Commit Graph

116 Commits

Author SHA1 Message Date
Madeline
4c82fd1bb4 run add:license 2023-02-03 14:40:41 +11:00
Madeline
583b271ba2 Don't allow message types to be edited 2023-02-03 14:39:42 +11:00
Madeline
df199227f8 Merge pull request from GHSA-9qvc-84ch-5p2x
* Check permissions and rights

* Prevent editing message type unless MANAGE_MESSAGES right. Also don't send sensitive data in patch response.
2023-02-02 22:26:22 +11:00
Madeline
69c55884e5 Merge pull request from GHSA-hqqp-gpqw-9w5c 2023-02-02 22:24:56 +11:00
Madeline
51239d60f6 Merge pull request from GHSA-9q7f-pv47-cxp9 2023-02-02 22:22:30 +11:00
Madeline
a03f7c8948 Merge pull request from GHSA-r7h4-76f7-6264
* Actually use maxUsername config value.

* Change maxUsername default to discord.com default
2023-02-02 22:15:03 +11:00
Madeline
b31ce62bd5 check pw and other auth before letting users undisable 2023-01-31 15:13:19 +11:00
Madeline
4906d9a78a read-states/ack-bulk (#969) 2023-01-30 13:34:27 +11:00
Puyodead1
1e21802064 Implement WebAuthn (#967)
* implement webauthn

* code review

---------

Co-authored-by: Madeline <46743919+MaddyUnderStars@users.noreply.github.com>
2023-01-30 13:30:42 +11:00
Madeline
38c85e6c4f also don't use 3002 as default when gateway endpoints are null 2023-01-26 10:21:13 +11:00
Madeline
7b1915ec48 Rewrite client cacher (#962) 2023-01-22 13:41:31 +11:00
Madeline
71082eb918 Add ESLint (#941)
* Add eslint, switch to lint-staged for precommit

* Fix all ESLint errors

* Update GH workflow to check prettier and eslint
2023-01-20 18:10:47 +11:00
ChrisChrome
ca8817919e Fix a funny security vuln 2023-01-18 12:27:15 -07:00
Chris Chrome
313ba7a27b Merge pull request #952 from fosscord/dev/endpoints-in-ping
Merge /dev/endpoints-in-ping to master
2023-01-18 12:14:05 -07:00
Chris Chrome
7b384787f8 Add youtu.be embed handler (#945) 2023-01-18 17:47:23 +11:00
Madeline
b58cea7c41 Script to add license preamble to each file. Also, does that. (#935)
* Add script to automatically add license to each file

* Add license preamble to each file.

* Fix existing preamble detection breaking due to line endings. Git :(

* Prevent license from being added to code with other licenses
2023-01-18 13:05:49 +11:00
Madeline
c0b12bc166 Fix deleting an application if it has a bot 2023-01-17 00:01:14 +11:00
Madeline
54218e6873 Merge pull request #934 from fosscord/master
Merge master into dev/endpoints-in-ping
2023-01-16 17:00:32 +11:00
Madeline
49a311f5d0 Return embed proxy url even if imagor not set up. Also make warning nicer 2023-01-16 14:20:17 +11:00
Chris Chrome
d857af980c Move endpoints from ping -> policies/instance/domains (#933) 2023-01-16 13:46:41 +11:00
Madeline
b8e5f7343c Update dead lines 2023-01-16 00:03:51 +11:00
Madeline
14321336cd Add an error log if embed handler fails, in addition to the existing sentry log 2023-01-15 16:21:46 +11:00
TheArcaneBrony
bec4a61c60 Fix some default value
Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>
2023-01-14 23:34:33 +01:00
TheArcaneBrony
3bb002eb88 Add basic info in ping
Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>
2023-01-14 19:55:19 +01:00
Erkin Alp Güney
27dbeba821 Add /users/:id/delete (#926) 2023-01-14 19:15:35 +11:00
TheArcaneBrony
1e1ba96a3c Dev/post refactor fixes (#927)
* Re-introduce outgoing message logging

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Websocket dumping

* Sentry user count on API

* Generate session ID upon opening websocket, fix gateway dumps

* Async file io in src/gateway/events/Message.ts

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Async file io in src/util/util/Config.ts

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Make pre-commit hook executable

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Fixed sync file io in src/util/util/Config.ts

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Fixed missing await call in src/util/util/AutoUpdate.ts

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Add comment to src/gateway/events/Connection.ts

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>

* Clean up gateway dumping code

Signed-off-by: TheArcaneBrony <myrainbowdash949@gmail.com>
Co-authored-by: Madeline <46743919+MaddyUnderStars@users.noreply.github.com>
2023-01-12 23:46:36 +11:00
Madeline
30ec479e25 Add back include_url param to reg tokens 2023-01-10 18:08:31 +11:00
Madeline
6755f1392d Move sentry init to util. use sentry in each module, not just bundle 2023-01-10 13:20:37 +11:00
Madeline
a3f2f997a3 Prettier 2023-01-05 17:16:55 +11:00
Madeline
b70f8fcf09 Merge pull request #922 from MaddyUnderStars/maddy/bodyParserPatch
Patch body-parser to use json-bigint, like gateway
2023-01-02 20:37:25 +11:00
Madeline
e38025581d Use adjusted email in /auth/login 2023-01-02 13:18:07 +11:00
Madeline
82f76ba07b Revert "Don't let users undisable their accounts"
This reverts commit 52840f4f98.
2023-01-01 14:20:41 +11:00
Madeline
52840f4f98 Don't let users undisable their accounts 2023-01-01 12:59:45 +11:00
Madeline
0fe03771ce Profile themes and pronouns 2022-12-31 17:51:57 +11:00
Madeline
17e93b7daa Fix new roles having duplicate positions 2022-12-30 18:07:56 +11:00
Madeline
91010235b9 OAuth2 authorize bot flow 2022-12-24 18:55:14 +11:00
Madeline
ac8ac9ada0 Fix creating bot accounts 2022-12-24 16:28:00 +11:00
Madeline
18c6d11fc1 Rename limits_rate_disabled -> limits_rate_enabled and remove limits_guilds_hideOfflineMember 2022-12-22 21:01:29 +11:00
Madeline
b47b6de102 Fix redirect when test client disabled 2022-12-22 12:13:13 +11:00
Madeline
22fb62673a Disable test client by default 2022-12-21 19:52:08 +11:00
Madeline
30e65415e4 Set default cdn endpoints so that local testing works 2022-12-21 15:37:16 +11:00
Madeline
b96d851646 Fix the roles bug 2022-12-21 15:17:06 +11:00
Madeline
0957917ba2 Reg tokens bypass other restrictions 2022-12-19 22:23:31 +11:00
TheArcaneBrony
47b999efec Message rate limiting 2022-12-19 22:17:06 +11:00
Madeline
9e36eff11d Registration tokens 2022-12-19 22:04:52 +11:00
TheArcaneBrony
565e7885dc Add register ratelimit 2022-12-19 20:57:43 +11:00
Erkin Alp Güney
3844d8a40b flags related rights and stats api 2022-12-19 20:49:38 +11:00
Puyodead1
697cfb1f58 fix user profile not displaying correctly 2022-12-19 20:43:54 +11:00
Puyodead1
2f70be7f83 implement guild profiles and fix user profiles 2022-12-19 20:37:59 +11:00
TheArcaneBrony
f13082da57 Replace deprecated property 2022-12-19 19:32:39 +11:00