289 Commits

Author SHA1 Message Date
Samuel
cae6fcc72a fix: request language property 2023-03-17 19:30:54 +01:00
Samuel
d086c053bb perf: custom i18next middleware that only initializes when needed 2023-03-17 17:50:59 +01:00
Samuel
810f5dd84c perf: cache jwt secret as key 2023-03-17 17:47:43 +01:00
Samuel
1de0dbe509 build: update dependencies 2023-03-17 16:36:25 +01:00
Madeline
4d06b86d7b
Fix UserSettings relation being in select rather than relations 2023-03-16 11:31:24 +11:00
Madeline
b9ffef8753
Remove test client and client patcher 2023-03-01 18:45:58 +11:00
Madeline
deb0da524e Rename password_reset config to passwordReset as it messes with config key generation 2023-02-25 20:31:10 +11:00
Madeline
048459b75f Merge branch 'master' of github.com:fosscord/fosscord-server 2023-02-24 23:49:07 +11:00
Madeline
51fe1b8955 send required_action in gateway for when email verification is required 2023-02-24 23:46:52 +11:00
Puyodead1
a22cdaaac6 fix a few issues with emails 2023-02-24 07:45:29 -05:00
Puyodead1
91e9d60040 first batch of requested changes 2023-02-24 06:52:01 -05:00
Puyodead1
ed38d74b3e don't return token on register if verification required 2023-02-24 06:36:57 -05:00
Puyodead1
05453ec148 implement password reset 2023-02-24 01:54:10 -05:00
Puyodead1
a78e13073f don't print anything if email send is successful 2023-02-24 00:10:50 -05:00
Puyodead1
ada821070b add right to resend verification emails 2023-02-23 22:52:24 -05:00
Puyodead1
1aba7d591c fix: email verification 2023-02-23 22:49:55 -05:00
Puyodead1
54dbc7190b fix: verification required for login not working correctly 2023-02-23 22:49:55 -05:00
Puyodead1
34cde14f75 config: require account verification 2023-02-23 22:40:05 -05:00
Puyodead1
97bafa81fc fix linting errors 2023-02-23 22:40:05 -05:00
Puyodead1
689b710c9e Fix template rendering and use verify email template
email html is weird, some stuff isn't supported.
2023-02-23 21:35:54 -05:00
Puyodead1
a47d80b255 Email verification works
- Added /auth/verify to authenticated route whitelist
- Updated /auth/verify to properly mark a user as verified, return a response, and fix expiration time check
- Implemented /auth/verify/resend
- Moved verification email sending to a helper method
- Fixed VerifyEmailSchema requiring captcha_key
2023-02-23 21:35:51 -05:00
Puyodead1
cc6bf066b1 add missing copyright headers 2023-02-23 21:35:50 -05:00
Puyodead1
256c7ed8fe send email verification 2023-02-23 21:35:49 -05:00
Puyodead1
ed6c1cbd15 Start implementing smtp 2023-02-23 21:35:49 -05:00
Madeline
eee98516dd Fix gateway encoding Date objects as {} when using erlpack. Fixes NaN/NaN/NaN timestamps in desktop client 2023-02-21 12:01:49 +11:00
Madeline
5f553cc614 Close #954 2023-02-21 11:35:06 +11:00
TheArcaneBrony
16f13616d2 Remove channel mentions from messages, in order to fix them in test client.
Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>
2023-02-20 05:09:57 +01:00
Madeline
cc50ebf47b Fix being unable to unset nicknames
Remove unwanted guild profile handler in cdn
Fix rights check for bio/avatars of your own user
2023-02-05 12:35:27 +11:00
Puyodead1
e290965d00 various fixes for webauthn (#973) 2023-02-03 15:05:54 +11:00
Madeline
74570994c8 run add:license 2023-02-03 14:40:41 +11:00
Madeline
16a5cbac87 Don't allow message types to be edited 2023-02-03 14:39:42 +11:00
Madeline
6e04c92f07 Merge pull request from GHSA-9qvc-84ch-5p2x
* Check permissions and rights

* Prevent editing message type unless MANAGE_MESSAGES right. Also don't send sensitive data in patch response.
2023-02-02 22:26:22 +11:00
Madeline
067d2d8be8 Merge pull request from GHSA-hqqp-gpqw-9w5c 2023-02-02 22:24:56 +11:00
Madeline
cf04de4add Merge pull request from GHSA-9q7f-pv47-cxp9 2023-02-02 22:22:30 +11:00
Madeline
af6b5a6594 Merge pull request from GHSA-r7h4-76f7-6264
* Actually use maxUsername config value.

* Change maxUsername default to discord.com default
2023-02-02 22:15:03 +11:00
Madeline
ae8f4d6752 check pw and other auth before letting users undisable 2023-01-31 15:13:19 +11:00
Madeline
71258f6487 read-states/ack-bulk (#969) 2023-01-30 13:34:27 +11:00
Puyodead1
709dc7280e Implement WebAuthn (#967)
* implement webauthn

* code review

---------

Co-authored-by: Madeline <46743919+MaddyUnderStars@users.noreply.github.com>
2023-01-30 13:30:42 +11:00
Madeline
8384a2c539 also don't use 3002 as default when gateway endpoints are null 2023-01-26 10:21:13 +11:00
Madeline
084dc0be08 Add ESLint (#941)
* Add eslint, switch to lint-staged for precommit

* Fix all ESLint errors

* Update GH workflow to check prettier and eslint
2023-01-20 18:10:47 +11:00
ChrisChrome
70475d8397 Fix a funny security vuln 2023-01-18 12:27:15 -07:00
Chris Chrome
fbac5c7cd7 Merge pull request #952 from fosscord/dev/endpoints-in-ping
Merge /dev/endpoints-in-ping to master
2023-01-18 12:14:05 -07:00
Chris Chrome
7152a1c2c1 Add youtu.be embed handler (#945) 2023-01-18 17:47:23 +11:00
Madeline
0e7f127ece Script to add license preamble to each file. Also, does that. (#935)
* Add script to automatically add license to each file

* Add license preamble to each file.

* Fix existing preamble detection breaking due to line endings. Git :(

* Prevent license from being added to code with other licenses
2023-01-18 13:05:49 +11:00
Madeline
0af3da6db7 Fix deleting an application if it has a bot 2023-01-17 00:01:14 +11:00
Madeline
0b89db8031 Merge pull request #934 from fosscord/master
Merge master into dev/endpoints-in-ping
2023-01-16 17:00:32 +11:00
Madeline
5771247645 Return embed proxy url even if imagor not set up. Also make warning nicer 2023-01-16 14:20:17 +11:00
Chris Chrome
8a23ac19f8 Move endpoints from ping -> policies/instance/domains (#933) 2023-01-16 13:46:41 +11:00
Madeline
de3909f646 Update dead lines 2023-01-16 00:03:51 +11:00
Madeline
dda70a66c9 Add an error log if embed handler fails, in addition to the existing sentry log 2023-01-15 16:21:46 +11:00