126 Commits (aca6a7543ae97da2d1af8a6f9c547a0088d9e240)

Author SHA1 Message Date
  rinpatch 455a402c8a HTTP Security plug: rewrite &csp_string/0 4 years ago
  Egor Kislitsyn e32b7ae044
Skip failing `:crypt` test on mac 4 years ago
  lain bfdd90f6d7 AuthenticationPlug: Also update crypt passwords. 4 years ago
  lain baef35bcc8 Authentication Plug: Update bcrypt password on login. 4 years ago
  Alex Gleason 9cbf17d59f
Handle bcrypt passwords for Mastodon migration 4 years ago
  Alex Gleason b46811a074
Upgrade Comeonin to v5 4 years ago
  Maksim 3d0c567fbc Pleroma.Web.TwitterAPI.TwoFactorAuthenticationController -> Pleroma.Web.PleromaAPI.TwoFactorAuthenticationController 4 years ago
  Ivan Tashkinov 2c4844237f Refactoring of :if_func / :unless_func plug options (general availability). Added tests for Pleroma.Web.Plug. 4 years ago
  Ivan Tashkinov f685cbd309 Automatic checks of authentication / instance publicity. Definition of missing OAuth scopes in AdminAPIController. Refactoring. 4 years ago
  Ivan Tashkinov 66f55106bd [#1682] Fixed Basic Auth permissions issue by disabling OAuth scopes checks when password is provided. Refactored plugs skipping functionality. 4 years ago
  Ivan Tashkinov bde1189c34 [#2349] Made :skip_plug/2 prevent plug from being executed even if explicitly called. Refactoring. Tests. 4 years ago
  Alexander Strizhakov 22bde21c4f
remote_ip plug adds remote_ip_found flag 4 years ago
  Ivan Tashkinov 1c05f539aa Improved in-test `clear_config/n` applicability (setup / setup_all / in-test usage). 4 years ago
  Ivan Tashkinov ec3719f539 Improved in-test config management functions. 4 years ago
  Alexander Strizhakov dc2ec84c0f
warnings fix 4 years ago
  rinpatch fc4496d4fa rate limiter: disable based on if remote ip was found, not on if the plug was enabled 4 years ago
  rinpatch c3b9fbd3a7 Revert "Set better Cache-Control header for static content" 4 years ago
  Ivan Tashkinov 5fc92deef3 [#1560] Ensured authentication or enabled federation for federation-related routes. New tests + tests refactoring. 4 years ago
  Mark Felder 5592db4757 Older copyright updates 4 years ago
  Mark Felder 05da5f5cca Update Copyrights 4 years ago
  Ivan Tashkinov b4367125e9 [#1560] Added tests for non-federating instance bahaviour to ActivityPubControllerTest. 4 years ago
  Haelwenn (lanodan) Monnier 6da6540036
Bump copyright years of files changed after 2020-01-07 4 years ago
  Haelwenn (lanodan) Monnier 6c0d869d9d
Bump copyright years of files changed after 2019-01-01 4 years ago
  rinpatch 4d416343fa rate limiter: Fix a race condition 4 years ago
  Ivan Tashkinov c747260989 [#2250] Tiny refactoring per merge request review. 4 years ago
  Ivan Tashkinov 6f2efb1c45 Runtime configurability of RateLimiter. Refactoring. Disabled default rate limits in tests. 4 years ago
  Ivan Tashkinov 4f8c3462a8 Tweaks to `clear_config` calls in tests in order to prevent side effects on config during test suite execution. 4 years ago
  Egor Kislitsyn 775212121c
Verify HTTP signatures only when request accepts "activity+json" type 4 years ago
  minibikini e1fa8c11a9 Apply suggestion to test/plugs/http_signature_plug_test.exs 4 years ago
  Egor Kislitsyn a12b6454bb
Add an option to require fetches to be signed 4 years ago
  rinpatch 54029fe212 tests: remove a useless sleep in rate limiter tests 4 years ago
  Ivan Tashkinov 7973cbdb9f OAuthScopesPlug: disallowed nil token (unless with :fallback option). WIP: controller tests modification: OAuth scopes usage. 4 years ago
  Maxim Filippov eb11c60289 Disable rate limiter for socket/localhost (unless RemoteIp is enabled) 4 years ago
  rinpatch 66563f93fd Set better Cache-Control header for static content 4 years ago
  Ivan Tashkinov 3920244be5 [#1427] Fixed `:admin` option handling in OAuthScopesPlug, added tests. 4 years ago
  Ivan Tashkinov 1770602747 [#1427] Extra check that admin OAuth scope is used by admin. Adjusted tests. 4 years ago
  Ivan Tashkinov 40e1817f70 [#1427] Fixes / improvements of admin scopes support. Added tests. 4 years ago
  rinpatch 5386d1f49f UserEnabledPlug: fix test after backporting 4 years ago
  lain 5b5f855237 UserEnabledPlug: Don't authenticate unconfirmed users. 4 years ago
  Egor Kislitsyn 36686f5245
Support authentication via `x-admin-token` HTTP header 4 years ago
  Egor Kislitsyn 72cf6a76f4
Fix random fails of the rate limiter tests 4 years ago
  Steven Fuchs 94627baa5c New rate limiter 4 years ago
  lain f6056e9c9c UserEnabledPlug: Don't authenticate unconfirmed users. 4 years ago
  rinpatch 84175fe30e Set better Cache-Control header for static content 4 years ago
  Ivan Tashkinov 10ff01acd9 [#1304] Moved all non-mutes / non-blocks fields from User.Info to User. WIP. 4 years ago
  minibikini f9380289eb Add `remote_ip` plug 4 years ago
  Haelwenn (lanodan) Monnier 447514dfa2
Bump copyright years of files changed in 2019 4 years ago
  Ivan Tashkinov b17f217bf3 [#1234] Addressed code analysis issue. 4 years ago
  Ivan Tashkinov 76068873db [#1234] Defined admin OAuth scopes, refined other scopes. Added tests. 4 years ago
  minibikini 11e12b5761 Add Pleroma.Plugs.Cache 4 years ago