Claire 502cf75b16

Merge pull request from GHSA-58x8-3qxw-6hm7 ...

* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`

2024-07-04 16:26:49 +02:00

..

accounts

Change read:me scope to profile scope (#30357)

2024-06-06 07:30:10 +00:00

admin

Fix SQL error in admin measures API (#30753)

2024-06-18 16:04:58 +00:00

announcements

Convert more API specs from controller->request style (#29004)

2024-03-01 16:24:45 +00:00

apps

Support multiple redirect_uris when creating OAuth 2.0 Applications (#29192)

2024-05-17 13:46:12 +00:00

emails

Migrate to request specs in /api/v1/emails/confirmations (#25686)

2023-07-17 16:22:33 +02:00

featured_tags

Fix results/query in api/v1/featured_tags/suggestions (#29597)

2024-03-22 15:08:27 +00:00

instances

Remove unneeded settings cleanup from specs (#28425)

2023-12-19 15:17:22 +00:00

lists

Reduce .times usage in request and controller specs (#27949)

2023-11-21 13:05:59 +00:00

notifications

Use integers and not numbers in notification policy API counters (#29810)

2024-04-02 10:06:26 +00:00

peers

Add coverage for api/v1/peers/search endpoint and extract controller query to Instance scope (#28796)

2024-01-18 15:57:10 +00:00

polls

Convert more API specs from controller->request style (#29004)

2024-03-01 16:24:45 +00:00

push

Fix add validation to webpush subscription keys (#30542)

2024-06-05 19:16:47 +00:00

statuses

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

timelines

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

trends

Move api/v1/trends/* to request specs (#28949)

2024-01-26 17:40:39 +00:00

accounts_spec.rb

Change ids param to id in /api/v1/statuses and /api/v1/accounts for consistency (#30465)

2024-05-29 09:19:17 +00:00

announcements_spec.rb

Convert more API specs from controller->request style (#29004)

2024-03-01 16:24:45 +00:00

apps_spec.rb

Support multiple redirect_uris when creating OAuth 2.0 Applications (#29192)

2024-05-17 13:46:12 +00:00

blocks_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

bookmarks_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

conversations_spec.rb

Add notification policies and notification requests (#29366)

2024-03-07 14:53:37 +00:00

csp_spec.rb

Specs for minimal CSP policy in Api:: controllers (#27845)

2023-11-14 14:34:30 +00:00

custom_emojis_spec.rb

Improve spec coverage for models/announcement class (#28350)

2023-12-14 10:29:10 +00:00

directories_spec.rb

Convert api/v1/directories controller spec to request spec (#28356)

2023-12-14 10:38:06 +00:00

domain_blocks_spec.rb

DB speedup in API:: controller/request specs (#25516)

2023-10-13 14:42:09 +02:00

endorsements_spec.rb

Convert api/v1/endorsements controller spec to request spec (#27984)

2023-11-20 09:32:28 +00:00

favourites_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

featured_tags_spec.rb

Use Sidekiq fake! instead of inline! in specs (#25369)

2024-01-10 11:06:58 +00:00

filters_spec.rb

Convert more API specs from controller->request style (#29004)

2024-03-01 16:24:45 +00:00

follow_requests_spec.rb

Reduce .times usage in request and controller specs (#27949)

2023-11-21 13:05:59 +00:00

followed_tags_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

instance_spec.rb

Convert /instances/* controller specs to request specs (#27988)

2023-11-20 11:05:28 +00:00

lists_spec.rb

Remove triple subject call in api/v1/lists spec (#28210)

2023-12-04 15:28:19 +00:00

markers_spec.rb

Update markers API spec for error case (#29096)

2024-02-06 12:47:04 +00:00

media_spec.rb

Combine double subject in api/v1/media shared example (#28943)

2024-01-26 16:35:49 +00:00

mutes_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

notifications_spec.rb

Add include_pagination_headers matcher to check Link header in api specs (#29596)

2024-03-15 10:17:45 +00:00

polls_spec.rb

Migrate to request specs in /api/v1/polls (#25596)

2023-07-17 16:50:00 +02:00

preferences_spec.rb

Convert api/v1/preferences controller spec to request spec (#27987)

2023-11-20 09:39:45 +00:00

profiles_spec.rb

Refactor Api::V1::ProfilesController into two separate controllers (#26573)

2023-08-21 15:47:09 +02:00

reports_spec.rb

Use sidekiq_inline in requests/api/v1/reports spec (#30564)

2024-06-06 14:14:33 +00:00

scheduled_status_spec.rb

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

statuses_spec.rb

fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584)

2024-06-10 13:33:48 +00:00

streaming_spec.rb

Convert more API specs from controller->request style (#29004)

2024-03-01 16:24:45 +00:00

suggestions_spec.rb

Change algorithm of follow recommendations (#28314)

2023-12-19 10:59:43 +00:00

tags_spec.rb

DB speedup in API:: controller/request specs (#25516)

2023-10-13 14:42:09 +02:00