pleroma/changelog.d
Lain Soykaf da7e75ca73
fix(activitypub): check OAuth scopes on C2S endpoints
The C2S routes and the outbox/followers/following/replies collections
accepted a token with any scope. Requests with an OAuth token now need
the matching scope; HTTP signatures and Basic auth are not changed.
2026-10-26 12:49:58 +04:00
..
ap-c2s-oauth-scopes.security fix(activitypub): check OAuth scopes on C2S endpoints 2026-10-26 12:49:58 +04:00
legacy-sequences.fix Delete legacy Postgres sequences 2026-08-24 14:51:58 -07:00
release-2.11.0.skip Prepare 2.11.0 release 2026-10-22 11:34:11 +04:00