Commit Graph

773 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
dcb201dfa8 fix: https://github.com/NodeBB/NodeBB/issues/10242 2022-02-04 10:37:59 -05:00
Julian Lam
e1e1d5223e feat: push the theme name into body class 2022-01-27 13:23:51 -05:00
Barış Soner Uşaklı
10949184ca test: add failing guest csrf test (#10169)
* test: add failing guest csrf test

* test: use correct var

* fix: use applyCsrf for guests as well
2022-01-20 18:22:10 -05:00
Julian Lam
e9ee843b27 fix: CSRF handler to go back to saving in session (#10159) 2022-01-14 13:38:24 -05:00
Julian Lam
d89fc44c03 fix: move authenticateRequest before interstitial and maintenance mode middlewares, allowed plugins to disable authentication on certain routes
fixes #10112
2021-12-30 16:14:50 -05:00
Julian Lam
d95b4ee29a fix: assertion check to ensure messages are in the room when editing/deleting, etc 2021-12-22 14:58:42 -05:00
Julian Lam
90fcbe4416 feat: middleware.assert.message 2021-12-22 10:59:36 -05:00
Julian Lam
140f9d2481 fix: isFinite check for room assertion, more test migrating 2021-12-22 10:59:36 -05:00
Julian Lam
74f1905ea8 feat: allow API checkRequired middleware error to be internationalized 2021-12-22 10:59:36 -05:00
Julian Lam
02e878be72 feat: stub code for v3 chats api 2021-12-22 10:59:36 -05:00
Barış Soner Uşaklı
c4042c70de feat: #9506, allow seeing and editing your queued posts
allow regular users access to post queue
allow regular users to edit their queued post/topic title
allow regular users to remove their post from post queue
ability to send a notification to user without removing from post queue
allow accessing single post queue items from notifications
2021-12-16 22:25:39 -05:00
Barış Soner Uşaklı
41db9436e8 perf: only add middleware if relativePath is set 2021-12-01 17:18:38 -05:00
Julian Lam
a3bdb70617 feat: ensure that all requests handled by NodeBB fall under the relative_path as configured 2021-12-01 16:57:46 -05:00
Barış Soner Uşaklı
324262cbb5 refactor: DRY 2021-11-28 19:31:08 -05:00
Barış Soner Uşaklı
1a7fffc7e9 breaking: remove deprecated user middlewares 2021-11-28 18:58:17 -05:00
Barış Soner Uşaklı
941ecaf899 fix: keep query params on /me redirects 2021-11-28 18:48:52 -05:00
Barış Soner Uşaklı
65c5504193 fix: 403/400/500 page not generating csrf_token 2021-11-28 07:31:09 -05:00
Barış Soner Uşaklı
7434cbf66f test: add api token tests 2021-11-26 18:59:29 -05:00
Julian Lam
6c07433dea refactor: use routePrefixMap instead of routeRegexpMap, +tests (#10035)
* refactor: use routePrefixMap instead of routeRegexpMap, +tests

Currently tests fail because privilege pages resolve if passed garbage... hmm

* fix: priv check paths

remove /v3 from path as well

Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2021-11-26 13:53:53 -05:00
Barış Soner Uşaklı
29b3587d91 test: middleware/expose.js 2021-11-22 19:56:12 -05:00
Barış Soner Uşaklı
fb363957d1 refactor: tab rules 2021-11-18 16:42:18 -05:00
Barış Soner Uşaklı
e368feef51 refactor: dont expost entire res._locals to client side 2021-11-17 22:11:24 -05:00
Julian Lam
1719bff89c feat: use auto-generated meta and link tags in ACP, closes #9991 2021-11-09 10:39:48 -05:00
Julian Lam
dd4e66e22c fix: push back some deprecations, remove deprecated stuff scheduled for v1.18.0 2021-09-03 12:04:20 -04:00
gasoved
3df79683f5 feat: create folders in ACP uploads #9638 (#9750)
* feat: create folders in ACP uploads #9638

* fix: openapi

* test: missing tests

* fix: eslint

* fix: tests
2021-08-31 09:27:00 -04:00
Barış Soner Uşaklı
a288f51f42 fix: allow smaller than 5mins for admin relogin duration
setting the value to 1min in ACP wasn't working
2021-08-18 20:46:51 -04:00
Opliko
d509a307f0 Remove some deprecated/unnecessary code (#9688)
* refactor: remove mkdirp promisify

* refactor: remove old session deletion API route

* refactor: remove middleware.isAdmin

* refactor: remove templateValues.config.bootswatchSkin

* fix: unused dependencies
2021-08-01 22:03:19 -04:00
Julian Lam
afd2d8dab1 feat(emails): pass req in to filter:registration.interstitial 2021-07-30 13:29:13 -04:00
Julian Lam
b4b65ecd98 fix(emails): remove debug log 2021-07-30 13:29:13 -04:00
Julian Lam
087e6020e4 refactor(email): validation checking methods, +tests fix 2021-07-30 13:29:13 -04:00
Julian Lam
69c96dd23c refactor(emails): more work in update email interstitial, interstitial skipping, email change on confirmation, deprecation of requireEmailConfirmation 2021-07-30 13:29:13 -04:00
Barış Soner Uşaklı
04b1f702cd feat: add loggedin/guest class to body 2021-07-29 11:10:13 -04:00
Julian Lam
cc6cbfcdc4 Flags API (#9666)
* feat: new routes for flags API

+ flag get
+ flag creation, migration from socket method
+ flag update, migration from socket method
* fixed bug where you could not unassign someone from a flag

* feat: tests for new flags API

added missing files for schema update

* fix: flag tests to use Write API instead of sockets

* feat: flag notes API + tests

* chore: remove debug line

* test: fix breaking test on mongo
2021-07-16 13:44:42 -04:00
Julian Lam
7036c3751e feat: internationalize API error messages 2021-07-09 12:24:32 -04:00
Julian Lam
a54a3ee1ca fix: return proper API-style response if exception caught by error handler on v3 routes [breaking] 2021-07-09 12:24:32 -04:00
Barış Soner Uşaklı
3cd9434b56 fix: scope 2021-06-18 12:36:04 -04:00
Barış Soner Uşaklı
1eda538da5 fix: #9615, catch exceptions in renderOverride 2021-06-18 12:24:07 -04:00
Barış Soner Uşaklı
3d5fef6e80 feat: pass req.query to getUnreadData 2021-05-27 10:02:54 -04:00
Barış Soner Uşaklı
9ebfdeb7ee fix: #9580, proper 404 when ajaxifying 2021-05-25 12:44:17 -04:00
Barış Soner Uşaklı
3d6bdeb3df feat: add req.query to flags.list/getCount 2021-05-19 10:01:33 -04:00
Barış Soner Uşaklı
f6b583bb9d feat: #9533, allow redirect in build hooks 2021-05-07 09:32:06 -04:00
Barış Soner Uşaklı
6ed8890c2e fix: #9512, fix chat icon if no privileges 2021-04-27 10:00:52 -04:00
Barış Soner Uşaklı
a478dc7ee8 feat: add filter:middleware.autoLocale 2021-04-26 10:35:34 -04:00
Barış Soner Uşaklı
435067aa5f test: remove logs 2021-04-18 21:57:07 -04:00
Barış Soner Uşaklı
2ea468daa3 test: clear cache between runs, require middleware later in helpers 2021-04-18 21:57:07 -04:00
Barış Soner Uşaklı
d15e27107e test: log 2021-04-18 21:57:07 -04:00
Barış Soner Uşaklı
354e0a822d test: remove equals 2021-04-18 21:57:07 -04:00
psychobunny
4dd3844680 fix: logic is hard 2021-04-18 21:57:07 -04:00
psychobunny
2e9efc0e8a fix: wrong variable for cache 2021-04-18 21:57:07 -04:00
psychobunny
fa0c92a7c4 fix: eslint 2021-04-18 21:57:07 -04:00