5 years ago
4b0cb26b34
fix: empty "manage" menu showing in ACP
...
... if no privileges corresponding to those menu items
are given
5 years ago
cf2f1e956a
refactor: changed way middleware was exported
5 years ago
f00595b32d
fix: change how admin middlewares are exported
5 years ago
ae68a254d7
fix: one less return, to appease codeclimate
5 years ago
03bd76dea2
fix: inability to access /admin if not superadmin
...
There was an odd issue where non-superadmins could not use
the /admin route to access the ACP, even though they had
appropriate access. For whatever reason, it could not
be reliably reproduced on my dev. As it turns out, the
reason was because I was checking the wrong privilege,
and my dev database had this wrong privilege leftover
from the initial development of the ACP admin privileges
feature. Dumb.
Anyhow, that fixes this issue.
5 years ago
6521e4dac4
Revert "feat: expose global/admin privileges to all routes"
...
This reverts commit 4737f937ee
5 years ago
4737f937ee
feat: expose global/admin privileges to all routes
...
@barisusakli revert if necessary 😬
5 years ago
6e91885836
feat: use assetBaseUrl instead of hardcoding
5 years ago
3f01f4a2b8
Revert "feat: load timeago strings client-side"
...
This reverts commit 558a2d739c
5 years ago
558a2d739c
feat: load timeago strings client-side
...
9adaccd036
5 years ago
3761f05c98
feat: change invalid language codes to default lang
5 years ago
0cea713691
feat: remove deprecated checkGlobalPrivacySettings
5 years ago
a0da2ba774
feat: remove deprecated isAdmin method
5 years ago
2355d9d5dd
fix: escape navigation item fields, theme:id, category fields
5 years ago
e80379dc0e
feat: display stack trace on winston.error
5 years ago
Barış Soner Uşaklı
Julian Lam
Barış Soner Uşaklı