Claire
21b716db12
Merge pull request from GHSA-58x8-3qxw-6hm7
...
* Fix insufficient permission checking for public timeline endpoints
Note that this changes unauthenticated access failure code from 401 to 422
* Add more tests for public timelines
* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-05 07:10:33 +09:00
Daniel M Brasil
e29c435011
fix: Return HTTP 422 when scheduled status time is less than 5 minutes ( #30584 )
2024-07-05 07:05:03 +09:00
KMY
32a8f367a3
Merge remote-tracking branch 'parent/main' into upstream-20240424
2024-04-24 08:57:07 +09:00
Emelia Smith
049b159beb
Add read:me OAuth 2.0 scope, allowing more limited access to user data ( #29087 )
2024-04-23 11:47:00 +00:00
KMY
45c5c7b055
Merge remote-tracking branch 'parent/main' into upstream-20240408
2024-04-08 07:44:47 +09:00
Matt Jankowski
191bf5876e
Add coverage for sanitize failure path in api/web/embeds spec ( #29851 )
2024-04-04 16:07:16 +00:00
KMY
f46bef53b7
Fix test
2024-04-03 12:36:08 +09:00
KMY
479c4fecc1
Merge remote-tracking branch 'parent/main' into upstream-20240403
2024-04-03 12:12:09 +09:00
Matt Jankowski
f87959ab50
Fix RSpec/LetSetup cop in api/v1/timelines/public spec ( #28972 )
2024-04-02 14:05:02 +00:00
Matt Jankowski
34489591ec
Add max_pinned_statuses to instances serializer and api response ( #29441 )
2024-04-02 13:54:11 +00:00
Renaud Chaput
b4d991adaa
Use integers and not numbers in notification policy API counters ( #29810 )
2024-04-02 10:06:26 +00:00
KMY
6c9b221cb2
Merge remote-tracking branch 'parent/main' into upstream-20240326
2024-03-26 09:08:20 +09:00
Matt Jankowski
34f293475e
Fix results/query in api/v1/featured_tags/suggestions ( #29597 )
2024-03-22 15:08:27 +00:00
Claire
814a48517f
Add some more tests for notification policies ( #29698 )
2024-03-21 16:46:38 +00:00
KMY
76598bd542
Merge remote-tracking branch 'parent/main' into upstream-20240319
2024-03-19 09:15:20 +09:00
Matt Jankowski
2e91a9bd34
Add include_pagination_headers matcher to check Link header in api specs ( #29596 )
2024-03-15 10:17:45 +00:00
Matt Jankowski
46e902f1f3
Merge api/v1/accounts/credentials controller spec into existing request spec ( #29006 )
2024-03-13 09:22:43 +00:00
Matt Jankowski
71eecbfa1f
Move api/v2/filters/* to request spec ( #28956 )
2024-03-13 08:47:09 +00:00
KMY
8e94ed2cec
Merge remote-tracking branch 'parent/main' into upstream-20240308
2024-03-12 09:27:01 +09:00
Matt Jankowski
24319836de
Convert request-based setup into factory setup in push/subscriptions request spec ( #29489 )
2024-03-11 15:46:25 +00:00
KMY
fa96bf2e87
Merge remote-tracking branch 'parent/main' into upstream-20240308
2024-03-08 08:08:34 +09:00
Eugen Rochko
50b17f7e10
Add notification policies and notification requests ( #29366 )
2024-03-07 14:53:37 +00:00
KMY
42b5727723
Merge remote-tracking branch 'parent/main' into upstream-20240304
2024-03-04 10:37:41 +09:00
Matt Jankowski
18945f62e0
Convert more API specs from controller->request style ( #29004 )
2024-03-01 16:24:45 +00:00
KMY（雪あすか）
76b24193c4
Remove: #608 ドメインブロック「リプライを拒否」 ( #624 )
2024-03-01 12:03:31 +09:00
KMY
7684b5de6f
Merge remote-tracking branch 'parent/main' into upstream-20240218
2024-02-20 09:25:49 +09:00
Matt Jankowski
64f9939e39
Use capture_emails helper to improve email assertions in specs ( #29245 )
2024-02-19 15:57:47 +00:00
Wolfgang Fournès
86627ea2e4
Add a missing thread example to the statuses spec ( #29278 )
2024-02-19 13:35:58 +00:00
KMY
05e52a09a8
Merge remote-tracking branch 'parent/main' into upstream-20230209
2024-02-09 12:53:59 +09:00
Claire
7ee93b7431
Change source attribute of Suggestion entity in /api/v2/suggestions back to a string ( #29108 )
2024-02-06 17:10:17 +00:00
Matt Jankowski
df7acdcee5
Update markers API spec for error case ( #29096 )
2024-02-06 12:47:04 +00:00
Emelia Smith
4fb7f611de
Return domain block digests from admin domain blocks API ( #29092 )
2024-02-06 12:38:14 +00:00
Matt Jankowski
4cf07ed78c
Add missing action logging to api/v1/admin/reports#update ( #29044 )
2024-02-06 11:34:11 +00:00
KMY（雪あすか）
57341a82ac
Change: ローカルタイムラインを無効にしている時、/api/v1/timelines/publicタイムライン取得で「リモートユーザーのみ」指定も無効化 ( #526 )
...
* Change: ローカルタイムラインを無効にしている時、「リモートユーザーのみ」指定も無効化
* Fix test
2024-02-06 10:03:41 +09:00
KMY
92ef42d697
Merge remote-tracking branch 'parent/main' into upstream-20240201
2024-02-01 11:32:27 +09:00
Matt Jankowski
ff8937aa2c
Move api/v1/statuses/* to request spec ( #28954 )
2024-01-26 17:45:54 +00:00
Matt Jankowski
5119fbc9b7
Move api/v1/admin/trends/links/preview_card_providers to request spec ( #28951 )
2024-01-26 17:41:39 +00:00
Matt Jankowski
b6baab447d
Move api/v2/admin/accounts to request spec ( #28950 )
2024-01-26 17:41:13 +00:00
Matt Jankowski
7adcc0aae3
Move api/v1/trends/* to request specs ( #28949 )
2024-01-26 17:40:39 +00:00
Matt Jankowski
0b0ca6f3b8
Move api/v1/timelines/list to request spec ( #28948 )
2024-01-26 17:40:15 +00:00
Matt Jankowski
09a3493fca
Combine double subject in api/v1/media shared example ( #28943 )
2024-01-26 16:35:49 +00:00
KMY
54f5113b46
Merge remote-tracking branch 'parent/main' into upstream-20240124
2024-01-24 08:38:14 +09:00
Matt Jankowski
7ecf7f5403
Move controller->request specs for api/v1/statuses/* ( #28818 )
2024-01-22 11:58:54 +00:00
KMY
a4cc73438e
Merge remote-tracking branch 'parent/main' into upstream-20240122
2024-01-22 10:07:33 +09:00
KMY（雪あすか）
8793bc286e
Add: #40 拡張ドメインブロックに「トレンドに掲載しない」を追加 ( #492 )
2024-01-22 09:06:05 +09:00
Matt Jankowski
329911b0a3
Migrate controller->request spec for api/v1/follow* ( #28811 )
2024-01-19 09:32:41 +00:00
Matt Jankowski
0b853678a4
Add coverage for api/v1/peers/search endpoint and extract controller query to Instance scope ( #28796 )
2024-01-18 15:57:10 +00:00
KMY
ad87f2b100
Merge commit ' e72676e83a' into upstream-20240115
2024-01-15 19:30:55 +09:00
Matt Jankowski
e72676e83a
Improve api/v1/markers#create performance against simultaneous requests ( #28718 )
2024-01-15 09:47:25 +00:00
KMY
e65fb9fb51
Merge remote-tracking branch 'parent/main' into upstream-20240112
2024-01-12 14:48:17 +09:00
