788 Commits (894f392bfc97b27f51843567ac4749960f4bb29f)

Author SHA1 Message Date
Barış Soner Uşaklı f88db22ca2 feat: give the rest of the middlewares names 6 years ago
Barış Soner Uşaklı fdfbcc6efe feat: give names to more middlewares 6 years ago
Barış Soner Uşaklı 53793e1603 feat: give names to middlewares 6 years ago
Barış Soner Uşaklı 4650a76036 fix: #7124 6 years ago
Barış Soner Uşaklı 9f5062682d fix: unread badge
- only increase unread badge if topic or category is watched
- fix logic for "there are new posts/topics" on /unread and /recent
6 years ago
Barış Soner Uşaklı 99e0895e99 fix: move the check to get methods
all .post methods will have csrf
6 years ago
Julian Lam fbe6ccd773 style: lint fix 6 years ago
Barış Soner Uşaklı 989879a6b5 fix: #7115 6 years ago
Barış Soner Uşaklı 29b63ae7fb fix: #6979 6 years ago
Julian Lam 4fba1492c1 feat: added new middleware authenticateOrGuest 6 years ago
Julian Lam 5f3d1c76c8
fix: #7038, autoLocale logic not playing nicely with no-refresh auths (#7059)
* fix: #7038, autoLocale logic not playing nicely with no-refresh auths

- on login, req.query.lang is deleted (since it seems to be left over)
- on logout, the middleware.autoLocale is executed, which resets
  req.query.lang
- middleware.autoLocale is new, just refactored existing logic in
  webserver.js into new middleware method.

* style: tests, use lodash

* fix: timeago strings not switching languages on login or out
6 years ago
Julian Lam a07d9898df fix: #7071 buildSkinAsset won't rebuild continuously 6 years ago
Baris Usakli 67ac8e3d06 closes #7053 6 years ago
Peter Jaszkowiak ba619c7ec8 style(eslint): match operator-linebreak preferences 6 years ago
Barış Soner Uşaklı 9d28b935fd dont load uid 0, -1 from db 6 years ago
Barış Soner Uşaklı e17c4b2766 uid fixes 6 years ago
Julian Lam f96208a0c8 fix(uploads): ugly filenames on uploaded asset downloading
During regular processing, a timestamp is prepended to the filename
for any uploaded files. We don't want this to be part of the filename
if an end-user elects to download the file.

This commit adds a middleware to strip out that portion of the
basename and adds the appropriate Content-Disposition header for
files in /uploads/files

Fixes #6953
6 years ago
Barış Soner Uşaklı 69bb3293ee misc fixes
handle spider uids properly
6 years ago
Barış Soner Uşaklı b6771836cf closes #6937 6 years ago
Julian Lam a5022ce425 fix: #6922, skin assets not including plugin LESS files 6 years ago
renovate[bot] 64b9dabff8 chore(deps): update dependency eslint-config-airbnb-base to v13 (#6599)
* chore(deps): update dependency eslint-config-airbnb-base to v13

* chore: #6599, linting 😬
6 years ago
Julian Lam 501b3a79ca
Refactor skins to be built on server-side (#6849)
* WIP

* using bootswatch from npm instead of bootswatch CDN url

* feat: on-demand client css building for skins

* added ability for client-side to select a skin

* updated loading and saving logic of bootstrapSkin on client side user settings

* fix: broken test for #6849
6 years ago
Julian Lam 84433f29ab
Do not require a full refresh on login/logout (#6841)
* no-refresh login as well, plus lots of fixes for missing config on login

* replace config with new set on logout as well

* passing new payload data into new action:app.loggedIn hook, and old action:app.loggedOut hook

* fixed issues with socket.io not properly representing uid on server

* some light refactoring and cleanup

* minor cleanup, fixed spa logout not working after login

* have reconnection handler for socket.io wait 2s to confirm disconnection before reporting -- stops flicker if reconnecting immediately

* Dynamically replace chat and slideout menu on updateHeader()

... instead of just the menu items.

* more efficient calls to Benchpress and translator /cc @pitaj

* fix: chats and notification handlers not working after login

* fix: accidentally calling cb multiple times
6 years ago
Barış Soner Uşaklı f3a679e268 remove parseInts 6 years ago
Barış Soner Uşaklı 9c022afae1
Parse int (#6853)
* Store config fields as JSON in the db

Fewer parseInts

* Remove unnecessary parseInts

* remove some dupe code add tests

* remove console.log

* remove more parseInts

* WIP: read meta.configs defaults from defaults.json

remove more parseInts

* more work

* add log for failing test

* update admin pwd

* fix tests, dont require posts/cache before configs are initialized

* handle saves

* Test boolean conditions

* remove more parseInts

* Fix boolean values

* remove lots more parseInts

* removed json parsing

* renamed var to number

* categories dont have timestamp
6 years ago
Barış Soner Uşaklı 26d4e0852f use includes instead of indexOf
use _.uniq instead of filter&indexOf
6 years ago
Barış Soner Uşaklı 702be3f6de https://github.com/NodeBB/nodebb-theme-persona/issues/363 6 years ago
Julian Lam ebabcc5e3c if authenticate middleware is overridden by plugin, check for req.user and return notAllowed helper otherwise
/cc @LudwikJaniuk
7 years ago
Barış Soner Uşaklı cf75c79611
Unread changes closes #6781 (#6783)
* WIP

* more unread work

* faster teaser block handling

if user doesn't have anyone blocked don't check

* much faster filtering of blocked posts

* add missing uid

* add tidsByFilter to return

* dont load all pids to find previous non-blocked teaser

* fix unread filters

they no longer use unread/new unread/watched etc they are query strings now

* shorter nav item code

* add unreplied to filters

fix icons not clearing to 0
dont increment unread counters if there is a reply in a topic where you ignored the topic creator
7 years ago
LudwikJaniuk c7f3b76b4e DRY req props that depend on auth (fix #6727) (#6731)
* DRY req props that depend on auth (fix #6727)

authentication leads to req.loggedIn and req.uid being set. However, a
later authentication event might outdate them. Here, I create one
function for setting those properties, and make sure it also is called
on the `action:middleware.authenticate` hook, which would be such an
authentication event. If there are other places, those should be added
as well.

* fix lint errors

* fix lint error

* change exports
7 years ago
Julian Lam 3522ad0e05 Revert "closes #6664"
This reverts commit f27a0d252c.
7 years ago
Julian Lam f27a0d252c closes #6664 7 years ago
Peter Jaszkowiak 04d31fe1d4 Precompile all templates
- Benchpress compilation is 33x faster now
- Native module with JS fallback and pre-built binaries
- Dev template build is <1sec now
- Minified template build is ~5sec (uglify accounts for almost all)
7 years ago
Barış Soner Uşaklı 85a55d1740 closes 7 years ago
Julian Lam 7a53fa9469 Added block and unblock button to profile dropdown menu, #6560 7 years ago
Barış Soner Uşaklı 5287c2ea08 #6554 7 years ago
Barış Soner Uşaklı 14f6e74bad closes #6556 7 years ago
Barış Soner Uşaklı d5e85c2eb3 closes #6476, closes #6546 7 years ago
Barış Soner Uşaklı d31d8fa806 move category pageview to controllers
so topic views are tracked as category views
7 years ago
Barış Soner Uşaklı 4f893d2aff closes #6535 7 years ago
Julian Lam 99f1a5380e closes #6483 7 years ago
Barış Soner Uşaklı beadcd7857 fix tests, remove dupe exposeUid 7 years ago
Julian Lam dc386b5b23 Merge branch 'master' into user-blocking 7 years ago
Julian Lam bfee23adee basic methods and initial integration for #6463 7 years ago
Barış Soner Uşaklı 0070f5c1b2 Merge remote-tracking branch 'refs/remotes/origin/master' into develop 7 years ago
Barış Soner Uşaklı e1df8bd0f0 closes #6390 7 years ago
Barış Soner Uşaklı ae0f1847ae allow multiple origins for access-control-allow-origin header
add access-control-allow-credentials header to acp
7 years ago
Peter Jaszkowiak eaae5b52cd ACP quick actions (#6374)
* ACP quick actions

- Moved restart, build & restart, and logout into separate buttons
- Moved buttons on mobile into the side menu
- Added version and upgrade alert to header / mobile menu
- Moved version checking to server-side with a cache for rate limiting
- Changed "reload" translations to "rebuild and restart"

* Change info alert to black-on-white to match focused search bar

* Fix tests

* Fallback for failed fetch of latest version
7 years ago
Baris Usakli 52ab0a00d9 use the acp config for homePageTitle 7 years ago
Barış Soner Uşaklı 245e1a9159 closes #6334 7 years ago
Barış Soner Uşaklı 5069892b97 pass correct uid to client side
-1 spider,0 guest, >0 regular user
7 years ago
Julian Lam c25d752573 Merge remote-tracking branch 'origin/master' into develop 7 years ago
Julian Lam 98b0bdc7e1 added helmet for better standard of protection across the board 7 years ago
Julian Lam 7edc58b727 stricter Referrer-Policy to reduce unintended information leakage 7 years ago
Julian Lam 9a1f722a05 appending X-Upstream-Hostname header in dev mode 7 years ago
Barış Soner Uşaklı c707e98423 closes #6331 7 years ago
Barış Soner Uşaklı e36657d48c add tpl path to error messages 7 years ago
Julian Lam 1ce448f2a1 Merge remote-tracking branch 'origin/master' into develop 7 years ago
Barış Soner Uşaklı 575b70b5ab add some checks to templatesOnDemand 7 years ago
Barış Soner Uşaklı 379a156328 add status code to body 7 years ago
Barış Soner Uşaklı 7b6282f530 closes #6308 7 years ago
Barış Soner Uşaklı d16667a5fb closes #6304 7 years ago
Barış Soner Uşaklı ac1f7eefe5 closes #2304 7 years ago
Barış Soner Uşaklı 18ba08183c fix test 7 years ago
Baris Usakli c090ec301b fix lint 7 years ago
Barış Soner Uşaklı f7aa32cd05 dont crash if res.session.meta is not set 7 years ago
Barış Soner Uşaklı ff6c6a54c1 make upload permissions global
give upload image permission to registered users on install
add global privileges to app.user.privileges for client side use
7 years ago
Barış Soner Uşaklı 2b6410f201 Merge remote-tracking branch 'refs/remotes/origin/master' into chat-permission 7 years ago
Barış Soner Uşaklı fb97ff2265 canChat should be false if chat is globally disabled 7 years ago
Peter Jaszkowiak be00a1c013 Support for using yarn instead of npm, include unread counts on cold load (#6179)
* Close #6178

* Support for package managers besides npm

- Also fixes issue where upgrade-plugins wouldn't work
7 years ago
Baris Usakli 4a73621dca chat privilege 7 years ago
Barış Soner Uşaklı 7c1f8891a1 use helper 7 years ago
Peter Jaszkowiak fc19f3af61 Misc fixes and improvements (#6143)
* `setup` command fixes and improvements

- Enable using the `./nodebb setup` command for auto-setup with a JSON argument
- Change CLI so package-install and dependency install are separate steps
- Fix #6142

* Prevent compiling templates multiple times

- Multiple requests for same template get pooled
- Hopefully fixes the "templateFunction is not a function" error which happens if site is restarted during high-traffic times

* More helpful upgrade template
7 years ago
Barış Soner Uşaklı 2574dbc850 closes #6140 7 years ago
Baris Usakli 2065f895d5 closes #6037 7 years ago
Peter Jaszkowiak c47c47f7e3 Use less memory to build translation files (#6070)
* Change languages build to use less memory

Add graceful-fs so no ned to worry about fs limits

* Specify encoding for fs.readFile

Use eachLimit since graceful-fs handles that now
7 years ago
Peter Jaszkowiak f5385e38bf Add `/me*` route which redirects to `/user/[userslug]*` (#6063)
* Add `/me*` route which redirects to the current user's information

- `/me` -> `/user/[usertslug]`
- `/me/bookmarks` -> `/user/[userslug]/bookmarks`
- `/me/settings` -> `/user/[userslug]/settings`

etc

* Add tests for `/me/*`
7 years ago
Barış Soner Uşaklı b1ea137292 closes #6046 7 years ago
Peter Jaszkowiak e609e497b3 Provide more error information to logs
Provides full stack instead of just message
7 years ago
Baris Usakli 47143a4a09 Merge remote-tracking branch 'refs/remotes/origin/master' into develop 7 years ago
Barış Soner Uşaklı a11058bce2 closes #6004 7 years ago
Barış Soner Uşaklı 41fbf7117d Merge remote-tracking branch 'refs/remotes/origin/master' into develop 7 years ago
Barış Soner Uşaklı 056e4f0601 #6004 7 years ago
Barış Soner Uşaklı ce3e1f31ab fix for #6004 7 years ago
Julian Lam 9cbf1597cd Merge remote-tracking branch 'origin/master' into develop 7 years ago
Baris Usakli 68bcfb2883 closes #5975 7 years ago
Julian Lam cd6dcff38b Split up customJS into customHTML and customJS for better organisation (#5981)
* WIP

* fixed customJS not actually working in footer

* Moving scripts to footer, #5980

* Added upgrade scripts for #5980
7 years ago
Julian Lam 6852c92ed6 Merge remote-tracking branch 'origin/develop' 8 years ago
Peter Jaszkowiak dc87d7fc0f Use .js instead of .jst
Fix #5934
8 years ago
Julian Lam dea372a5c5 fixes #5932 8 years ago
Barış Soner Uşaklı 5cc39e8546 Merge remote-tracking branch 'refs/remotes/origin/master' into develop
# Conflicts:
#	package.json
#	src/views/admin/manage/ip-blacklist.tpl
8 years ago
Peter Jaszkowiak abffc29128 Use Benchpress (#5901)
* Use Benchpress

* Use Benchpress.compileParse

* Error for template load failure

* Use benchpressjs package

* Compile templates on demand

* Fix user settings page

* Fix admin search to exclude `.jst` files

* Fix 500-embed

So ajaxify can still show an error if the server goes down
8 years ago
Barış Soner Uşaklı 0498832317 closes #5888 8 years ago
Julian Lam 6ec1bfd660 added artificial delay on reset route so that the heat death of the universe will arrive before you manage to identify a valid reset code 8 years ago
Baris Usakli 4ac8d29f06 closes #5847 8 years ago
Barış Soner Uşaklı 493cd16f39 closes #5848 8 years ago
Julian Lam f59f48c6e1 use setImmediate 8 years ago
Julian Lam c9c27b86c4 added back logic to strip leading slashes, but after the fix to app.all 8 years ago
Baris Usakli e9639833c5 add router.all 8 years ago
Julian Lam 233297367b strip leading slashes from path if double-slash is accidentally used, stripping trailing slash from relative path retrieved from config.json 8 years ago
Baris Usakli dc110e2e3f closes #5818 8 years ago
Baris Usakli 59aeee6516 remove addExpiresHeaders 8 years ago
Barış Soner Uşaklı 923bd86662 Widgets refactor (#5817)
* widgets refactor

render widgets server side
widgets can use all the data the template can use

* fix tests
8 years ago
Baris Usakli e0de922ede Revert "widgets refactor"
This reverts commit 9e94edb5aa.
8 years ago
Baris Usakli 9e94edb5aa widgets refactor
render widgets server side
widgets can use all the data the template can use
8 years ago
Baris Usakli 7538210b07 #5772
load correct timeago settings on cold load instead of after page load
8 years ago
Marc-Aurèle DARCHE 6248e5562f Fix /apple-touch-icon not sending uploaded file
This fixes the following error:

$ wget https://nodebb.yourdomain/apple-touch-icon

28/6 09:57:06 [28332] - error: /apple-touch-icon
 Error: ENOENT: no such file or directory, stat '/home/sweet/nodebb/public/assets/uploads/system/touchicon-orig.png'
    at Error (native)
8 years ago
Barış Soner Uşaklı b64ba40c67 closes #5772 8 years ago
Barış Soner Uşaklı 22131640fd closes #5749 8 years ago
psychobunny 50367a971e req should be req. 👍 8 years ago
Barış Soner Uşaklı 08aaabd33c closes #5642 8 years ago
Baris Usakli 062bced3dd cleanup and tests 8 years ago
Barış Soner Uşaklı f57b5f4e4c refactor 8 years ago
Barış Soner Uşaklı 29135dfed3 timeago locale test 8 years ago
Barış Soner Uşaklı 01e2263c01 more tests 8 years ago
Barış Soner Uşaklı 608a7d120c error handler tests 8 years ago
Barış Soner Uşaklı 3a1eba2537 merge 8 years ago
psychobunny b3bd70235a refactor ban messaging; add ban duration to message; use bootbox instead of alert 8 years ago
Barış Soner Uşaklı 4900f21dd5 fix crash in header 8 years ago
barisusakli 33e8ecc1f4 closes #5404 8 years ago
Peter Jaszkowiak 64bf542d17 Fix HTML `lang` attribute using the `defaultLang`
Themes need `lang="{function.localeToHTML, userLang, defaultLang}"` in
their header.tpl file
8 years ago
Julian Lam d18cfced96 Merge remote-tracking branch 'origin/master' into develop 8 years ago
Peter Jaszkowiak 1ed571189c Make utils and translator easier to require
Move utils.walk to file.walk, backwards compatible
8 years ago
psychobunny 5985a8a7a3 closes #5574 8 years ago
psychobunny e121a5a798 closes #5574 8 years ago
Julian Lam 1ebbbdd3f9 Merge remote-tracking branch 'origin/master' into develop 8 years ago
barisusakli 27b030a71c test for #5523 8 years ago
Julian Lam 860999fa6c Merge remote-tracking branch 'origin/master' into develop 8 years ago
barisusakli 74d2835a1f escape body class parts 8 years ago
Julian Lam 793555a344 Merge branch 'master' into develop 8 years ago
barisusakli 992e3128bd closes #5499 8 years ago
Julian Lam af2d9fb85b Merge branch 'master' into develop 8 years ago
barisusakli e85e35cf0c closes #5497 8 years ago
barisusakli 2188036148 controllers/users refactor 8 years ago
Julian Lam ddea9f534e running eslint again 8 years ago
Julian Lam 72e77772db Merge branch 'master' into develop 8 years ago
Peter Jaszkowiak dd2b930824 Resolve merge conflicts, minify only `.js` files 8 years ago
Julian Lam 8154e29ad5 Merge branch 'master' into develop 8 years ago
Barış Soner Uşaklı 9079ee5b14 style 8 years ago
Peter Jaszkowiak 4bb49a7171 ESlint no-unused-vars 8 years ago
Peter Jaszkowiak 09e868ce5f ESlint no-useless-escape, no-else-return 8 years ago
Peter Jaszkowiak a0a50677da ESlint n-loop-func, yoda 8 years ago
Peter Jaszkowiak c4bdb72941 ESlint no-unneeded-ternary
and no-extend-native, no-sequences
8 years ago
Peter Jaszkowiak 896c8c7343 ESlint object-curly-spacing 8 years ago
Peter Jaszkowiak 3b0dd2d1ef ESlint padded-blocks 8 years ago
Peter Jaszkowiak feb8405f95 ESlint eol-last 8 years ago
Peter Jaszkowiak 41896e1fc7 ESlint lines-around-directive 8 years ago
Peter Jaszkowiak a038c66549 ESlint quotes 8 years ago
Peter Jaszkowiak 604358ecc4 ESlint keyword-spacing, no-multi-spaces 8 years ago
Peter Jaszkowiak a5a3f3089a ESlint no-mixed-operators 8 years ago
Peter Jaszkowiak b1b486f729 ESlint quote-props 8 years ago
Peter Jaszkowiak 3361a72725 ESlint no-plusplus
and no-empty, space-unary-ops
8 years ago
Peter Jaszkowiak 52f2028206 ESlint no-multiple-empty-lines 8 years ago
Peter Jaszkowiak 2ba46808a1 ESlint one-var, fix comma-dangle 8 years ago
Peter Jaszkowiak bc1d70c126 ESlint comma-dangle 8 years ago
Julian Lam fcaefbadca Merge remote-tracking branch 'origin/master' into develop 8 years ago
barisusakli 30f35c42f6 fix eslint 8 years ago
barisusakli a3cbe5e090 #5436 8 years ago
barisusakli 21eefb9760 closes #5436 8 years ago
Julian Lam 7f124a3ccf Merge branch 'master' into develop 8 years ago
Julian Lam 7ba111acdd Merge pull request #5420 from NodeBB/assets-route
/assets/uploads
8 years ago
Peter Jaszkowiak aaacdb8413 Fix #5416, uploads path config setting
- Finish moving uploads route to `/assets/uploads`
- Remove `upload_url` config setting, it was broken
8 years ago
Julian Lam 8a0a74d95e Merge remote-tracking branch 'origin/master' into develop 8 years ago
Julian Lam b5daedb7a3 Merge remote-tracking branch 'origin/master' into develop 8 years ago
Peter Jaszkowiak bb1bfb0449 Merge branch 'master' into assets-route 8 years ago
barisusakli a15aaaf389 closes #5394
dont allow socket.emits during maintenance mode
8 years ago
Julian Lam bfd16d188e Merge branch 'master' into develop 8 years ago
Peter Jaszkowiak 360a35d0a6 Resolve merge conflicts 8 years ago
barisusakli ae7f9bac98 prevent crash if uri is malformed 8 years ago
Julian Lam ae279fe57f casting some values as int, in ensureSelfOrPrivileged middleware 8 years ago
Julian Lam 73879b824c Merge branch 'master' into develop 8 years ago
Peter Jaszkowiak 05b68391dd Use `/assets` for client assets
- Route `/assets` -> `build/public`, falling back on `public`
- Moved destinations for `nodebb.min.js`, `acp.min.js`, `admin.css`, `stylesheet.css`, `templates`, and `sounds` to `build/public`
- r.js modules previously routed through express are now symlinked into `public/build/src/modules`
- minfiles no longer served from a memory cache
- use config `views_dir` setting everywhere template directory is used
- fix cache buster `v=v=`
8 years ago
Peter Jaszkowiak 2f07c18c5a All hail the glorious translation prebuilding 8 years ago
Julian Lam 9dcbe875a0 Merge branch 'master' into develop 8 years ago
Julian Lam 2a9088d571 updating checkGlobalPrivacySettings middleware to hook into write-api for auth 8 years ago
Julian Lam d29361f4c9 added additional visibility masks for profile menu hook, also added isPrivileged user method, closes #5306 8 years ago
Peter Jaszkowiak ffa2bd14f8 Fix reverse proxies breaking admin translations 8 years ago
barisusakli 53fe432d8a fix hook 8 years ago
barisusakli 97c0b33cf6 filter:middleware.render 8 years ago
Julian Lam acf2e4078b fixes #5263 8 years ago
Julian Lam 33ff5e09bb updated revoke session middleware to allow self or admin or global mod invocation, tweaked tests a bit 8 years ago
Julian Lam 23cdeeb344 linting :shipit: 8 years ago
Julian Lam a1b49a98e7 locking down session deletion route to admins and global mods only 8 years ago
barisusakli 6beacdb80c fix headers for new installs
encodeURI(undefined) === "undefined"
8 years ago
Julian Lam b7fa8c1db1 fixes #5230 8 years ago
Peter Jaszkowiak c5237443cd Standard language codes (#5218)
* Use standard language codes. Fallback for plugins.

* Fix transifex config

* Tab vs space here for some reason

* Remove redundancies

* config.relative_path instead of allcaps

* added upgrade script for existing users' accounts
8 years ago
barisusakli 17f8afd0dc closes #5230 8 years ago
barisusakli 38bc8ad5ae maintenance tests 8 years ago
barisusakli 2476ab3684 closes #5202 8 years ago
barisusakli ce9be7e694 closes #5132 8 years ago
Julian Lam 663f05b972 adding back banReason to header rendering, as it regressed in 1f10e0b 8 years ago
Julian Lam 1f10e0b287 fixed #5166 8 years ago
Julian Lam f97f45a138 logic to show a modal to banned users when they try to log in via SSO 8 years ago
Sergii Paryzhskyi e515b791da Fix eslint rules (#5117)
* Fix semi linter rule

* Fix semi-spacing linter rule

* Fix no-undef-init linter rule

* Fix space-before-blocks linter rule
8 years ago
barisusakli a995afbfe0 fix style 8 years ago
Julian Lam 2463e85c0d allowing moderators access to the account info page 8 years ago
Barış Soner Uşaklı 041022db63 #5145
dont crash if res.locals.config is undefined
8 years ago
barisusakli c972a339e6 fix value 8 years ago
barisusakli 862678eefe encodeURIComponent header values 8 years ago
Julian Lam ead4de6c6f Merge branch 'fix-some-code-lint' of https://github.com/HeeL/NodeBB into HeeL-fix-some-code-lint 9 years ago
Julian Lam eb16eb318e exposing links to moderator tools pages in user logged-in dropdown, closes #5113 9 years ago
HeeL 4a3c31b2dc Fix space-before-function-paren linter rule 9 years ago
HeeL 3fa1c1f927 Fix space-infix-ops linter rule 9 years ago
barisusakli 98fff29869 closes #5082 9 years ago
barisusakli 15409f92cd escape history data, hide moderation note in api 9 years ago
barisusakli 282ac56bf6 adde expose methods back
used by plugins
9 years ago
barisusakli aefba6e2b1 removed some methods
helpers.getBaseUser
exposeUid, exposeGroupName
9 years ago
barisusakli 478da29423 closes #5020 9 years ago
barisusakli 07fe5057e1 make sure validator.escape() receives strings only 9 years ago
barisusakli a0f2e8a8ec use req.uid 👍 9 years ago
barisusakli 8f408faf46 organize middlewares
removed app.locals.middleware
middlewares can be required anywhere, ie in controllers
9 years ago
barisusakli f7540a7edc closes #4811 9 years ago
barisusakli 409621c661 closes #4843 9 years ago
Mathias Schreck ce9ee62fa0 Handle callback errors 9 years ago
barisusakli 2103880d61 only extend 5mins if less than 5mins left 9 years ago
barisusakli 514c12aa68 closes #4885 9 years ago
barisusakli 2606844d98 closes #4868 9 years ago
Julian Lam 71a5e4a8a1 better error handling for session revocation if no login session is present, #4214 9 years ago
Ben Lubar 40b57d6cbe add "Admin Approval for IPs", which works like Normal for new users and Admin Approval for sockpuppet accounts (#4882) 9 years ago
barisusakli fcf145fc81 403 if not logged in, show error 9 years ago
psychobunny f3c48eb14a oops, #4832 9 years ago
psychobunny 6df3157748 closes #4832 9 years ago
barisusakli 8ea5752b50 added url property to all routes 9 years ago
akhoury 46a57f5d5c rm cls because it's not ready yet 9 years ago
Julian Lam f03018b7cc updated middlewares so if you have not completed registration, you will be required to do so 9 years ago
barisusakli bdc23b4a8d add reputation to app.user 9 years ago
Julian Lam 149565169b closes #4658 9 years ago
Nate Lee 07c59ae174 changed cls.getItem to equal cls.get from cls.set
based off of naming schema
9 years ago
Dravere 2fd6391081 Made the session cookie aware of the possible relative path (#4663) 9 years ago
Julian Lam ef4a94857d fixed admin lockout timer for subfolder installs @barisusakli :trollface: 9 years ago
Julian Lam 437770538c work-in-progress commit for #4655 9 years ago
barisusakli 16ba7ee840 fix #1972 9 years ago
barisusakli 2e0763b0a8 closes #1972 9 years ago
Julian Lam 621e0d145e closes #4617
Serving english timeago strings from server instead of round-trip
re-request on failure.
9 years ago
Barış Soner Uşaklı f0685468f8 Merge pull request #4162 from akhoury/master
add continuation-local-storage (CLS) support
9 years ago
barisusakli 702597d759 change /user/uid to /uid/:uid
so it doesn't conflict with actual user routes
was causing incorrect redirects if a user had a numeric userslug
@julianlam
9 years ago
psychobunny 4cdeae33e5 don't add "page-xxx-" class if trailing slash exists 9 years ago
barisusakli eb0aea6390 add /user/<uid> and /post/<pid> redirects
change notifications to use new redirects
9 years ago
barisusakli cef7fb545b closes #1972 9 years ago
barisusakli 25f3a31ff1 closes #4587 9 years ago
Julian Lam 2e2c8b8e77 fixes #4584 9 years ago
Aziz Khoury 01ee020750 bring back disconnect only for CLS purposes 9 years ago
Aziz Khoury 53e9627001 unify request as a store key for both http and websockets calls 9 years ago
pichalite c5e62f9a58 fixes #4454 9 years ago
barisusakli 86106971c4 closes #4382 9 years ago
Ben Lubar 3c607f2612 fix two crashes 9 years ago
barisusakli c71ffed69c closes #4362 9 years ago
barisusakli b1284f900d up toobusy default 9 years ago
Julian Lam 184a2c4540 IP blacklist functionality -- re: #4367
Squashed commit of the following:

commit 5c42fd732d091fa66cf5b45a2af5e1697cc1efcd
Author: Julian Lam <julian@nodebb.org>
Date:   Mon Mar 14 17:29:45 2016 -0400

    allowing blacklist.test to be called synchronously

commit 979faf2dba5e6f6e2ae1bd07341e63678438daf1
Author: Julian Lam <julian@nodebb.org>
Date:   Mon Mar 14 17:01:14 2016 -0400

    added plain ipv6 support and finished middleware logic

commit d4b72fc1aadff34df3ed7dec52ca8d3c3728a078
Author: Julian Lam <julian@designcreateplay.com>
Date:   Fri Mar 11 16:05:31 2016 -0500

    WIP IP Banning logic middleware

commit f08b2553890c5522b6a1eaf521fe4e94df40574a
Author: Julian Lam <julian@designcreateplay.com>
Date:   Fri Mar 11 15:26:27 2016 -0500

    tweaks to ACP, rule validator

commit 868abacaa494e6b8a88bd4ea429b1b066a9ecb2e
Author: Julian Lam <julian@designcreateplay.com>
Date:   Fri Mar 11 13:50:05 2016 -0500

    IP Banning ACP page, styling, save&load functionality
9 years ago
barisusakli c156d1cb34 closes #4344 9 years ago