summaryrefslogtreecommitdiffstats
path: root/server/src/api/comment.rs
AgeCommit message (Collapse)Author
2020-07-14Security/fix permission bugs (#966)ryexandra
* secure the `EditPost` API endpoint * Check user is moderator in BanFromCommunity * secure the `EditComment` API endpoint * pass orig `read` prob when not explicitly updating it. * Block random users from adding mods. * use cleaner logic from `EditPost` * prevent editing a community by a mod from transfering ownership to them * secure `read` action in `EditPrivateMessage` * Add check in UserMention * only let the indended recipient mark as read * simplify booleans to satisfy clippy * requested changes + cargo +nightly fmt * fix to pass federation tests for deleting comments and posts Co-authored-by: chiminh <chiminh.tutanota.com> Co-authored-by: Hex Bear <buildadangtrain@protonmail.com>
2020-07-10Split code into cargo workspaces (#67)nutomic
More fixes - fixed docker builds - fixed mentions regex test - fixed DATABASE_URL stuff - change schema path in diesel.toml Address review comments - add jsonb column back into activity table - remove authors field from cargo.toml - adjust LEMMY_DATABASE_URL env var usage - rename all occurences of LEMMY_DATABASE_URL to DATABASE_URL Decouple utils and db Split code into cargo workspaces Co-authored-by: Felix Ableitner <me@nutomic.com> Reviewed-on: https://yerbamate.dev/LemmyNet/lemmy/pulls/67
2020-07-01Federation async (#848)Riley
* Asyncify more * I guess these changed * Clean PR a bit * Convert more away from failure error * config changes for testing federation * It was DNS So actix-web's client relies on TRust DNS Resolver to figure out where to send data, but TRust DNS Resolver seems to not play nice with docker, which expressed itself as not resolving the name to an IP address _the first time_ when making a request. The fix was literally to make the request again (which I limited to 3 times total, and not exceeding the request timeout in total) * Only retry for connecterror Since TRust DNS Resolver was causing ConnectError::Timeout, this change limits the retry to only this error, returning immediately for any other error * Use http sig norm 0.4.0-alpha for actix-web 3.0 support * Blocking function, retry http requests * cargo +nightly fmt * Only create one pictrs dir * Don't yarn build * cargo +nightly fmt
2020-06-26Some fixes to federation.Dessalines
- Advanced code migrations now disable then re-enable triggers. Brings run time down to < 15 seconds, no need to thread them. - Changing ap_ids and actor_ids in migrations to a fake url, so it doesn't break XsdAnyUri in activitystreams.
2020-05-16Merge branch 'yerba_rework-imports' into federationDessalines
2020-05-16Rework importsFelix
2020-05-15Federated mentions. Fixes #681 (#717)Dessalines
* Federated mentions. Fixes #681 * Changing some todos, adding comments.
2020-05-03Add federated comment and post undo like.Dessalines
2020-05-03Adding federated mod remove actions.Dessalines
2020-05-01Add undos for delete community, post, and comment.Dessalines
2020-05-01Adding federated community, comment, and post deletes.Dessalines
- Unit tests added too. - No undeletes working yet.
2020-04-29Address comments, implement delete for posts and commentsFelix
2020-04-28Adding federated post and comment likes.Dessalines
2020-04-27Lots of additions to federation.Dessalines
- Added a shared inbox. - Added federated comments, comment updates, and tests. - Abstracted ap object sends into a common trait.
2020-04-24Some fed fixes.Dessalines
2020-04-21Merge branch 'master' into federation_merge_from_master_1Dessalines
2020-04-19Change RateLimit to act as a middlewareasonix
2020-04-19Adding websocket notification system.Dessalines
- HTTP and APUB clients can now send live updating messages to websocket clients - Rate limiting now affects both HTTP and websockets - Rate limiting / Websocket logic is now moved into the API Perform functions. - TODO This broke getting current online users, but that will have to wait for the perform trait to be made async. - Fixes #446
2020-04-03Adding post and comment ap_id columns.Dessalines
2020-03-13Adding full logging.Dessalines
2020-02-07Add new comments views to main and community pages. Fixes #480Dessalines
2020-01-31Starting to work on user message scope.Dessalines
2020-01-23Done merging http-api and private_messageDessalines
2020-01-22Adding private messaging, and matrix user ids.Dessalines
- Fixes #244
2020-01-18working!Felix
2020-01-12Trying to add r2d2 connection pooling to websockets.Dessalines
2020-01-03Don't send email notification for self replies.Dessalines
- Fixes #401
2020-01-02Adding show_avatar user setting, and option to send notifications to inbox.Dessalines
- Fixes #254 - Fixes #394
2020-01-02Apply changes suggested by cargo clippy (fixes #395)Felix Ableitner
2019-12-27Add correct ActivityPub types conversion for Community and Post.Lyra
2019-12-11Adding some site oriented settings.Dessalines
- Adding option to close registration. Fixes #350 - Adding option to disable showing NSFW buttons. Fixes #364 - Adding option to disable downvotes. Fixes #239
2019-12-09Switching to shorthands for rust params.Dessalines
2019-10-19Adding username mentions / tagging from comments.Dessalines
- Fixes #293
2019-09-07Running cargo fmt on server code.Dessalines
- Adding a .rustfmt.toml for the 2 space indent.
2019-08-09Making a few internationalization fixes.Dessalines
2019-08-09Adding back end translations.Dessalines
2019-05-15Enforce -1 or 1 like scoresDessalines
2019-05-05Done with reorgDessalines
2019-05-04Mostly done with reorg.Dessalines