12810 Commits (edd8ca997f683506fe6ae7073636b55de72a3da1)

Author SHA1 Message Date
Barış Soner Uşaklı c3cedefef3 feat: update lru-cache to 9.x, closes #11454 2 years ago
Barış Soner Uşaklı 0cd657ff2c fix: closes #11447, fix timestamp of fork event 2 years ago
Julian Lam 0fc9fdd53d fix: throw generic not-allowed error on groups.join if a non-owner tries to add another user to a group 2 years ago
Julian Lam 18447b06af fix: remove socketGroups.addMember; update admin checks to allow admin:groups privilege, hide add member controls if not admin 2 years ago
Julian Lam f043dcec96 fix: remove socketGroups.kick 2 years ago
Julian Lam 9d49ec60a1 fix: remove socketGroups.issueMassInvite 2 years ago
Julian Lam b53f92fa2e fix: handle client-side acceptAll and rejectAll 2 years ago
Julian Lam 18c45b4461 refactor: group invitations; issuing, accepting, rejecting; now via API 2 years ago
Julian Lam 0788fb5118 feat: #11420, add new GET routes to retrieve pending and invited members of a group, plus accept/reject pending 2 years ago
Barış Soner Uşaklı 8680ea4d3d fix: closes #11437, link to queued post from event 2 years ago
Barış Soner Uşaklı c0b62346f0 feat: update thumbs modal styling 2 years ago
Barış Soner Uşaklı d36aad073e refactor: replace rimraf glob doesn't work on windows 2 years ago
Julian Lam b551b0ad47 Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı 4d2d76897a fix: don't crash on objects with toString property 2 years ago
Barış Soner Uşaklı 7397873db3 fix: fire action:user.online on user login 2 years ago
Julian Lam 7cb2e02cd7 fix: #11396, removal of base_templates_path variable 2 years ago
Julian Lam 491487a1a2 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 37b48b82a4 fix: don't crash if event name is not a string 2 years ago
Barış Soner Uşaklı a83734fb2b fix: dont show search input if user doesn't have tag search priv 2 years ago
Barış Soner Uşaklı 68db271dfd chore: remove logs 2 years ago
Barış Soner Uşaklı 2c5a5bf366 feat: change chat notification delivery
instead of checking if user is online in the past x minutes, check if the user has read the room, if they have already marked the chat as read don't send notification
2 years ago
Barış Soner Uşaklı 2a9b3ee464 fix: add missing delete 2 years ago
Barış Soner Uşaklı 9c0996e40a feat: add placeholder for category search 2 years ago
Julian Lam 03e05b5154 fix: #9397, trash the active session on account lockout, if there is one 2 years ago
Julian Lam 596db09f7e Merge branch 'master' into develop 2 years ago
Julian Lam ddcdaacc94 refactor: post-queue frontend logic 2 years ago
Julian Lam 402229845c feat: display when an api key was last used, in ACP, #10873 2 years ago
Julian Lam efa64032dd feat: log the last time a valid api token was seen, have v3 ping route go through setupApiRoute helper 2 years ago
Barış Soner Uşaklı 894f392bfc lint: whitespace 2 years ago
Barış Soner Uşaklı c2961ad4cd fix: closes #11173, move cache clear code
if 2 deps were updated only one of them was cleared from require.cache. ie commander & lru-cache both has major version bump then only commander would be cleared from cache since it throws first
2 years ago
Barış Soner Uşaklı 1502068eff
chore: up rimraf to 4.x (#11377)
* chore: up rimraf to 4.x

* chore: oops up rimraf

* test: fix rimraf in tests
2 years ago
Barış Soner Uşaklı fafa130406
chore: up connect-redis to 7.x, drop node 14 (#11376) 2 years ago
Julian Lam 93aa43f717 style: more fixes 2 years ago
Phạm Tấn Minh Tiến 9ed6961af8 fix lint 2 years ago
Phạm Tấn Minh Tiến 4b94c033c4 wrap quotes to prevent stripping leading 0 2 years ago
Julian Lam c843984d57 fix: #11362, regular mods are also subject to post queue [breaking] 2 years ago
Barış Soner Uşaklı 5db037f1ea
chore: up mongo deps (#11375)
* chore: up mongo deps

* mongodb 5.x no more callbacks
2 years ago
Barış Soner Uşaklı 7ba70d1561
Bootstrap5 (#10894)
* chore: up deps

* chore: up composer

* fix(deps): bump 2factor to v7

* chore: up harmony

* chore: up harmony

* fix: missing await

* feat: allow middlewares to pass in template values via res.locals

* feat: buildAccountData middleware automatically added ot all account routes

* fix: properly allow values in res.locals.templateValues to be added to the template data

* refactor: user/blocks

* refactor(accounts): categories and consent

* feat: automatically 404 if exposeUid or exposeGroupName come up empty

* refactor: remove calls to getUserDataByUserSlug for most account routes, since it is populated via middleware now

* fix: allow exposeUid and exposeGroupName to work with slugs with mixed capitalization

* fix: move reputation removal check to accountHelpers method

* test: skip i18n tests if ref branch when present is not develop

* fix(deps): bump theme versions

* fix(deps): bump ntfy and 2factor

* chore: up harmony

* fix: add missing return

* fix: #11191, only focus on search input on md environments and up

* feat: allow file uploads on mobile chat

closes https://github.com/NodeBB/NodeBB/issues/11217

* chore: up themes

* chore: add lang string

* fix(deps): bump ntfy to 1.0.15

* refactor: use new if/each syntax

* chore: up composer

* fix: regression from user helper refactor

* chore: up harmony

* chore: up composer

* chore: up harmony

* chore: up harmony

* chore: up harmony

* chore: fix composer version

* feat: add increment helper

* chore: up harmony

* fix: #11228 no timestamps in future 

* chore: up harmony

* check config.theme as well

fire action:posts.loaded after processing dom

* chore: up harmony

* chore: up harmony

* chore: up harmony

* chore: up themes

* chore: up harmony

* remove extra class

* refactor: move these to core from harmony

* chore: up widgets

* chore: up widgets

* height auto

* fix: closes #11238

* dont focus inputs, annoying on mobile

* fix: dont focus twice, only focus on chat input on desktop

dont wrap widget footer in row

* chore: up harmony

* chore: up harmony

* update chat window

* chore: up themes

* fix cache buster for skins

* chat fixes

* chore: up harmony

* chore: up composer

* refactor: change hook logs to debug

* fix: scroll to post right after adding to dom

* fix: hash scrolling and highlighting correct post

* test: re-enable read API schema tests

* fix: add back schema changes for 179faa2270f2ad955dcc4a7b04755acce59e6ffd and c3920ccb10d8ead2dcd9914bb1784bed3f6adfd4

* fix: schema changes from 488f0978a4

* fix: schema changes for f4cf482a87

* fix: schema update for be6bbabd0e

* fix: schema changes for 69c96078ea

* fix: schema changes for d1364c3130

* fix: schema changes for 84ff1152f7

* fix: schema changes for b860c2605c

* fix: schema changes for 23cb67a112

* fix: schema changes for b916e42f40

* fix: schema change for a9bbb586fc

* fix: schema changes for 4b738c8cd3

* fix: schema changes for 58b5781cea

* fix: schema changes for 794bf01b21

* fix: schema changes for 80ea12c1c1, e368feef51, and 52ead114bec961c62fa2eb0786540e229f6e4873

* fix: composer-default object in config?

* fix: schema changes for 9acdc6808c and 093093420027999df3c67bf0ea6024f6dbf81d2d

* fix: schema changes for c0a52924f1

* fix: schema change for aba420a3f3, move loggedInUser to optional props

* fix: schema changes for 8c67031609

* fix: schema changes for 27e53b42f3

* fix: schema changes for 2835966518

* fix: breaking test for email confirmation API call

* fix: schema changes for refactored search page

* fix: schema changes for user object

* fix: schema changes for 9f531f957e

* fix: schema changes for c4042c70de and 23175110a2

* fix: schema changes for 9b3616b10392e247974eb0c1e6225a1582bf6c69

* fix: schema changes for 5afd5de07d

* fix: schema change for 1d7baf12171cffbd3af8914bef4e6297d1160d49

* fix: schema changes for 57bfb37c55a839662144e684875003ab52315ecc and be6bbabd0e

* fix: schema changes for 6e86b4afa20d662af8b9f1c07518df2d8c258105 and 3efad2e13b7319eb9a1f4fda7af047be43ebc11f and 68f66223e73a72f378f193c83a9b5546bede2cda

* fix: allowing optional qs prop in pagination keys (not sure why this didn't break before)

* fix: re-login on email change

* fix: schema changes for c926358d73

* fix: schema changes for 388a8270c9882892bad5c8141f65da8d59eac0fd

* fix: schema change for 2658bcc821c22e137a6eeb9bb74098856a642eaf

* fix: no need to call account middlewares for chats routes

* fix: schema changes for 71743affc3e58dc85d4ffa15ce043d4d9ddd3d67

* fix: final schema changes

* test: support for anyOf and oneOf

* fix: check thumb

* dont scroll to top on back press

* remove group log

* fix: add top margin to merged and deleted alerts

* chore: up widgets

* fix: improve fix-lists mixin

* chore: up harmony/composer

* feat: allow hiding quicksearch results during search

* dont record searches made by composer

* chore: up 54

* chore: up spam be gone

* feat: add prev/next page and page count into mobile paginator

* chore: up harmony

* chore: up harmony

* use old style for IS

* fix: hide entire toolbar row if no posts or not singlePost

* fix: updated messaging for post-queue template, #11206

* fix: btn-sm on post queue back button

* fix: bump harmony, closes #11206

* fix: remove unused alert module import

* fix: bump harmony

* fix: bump harmony

* chore: up harmony

* refactor: IS scrolltop

* fix: update users:search-user-for-chat source string

* feat: support for mark-read toggle on chats dropdown and recent chats list

* feat: api v3 calls to mark chat read/unread

* feat: send event:chats.mark socket event on mark read or unread

* refactor: allow frontend to mark chats as unread, use new API v3 routes instead of socket calls, better frontend event handling

* docs: openapi schema updates for chat marking

* fix: allow unread state toggling in chats dropdown too

* fix: issue where repeated openings of the chats dropdown would continually add events for mark-read/unread

* fix: debug log

* refactor: move userSearch filter to a module

* feat(routes): allow remounting /categories (#11230)

* feat: send flags count to frontend on flags list page

* refactor: filter form client-side js to extract out some logic

* fix: applyFilters to not take any arguments, update selectedCids in updateButton instead of onHidden

* fix: use userFilter module for assignee, reporterId, targetUid

* fix(openapi): schema changes for updated flags page

* fix: dont allow adding duplicates to userFilter

* use same var

* remove log

* fix: closes #11282

* feat: lang key for x-topics

* chore: up harmony

* chore: up emoji

* chore: up harmony

* fix: update userFilter to allow new option `selectedBlock`

* fix: wrong block name passed to userFilter

* fix: https://github.com/NodeBB/NodeBB/issues/11283

* fix: chats, allow multiple dropdowns like in harmony

* chore: up harmony

* refactor: flag note adding/editing, closes #11285

* fix: remove old prepareEdit logic

* chore: add caveat about hacky code block in userFilter module

* fix: placeholders for userFilter module

* refactor: navigator so it works with multiple thumbs/navigators

* chore: up harmony

* fix: closes #11287, destroy quick reply autocomplete

on navigation

* fix: filter disabled categories on user categories page count

* chore: up harmony

* docs: update openapi spec to include info about passing in timestamps for topic creation, removing timestamp as valid request param for topic replying

* fix: send back null values on ACP search dashboard for startDate and endDate if not expicitly passed in, fix tests

* fix: tweak table order in ACP dash searches

* fix: only invoke navigator click drag on left mouse button

* feat: add back unread indicator to navigator

* clear bookmark on mark unread

* fix: navigator crash on ajaxify

* better thumb top calculation

* fix: reset user bookmark when topic is marked unread

* Revert "fix: reset user bookmark when topic is marked unread"

This reverts commit 9bcd85c2c6848c3d325d32027261809da6e11c9e.

* fix: update unread indicator on scroll, add unread count

* chore: bump harmony

* fix: crash on navigator unread update when backing out of a topic

* fix: closes #11183

* fix: update topics:recent zset when rescheduling a topic

* fix: dupe quote button, increase delay, hide immediately on empty selection

* fix: navigator not showing up on first load

* refactor: remove glance

assorted fixes to navigator
dont reduce remaning count if user scrolls down and up quickly
only call topic.navigatorCallback when index changes

* more sanity checks for bookmark

dont allow setting bookmark higher than topic postcount

* closes #11218, 🚋

* Revert "fix: update topics:recent zset when rescheduling a topic"

This reverts commit 737973cca9e94b6cb3867492a09e1e0b1af391d5.

* fix: #11306, show proper error if queued post doesn't exist

was showing no-privileges if someone else accepted the post

* https://github.com/NodeBB/NodeBB/issues/11307

dont use li

* chore: up harmony

* chore: bump version string

* fix: copy paste fail

* feat: closes #7382, tag filtering

add client side support for filtering by tags on /category, /recent and /unread

* chore: up harmony

* chore: up harmony

* Revert "fix: add back req.query fallback for backwards compatibility" [breaking]

This reverts commit cf6cc2c454dc35c330393c62ee8ce67b42d8eefb.
This commit is no longer required as passing in a CSRF token via query parameter is no longer supported as of NodeBB v3.x

This is a breaking change.

* fix: pass csrf token in form data, re: NodeBB/NodeBB#11309

* chore: up deps

* fix: tests, use x-csrf-token query param removed

* test: fix csrf_token

* lint: remove unused

* feat: add itemprop="image" to avatar helper

* fix: get chat upload button in chat modal

* breaking: remove deprecated socket.io methods

* test: update messaging tests to not use sockets

* fix: parent post links

* fix: prevent post tooltip if mouse leaves before data/tpl is loaded

* chore: up harmony

* chore: up harmony

* chore: up harmony

* chore: up harmony

* fix: nested replies indices

* fix(deps): bump 2factor

* feat: add loggedIn user to all api routes

* chore: up themes

* refactor: audit admin v3 write api routes as per #11321

* refactor: audit category v3 write api routes as per #11321 [breaking]

docs: fix open api spec for #11321

* refactor: audit chat v3 write api routes as per #11321

* refactor: audit files v3 write api routes as per #11321

* refactor: audit flags v3 write api routes as per #11321

* refactor: audit posts v3 write api routes as per #11321

* refactor: audit topics v3 write api routes as per #11321

* refactor: audit users v3 write api routes as per #11321

* fix: lang string

* remove min height

* fix: empty topic/labels taking up space

* fix: tag filtering when changing filter to watched topics

or changing popular time limit to month

* chore: up harmony

* fix: closes #11354, show no post error if queued post already accepted/rejected

* test: #11354

* test: #11354

* fix(deps): bump 2factor

* fix: #11357 clear cache on thumb remove

* fix: thumb remove on windows, closes #11357

* test: openapi for thumbs

* test: fix openapi

---------

Co-authored-by: Julian Lam <julian@nodebb.org>
Co-authored-by: Opliko <opliko.reg@protonmail.com>
2 years ago
Barış Soner Uşaklı 767c1d1faf fix: thumb remove on windows, closes #11357 2 years ago
Barış Soner Uşaklı 1e7f32b1c4 fix: #11357 clear cache on thumb remove 2 years ago
Barış Soner Uşaklı a3a38e4ba3 fix: #11357 clear cache on thumb remove 2 years ago
Barış Soner Uşaklı cfd5027245 fix: closes #11352, try/catch rss feeds 2 years ago
Barış Soner Uşaklı 56427e4f9d fix: closes #11343, don't crash if tags array is empty 2 years ago
Barış Soner Uşaklı 1545223e7f fix: tag filtering when changing filter to watched topics
or changing popular time limit to month
2 years ago
Barış Soner Uşaklı f054a4f44d fix: get cid from pid instead of passing in 2 years ago
Barış Soner Uşaklı 8c762d3228 fix: closes #11331, allow 0 length content if set to 0 in acp 2 years ago
Barış Soner Uşaklı 791551098c fix: display 25 topics on category feed 2 years ago
Barış Soner Uşaklı ec58700f6d fix: object destructuring overwriting type parameter
also check for valid types in generateExport
2 years ago
Julian Lam e6d7e55fbc fix: missing postAtIndex handling 2 years ago
Julian Lam 4cf04f06f6 feat: add rel="author" to topic route
re: #11248
2 years ago
Julian Lam 36bcdf8f9d Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı 8cf4a6f62e fix: alert on page load 2 years ago
gasoved 5a2c6c1cb5 fix: update main post timestamp when rescheduling 2 years ago
Julian Lam 83d3633626 fix: add back req.query fallback for backwards compatibility 2 years ago
psibean ea95668a76 fix: update csrf parser to accept csrf_token form value if present 2 years ago
psibean 0b2dd4e367 Update csrf_token falee assignment to false 2 years ago
psibean f553da48e1 Update csrf-sync to fallback to _csrf query param 2 years ago
Julian Lam bb0397cbc8 lint: satisfy lint errors 2 years ago
psibean 5a994290f2 Replace csurf with csrf-sync 2 years ago
gasoved edd2fc38fc fix: update main post timestamp when rescheduling 2 years ago
Julian Lam dbc84f7571 Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı 326b92687f fix: show admins/globalmods if content is purged 2 years ago
Barış Soner Uşaklı e335d0f601 fix: email expiry timestamps
emailConfirmExpiry is hours and default is 24
2 years ago
Barış Soner Uşaklı ebb5d2d25c feat: search dashboard time range 2 years ago
Barış Soner Uşaklı 845c8013b6
fix: #11259, clean old emails when updating via admin (#11260)
when admin is changing users emails check if its avaiable and remove old email of user first
upgrade script to cleanup email:uid, email:sorted, will remove entries if user doesn't exist or doesn't have email or if entry in user hash doesn't match entry in email:uid
fix missing ! in email interstitial
fix missing await in canSendValidation,
fix broken tests
dont pass sessionId to email.remove if admin is changing/removing email
2 years ago
Julian Lam 046c8a6ab7 Merge branch 'master' into develop 2 years ago
Julian Lam 7a5bcc2171 fix: #11257, onSuccessfulLogin called with improper uid 2 years ago
Barış Soner Uşaklı bf92ee0e5f feat: add sitemap filter hooks for categories/topic pages 2 years ago
Julian Lam 966724adfe fix: new language keys for #11206 2 years ago
Julian Lam a382e6e2e5 Merge branch 'master' into develop 2 years ago
nesro 202378b939 fix: #11254, return check for reroll property 2 years ago
Barış Soner Uşaklı 705cd13ad3 fix: closes #11249, notification uses displayname 2 years ago
Julian Lam b5598a6e5d fix: wrong link to topics in acp dashboard 2 years ago
Barış Soner Uşaklı d68352cce5 lint: remove unused 2 years ago
Barış Soner Uşaklı 0713482bd4 feat: #11240, only show relevant users in flags assignee list
for user flags-> admins + all users who have `admin:users` privilege
for post flags -> admins + global mods + moderators of the category the post is in
refactor getModeratorUids function so it can be used for different privileges
2 years ago
Barış Soner Uşaklı 1d3c0e5a2b fix: https://github.com/NodeBB/NodeBB/issues/11239
parseInt uid received from req.body._uid or req.query._uid
2 years ago
Barış Soner Uşaklı 6d819b056e fix: notif filter selecte field 2 years ago
Peter Jaszkowiak f6c96948fe
fix: import resolution within plugin modules (#11219)
use module.exports = require('..')
export * from '..' didn't work in some cases
2 years ago
Barış Soner Uşaklı c3653bee60 Revert "fix: import resolution within plugin modules (#11200)"
This reverts commit 89e059a084.
2 years ago
Peter Jaszkowiak 89e059a084
fix: import resolution within plugin modules (#11200) 2 years ago
Julian Lam 937344b8a8 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 0bffd3d93c fix: #11195, allow users with admin:users privilege to delete users in acp 2 years ago
Barış Soner Uşaklı 7d04e95226 fix: #11194, allow access to sub dashboard pages 2 years ago
Julian Lam f295174e07 test: fix broken test 2 years ago
Julian Lam 38175b5e71 test: fix broken test 2 years ago
Julian Lam fdc41646d1 feat: api v3 route to add email to user, optionally bypassing validation email, closes #11009 2 years ago
Julian Lam eab5ab7ff9 Merge branch 'master' into develop 2 years ago
Julian Lam 459bc52338 fix: #11136, tests, and returning the proper number of arrays 2 years ago
Julian Lam 39e009c05a fix: #11136, only show mods of active categories when getModeratorUids is called 2 years ago
Barış Soner Uşaklı 747cb1f0a1 fix: closes #11173, clear require cache if wrong dependency is installed 2 years ago
Julian Lam a69bc2cf7f fix: remove unneeded assignment, as req and locals will not likely ever be completely reassigned 2 years ago
Julian Lam 25ae58e8a0 fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config 2 years ago
Julian Lam 0a691e6744 fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config 2 years ago
Julian Lam 69806662e6
Session Timeout if "Remember Me" is not checked (#11125)
* fix: convert loginDays and loginSeconds to number inputs

* feat: configurable session timeout for when "Remember Me" is not checked

closes #11124

* test: addition tests to check loginDays and sessionDuration settings

* test: also test loginSeconds override
2 years ago
Julian Lam a344e6ec0c
Fix for #11119, restore password reset rate limiting (#11120)
* chore: incrementing version number - v2.8.1

* chore: update changelog for v2.8.1

* fix: accidental clearing of reset rate limiting on reset send

* test: move user reset tests to its own file, add failing test for user reset locks

* fix: #11119, counter attempted flooding of user reset route

* test: fix password reset socket test to check for error now

* test: same user sending multiple reset emails

should work after waiting the correct amount of time

* lint: fixes

* chore: rename outdated `cleanTokensAndUids` method

* test: no need to create user for new test

Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2 years ago
Barış Soner Uşaklı b81fd81af6 feat: fire filter:topics.getUnreadTids even if there are no urnead topics 2 years ago
Barış Soner Uşaklı 586eed1407
fix: vulnerability in socket.io nested namespaces (#11117) 2 years ago
Barış Soner Uşaklı 1ea9481af6 fix: lock post/reply similar to user.create 2 years ago
Opliko de31cb1a4f feat: add force flag to plugin install in cli (#11089) 2 years ago
Julian Lam 9f531f957e refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065 2 years ago
Julian Lam 896493dbd6 fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2 years ago
Julian Lam 4314b8e201 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2 years ago
Julian Lam 2bc23a9526 fix: replace input type number with text/pattern 2 years ago
Julian Lam 33af2d9c18 feat: integrating basic client-side form validity checking in settings v1 and v2 2 years ago
Julian Lam db8d3a94eb fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2 years ago
Julian Lam d9852c3245 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2 years ago
Julian Lam 45ae31f816 fix: replace input type number with text/pattern 2 years ago
Julian Lam dadbcd731c feat: integrating basic client-side form validity checking in settings v1 and v2 2 years ago
Manuel Valle 8c4d6bbebb
Fix: categories.js not showing custom privileges (#10856)
No shows correctly custom privileges in the Other section for a category.
2 years ago
Barış Soner Uşaklı 07a0212571 fix: #11077, add admin uploads paths to priv mapping
closes #11077
2 years ago
Barış Soner Uşaklı 4efc19d5f1 feat: add ./nodebb install <plugin_name>
will install the suggested version for current nodebb closes #11060
2 years ago
Barış Soner Uşaklı 48d1439217 fix: prototype vulnerability in socket.io onMessage 2 years ago
Barış Soner Uşaklı 0e495f9ea4 fix: #11066, fix custom privilege/path in routePrefixMap
will find most specific path
2 years ago
Barış Soner Uşaklı c7aa4ebf47 Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı 864fe0f971 feat: add permissions-policy header 2 years ago
Barış Soner Uşaklı 110311b25e fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2 years ago
Barış Soner Uşaklı fc49665fe5 fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2 years ago
Barış Soner Uşaklı bb82eb71e2 fix: #11052, add missing await 2 years ago
Julian Lam 10ba7b9ced Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı abcfb63126 fix: #11044, allow banned users to post
if given privileges
2 years ago
Barış Soner Uşaklı 3c85b944e3 feat: allow groups to be exempt from maintenance mode
closes #11030
2 years ago
Barış Soner Uşaklı 6109061501 fix: check schedule privilege, closes #11032 2 years ago
Barış Soner Uşaklı b34e859c1b refactor: don't prevent startup if staticDir is undefined
https://community.nodebb.org/topic/16790/problems-with-upgrading-to-2-xx
2 years ago
Julian Lam 97d8b53fd3 Merge branch 'master' into develop 2 years ago
Julian Lam 55a197a7d7 fix: check for csrf token on /register/abort, + theme changes for v2.x branches of themes 2 years ago
Barış Soner Uşaklı a31ba824ea fix: upgrade script to work from 0.x to 2.x 2 years ago
Barış Soner Uşaklı 06d1539137 test: fix tests again 2 years ago
Barış Soner Uşaklı b5d38bc696 feat: new search hooks
filter:search.isAllowed, allow plugins to check if searching is allowed
filter:search.searchIn, allow searching in custom items
2 years ago
Julian Lam a2fafc2b15 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 673261ff98 fix: #10519, image height in emails 2 years ago
Barış Soner Uşaklı 6f673f806f fix: #10993, apply autoLocale middleware to guests only 2 years ago
Barış Soner Uşaklı be92be4eee feat: add search data to filter:search.inContent 2 years ago
Barış Soner Uşaklı e3f2156202
feat: add search data to filter:search.inContent 2 years ago
Julian Lam 96b46411b1 Merge branch 'master' into develop 2 years ago
Julian Lam 9ee30fe7d2 fix: revert breaking change, add back SocketUser.emailConfirm 2 years ago
Julian Lam 9c576a0758
Email confirmation QOL updates (#10987)
* breaking: remove `SocketUser.emailConfirm`, re: #10954

* chore: move email confirmation related configs to own section in Settings > Email

* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.

* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)

* fix: update getValidationExpiry to return ms

* test: use emailConfirmInterval for tests, for now

* fix: throw friendly error when attempting an email change within email confirmation window

* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for

* test: additional tests for user email methods

* fix: add back missing handling of  option

* test: fix tests
2 years ago
Julian Lam 09f3ac6574 fix: in appropriately named language key `email-confirm-email2` 2 years ago
Julian Lam 7672194c7c fix: correctly pass dev flag to package installer 2 years ago
Julian Lam 09cfd0bd57 fix: use `--omit=dev` flag for npm instead of `--production` 2 years ago
Barış Soner Uşaklı dd4e9cce09 perf: speed up build
run webpack as soon as js targets are done
this allows building js/css in parallel
2 years ago
Barış Soner Uşaklı 3a70530c8e fix active plugins (#10964) 2 years ago
Barış Soner Uşaklı 67efaeb4b8
fix active plugins (#10964) 2 years ago
Barış Soner Uşaklı b879b6a0c2
fix: use admin:groups priv for groups (#10960) 2 years ago
Barış Soner Uşaklı e35b0a869f fix: https://github.com/NodeBB/NodeBB/issues/10525 2 years ago
Barış Soner Uşaklı ebd5dcc6d6 fix: EEXISTS error on linux if plugin/theme overrides core js file 2 years ago
Julian Lam 1e4846435a fix: mixing of old and new bch syntax 2 years ago
Julian Lam 1e864a7518 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 61d32bdebb fix: category ordering add test 2 years ago
Barış Soner Uşaklı 177d904812 fix: category ordering add test 2 years ago
Barış Soner Uşaklı c0b1ded363 fix more categories button not moving with parent
fix order issue
2 years ago
Barış Soner Uşaklı a584dae650 feat: add relevant topic events to post objects
see c9604f216a
2 years ago
Julian Lam 14515f6004 fix: add lru-cache to checked packages, to fix upgrade issue with lru-cache 2 years ago
Julian Lam 53d47a58f6 fix: use `--omit=dev` flag for npm instead of `--production` 2 years ago
Julian Lam 6391f77b01 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Julian Lam cf4f5447bb fix: #10906, allow `middleware.checkAccountPermissions` to be called with either uid or userslug in params
Previously, the middleware only worked with userslug params
2 years ago
Barış Soner Uşaklı b5dd89e1c0
feat: store topic title and tags in diffs (#10900)
* feat: store topic title and tags in diffs

allow restoring post diff if tags didn't change

* test: fix tests, fast computer problems
2 years ago
Julian Lam fe249fa577 fix: listen to -d flag on cli upgrade 2 years ago
Barış Soner Uşaklı ebd7c05c4c feat: paginate recentposts.rss and
category/1/recentposts.rss
2 years ago
Julian Lam 6061d611ea Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 8aa1596d23 chore: bring back treding plugins 2 years ago
Barış Soner Uşaklı 3d5a6b39d6 lint: fix lint 2 years ago
Barış Soner Uşaklı b392450c36 perf: disable trending plugins, too slow due to nbbpm 2 years ago
Opliko 665f36b707 feat: add quiet to action:settings.set
Makes it possible to ignore quiet updates without abusing the `filter` hook
2 years ago
Julian Lam 67cb70352f fix: missing escape on ACP category backgroundImage property 2 years ago
Julian Lam 15b1561fd3 feat: introduce ACP defined option to rescind notif or do nothing on flag resolve/reject
/cc #10867
2 years ago
Julian Lam d05705183f refactor: move export generation logic to v3 controller, GET/HEAD routes for exports
re: #10384
2 years ago
Julian Lam 0cda5aa3e3 feat: allow v3 api to handle 202 and 204 response codes as well. 2 years ago
Julian Lam 8b7cf48ade Merge remote-tracking branch 'origin/master' into develop 2 years ago
Julian Lam 9b96c33d5d fix: wrap passport.authenticate to pass in keepSessionInfo if not already set 2 years ago
Julian Lam 65b3996ac6 fix: removing duplicate session rerolling code (as it is in passport@^0.6 now) 2 years ago
Julian Lam 20ebf0a1e0 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı bc37a5c516 fix: parseInt caller.uid closes #10849 2 years ago
Barış Soner Uşaklı fc9b436f3e Merge branch 'master' of https://github.com/NodeBB/NodeBB 2 years ago
Barış Soner Uşaklı 489fb3a36f fix: missing req, closes #10847 2 years ago
Julian Lam 4dc7fa050f fix: #10845, disallow inline viewing of uploaded html files 2 years ago
Julian Lam 990ad6a11a Merge remote-tracking branch 'origin/master' into develop 2 years ago
Julian Lam ec048a01ba fix: #10841, incorrect conditional in email interstitial partial 2 years ago
Barış Soner Uşaklı aba420a3f3 feat: setting to show signatures only once in topics, closes #10071 2 years ago
Barış Soner Uşaklı 14c79763dd refactor: use group.slug on acp group urls closes #8277 2 years ago
Barış Soner Uşaklı e06e526e54 fix: don't crash if post is undefined 2 years ago
Barış Soner Uşaklı 33458701c1 test: passport0.6 (#10638)
* test: passport0.6

* test: make logout async, fix lint

* test: keepSessionInfo flag

* revert: csrf load
2 years ago
Opliko 3975fa2e45 fix: return at least one in sizeCalculation (#10832)
if post content is empty post cache should still consider its size to be at least one. fixes #10831
2 years ago
Barış Soner Uşaklı 4a3e36a766 fix: don't crash if post is undefined 3 years ago
Opliko a9bbb586fc
feat: allow plugins to add to admin cache list (#10833)
* feat: allow plugins to add to admin cache list

resolves  #10820

plugins will have to use `filter:admin.cache.get` hook and just add their own cache to the object there.

* feat: add dump to ttlCache and expose properties

* feat: also expose properties under their current names

* feat: display TTL if set
3 years ago
Barış Soner Uşaklı 6b2a6f9006
test: passport0.6 (#10638)
* test: passport0.6

* test: make logout async, fix lint

* test: keepSessionInfo flag

* revert: csrf load
3 years ago
Opliko 15ca460c8f
fix: return at least one in sizeCalculation (#10832)
if post content is empty post cache should still consider its size to be at least one. fixes #10831
3 years ago
Julian Lam 9b753d6d57
TTL Cache (#10816)
* refactor: move src/cacheCreate.js to src/cache/lru.js

* fix: call new library location for lru cache creator

* feat: add ttl cache

* fix: update upload throttler to use ttl cache instead of lru cache

* chore: add missing dependency

* fix: avoid pubsub conflicts

* fix: use get instead of peek, which is not available in ttl-cache
3 years ago
Julian Lam c07d595662
Update to lru-cache@^7 (#10815)
* chore(deps): bump lru-cache from 6.0.0 to 7.13.1 in /install

Bumps [lru-cache](https://github.com/isaacs/node-lru-cache) from 6.0.0 to 7.13.1.
- [Release notes](https://github.com/isaacs/node-lru-cache/releases)
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-lru-cache/compare/v6.0.0...v7.13.1)

---
updated-dependencies:
- dependency-name: lru-cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(lru-cache): remove unneeded `length` params for cache creation, as `maxSize` was not used in those init calls, also renamed some methods to match new method names in lru-cache [breaking]

Added deprecation notices for old params

* fix: replace three direct calls to lru-cache with call to cacheCreate, moved cache creation call in uploads to run on first init as config is not populated at lib init

* test: move configs init above cache reset calls in databasemock

* move some more code above cache clear

* refactor: remove unused

* test: lru

* test: more debug

* test: on more test

* use await helpers.uploadFile

* fix: tests remove logs

* fix: acp cache page

* fix: add in one more guard again cache instantiation with `length` prop but no `maxSize` prop

* fix(deps): bump markdown

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
3 years ago
Opliko b3a37a7f35 feat: support packageManager property in package.json
resolves #10714
3 years ago
Julian Lam 38bf30c8ca fix: adapt to breaking change in commander 3 years ago
Julian Lam d0255fc6a5 fix: move panel-offset setting code back to theme header 3 years ago
Julian Lam c6782a2173 Merge remote-tracking branch 'origin/master' into develop 3 years ago
Julian Lam 9d27e90740 fix: don't require password challenge if no password is set in user account 3 years ago
Julian Lam 287f4c2c41 fix: do not throw if password passed into `isPasswordCorrect` is invalid, just return false 3 years ago
Julian Lam 7fcee42be9 feat: present a password challenge on email update flow 3 years ago
Barış Soner Uşaklı 7e8ad785f4 fix: don't crash if req.body.username is not string
Error: req.body.username.trim is not a function
File: authenticationController.login (/usr/src/app/src/controllers/authentication.js:247:40)
3 years ago
Barış Soner Uşaklı 55c5588a4b fix: don't crash if target/user is undefined
Error: TypeError: Cannot read properties of undefined (reading 'displayname')
File: Flags.notify (/usr/src/app/src/flags.js:812:89)
3 years ago
Julian Lam 9ee1afbb0f Merge branch 'master' into develop 3 years ago
Julian Lam 06f089afda test: fix user email tests 3 years ago
Barış Soner Uşaklı d73f0f9ccb perf: make single db call 3 years ago
Julian Lam e092bfeb46 Merge remote-tracking branch 'origin/master' into develop 3 years ago
Julian Lam cba9047f67 fix: #10805, hide unconfirmed emails from user data retrieval methods 3 years ago
Julian Lam 3e062a7f29 fix: use different emoji on NodeBB Ready — again because procrastination 3 years ago
Barış Soner Uşaklı cd438b328a fix: unnecessary escape 3 years ago
Barış Soner Uşaklı f64a69132a Merge branch 'develop' of https://github.com/NodeBB/NodeBB into develop 3 years ago
Julian Lam dc3a6a29bc fix: #10783, do not purge files without a timestamp prefix 3 years ago
Julian Lam 89173f17ca fix: #10798, logic error in COEP header; helmet config 3 years ago
Julian Lam 5176fb1544 feat: add emoji to startup logs, because procrastination. 3 years ago
Julian Lam dcacd815a9 refactor: invert helmet configuration 3 years ago
Julian Lam 820bc994d8
feat: UI changes for ACP > Manage > Categories (#10782)
* Revert "Revert "feat: cross origin opener policy options (#10710)""

This reverts commit 46050ace1a.

* Revert "Revert "chore(i18n): fallback strings for new resources: nodebb.admin-settings-advanced""

This reverts commit 9f291c07d3.

* feat: closes #10719, don't trim children if category is marked section

* feat: fire hook to allow plugins to filter the pids returned in a user profile

/cc julianlam/nodebb-plugin-support-forum#14

* fix: use `user.hidePrivateData();` more consistently across user retrieval endpoints

* fix: better looking placeholder text for ACP search

* fix: bug where fallback to forum search was not working due to client-side error

* feat: allow plugins to toggle whether IPs are shown in the users CSV export

* feat: Allow defining active plugins in config (#10767)

* Revert "Revert "feat: cross origin opener policy options (#10710)""

This reverts commit 46050ace1a.

* Revert "Revert "chore(i18n): fallback strings for new resources: nodebb.admin-settings-advanced""

This reverts commit 9f291c07d3.

* feat: closes #10719, don't trim children if category is marked section

* feat: fire hook to allow plugins to filter the pids returned in a user profile

/cc julianlam/nodebb-plugin-support-forum#14

* fix: use `user.hidePrivateData();` more consistently across user retrieval endpoints

* feat: Allow defining active plugins in config

resolves #10766

* fix: assign the db result to files properly

* test: add tests with plugins in config

* feat: better theme change handling

* feat: add visual indication that plugins can't be activated

* test: correct hooks

* test: fix test definitions

* test: remove instead of resetting nconf to avoid affecting other tests

* test: ... I forgot how nconf worked

* fix: remove negation

* docs: improve wording of error message

* feat: reduce code duplication

* style: remove a redundant space

* fix: remove unused imports

* fix: use nconf instead of requiring config.json

* fix: await...

* fix: second missed await

* fix: move back from getActiveIds to getActive

* fix: use paths again?

* fix: typo

* fix: move require into the function

* fix: forgot to change back to getActive

* test: getActive returns only id

* test: accedently commented out some stuff

* feat: added note to top of plugins page if \!canChangeState

Co-authored-by: Julian Lam <julian@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>

* feat: show an informative message when no plugins are found after filtering

fixes #10771

* Latest translations and fallbacks

* Latest translations and fallbacks

* chore(deps): bump ace-builds from 1.7.1 to 1.8.1 in /install

Bumps [ace-builds](https://github.com/ajaxorg/ace-builds) from 1.7.1 to 1.8.1.
- [Release notes](https://github.com/ajaxorg/ace-builds/releases)
- [Changelog](https://github.com/ajaxorg/ace-builds/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ajaxorg/ace-builds/compare/v1.7.1...v1.8.1)

---
updated-dependencies:
- dependency-name: ace-builds
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: swap out icons in ACP > Manage > Categories to more intuitive ones, remove extra placeholder div

* fix: hide expando button if no subcategories; remove attempt at establishing common vars, increased spacing between categories in list

* fix: buggy expando state on category drag/drop

Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
Co-authored-by: Opliko <opliko.reg@protonmail.com>
Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
Julian Lam 6840a7423b feat: show an informative message when no plugins are found after filtering
fixes #10771
3 years ago
Opliko 23cb67a112 feat: Allow defining active plugins in config (#10767)
* Revert "Revert "feat: cross origin opener policy options (#10710)""

This reverts commit 46050ace1a.

* Revert "Revert "chore(i18n): fallback strings for new resources: nodebb.admin-settings-advanced""

This reverts commit 9f291c07d3.

* feat: closes #10719, don't trim children if category is marked section

* feat: fire hook to allow plugins to filter the pids returned in a user profile

/cc julianlam/nodebb-plugin-support-forum#14

* fix: use `user.hidePrivateData();` more consistently across user retrieval endpoints

* feat: Allow defining active plugins in config

resolves #10766

* fix: assign the db result to files properly

* test: add tests with plugins in config

* feat: better theme change handling

* feat: add visual indication that plugins can't be activated

* test: correct hooks

* test: fix test definitions

* test: remove instead of resetting nconf to avoid affecting other tests

* test: ... I forgot how nconf worked

* fix: remove negation

* docs: improve wording of error message

* feat: reduce code duplication

* style: remove a redundant space

* fix: remove unused imports

* fix: use nconf instead of requiring config.json

* fix: await...

* fix: second missed await

* fix: move back from getActiveIds to getActive

* fix: use paths again?

* fix: typo

* fix: move require into the function

* fix: forgot to change back to getActive

* test: getActive returns only id

* test: accedently commented out some stuff

* feat: added note to top of plugins page if \!canChangeState

Co-authored-by: Julian Lam <julian@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
3 years ago
Julian Lam a6af47da02 feat: allow plugins to toggle whether IPs are shown in the users CSV export 3 years ago
Julian Lam 1b9c68196f fix: better looking placeholder text for ACP search 3 years ago
Julian Lam 0529f2fb5d fix: use `user.hidePrivateData();` more consistently across user retrieval endpoints 3 years ago
Julian Lam c26be43ac5 feat: fire hook to allow plugins to filter the pids returned in a user profile
/cc julianlam/nodebb-plugin-support-forum#14
3 years ago
Barış Soner Uşaklı 7e80cc1033 feat: closes #10719, don't trim children if category is marked section 3 years ago
Julian Lam ad072c03d1 Revert "Revert "feat: cross origin opener policy options (#10710)""
This reverts commit 46050ace1a.
3 years ago
Tong Ho bbc7f2afba fix: cannot turn off all networks 3 years ago
Tong Ho 2e088a8ef0 fix: cannot setting networks for sharing posts 3 years ago
Julian Lam c93bd0105e fix: expire email validation tokens on password change 3 years ago
Julian Lam 0d58e8a6af fix: remove extraneous console.log 3 years ago
Julian Lam 3c41ae04cd fix: #10733, extraneous apostrophes in plugin upgrader 3 years ago
Julian Lam 60114219c1 fix: get version from install/package.json instead 3 years ago
Julian Lam 8d701ec3e2 fix: #10739, always re-add theme to active plugins, on theme set 3 years ago
Julian Lam f38b2a737a fix: improper handling of single vs. multiple inputs for hidePrivateData 3 years ago
Julian Lam ecf0e8ce22 fix: observe user-specific and ACP-specific hiding rules for fullname 3 years ago
Julian Lam 3f5ae893c6 refactor: allow user.hidePrivateData() to handle an array of `userData` 3 years ago
Julian Lam 17e44ff5c9 feat: fire hook to allow plugins to filter the pids returned in a user profile
/cc julianlam/nodebb-plugin-support-forum#14
3 years ago
Barış Soner Uşaklı be917e8d39 feat: closes #10719, don't trim children if category is marked section 3 years ago
Julian Lam 0d68643bcb Revert "Revert "feat: cross origin opener policy options (#10710)""
This reverts commit 46050ace1a.
3 years ago
Julian Lam 43f9e6c8e4 fix: handle ENOENT on file deletion, closes #10645 3 years ago
Julian Lam 46050ace1a Revert "feat: cross origin opener policy options (#10710)"
This reverts commit 881323583f.
3 years ago
Barış Soner Uşaklı 881323583f
feat: cross origin opener policy options (#10710) 3 years ago
Julian Lam 22368b996e refactor: move orphan cleaning logic to its own method, added tests for getOrphans and cleanOrphans 3 years ago
Julian Lam 88aee43947 feat: new cronjob and ACP option to delete orphans after configurable number of days, closes #10659 3 years ago
Julian Lam bef236f371 chore: remove unnecessary `affected` set from deprecated plugin hook 3 years ago
Julian Lam b9d4724e0f feat: allowed plugins to modify email verification details prior to db saving or email send/plugin fire
+ new hook `filter:user.verify`
- hook `filter:user.verify.code`
3 years ago
Julian Lam 3a015eb8e3 fix: no need to pass in empty Set in deprecated hooks 3 years ago
Barış Soner Uşaklı b6f8e2fd05 fix: #10692 3 years ago
Julian Lam a04da673fa fix: #10690, all uploads in `uploads/files` showing orphaned 3 years ago
Julian Lam 7f870beb59 fix: bug where post associations are not shown when the directory is `files` 3 years ago
Julian Lam ece733eddc feat: pass absolute url to post into post tools response, #10566 3 years ago
Julian Lam a35642601c fix: buildBreadcrumbs naively prepending relative path even if absolute paths are passed in 3 years ago
Barış Soner Uşaklı 191fb9f443 test: fix tests again 3 years ago
Barış Soner Uşaklı e802fab87f fix: get rid of math.random in utils.generateUUID 3 years ago
Barış Soner Uşaklı 7e4d2852f6 fix: #10528, gray out disabled nav items
use enabled property if present
change default to true, so added nav items are enabled by default
3 years ago
Barış Soner Uşaklı 0084b563f3 fix: #10631, fix user digest setting display acp 3 years ago
Julian Lam 54ff768f51 chore: remove optional `middleware` parameter from setupPageRoute and setupAdminPageRoute calls 3 years ago
Barış Soner Uşaklı c926358d73 feat: add mute history, closes #10596 3 years ago