dc9c11ec52
feat: return reports in audit log entries
2024-12-27 13:21:02 -05:00
53006ea313
feat(frontend): audit log
2024-12-26 16:33:32 -05:00
5077bd6a0b
fix(backend): return report context in mod api
2024-12-26 14:01:51 -05:00
3f0edc4374
static pages volume in docker-compose.yml
2024-12-26 10:25:00 -05:00
7468aa20ab
feat: static documentation pages
2024-12-25 17:53:31 -05:00
fe1cf7ce8a
feat: GET /api/v1/users/@me
2024-12-25 16:04:32 -05:00
478ba2a406
feat: GET /api/v1/users/{userRef}/members/{memberRef}
2024-12-25 14:53:36 -05:00
78afb8b9c4
feat: GET /api/v1/users/{userRef}/members
2024-12-25 14:33:42 -05:00
e908e67ca6
chore: license headers
2024-12-25 14:24:18 -05:00
d182b07482
feat: GET /api/v1/members/{id}, api v1 flags
2024-12-25 14:23:16 -05:00
2281b3e478
fix: replace port 5000 in example docs with port 6000
...
macOS runs a service on port 5000 by default. this doesn't actually
prevent the backend server from *starting*, or the rate limiter proxy
from working, but it *does* mean that when the backend restarts, if the
proxy sends a request, it will stop working until it's restarted.
the easiest way to work around this is by just changing the port the
backend listens on. this does not change the ports used in the docker
configuration.
2024-12-25 14:03:15 -05:00
140419a1ca
feat: rate limiter lets api v1 requests through
2024-12-25 12:08:53 -05:00
7791c91960
feat(backend): initial /api/v1/users endpoint
2024-12-25 11:19:50 -05:00
661c3eab0f
fix(backend): save data exports as data-export.zip
...
change the random base 64 to a directory rather than part of the
filename, so that users downloading their exports aren't greeted with a
completely incomprehensible file in their downloads folder
2024-12-19 16:19:27 +01:00
96725cc304
feat: self-service deletion API, reactivate account page
2024-12-19 16:13:05 +01:00
546e900204
feat(backend): report context, fix deleting reports
2024-12-18 21:26:35 +01:00
80385893c7
feat: split migration into batches
2024-12-17 21:23:02 +01:00
d518cdf739
feat: filters on reports list
2024-12-17 20:48:52 +01:00
27846a4fe4
fix: make query parameters consistent
2024-12-17 20:48:39 +01:00
f766a2054b
feat: allow suspended *and* self-deleted users to access a handful of pages
2024-12-17 18:08:43 +01:00
36cb1d2043
feat: moderation API
2024-12-17 17:52:32 +01:00
79b8c4799e
feat: new migrator
2024-12-16 21:38:38 +01:00
41a008799a
update dependencies
2024-12-14 16:54:47 +01:00
11257ae069
chore: clean up backend code, fix most inspections
2024-12-14 16:51:58 +01:00
49b2902d6d
fix: use url-unsafe base 64 for auth tokens
...
.net throws an error when decoding url-safe base 64
luckily we never decode it *except* for tokens, so those can keep using
url-unsafe base 64. they're never used in URLs after all
2024-12-14 16:39:02 +01:00
9d33093339
feat: forgot password/reset password
2024-12-14 16:32:08 +01:00
1cf2619393
feat: add email to existing account, change password
2024-12-13 21:25:41 +01:00
77c3047b1e
feat: misskey auth
2024-12-12 16:44:01 +01:00
51e335f090
feat: use a FixedWindowRateLimiter keyed by IP to rate limit emails
...
we don't talk about the sent_emails table :)
2024-12-11 21:17:46 +01:00
ff8d53814d
feat: rate limit emails to two per address per hour
2024-12-11 20:42:48 +01:00
5cb3faa92b
feat(backend): allow suspended users to access some endpoints, add flag scopes
2024-12-11 20:42:26 +01:00
7f8e72e857
fix backend dockerfile, Caddyfile, and email controller
2024-12-11 02:11:53 +01:00
a29d1fdb78
feat: plain text emails
2024-12-11 01:44:00 +01:00
7e6698c3fb
update to .net 9 and add new OpenAPI packages
2024-12-10 15:28:44 +01:00
80b7f192f1
clean up RemoteAuthService
2024-12-10 14:09:32 +01:00
3338243cea
feat: log in with tumblr
2024-12-09 21:48:07 +01:00
d30ebacc72
chore: add license headers to all c# files
2024-12-09 21:11:46 +01:00
8a8b4caa18
feat: log in with google
2024-12-09 21:07:53 +01:00
d9d48c3cbf
feat: flag management
2024-12-09 14:52:31 +01:00
8bd4449804
refactor(backend): move all request/response types to a new Dto namespace
2024-12-09 13:58:18 +01:00
f8e6032449
chore(backend): add roslynator and fix diagnostics
2024-12-08 15:17:18 +01:00
649988db25
refactor(backend): use explicit types instead of var by default
2024-12-08 15:07:25 +01:00
bc7fd6d804
feat(frontend): register/log in with email
2024-12-04 17:43:02 +01:00
57e1ec09c0
feat: link fediverse account to existing user
2024-12-04 01:49:03 +01:00
03209e4028
chore(backend): clean imports
2024-12-03 20:05:24 +01:00
9966656c0c
fix(backend): don't need [NotMapped] for these actually
2024-12-03 20:04:28 +01:00
18bdbc0745
feat(backend): clean deleted users
2024-12-03 14:55:19 +01:00
903be2709c
feat(backend): initial data export support
...
obviously it's missing things that haven't been added yet
2024-12-02 18:06:19 +01:00
b47ed7b699
rate limit tweaks
...
the /users/{id} prefix contains most API routes so it's not a good idea
to put a single rate limit on *all* of them combined. the rate limiter
will now ignore the /users/{id} prefix *if* there's a second {id}
parameter in the URL.
also, X-RateLimit-Bucket is no longer hashed, so it can be directly
decoded by clients to get the actual bucket name. i'm not sure if this
will actually be useful, but it's nice to have the option.
2024-12-02 16:13:56 +01:00
de733a0682
feat(frontend): discord registration/login/linking
...
also moves the registration form found on the mastodon callback page
into a component so we're not repeating the same code for every auth method
2024-11-28 21:37:30 +01:00
