Eugen Rochko db3ed498b0 When OAuth password verification fails, return 401 instead of redirect (#5111) ...

Call to warden.authenticate! in resource_owner_from_credentials would
make the request redirect to sign-in path, which is a bad response for
apps. Now bad credentials just return nil, which leads to HTTP 401
from Doorkeeper. Also, accounts with enabled 2FA cannot be logged into
this way.

2017-09-27 23:42:49 +02:00

..

active_model_serializers.rb

Add recursive object support to API response (#4095)

2017-07-07 14:12:16 +02:00

application_controller_renderer.rb

Upgrade to Rails 5.0.0.1

2016-08-17 17:58:00 +02:00

assets.rb

Replace sprockets/browserify with Webpack (#2617)

2017-05-03 02:04:16 +02:00

backtrace_silencers.rb

Initial commit

2016-02-20 22:53:20 +01:00

blacklists.rb

Quick best practice cleanup of views/helpers (#1546)

2017-04-12 18:24:18 +02:00

cookies_serializer.rb

Upgrade to Rails 5.0.0.1

2016-08-17 17:58:00 +02:00

devise.rb

Extend Devise remember_me longevity to 1 year instead of 2 weeks (#4587)

2017-08-12 16:30:59 +02:00

doorkeeper.rb

When OAuth password verification fails, return 401 instead of redirect (#5111)

2017-09-27 23:42:49 +02:00

fast_blank.rb

fix can toot whitespace (#2218)

2017-04-22 19:48:55 +02:00

filter_parameter_logging.rb

Added optional two-factor authentication

2017-01-27 20:35:16 +01:00

httplog.rb

Version bumps for ruby and misc gems (#1159)

2017-04-10 22:47:41 +02:00

inflections.rb

Add ActivityPub inbox (#4216)

2017-08-08 21:52:15 +02:00

instrumentation.rb

Improve StatsD instrumentation

2017-01-26 19:08:05 +01:00

json_ld.rb

Use updated ActivityStreams context (added: sharedInbox) (#4764)

2017-09-02 14:00:58 +02:00

kaminari_config.rb

OEmbed support for PreviewCard (#2337)

2017-04-27 14:42:22 +02:00

mime_types.rb

Set correct content-type for ActivityPub JSON (#4592)

2017-08-14 04:16:43 +02:00

oembed.rb

OEmbed support for PreviewCard (#2337)

2017-04-27 14:42:22 +02:00

open_uri_redirection.rb

Federate header images, fix open-uri http->https redirection error

2017-03-18 22:51:20 +01:00

ostatus.rb

Follow-up to #4582 and #5027, removing dead code (#5101)

2017-09-26 01:06:27 +02:00

pagination.rb

Pagination improvements (#1445)

2017-04-11 01:11:41 +02:00

paperclip.rb

Add OpenStack Keystone V3 support (#4889)

2017-09-11 15:11:13 +02:00

rabl_init.rb

Make sure Rabl is using Oj

2017-04-05 19:29:30 +02:00

rack_attack.rb

Add Content-Type header on throttled response to fix mojibake (#4558)

2017-08-08 15:47:35 +02:00

redis.rb

Set config.cache_store in environments file. (#3219)

2017-05-22 15:01:02 +02:00

session_activations.rb

Revocable sessions (#3616)

2017-06-23 18:50:53 +02:00

session_store.rb

Make cookies https-only if LOCAL_HTTPS is true, set X-Frame-Options to DENY,

2016-11-02 12:58:15 +01:00

sidekiq.rb

Revert unique retry job (#4937)

2017-09-14 15:12:43 +02:00

simple_form.rb

Improve UI of admin site settings (#4163)

2017-07-12 03:24:04 +02:00

single_user_mode.rb

Add single user mode

2016-12-06 17:19:26 +01:00

statsd.rb

Fix key names in statsd

2017-01-26 19:46:52 +01:00

strong_migrations.rb

Add strong_migrations gem to warn when creating unsafe migrations (#5078)

2017-09-25 02:11:14 +02:00

timeout.rb

Add proper error page for request timeouts

2017-04-02 19:43:44 +02:00

trusted_proxies.rb

Fix error

2017-01-22 23:07:31 +01:00

twitter_regex.rb

Re-allow underscore on valid_url_path_ending_chars (#4999)

2017-09-18 21:25:40 +02:00

vapid.rb

Add Rake task for generate VAPID key (#4195)

2017-07-14 12:13:43 +02:00

wrap_parameters.rb

Upgrade to Rails 5.0.0.1

2016-08-17 17:58:00 +02:00