Claire 502cf75b16

Merge pull request from GHSA-58x8-3qxw-6hm7 ...

* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`

2024-07-04 16:26:49 +02:00

..

accounts

Change read:me scope to profile scope (#30357)

2024-06-06 07:30:10 +00:00

admin

Extract permitted params constant in v1/admin/tags (#30652)

2024-06-11 15:29:41 +00:00

announcements

Add announcements (#12662)

2020-01-23 22:00:13 +01:00

apps

Support multiple redirect_uris when creating OAuth 2.0 Applications (#29192)

2024-05-17 13:46:12 +00:00

crypto

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

emails

Fix HTTP 500 in /api/v1/emails/check_confirmation (#25595)

2023-07-02 00:05:44 +02:00

featured_tags

Add not_featured_by scope to Tag (#28815)

2024-04-17 10:05:38 +00:00

instances

Update current_user override mode description in controllers (#30515)

2024-06-03 07:16:29 +00:00

lists

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

notifications

Rename cache_* methods to preload_* in controller concern (#30209)

2024-05-16 08:03:46 +00:00

peers

Add coverage for api/v1/peers/search endpoint and extract controller query to Instance scope (#28796)

2024-01-18 15:57:10 +00:00

polls

Add more tests for ActivityPub controllers (#13585)

2020-05-03 16:30:36 +02:00

profile

Refactor Api::V1::ProfilesController into two separate controllers (#26573)

2023-08-21 15:47:09 +02:00

push

Fix race condition in POST /api/v1/push/subscription (#30166)

2024-05-06 12:41:14 +00:00

statuses

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

timelines

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

trends

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

accounts_controller.rb

Change ids param to id in /api/v1/statuses and /api/v1/accounts for consistency (#30465)

2024-05-29 09:19:17 +00:00

announcements_controller.rb

Autofix Rubocop Style/RedundantBegin (#23703)

2023-02-19 07:09:40 +09:00

annual_reports_controller.rb

Add annual reports for accounts (#28693)

2024-01-24 09:38:10 +00:00

apps_controller.rb

Support multiple redirect_uris when creating OAuth 2.0 Applications (#29192)

2024-05-17 13:46:12 +00:00

blocks_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

bookmarks_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

conversations_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

custom_emojis_controller.rb

Fix /api/v1/custom_emojis being cached even when unauthenticated API access is disallowed (#24665)

2023-04-28 10:01:38 +02:00

directories_controller.rb

Eager loading fixes for api/ controllers (#28848)

2024-01-23 11:41:54 +00:00

domain_blocks_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

endorsements_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

favourites_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

featured_tags_controller.rb

Remove dead code in Api::V1::FeaturedTagsController (#25073)

2023-05-23 14:27:37 +02:00

filters_controller.rb

Fix Rails/ActionOrder cop (#24692)

2023-04-30 06:46:39 +02:00

follow_requests_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

followed_tags_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

instances_controller.rb

Update current_user override mode description in controllers (#30515)

2024-06-03 07:16:29 +00:00

invites_controller.rb

Add support for invite codes in the registration API (#27805)

2023-11-13 13:27:00 +00:00

lists_controller.rb

Add exclusive lists (#22048)

2023-06-05 09:37:02 +02:00

markers_controller.rb

Improve api/v1/markers#create performance against simultaneous requests (#28718)

2024-01-15 09:47:25 +00:00

media_controller.rb

Make it possible to upload audio and video to Heroku app (#24866)

2023-05-05 14:41:07 +02:00

mutes_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

notifications_controller.rb

Rename cache_* methods to preload_* in controller concern (#30209)

2024-05-16 08:03:46 +00:00

polls_controller.rb

Change unauthenticated responses to be cached in REST API (#24348)

2023-04-25 15:41:34 +02:00

preferences_controller.rb

Remove useless respond_to calls (#13208)

2020-03-06 01:29:38 +01:00

reports_controller.rb

Add forward_to_domains parameter to POST /api/v1/reports (#25866)

2023-07-10 18:26:56 +02:00

scheduled_statuses_controller.rb

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

statuses_controller.rb

Move pagination_params into API::BaseController (#28845)

2024-05-30 14:56:48 +00:00

streaming_controller.rb

Fix potential redirection loop of streaming endpoint (#28665)

2024-01-10 15:05:46 +00:00

suggestions_controller.rb

Change algorithm of follow recommendations (#28314)

2023-12-19 10:59:43 +00:00

tags_controller.rb

Remove unfollowed hashtag posts from home feed (#26028)

2023-07-17 13:56:28 +02:00