51b7eca119
fix: run every hour, dont show message if average_time is 0
4 years ago
04f4429f72
Resolve #7514 - optional timer for registration queue ( #8796 )
...
* feat: #7514 Optional timer for registration queue
* feat: show minutes in average time
* fix: don't show total number of minutes
* feat: implement requested changes
* fix: just store minutes instead of milliseconds
* feat: set default values
4 years ago
bcccb331db
docs: openapi schema for user/group exist check, session deletion
4 years ago
dc9668e417
fix: pass length to messaging checkContent hook
4 years ago
567c5f2056
fix : #8869 , dont escape category title,description twice
4 years ago
f300c933a5
refactor: move session revocation route to write api
4 years ago
9c5c32d4a5
feat: #8864 , add action:events.log
4 years ago
62c0454cfe
feat: show db info side by side
5 years ago
a0164b1c38
fix: use header/footer cache in prod
5 years ago
05a92885f2
fix: add missing maxAge to cache
5 years ago
2e44639210
fix: guest header/footer cache
...
allow clearing individual caches
5 years ago
f1f9b225b0
feat: #8824 , cache refactor ( #8851 )
...
* feat: #8824 , cache refactor
ability to disable caches
ability to download contents of cache
refactor cache modules to remove duplicated code
* fix: remove duplicate hit/miss tracking
check cacheEnabled in getUncachedKeys
5 years ago
6255874e32
feat: move mkdirp to beforeBuild so it doesnt get called twice
5 years ago
74951f5967
fix : #8846 , possible fix
5 years ago
0b30efba31
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
16d03975a0
fix: winston error message
5 years ago
d263192271
feat: group exists API call in write api
5 years ago
1446cec77f
feat: user exist route in write api
5 years ago
6b196a207f
fix: permanent redirect on user api redirect shorthand
5 years ago
f2bb42c076
fix: user exist route needs no authentication
5 years ago
60e1e99b4f
feat: new shorthand route /api/v3/users/bySlug/:userslug
...
closes #8844
5 years ago
512f6de6de
feat: allow passwords with length > 73 characters ( #8818 )
...
* feat: allow passwords longer than 73 characters
Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.
https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords
* feat: add additional test for passwords > 73 chars
* fix: remove 'password-too-long' error message and all invocations
* test: added test to show that a super long password won't bring down NodeBB
* fix: remove debug log
* Revert "fix: remove 'password-too-long' error message and all invocations"
This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.
* fix: added back password length checks, but at 512 chars
As processing a large string still uses a lot of memory
5 years ago
c61dee4b62
fix : #8840 , don't crash if /compose route is called with no query params
5 years ago
9e3eb5d41a
feat: #8821 , allow guest topic views
5 years ago
f68bce86a9
fix: XSS in event:banned messaging modal
5 years ago
76cd5b0fc1
fix : #8836 , truncate fullname
5 years ago
eec630f1ef
fix(acp): max-height for plugin menu list
5 years ago
891a1ea2af
fix : #8827 , do not require admin:users privilege to ban users
5 years ago
4b63f9937c
fix: check is banned in buildHeader
...
remove unused banReason
remove generateHeader function
5 years ago
a338f52780
feat: #8823 , remove hardcoded write concern
5 years ago
08ff4041aa
fix: missing await
5 years ago
c0f699e655
fix: disallow registration attempts with password length > 4096
...
This is a stopgap measure for v1.15.0
5 years ago
4818ec377e
fix: missing await
5 years ago
6e85920cb6
feat: allow mods/admins to see deleted posts on user profile
5 years ago
87bff6cd65
fix: broken test
5 years ago
dda5d42610
fix: restore old behaviour of empty json w/ 401 code in admin middleware
5 years ago
15e0731dd9
fix: deprecate middleware.isAdmin
...
Also, handle admin logout timer in middleware.admin.checkPrivileges
5 years ago
4439864ce0
fix: post editing not taking plugin hook results into account
5 years ago
a02ae6f5df
refactor: simpler check in user.blocks.filter
5 years ago
27016d221c
feat: rearrange buttons on manage/users
5 years ago
57ed6be78b
fix : #8805 define our own name for write API v3
5 years ago
266d7587b2
refactor: remove usage of middlewares
...
Specifically, middleware.isAdmin|exposePrivilegeSet|exposePrivileges
5 years ago
a6a52430ce
fix: remove setCategorySort and setTopicSort
5 years ago
aa8faf58a0
refactor: remove /users/{uid}/settings/{setting} route
...
@baris Also, I am now allowing the following properties to be saved in User.saveSettings:
- categoryTopicSort
- topicPostSort
- setCategorySort
- setTopicSort
5 years ago
6ac73ccb7e
feat: #8801 , disable express compression by default
5 years ago
3c98cd3d95
fix: topic object in post editing data return
5 years ago
1392d064a1
fix(writeapi): normalizing data
5 years ago
ec03af7a38
feat: allow passing subset of user settings on update route
5 years ago
618e098305
fix: bug where token generation route would fail on null case
5 years ago
b156b8b573
feat: wip, write api tests framework
...
re-using read api tests if possible
5 years ago
2e9f27d8ff
fix: typo
5 years ago
93bdfe2f10
perf: reorder async calls
5 years ago
88a07e69b5
feat: add filter:category.getFields
5 years ago
a05905f196
performance improvements ( #8795 )
...
* perf: nconf/winston/render
cache nconf.get calls
modify middleware.pageView to call next earlier
don't call winston.verbose on every hook see https://github.com/winstonjs/winston/issues/1669
translate header/footer separately and cache results for guests
* fix: copy paste fail
* refactor: style and fire hook only log in dev mode
* fix: cache key, header changes based on template
* perf: change replace
* fix: add missing await
* perf: category
* perf: lodash clone
* perf: remove escapeRegexChars
5 years ago
0db0231cff
feat: move postercount to topic hash
5 years ago
203db47b30
fix: return early for guests/spiders
5 years ago
156e1396f2
fix: #8789,cache meta.settings
5 years ago
a7b6d0dfe5
feat: add free and total mem usage to info
5 years ago
c26f2b6599
feat(writeapi): user settings API
5 years ago
db63f5e3f0
fix : #8781
5 years ago
177a961000
feat: new filter filter:teasers.configureStripTags
5 years ago
d68ffea80d
feat: send 'Vary' header when ACAO header set
5 years ago
1f43e98f8b
fix: allow admins adding users to global moderators
...
add new test
5 years ago
bbafa1b82a
Revert "fix: [breaking] send configured config URL as origin if not custom"
...
This reverts commit 205a10308e
5 years ago
a691be5952
fix: incorrect logic for post history editable bool
5 years ago
205a10308e
fix: [breaking] send configured config URL as origin if not custom
...
This is a breaking change if your install uses multiple URLs to access. You will need to update the Access-Control-Allow-Origin header in ACP > Advanced > Headers to supply all URLs you use to access your site
5 years ago
7a019494e8
feat: add filter.topics.getPostReplies
5 years ago
7a8f704900
fix : #8776 some users unable to restore old versions via history
5 years ago
b26e9b5993
fix : #8595 , dont save escaped data when renaming groups
5 years ago
ea31f50554
refactor: show more lines of stack trace
5 years ago
7bddec93ec
fix: sortby
5 years ago
b3619d3d47
fix : #8774
5 years ago
ff4fcc23b6
Update bundled logos with new branding ( #8702 )
...
* feat: updating logo assets, square logos missing still
* fix: squared logo for touch icon and notification fallback
* fix: update link to favicon
* feat: add default touch icon sizes, if one isn't uploaded
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
5 years ago
e362c342a3
fix : #8630 , sort extra deps
5 years ago
d9a16855d0
refactor: posts api
5 years ago
272e73da53
refactor: post restore/delete/purge
5 years ago
9738e20207
refactor: merge post.edit
...
fix: dont fadeout/fadeint if title/post didnt change
5 years ago
2279e37261
refactor: deprecate socket.emit('users.search') use api route
5 years ago
083c74e059
refactor: api categories
5 years ago
e78c498e84
fix: missing doTopicAction, fix wrong api params
5 years ago
bc880ee0ca
refactor: remove sockets.reqFromSocket
5 years ago
9d81660e24
Revert "Revert "fix: appropriate 404 handling for write API calls""
...
This reverts commit 135c2d6c7d
5 years ago
135c2d6c7d
Revert "fix: appropriate 404 handling for write API calls"
...
This reverts commit b6cce75d97
5 years ago
9ee3cb9b62
refactor: topic follow/ignore to use api lib
5 years ago
68d6818bca
refactor: topic tools' actions to use api lib
5 years ago
21974a77f8
feat: topic reply to use api lib (also + missing file)
5 years ago
40598b368e
refactor: topic creation to use api lib
5 years ago
b6cce75d97
fix: appropriate 404 handling for write API calls
5 years ago
ede9435f0e
feat: send 401 for invalid-uid
5 years ago
c913900ed6
feat: async/await admin/search
5 years ago
bf480ee58b
refactor: setupApiRoute signature
5 years ago
688d7a2cc2
refactor: remove unused middleware
5 years ago
b2ff1594b8
fix: redis hget
...
'node_redis: The HGET command contains a invalid argument type.\n' +
'Only strings, dates and buffers are accepted. Please update your code to use valid argument types.'
5 years ago
e98285dbbb
fix: reimplementing isPrivilegedOrSelfAndPasswordMatch
5 years ago
84a179f48c
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
3f347baadb
fix: socket user bans
5 years ago
14f9d8b0e5
feat: send back 403 on no-privileges error
5 years ago
222b4c9533
fix: broken tests from api change
5 years ago
2d252f2fa4
refactor: user bans to use api lib
5 years ago
7d86be2bc2
fix: tests
5 years ago
e367c5403e
refactor: move groups.leave, fix some tests
5 years ago
bbbd9fee85
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
960e925e40
refactor: change password/user follow to use api lib
5 years ago
081c4fa6d4
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
430e7f5834
refactor: user deletion to use api lib
5 years ago
8ae1f81cf4
feat: refactor groups.delete
5 years ago
77481947f0
refactor: socket profile update to use api lib
5 years ago
31ae8a8323
refactor: socket profile update to use api lib
5 years ago
d69e503d21
feat: move groups.join to api
5 years ago
d07f0081b7
fix: add missing file
5 years ago
23086daead
refactor: user create and profile update to use api lib
5 years ago
5e2caf19f5
refactor: use single function for api code
5 years ago
25e4a09816
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
4418ff0716
fix : #8768
5 years ago
cc6e995ee2
fix: api bug where user profile editing continued even if not allowed
5 years ago
43afe7ffab
refactor: async/await src/user/approval
5 years ago
bae0f343e1
fix: module build
5 years ago
1fd2eba6f2
refactor: async/await
...
src/cli/manage.js
src/meta/build.js
src/meta/css.js
src/meta/js.js
5 years ago
b295d15eae
fix: tests
5 years ago
d89477cad0
refactor: use app.render
5 years ago
9dd3cc0483
feat: allow plugins to define api routes
...
via new plugin hook static:api.routes
5 years ago
a4ba23899e
feat: require https if nodebb is configured with https url
5 years ago
e6ea71c95a
fix: test
5 years ago
8c6a559188
fix: timestamp
5 years ago
331d236f6e
fix : #8763
5 years ago
a481024d27
fix: lastonline again
5 years ago
71d82ec8e0
fix: caret
5 years ago
97628e2ff2
fix: lastonline values
5 years ago
1289c10568
fix: upgrade script
5 years ago
59bbede8c7
fix: cant join system groups
5 years ago
a411df1321
fix: tests
5 years ago
dd7424e5b5
refactor: remove unused search call
5 years ago
2d6ea6e505
Merge branch 'master' into admin/users
5 years ago
a2edb86dfb
feat: change user search to use filters array
5 years ago
959314c921
feat: add filter
5 years ago
1e07886f30
feat: require csrf token if not using bearer token
5 years ago
933989e013
Merge branch 'master' into admin/users
5 years ago
682e926c6b
feat: #8662 , verified/unverified user groups
5 years ago
30b3fedca4
fix: password reset to invalidate all existing reset tokens for that uid
5 years ago
700e1e4340
feat: more fixes
5 years ago
40a05b70ef
feat: more work
5 years ago
b038ac07d8
feat: wip admin/users
5 years ago
7beaf49028
feat: set unread false for guests
5 years ago
30d6a2b84e
fix : #8756 , pass missing req to mock
5 years ago
1ee9384875
fix : #8757 , allow all slashes in category route
5 years ago
dc29f4dca2
refactor: switch to using slugify module
5 years ago
bddfcb5867
feat: #8734 , add slugify module, deprecate utils.slugify
5 years ago
f16c8268cf
feat: #8734 , move bootstrap-tagsinput to package.json
5 years ago
eab7489ec5
feat: #8734 , move deserialize/serialize to package.json
5 years ago
948f26143c
feat: #5964 , #8734 remove colorpicker
5 years ago
aedd28e0a6
fix: module name
5 years ago
cc705e5e2b
feat: #8734 , move sortable to package.json
5 years ago
300a87559f
feat: #8734 , move bootbox to package.json
5 years ago
420a312982
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
3b231360d3
feat: load jquery-form before using
5 years ago
fda2aedfd8
feat: #8734 , jquery-ui, jquery-form, timeago ( #8748 )
...
* feat: #8734 , jquery-ui, jquery-form, timeago
get rid of forum/footer.js move that code to app.js & wait for app to load before calling ajaxify.end
make sockets.js a requirejs module
move jquery-ui to node_modules and load via requirejs
move jquery-form to node_modules and load via requirejs
move timeago to node_modules and load via requirejs
only include the css for needed jquery-ui widgets
* feat: keep socket/io global for backwards compat
* refactor: move socket listener to chat
5 years ago
ae3a231fce
feat: #8734 , remove semver.browser
...
use compare-versions as a module
5 years ago
9a5b8a798a
fix: category RSS feed was displaying deleted topics
5 years ago
2c1897b373
feat: #8734 , move slideout to package.json
5 years ago
9c157de05d
feat: #8734 , move tinycon to package.json
5 years ago
45e8a4d588
fix : #8734 make nprogress module
5 years ago
43589a744d
feat: #8734 , move visibilityjs to package.json
5 years ago
8af30a51b5
fix: regression caused by 7545951725
...
/cc @psychobunny
5 years ago
a46cbb623d
feat: #8734 , move nprogress to package.json
5 years ago
aa08f8826c
feat: #8734 move r.js to package.json
5 years ago
b3ed26ac2c
feat: revoke user sessions above threshold ( #8731 )
...
* feat: revoke user sessions above threshold
* fix: removed translations from en-US
* fix: defined default maxUserSessions in install\data\defaults.json
5 years ago
4a63c20a72
chore: some optimizations for codeclimate
5 years ago
b8703ba9f6
fix(writeapi): tests
5 years ago
8ecef7b891
refactor: middleware.assert.*
5 years ago
cfee431c53
feat(writeapi): commented-out stub code for file upload
5 years ago
f870721fca
feat(writeapi): file deletion route
5 years ago
a55b381791
feat(writeapi): admin settings update route
5 years ago
2ec838fc59
feat(writeapi): token generation/delete routes, ACP updates
5 years ago
c7d15dfa94
feat: filter:settings.get plugin hook
5 years ago
3ea1aa4780
refactor(writeapi): update route prefix to api/v3, default error option
5 years ago
f67824719c
chore(writeapi): cleanup
5 years ago
0973feea16
feat(writeapi): post bookmarking
5 years ago
9942c248eb
feat(writeapi): post voting
5 years ago
5e2a3ea6ec
refactor(writeapi): post.tools.purge no longer a method
5 years ago
414169fdfa
feat(writeapi): post delete/restore/purge
5 years ago
f66c2fb60f
feat(writeapi): post editing
5 years ago
1605e5e443
feat(writeapi): topic tags
5 years ago
9be5629458
feat(writeapi): topic follow/ignore
5 years ago
da25ce4d09
feat: topic delete/restore/purge/(un)pin/(un)lock
5 years ago
675a62dadd
fix: remove debug log
5 years ago
5fc7e7bfd0
feat: add new api page to ACP menu
5 years ago
49652e6f1b
feat: management of API tokens via ACP
5 years ago
8e89f34dbf
fix: bad logic in group assertion middleware
5 years ago
8e7baac6ef
fix(writeapi): calls to profile editing routes 200 even if user DNE
5 years ago
7757f965eb
fix: errors thrown if no password sent in to profile edit route
5 years ago
549ca11056
fix: bug where middlewares seemingly ran in parallel
5 years ago
6096f74ab2
feat(writeapi): adding missing files
5 years ago
4c833d0bf0
feat(writeapi): topic posting and replying
5 years ago
40dc1c38d3
feat(writeapi): added DELETE /groups/:slug/membership/:uid route
5 years ago
68ecf41ecf
fix(writeapi): client-side group join API call
5 years ago
952dc211dd
feat(writeapi): added group joining and deletion
5 years ago
d044c3223e
feat(writeapi): abstracted ajax calls out to new api module
5 years ago
ba345e53e8
feat(writeapi): added POST /api/v1/groups
5 years ago
49994f3a15
fix(openapi): moved write-api to public/openapi
5 years ago
3072de4812
feat: added DELETE /api/v1/categories/:cid route
5 years ago
e942ad8101
feat: added PUT /api/v1/categories/:cid route
...
Deprecated admin.categories.update socket call
Showing stack trace in console for errors, when in development mode
5 years ago
dc666fd8a9
feat: added POST /api/v1/categories route
5 years ago
a5af2dc819
feat: added PUT/DELETE /api/v1/users/:uid/ban routes
5 years ago
db5c5b2cfb
fix: follow route to match spec
5 years ago
b5bbcbaeaa
feat: added POST and DELETE /api/v1/users/:uid/follow routes
5 years ago
7aed174ebc
feat: added PUT /api/v1/users/:uid/password route
5 years ago
a1ddc210b2
feat: added DELETE /api/v1/users/:uid and DELETE /api/v1/users
5 years ago
d15d9e4492
fix(refactor): patching helpers.tryRoute for API routes, some re-org
...
Thanks @barisusakli for the tip
5 years ago
d8879d21db
fix: error handling with POST /api/v1/users
5 years ago
58043e07ba
fix: use POST call for user creation in ACP
...
- Not entirely sure about error handling yet, more research needed
- Also added socket method deprecation utility method
5 years ago
bba2a4638c
fix: user creation POST route returns user data, updated openapi spec
5 years ago
7b6d43bcc8
feat: added checkRequired middleware for API calls
5 years ago
fd67355b03
fix(writeapi): authenticate middleware logic to work better with await
5 years ago
f6433ef2c5
fix(refactor): merging write-api auth middlewares with core middlewares
5 years ago
ec5c48b188
feat: migrating write-api skeleton into core
5 years ago
264818e517
fix: use proper api url
...
no need to parse all tags since https://api.github.com/repos/NodeBB/NodeBB/releases/latest gives the latest non-prerelease, non-draft releases
5 years ago
8eb62e2210
fix: tests, get latest release tag recursively
5 years ago
cdb794888d
style: linting
5 years ago
ed092bf6b5
refactor: remove posts.tools.purge
...
moved the check to socketPosts.purge
5 years ago
dde5b6b814
fix: unable to register async method as response hook listener
...
Also fixes #8723 , /api/config now runs middleware.authenticateOrGuest
5 years ago
cb2f6f7c4a
fix: test
5 years ago
7bf6d3b8eb
fix: dont let mods load postqueue for a cid they are not a mod of
5 years ago
2ea9768e00
fix: show disabled categories in admin&mods
5 years ago
fbd85680fb
fix: spec
5 years ago
5d9a868142
feat: category filter on post queue ( #8710 )
...
* feat: category filter on post queue
category filter module
* feat: add spec
5 years ago
7545951725
chore: refactor src/emailer.js
5 years ago
1aa336d837
refactor: shared constants ( #8707 )
...
define plugin name and theme name regexs in one location for consistency
define various shared paths in one place for consistency
5 years ago
e60357d20d
feat: #6594 , add top/popular sections to digest email ( #8709 )
5 years ago
55d5cccf2e
Document deprecations and remove old ones ( #8706 )
...
* chore: document deprecation removal versions
* chore: remove deprecations 2+ versions old
5 years ago
017af63fb0
fix : #8686 , deprecate `plugin.json/library` ( #8705 )
...
and also fix deprecated hooks with no alternative
5 years ago
5441651ea7
fix: update "install plugins" link to go to the download tab
5 years ago
38f88fc563
fix : #8699 tags route is case sensitive, though tags are not
5 years ago
f4d76f1edd
feat: move service-worker.js into its own file
5 years ago
14ba1a6dbb
feat: analytics:maxCache setting in ACP
...
I removed a TODO from core. Watch your head as flying pigs are abound
5 years ago
7f58e3ab09
fix: error on `reset -p` if plugin is not active
...
No need to throw error if plugin was not active, just silently OK
5 years ago
1e5621c049
fix(deps): update dependency sanitize-html to v2
5 years ago
9c5b690799
feat: up recommended size to 512x512 + ACP labels for PWA
5 years ago
6478b32d0e
feat: upload maskable icon for PWA
5 years ago
b12e8d6312
feat: show top 5 trending plugins in new tab in Extend > Plugins
5 years ago
07af621381
fix: typo in getCompatiblePlugins
5 years ago
54705cc432
fix: typo
5 years ago
5172d73137
feat: add theme-color meta tag for browser address bar
5 years ago
f69697b3fa
feat: basic service worker, minimum requirement for for a2hs; see #8126
5 years ago
31528a5202
fix: manifest - use absolute URL for start_url
5 years ago
46800b6639
fix: prefer webmanifest extension over json
...
https://w3c.github.io/manifest/#media-type-registration
5 years ago
4fc84e9f5c
chore: lint notifications.js
5 years ago
5b427a0c3b
feat: option in ACP to configure notification/email delay for chats
5 years ago
f85fe7faff
don't invite an already invited email ( #8688 )
...
* don't invite an already invited email
* add email-invited translation string
5 years ago
5078a8df25
ttl/pttl ( #8689 )
5 years ago
16039b1117
refactor: post edit
5 years ago
Barış Soner Uşaklı
Opliko
Julian Lam
Barış Soner Uşaklı
psychobunny
cryptoethic
Peter Jaszkowiak
Renovate Bot
Timothy Fike