Umputun
6f81bf00e8
add validation for email and site
2022-06-05 11:57:51 -05:00
Umputun
86a1f5ee5d
exact match on email login path
2022-06-05 11:57:51 -05:00
Umputun
5121c48c31
reduce max limiter for /auth to 2r/s
2022-06-05 11:57:51 -05:00
Umputun
5f8e16cbe2
add email auth validation with middleware
2022-06-05 11:57:51 -05:00
Ruslan Nagimov and Umputun
12e4f283fe
typo
2022-06-02 10:47:06 -05:00
Dmitry Verkhoturov and Umputun
0c3053d4ad
CloseIdleConnections on http clients
...
Without this, go.uber.org/goleak reports
leaking goroutine caused by HTTP client
on many tests when ran one by one.
2022-04-29 10:51:49 -05:00
Dmitry Verkhoturov and Umputun
ba86db1263
replace errors package with fmt.Errorf
...
https://gist.github.com/Peltoche/60b8b81dfbf70164d0e2b88988003229
was used for it, thanks to @Peltoche for publishing it.
2022-04-26 00:25:09 -05:00
Dmitry Verkhoturov and Umputun
2a7966b9e6
replace numbers with proper HTTP status codes in tests
...
Also, remove unneeded whitespaces using whitespace
linter for golangci-lint.
2022-04-17 19:42:45 -05:00
Umputun
65e3a82d8b
add no-signature mode suppressing app info middleware #1305
2022-04-05 12:08:44 -05:00
Dmitry Verkhoturov and Umputun
f03fcf3fcf
make QR for telegram borderless
2022-02-15 18:33:51 -06:00
Umputun
7b47bd2f05
return 200 and empty list on user comments if nothing #1265
2022-02-10 15:31:09 -06:00
Dmitry Verkhoturov and Umputun
603decabf6
add QR API endpoint for Telegram auth and notifications
...
Telegram authentication requires you to open a chat on the phone.
It's convenient to have a QR code for the case when you want to
log in on the computer but have Telegram only on your phone
and would be able to scan the QR instead of copy-pasting the link
from the computer to the phone any other way.
Originally we thought of generating QR on the client but found
backend-generated QR a better alternative because we avoid adding
one more JavaScript dependency to the frontend that way.
2022-01-31 14:28:18 -06:00
Dmitry Verkhoturov and Umputun
8d42d0714f
bump backend dependencies
...
Also, switch from fork github.com/umputun/go-flags back to original
github.com/jessevdk/go-flags.
2022-01-31 14:24:33 -06:00
Dmitry Verkhoturov and Umputun
90e537358d
update golangci-lint to 1.43.0, fix found issues
2021-11-23 15:00:40 -06:00
Dmitry Verkhoturov and Umputun
c027dcd765
enable telegram notify trough writing bot a message
...
Previously it was done through writing bot first,
clicking a button, copying the token, and pasting
it into the web interface.
The new flow is way simpler: click the link
to write bot a message, then click the "Check"
button in the web UI and you got notifications
enabled.
2021-11-07 11:51:28 -06:00
Dmitry Verkhoturov and Umputun
6449b7d92b
improve telegram notifications
...
These changes are designed to ease the transition into
the simplified telegram notifications verification model.
2021-11-01 14:35:37 -05:00
Dmitry Verkhoturov and Umputun
4793a31075
move previewCommentCtrl to private REST struct
2021-10-16 11:04:03 -05:00
romanilchyshyn
df0d4d27fa
patreon auth
2021-10-13 00:30:14 +03:00
romanilchyshyn and Umputun
e341227cae
import from commento engine
2021-10-06 13:51:31 -05:00
Umputun
8754add874
add skip to user's comment rest request #1085
2021-08-29 12:45:35 -05:00
Umputun
b66c94e002
migrate jwt lib to maintained fork and updated (the same way) go-pkgz/auth
2021-07-26 21:06:12 -05:00
Dmitry Verkhoturov and Umputun
83ae758573
address review commends
2021-07-03 14:57:09 -05:00
Dmitry Verkhoturov and Umputun
200733ed03
add user telegram notifications
2021-07-03 14:57:09 -05:00
Dmitry Verkhoturov and Umputun
fd4c6ceb18
add UserDetailTelegram support
2021-06-13 13:18:33 -05:00
Dmitry Verkhoturov and Umputun
86b2648d66
reset image cleanup timer on comment preview
2021-05-24 17:33:59 -05:00
Dmitry Verkhoturov and Umputun
4d011aa5f3
remove error return from ExtractPictures
...
That function returns an error in a never
expected condition, and that error would be
logged message on the caller side:
none of the callers handles it.
That change hides that error from the caller
so that function would have a signature that
better fit what it does and how it behaves.
2021-05-17 21:31:56 -05:00
Dmitry Verkhoturov and Umputun
717c4aa638
rename variables according to golangci-lint rec.
2021-05-17 01:55:05 -05:00
Dmitry Verkhoturov and Umputun
fe716b0a71
validate image existence before post or preview
2021-05-16 13:50:09 -05:00
Dmitry Verkhoturov and Umputun
63220f330b
close response body, add lint to check it
2021-05-13 17:58:59 -05:00
Umputun
57fc382956
add ability to select listening address #1000
2021-05-13 14:46:52 -05:00
Umputun and GitHub
52fbac904e
Admin edit ( #997 )
...
* allow admin edits without restrictions
* lint: err reassignment
* lint: suppress false positive
* add admin-edit to readme
* expose admin_edit to config controller
2021-05-10 11:36:02 -05:00
Pavel Mineev and Umputun
3ad7ba2c09
make form available after failed commit sending
2021-05-06 15:08:03 -05:00
Umputun
d361564815
fix user view in find for deleted comments #972
2021-05-05 01:15:03 -05:00
Umputun and GitHub
d5246c9689
Deps bump ( #956 )
...
* remove redundant sprintf
* bump many deps
* missing vendors
2021-04-27 00:30:38 -05:00
Umputun
807160dcf6
prep admin to support multiple keys, per aud (siteID)
2021-02-15 13:14:23 -06:00
Umputun
d40e354265
add more tests for voted_ip
2021-01-18 15:44:32 -06:00
Umputun
1048355b7b
strip voted_ip from response
2021-01-18 15:44:32 -06:00
Umputun
5296074dae
fix sanitize policy to allow loading-lazy for images #855
2021-01-18 15:36:15 -06:00
Umputun
849c133082
reformat long error calls to multi-line
2021-01-17 14:21:58 -06:00
Umputun
6d525e4820
remove no-cache from /api/v1/avatar api
2021-01-15 16:22:45 -06:00
Umputun
12b0fbe75d
remove no-cache from /avatar api
2021-01-15 16:18:10 -06:00
Umputun
0dd3cd93ee
add no-cache to Cache-Control on static files
2021-01-15 14:55:32 -06:00
Umputun
eb21a05b7b
add optional frame-ancestors (Content-Security-Policy) for the list of hosts passed by user
2021-01-03 02:33:51 -06:00
Dmitry Verkhoturov
809a7c7dbd
Clean unused stream code
...
It was supposed to solve #253 but frontend part for it in
#357 was never finished, and backend code produces false
positive test failures since day 0. The cost of just having
this code around is too high, we'll re-add it in case
frontend implementation will be finished.
2020-11-30 02:00:59 +01:00
Dmitry Verkhoturov and Umputun
6426ea154e
#819 add SendJWTHeader auth option, expose it on /config
2020-11-29 18:18:22 -06:00
Dmitry Verkhoturov and Umputun
1ce3cf3d1f
simplify admin email notifications
2020-10-20 11:02:04 -05:00
Dmitry Verkhoturov and Umputun
ced40b525a
move email notification logic into Email struct
2020-10-18 17:29:44 -05:00
Dmitry Verkhoturov and Umputun
c9b395f60d
separate notify.SubmitVerification from notify.Submit
2020-10-11 23:13:24 -05:00
Dmitry Verkhoturov and Umputun
b974fd9cc4
add ability to set multiple admin emails for notifications
2020-09-02 15:09:46 -05:00
vdimir and Umputun
14bcbfa901
Add function randomPath to rest_test.go
2020-08-26 12:39:31 -05:00
Umputun
Ruslan NagimovandUmputun
Dmitry VerkhoturovandUmputun
romanilchyshyn
Pavel MineevandUmputun
vdimirandUmputun