Commit graph

17,503 commits

Author SHA1 Message Date
lain
2f48544937 Merge branch 'akkoma-fixes-1014-1018' into 'develop'
Status visibility checks for post interactions, stop leaking internal Activity representation (Akkoma PR 1014 and 1018)

Closes #3383

See merge request pleroma/pleroma!4400
2025-12-23 13:55:18 +00:00
lain
bd41d15100 Merge branch 'nginx-config-update' into 'develop'
Update Nginx config example

See merge request pleroma/pleroma!4277
2025-12-22 12:23:42 +00:00
Lain Soykaf
2b8a366f9b Nginx example: Add headers and use same paths we use in other places 2025-12-22 16:10:02 +04:00
Lain Soykaf
0f32134ea5 Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into nginx-config-update 2025-12-22 13:51:25 +04:00
lain
1d366c0138 Merge branch 'transmogrifier/handle-as-public' into 'develop'
Transmogrifier: convert "as:Public" to full w3 URL

See merge request pleroma/pleroma!4394
2025-12-22 07:39:44 +00:00
lain
d19b992417 Merge branch 'webfinger-actual-fix' into 'develop'
Fix WebFinger for split-domain setups

See merge request pleroma/pleroma!4405
2025-12-22 07:38:55 +00:00
Lain Soykaf
e9d9724637 WebFinger: Tighten the requirements. 2025-12-21 17:46:39 +04:00
Lain Soykaf
f70d1a436b WebFingerTest: Add test for more webfinger spoofing. 2025-12-21 17:46:20 +04:00
lain
985a0a28c7 Merge branch 'docs-rum-idx' into 'develop'
Docs RUM: add OTP command, recommend vacuum after migration

See merge request pleroma/pleroma!4363
2025-12-21 11:36:39 +00:00
Lain Soykaf
ec58b6a4cc CommonFixes, Transmogrifier: Fix tests. 2025-12-21 15:19:38 +04:00
Lain Soykaf
4496dc81c4 TransmogrifierTest, CreateGenericValidatorTest: Add regression tests for addressing. 2025-12-21 15:19:05 +04:00
lain
1d44640655 Merge branch 'relayd-ipv6' into 'develop'
OpenBSD relayd: Fix IPv6 example

See merge request pleroma/pleroma!4408
2025-12-21 10:24:38 +00:00
Lain Soykaf
98f300c5ae Transmogrifier: Handle user updates. 2025-12-21 14:16:57 +04:00
Lain Soykaf
ed538603fb TransmogrifierTest: Add failing test for Update. 2025-12-21 14:04:19 +04:00
nicole mikołajczyk
45611c9881 Merge branch 'mastodon-quote-id-api' into 'develop'
Support `quoted_status_id` parameter in post creation request

See merge request pleroma/pleroma!4392
2025-12-17 20:52:08 +01:00
Phantasm
ed7ad7d96a
OpenBSD relayd: Fix IPv6 example
relayd has problems loading certs when IPv4 and IPv6 listens are in the
same relay block.
2025-12-17 19:11:20 +01:00
nicole mikołajczyk
e0ab2c9c9c Merge remote-tracking branch 'origin/develop' into mastodon-quote-id-api
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-17 13:43:45 +01:00
nicole mikołajczyk
c06fcc7f5d Merge branch 'order-favourites-reblogs' into 'develop'
Order favourites and reblogs list from newest to oldest

See merge request pleroma/pleroma!4399
2025-12-16 23:49:01 +01:00
nicole mikołajczyk
d41e2fbaaf Merge branch 'preferred-frontend' into 'develop'
Port Akkoma frontend preference code

See merge request pleroma/pleroma!4398
2025-12-16 20:54:00 +01:00
nicole mikołajczyk
8c9e130cc9 Merge branch 'description-improvement' into 'develop'
Use :list_behaviour_implementations for LanguageDetector and Translation providers

See merge request pleroma/pleroma!4407
2025-12-16 20:53:52 +01:00
nicole mikołajczyk
c6298be9f0 Merge branch 'scrobbles-scope' into 'develop'
Add `write:scrobbles` and `read:scrobbles` scope for scrobbling

See merge request pleroma/pleroma!4379
2025-12-16 20:53:32 +01:00
Phantasm
4b168691fe
add missing changelog 2025-12-16 20:42:34 +01:00
HJ
de022de4ce Merge branch 'scrubber-span-classes' into 'develop'
Allow "invisible" and "ellipsis" classes for span tags to match Mastodon behavior

See merge request pleroma/pleroma!4357
2025-12-16 16:56:11 +00:00
nicole mikołajczyk
d9baa0980d Merge branch 'normalize-actor-image-hrefs' into 'develop'
Add Actor images normalization from array of urls to string

See merge request pleroma/pleroma!4404
2025-12-16 10:49:51 +01:00
nicole mikołajczyk
c05d2d02c2 Use :list_behaviour_implementations for LanguageDetector and Translation providers
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-16 00:04:39 +01:00
nicole mikołajczyk
45af48520b this shouldn't be available outside the module
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-15 18:10:00 +01:00
nicole mikołajczyk
cacb2ce377 Update changelog
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-15 17:25:57 +01:00
nicole mikołajczyk
e5be1d04d6 Update tests, make the mastodon subdomain example not have the /.well-known/host-meta redirect, as the docs don't include it
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-15 17:01:56 +01:00
nicole mikołajczyk
3e2573f1c4 Fix WebFinger for split-domain set ups
Signed-off-by: nicole mikołajczyk <git@mkljczk.pl>
2025-12-15 17:01:53 +01:00
Phantasm
4985902b02
Add Actor images normalization from array of urls to string 2025-12-15 00:00:57 +01:00
Phantasm
3466b626d6
lint 2025-12-14 14:06:38 +01:00
Phantasm
d36d0abd27
API Docs: Switch some added 404 API response to ApiNotFoundError schema 2025-12-12 21:17:58 +01:00
Phantasm
49a5630c75
CommonAPI: Standardize visibility error, use helper function if possible 2025-12-12 18:05:58 +01:00
Phantasm
6f55763db4
add changelogs 2025-12-12 00:11:11 +01:00
Phantasm
53f23dd259
MastoAPI docs: Remove unused 403 respones 2025-12-12 00:04:28 +01:00
Phantasm
374305d5fe
AP C2S: Add reply test 2025-12-12 00:04:28 +01:00
Phantasm
fe7108cbc2
MastoAPI: Unify pin/bookmark/mute/fav not visible responses to 404
Also adds more tests for these interactions.
2025-12-12 00:04:27 +01:00
Phantasm
73a3f06f71
PleromaAPI: Change EmojiReact to invisible post response from 400 to 404 2025-12-12 00:03:59 +01:00
Phantasm
293628fb24
MastoAPI/CommonAPI: Return 404 when post not visible to user
Akkoma patches returned 403 and some of my previous commits returned 422.
This unifies the errors returned to 404 "Record not found", gaslighting
user just like we do for other endpoints and how Mastodon does it.
2025-12-11 23:32:21 +01:00
Phantasm
9d89156b84
AP C2S: Explicitly reject Updates to Actors that failed silently 2025-12-11 23:32:21 +01:00
Phantasm
63bdf4dc2b
C2S: New Add/Remove and Actor creation tests
Creating Actors via C2S doesn't make sense, thus it should fail.
Tests creating Actors with type: Application/Person/Service.

All Create Activities for new Actors currently fail with
`validator not set` in the pipeline.
2025-12-11 23:32:11 +01:00
Phantasm
426535bc38
CommonAPI: Forbid disallowed status (un)muting and unpinning
When a user tried to unpin a status not belonging to them, a full
MastoAPI response was sent back even if status was not visible to them.

Ditto with (un)mutting except ownership.
2025-12-11 23:30:04 +01:00
Phantasm
f914748510
Transmogrifier: make Listen Activity test more strict 2025-12-11 23:30:04 +01:00
Phantasm
3f16965178
Transmogrifier: update internal fields list according to constant 2025-12-11 23:30:04 +01:00
Phantasm
21b2fd1e05
AP C2S: reject Flag activities, add visibility refutes to some tests 2025-12-11 23:30:04 +01:00
Phantasm
7f3b3c2491
AP C2S: remove check for local user since user is already authenticated
Before a request arrives to update_outbox, it already passed through out
Plug authentication (:authenticate), so at this point all users should
be local.

Also adds Listen Activities to the list of allowed Activities that don't
need an existing normalized object referenced in them.
2025-12-11 23:30:04 +01:00
Phantasm
2b76243ec8
CommonAPI: Fail when user sends report with posts not visible to them 2025-12-11 23:30:03 +01:00
Phantasm
a4e480a636
lint and credo 2025-12-11 23:30:03 +01:00
Phantasm
b3887a6fa7
AP C2S: Validate visibility for C2S requests to /users/:nickname/outbox
A local user could previously send Announce/EmojiReact/Like activities
to their outbox referencing objects that aren't visible to them and they
would get processed as if can see them. Only requirement is knowing
the URI of the object and the users instance having C2S enabled (currently
disabled by default).
2025-12-11 23:30:03 +01:00
Phantasm
75353282ee
AP ObjectView: add test for Listen activities 2025-12-11 23:30:03 +01:00