1bf263c4a2
9622 ( #9625 )
...
* fix : #9622
dont allow regular user to remove system tags
* refactor: add guest/spider check to isPrivileged
string/trim tag
4 years ago
84e065752f
fix : #9622 ( #9623 )
...
dont allow regular user to remove system tags
4 years ago
8168c6c407
fix: purge uploaded images accordingly #9606 ( #9611 )
...
* fix: purge uploaded images accordingly
* fix: tests
* fix: relative paths
4 years ago
f6c14d6b62
fix: introduce artificial delay + delay fudging on invalid email during reset token generation
4 years ago
8c952aa381
fix: lint
4 years ago
be19f27f40
feat: add filter:categories.categorySearch
4 years ago
2b42e7edb0
chore: lint
4 years ago
6f73261186
fix: extra ')'
4 years ago
d07229aa6b
chore: fix indentation
4 years ago
edcba61aa9
fix: disallow editing of other users' notes
...
Feel free to close this if it is intentional, but as you are not allowed to delete other users notes I expect you shouldn't be able to edit them. Editing another users post also changes ownership, allowing you to then delete it.
I also added `error:` to the errormessage so that they display properly.
4 years ago
0096cf178a
refactor: bubble other errors
4 years ago
a9bb108802
fix: wrong error message checked
4 years ago
ec6d1e2321
fix : #9507 session reroll causes socket.io to become confused ( #9534 )
...
* fix : #9507 session reroll causes socket.io to become confused
* fix: added return
* fix: simpler logic for error handling
* fix: overly sensitive catch
4 years ago
b40fc4b64d
feat: #9511 send notifications on accept/reject
4 years ago
ed534f34f5
fix: buildReqObject headers for socket.io calls
4 years ago
60eed8d89f
fix: let recent replies respect oldest/newest sort settings
4 years ago
077330b764
feat: scheduled topics ( #9399 )
...
* feat: scheduled topics
* refactor: linting fixes
* fix: tests
* fix(test): race condition
* fix: make a single request
4 years ago
d8ff9851a3
fix: typo in switch..case
4 years ago
6aa60b63b5
fix: category search not using uid
4 years ago
a8f7b24452
fix : #9395 , pass all data from client to Topics.reply ( #9396 )
...
* fix : #9395 , pass all data from client to Topics.reply
so plugins can set custom fields
refactor and use setDefaultPostData
* fix: circular json error
* refactor: change params
4 years ago
e789fe8d2a
fix : #9383 , don't show deleted topic titles in inf scroll
4 years ago
52082e1296
feat: add resolve flag to post tools
4 years ago
3aa26c4df2
fix : #9339 , only log email errors once per digest, notification push
...
show notice in acp
4 years ago
c1b3079d93
feat: category privilege API routes
...
closes #9342
4 years ago
0af9d26fe5
feat: change uploadCroppedPicture to use updateProfile as well
4 years ago
a598abcd8e
feat: use updateProfile for picture change
...
so it triggers action:user:updateProfile
4 years ago
1155b0c42f
feat: allow payload to be passed to emailer test method
4 years ago
955021247e
feat(user): icon background selector in change picture modal
4 years ago
ed3d9dcbbf
feat: pass post object to filter:post.tools
4 years ago
0e07f3c9ba
feat: allow defining a list of system tags
4 years ago
9ce6f8ad93
feat: add tag filter to getSortedTopics
4 years ago
3595473485
feat: load user posts/topics via xhr on infinitescroll
4 years ago
a5fa212fc7
fix: wait for event.log to finish before killing process
4 years ago
670cde78da
feat: add invalid event name to error message
4 years ago
cc9d6fd08b
chore: eslint max-len
4 years ago
5c2f0f0557
chore: eslint no-restricted-syntax
4 years ago
23f212a4c0
chore: eslint prefer-destructuring
4 years ago
dab3b23575
chore: eslint no-var, vars-on-top
4 years ago
b56d9e12b5
chore: eslint prefer-arrow-callback
4 years ago
707b55b6a5
chore: eslint prefer-template
4 years ago
4ee0f1459d
chore: eslint import/newline-after-import
4 years ago
47299ea587
Categories refactor ( #9257 )
...
* feat: wip categories pagination
* feat: add subCategoriesPerPage setting
* feat: add load more sub categories button to category page
* fix: openapi spec
* feat: show sub categories left on category page
hide button when no more categories left
* breaking: rename categories to allCategories on /search
categories contains the search results
* fix: spec
* refactor: remove cidsPerPage
* fix: tests
* feat: use component for subcategories
* fix: prevent negative subCategoriesLeft
* feat: new category filter/search WIP
* feat: remove categories from /tag
* fix: dont load all categories when showing move modal
* feat: allow adding custom categories to list
* breaking: dont load entire category tree on post queue
removed unused code
add hooks to filter/selector
add options to filter/selector
* feat: make selector modal work again
* feat: replace old search module
* fix: topic move selector
* feat: dont load all categories on create category modal
* fix: fix more categorySelectors
* feat: dont load entire category tree on group details page
* feat: dont load all categories on home page and user settings page
* feat: add pagination to /user/:userslug/categories
* fix: update schemas
* fix: more tests
* fix: test
* feat: flags page, dont return entire category tree
* fix: flag test
* feat: categories manage page
dont load all categories
allow changing root category
clear caches properly
* fix: spec
* feat: admins&mods page
dont load all categories
* fix: spec
* fix: dont load all children when opening dropdown
* fix: on search results dont return all children
* refactor: pass all options, rename options.cids to options.selectedCids
* fix : #9266
* fix: index 0
* fix: spec
* feat: #9265 , add setObjectBulk
* refactor: shoter updateOrder
* feat: selectors on categories/category
* fix: tests and search filter
* fix: category update test
* feat: pagination on acp categories page
show order in set order modal
* fix: allow drag&drop on pages > 1 in /admin/manage/categories
* fix: teasers for deep nested categories
fix sub category display on /category page
* fix: spec
* refactor: use eslint-disable-next-line
* refactor: shorter
4 years ago
53e0d4d2e0
feat: banned-users group
4 years ago
d1364c3130
Categories refactor ( #9233 )
...
* feat: wip categories pagination
* feat: add subCategoriesPerPage setting
* feat: add load more sub categories button to category page
* fix: openapi spec
* feat: show sub categories left on category page
hide button when no more categories left
* breaking: rename categories to allCategories on /search
categories contains the search results
* fix: spec
* refactor: remove cidsPerPage
* fix: tests
* feat: use component for subcategories
* fix: prevent negative subCategoriesLeft
4 years ago
5bc1f5b4e8
fix : #9231 , fix redis pubsub connection
...
regression from fdfbc90255
4 years ago
d85ad10d34
fix: restored sanity checks for post move socket calls
4 years ago
966c4117ec
refactor(api): post move to write API
4 years ago
e118e59ce0
refactor(api): post diffs to use write API
4 years ago
1968bf50f1
fix : #9163 , fix total connection count on ACP
...
sockets.sockets is a JS map in 3.x
4 years ago
9ecfac9b68
feat(api): #9123 , migrate rest of the getObject controllers to Write API
4 years ago
e267f29584
feat(api): #9123 , migrate /api/post/pid/:pid to Write API
4 years ago
2874036024
fix: tests
4 years ago
3aa5beb832
feat: allow multiple privileges to be defined for a given admin socket call
4 years ago
80ee3dfbd1
fix(api): tests
4 years ago
931105e6cb
fix: dont show deleted posts in navigator
4 years ago
32e36f7b2e
feat(api): group ownership API route, switch client-side to use API route
4 years ago
1cd2689cf6
refactor(api): deprecated groups update socket in favour of API lib
4 years ago
2be396ff6e
fix: email testing and settings change from ACP
...
- changing email SMTP settings wouldn't apply the first time
- "Send Test Email" now will report emailer errors in most cases
4 years ago
80de572aa1
feat: add user.email.confirmByUid for sso plugins
4 years ago
1c45fa1ba5
feat: socket.io 3 changes ( #8845 )
...
* feat: socket.io 3 changes
* feat: replace socketio-wildcard with socket.onAny
up socket.io-redis to 6.x
* feat: remove mongodb/psql socket.io adapters
* feat: show data on fail
* fix: tests
* fix: typo
* fix: logger test fix
* fix: logger.io_close
* chore: up deps
* chore: update readme to reflect redis requirement
* fix: increase timeout show data if test fails
4 years ago
d2888d1d1f
Category tags ( #8938 )
...
* feat: wip category tags
* fix: tag search
* feat: remove debug
* fix: returns of searchTags and autocomplete
* fix: alpha sort
* fix: redis
* fix: delete zsets on category purge, fix another test
* fix: test
4 years ago
792e9e703e
fix: dont strip tags
4 years ago
6669496dba
Navigator ( #9049 )
...
* feat: navigator changes
* fix: remove extra code
* feat: add lang keys
4 years ago
fcb10ebdbb
feat: add socket connect/disconnect action hooks
5 years ago
ef6c3b0029
fix: check uid as well
5 years ago
7e867cf95e
fix : #7597 , fix progress bar of cover/profile uploads
...
send big cover images in chunks
5 years ago
700736535c
fix: guests dont always have sid
5 years ago
a4fe4d3cf5
fix: allow guests to see their replies immediately
5 years ago
5080f35752
fix : #8991 , logout on password reset, dont verify email if password expired
...
dont allow same password on reset
5 years ago
6e6a7a8f8a
fix : #8969 , export csv to file
5 years ago
f4d217d829
fix : #8980 , fix lang string
5 years ago
414caac01b
fix : #8957
5 years ago
6771ca150a
fix: add topic uid to infinitescroll
5 years ago
e32cd31ec6
fix : #8918
5 years ago
1c0e8c1663
fix: move meta.getServerTime call to admin namespace
5 years ago
2b73a14e42
fix : #8933
5 years ago
6e2da9966e
refactor: move plugin hook methods to plugin.hooks.*
5 years ago
965671a97b
fix: remove params from error log
5 years ago
a6afcfd531
feat: #8475 , allow flagging self posts
...
dont count flags towards self posts
dont allow flagging your own account
5 years ago
a0b7a82350
feat(api): account deletion routes for the Write API ( #8881 )
...
* feat(api): account deletion routes for the Write API
* refactor: rewrite client-side calls to account deletion to use api
* style: apply DRY
5 years ago
3ccebf112e
feat: invites regardless of registration type, invite privilege, groups to join on acceptance ( #8786 )
...
* feat: allow invites in normal registration mode + invite privilege
* feat: select groups to join from an invite
* test: check if groups from invitations have been joined
* fix: remove unused variable
* feat: write API versions of socket calls
* docs: openapi specs for the new routes
* test: iron out mongo redis difference
* refactor: move inviteGroups endpoint into write API
* refactor: use GET /api/v3/users/:uid/invites/groups
Instead of GET /api/v3/users/:uid/inviteGroups
* fix: no need for /api/v3 prefix when using api module
* fix: tests
* refactor: change POST /api/v3/users/invite
To POST /api/v3/users/:uid/invites
* refactor: make helpers.invite awaitable
* fix: restrict invite API to self-use only
* fix: move invite groups controller to write api, +tests
* fix: tests
Co-authored-by: Julian Lam <julian@nodebb.org>
5 years ago
e4d2764d4c
fix : #8884 , remove header/footer cache
5 years ago
2e44639210
fix: guest header/footer cache
...
allow clearing individual caches
5 years ago
f1f9b225b0
feat: #8824 , cache refactor ( #8851 )
...
* feat: #8824 , cache refactor
ability to disable caches
ability to download contents of cache
refactor cache modules to remove duplicated code
* fix: remove duplicate hit/miss tracking
check cacheEnabled in getUncachedKeys
5 years ago
d263192271
feat: group exists API call in write api
5 years ago
1446cec77f
feat: user exist route in write api
5 years ago
a05905f196
performance improvements ( #8795 )
...
* perf: nconf/winston/render
cache nconf.get calls
modify middleware.pageView to call next earlier
don't call winston.verbose on every hook see https://github.com/winstonjs/winston/issues/1669
translate header/footer separately and cache results for guests
* fix: copy paste fail
* refactor: style and fire hook only log in dev mode
* fix: cache key, header changes based on template
* perf: change replace
* fix: add missing await
* perf: category
* perf: lodash clone
* perf: remove escapeRegexChars
5 years ago
c26f2b6599
feat(writeapi): user settings API
5 years ago
a691be5952
fix: incorrect logic for post history editable bool
5 years ago
7a8f704900
fix : #8776 some users unable to restore old versions via history
5 years ago
ea31f50554
refactor: show more lines of stack trace
5 years ago
d9a16855d0
refactor: posts api
5 years ago
272e73da53
refactor: post restore/delete/purge
5 years ago
9738e20207
refactor: merge post.edit
...
fix: dont fadeout/fadeint if title/post didnt change
5 years ago
2279e37261
refactor: deprecate socket.emit('users.search') use api route
5 years ago
083c74e059
refactor: api categories
5 years ago
e78c498e84
fix: missing doTopicAction, fix wrong api params
5 years ago
bc880ee0ca
refactor: remove sockets.reqFromSocket
5 years ago
9ee3cb9b62
refactor: topic follow/ignore to use api lib
5 years ago
68d6818bca
refactor: topic tools' actions to use api lib
5 years ago
40598b368e
refactor: topic creation to use api lib
5 years ago
3f347baadb
fix: socket user bans
5 years ago
2d252f2fa4
refactor: user bans to use api lib
5 years ago
e367c5403e
refactor: move groups.leave, fix some tests
5 years ago
bbbd9fee85
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
960e925e40
refactor: change password/user follow to use api lib
5 years ago
081c4fa6d4
Merge branch 'master' of https://github.com/NodeBB/NodeBB
5 years ago
430e7f5834
refactor: user deletion to use api lib
5 years ago
8ae1f81cf4
feat: refactor groups.delete
5 years ago
31ae8a8323
refactor: socket profile update to use api lib
5 years ago
d69e503d21
feat: move groups.join to api
5 years ago
23086daead
refactor: user create and profile update to use api lib
5 years ago
5e2caf19f5
refactor: use single function for api code
5 years ago
872bacf1c4
Admin/users ( #8762 )
...
* feat: wip admin/users
* feat: more work
* feat: more fixes
* feat: #8662 , verified/unverified user groups
* feat: add filter
* feat: change user search to use filters array
* refactor: remove unused search call
* fix: tests
* fix: cant join system groups
* fix: upgrade script
5 years ago
dc29f4dca2
refactor: switch to using slugify module
5 years ago
b8703ba9f6
fix(writeapi): tests
5 years ago
f870721fca
feat(writeapi): file deletion route
5 years ago
3ea1aa4780
refactor(writeapi): update route prefix to api/v3, default error option
5 years ago
0973feea16
feat(writeapi): post bookmarking
5 years ago
9942c248eb
feat(writeapi): post voting
5 years ago
414169fdfa
feat(writeapi): post delete/restore/purge
5 years ago
f66c2fb60f
feat(writeapi): post editing
5 years ago
9be5629458
feat(writeapi): topic follow/ignore
5 years ago
da25ce4d09
feat: topic delete/restore/purge/(un)pin/(un)lock
5 years ago
4c833d0bf0
feat(writeapi): topic posting and replying
5 years ago
40dc1c38d3
feat(writeapi): added DELETE /groups/:slug/membership/:uid route
5 years ago
952dc211dd
feat(writeapi): added group joining and deletion
5 years ago
ba345e53e8
feat(writeapi): added POST /api/v1/groups
5 years ago
3072de4812
feat: added DELETE /api/v1/categories/:cid route
5 years ago
e942ad8101
feat: added PUT /api/v1/categories/:cid route
...
Deprecated admin.categories.update socket call
Showing stack trace in console for errors, when in development mode
5 years ago
dc666fd8a9
feat: added POST /api/v1/categories route
5 years ago
a5af2dc819
feat: added PUT/DELETE /api/v1/users/:uid/ban routes
5 years ago
b5bbcbaeaa
feat: added POST and DELETE /api/v1/users/:uid/follow routes
5 years ago
7aed174ebc
feat: added PUT /api/v1/users/:uid/password route
5 years ago
a1ddc210b2
feat: added DELETE /api/v1/users/:uid and DELETE /api/v1/users
5 years ago
58043e07ba
fix: use POST call for user creation in ACP
...
- Not entirely sure about error handling yet, more research needed
- Also added socket method deprecation utility method
5 years ago
ed092bf6b5
refactor: remove posts.tools.purge
...
moved the check to socketPosts.purge
5 years ago
55d5cccf2e
Document deprecations and remove old ones ( #8706 )
...
* chore: document deprecation removal versions
* chore: remove deprecations 2+ versions old
5 years ago
b6f2f0e5d0
fix : #8681 change owner modal's search should check if user is banned
5 years ago
5ddf70221c
feat: upon plugin installation via ACP, check against nbbpm first
5 years ago
4fca79380a
fix: tests, because redis is TOO FAST
5 years ago
29b357bc66
refactor: expose new method for appending moderation note
5 years ago
7e7366be13
fix: remove toolsVisible in post tools' menu [breaking]
5 years ago
5f10d67db5
Remove sounds ( #8617 )
...
* feat: remove sounds
* feat: remove more sounds
* feat: disable sounds plugin
* fix: openapi
5 years ago
b0a759223d
feat: add action:user.removeCoverPicture
5 years ago
962446a5ac
feat: add user data to action:user.removeUploadedPicture
5 years ago
9542ef1285
feat: add userData to action:user.delete
5 years ago
f743f92088
refactor: socket posts delete/restore/purge so tid is not necessary ( #8607 )
...
* refactor: socket posts delete/restore/purge so tid is not necessary
* refactor: stop trying to be fancy
* fix: tests to not pass in tid into posts.deletePosts
* fix: some more unnecessary tid passing
5 years ago
354e6ccc66
feat: banning a user will resolve their post flags
5 years ago
35a538ec2a
feat: allow adding multiple users to group
5 years ago
bfaf648ec3
fix : #8556 , catch errors from admin check
5 years ago
0903eb4b8c
feat: limit privileges column to superadmins only
5 years ago
d6baf5c278
feat: show event/params on error
5 years ago
2c35d0ba87
refactor: change incrementViewCount and markAsRead to async/await
5 years ago
fcdbdf63a3
refactor: flags object in post tools
5 years ago
f1974fb900
refactor: pass only needed data
5 years ago
c705e08a76
feat: allow direct link to flag from post tools, #8531
5 years ago
bbc7737e14
feat: ability to clear cache from acp
5 years ago
69fb15276c
fix: tests
5 years ago
8d8117ffa1
feat: reduce amount of data loaded on acp admin page
...
get rid of socket call and use ajaxify.data.categories
5 years ago
8bd63f61e0
feat: resolve flag on delete/purge/ban/delete account
5 years ago
844f2b4ed0
feat: #8524 , allow editing category of queued topic
5 years ago
4658121a7d
fix: don't crash if content is undefined
5 years ago
2485a55092
feat: #8521 , allow editing title before posting from queue
5 years ago
3653151143
fix : #8508 , dont allow moving topics if not moderator of target category
5 years ago
1441720962
feat: logic for flag note editing, #8499
5 years ago
f85a45c722
feat: logic for flag note deletion, #8499
5 years ago
3dcf538773
feat: #8023 , allow wildcard search for uid/email
5 years ago
73ddf1cb98
fix: groups.updateCover
5 years ago
658dd03b03
feat: add tools to recent/unread ( #8477 )
...
* feat: add tools to recent/unread
* fix: open api spec
* fix: more api spec
5 years ago
c2ca02dfc7
fix : #8474
...
make isPrimary and isCluster always booleans
they were strings when using ./nodebb start and boolean if they were in config.json and started with node app.js
5 years ago
ac6b571ed5
fix: dont allow searching by email/ip if not privileged
5 years ago
02ac44cc5a
fix: dont allow searching by ip/banned/flagged for regular users
5 years ago
c718b7293e
feat: #3783 , min/max tags per category
5 years ago
00d8ce2663
fix: only allow valid uids
5 years ago
8383992dcc
feat: move export functions into child processes
5 years ago
e80379dc0e
feat: display stack trace on winston.error
5 years ago
f909ed2541
feat: show editor in post diffs if available
5 years ago
b3115ea813
fix : #8410
5 years ago
58b3d608fc
feat: allow post diffs to be restored, #8406
5 years ago
bb3aa54006
feat: merge changes
...
allow selecting main topic to merge into
allow specifying a new title for merge topic
upon merge go to correct topic
new tests for merging with options
5 years ago
942cc4b132
fix : #8385
5 years ago
67aca822e6
feat: account content deletion, closes #8381
5 years ago
a82e9bd7f6
feat: privileges for Admin Control Panel ( #8355 )
...
* feat: acp privileges (WIP)
* fix: restore global privilege hooks
* refactor: using cid 0 in admin privs
* fix: no need for zebrastripe-reset
* feat: manage:categories privilege WIP
* feat: renamed prefix to admin:, settigns and dashboard privs
* fix: nofocus on acp privs group find modal
* refactor: privileges.x.get() to not used hardcoded privs
* fix: crash if unable to get latest version
* feat: setting acp priv
* Revert "fix: crash if unable to get latest version"
This reverts commit afdb235f48eb0072d88de45f3a1e0151281095b3.
* feat: user/privilege acp privs
* fix: category selector in manage/privileges
* fix: guests potentially becoming admins
* fix: bug in setting admin privs
* fix: some last minute things + api docs
* fix: some more last minute fixes
5 years ago
30cc83c033
fix : #8374 , revert event delete
5 years ago
922d49be0b
fix(style): switch..case
5 years ago
e603ebc0c6
fix : #8323 , let admins send validation emails without timeout
5 years ago
ec5582b53c
feat: add privilege give/rescind hooks ( #8336 )
...
* feat: add privilege give/rescind hooks
action:privileges.categories.give/rescind
action:privileges.global.give/rescind
breaking change, privileges.categories.give/rescind and privileges.global.give/rescind use full privilege name for groups ie `groups:find` instead of `find`
* fix: tests, privileges renamed
5 years ago
d77036dbd1
fix : #8249 , don't send move notifications for deleted posts/topics
5 years ago
740e598a5d
fix: lint
5 years ago
8e23dec84b
fix: lint
5 years ago
e1c6c3b267
refactor: reorganized socket.io admin modules
5 years ago
067034082f
fix : #6422 , update deleted/restored messages
5 years ago
4d0636f847
fix : #8163 , prevent account deletion
5 years ago
690bb69d03
fix : #8154 , respect stop
5 years ago
f23bc347b1
fix : #8156 dont allow loading members from hidden groups
5 years ago
c35a21d7f0
fix : #8135
5 years ago
0ae1eb4f6e
fix: missing await in SocketPosts.changeOwner
5 years ago
418c174d56
fix: dont return flag data to client
5 years ago
1f13ab8a19
fix: restrict getUsersInRoom to members
5 years ago
Barış Soner Uşaklı
gasoved
Julian Lam
Mats
Barış Soner Uşaklı
psychobunny
Peter Jaszkowiak