summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/oauth (follow)
Commit message (Collapse)AuthorAgeFilesLines
* split url into webUrl and localUrl (like mastodon)stableFreya Murphy17 hours1-6/+6
|
* fix oauth dataHazelnoot2025-05-081-2/+2
|
* add missing "return reply" calls to async fastify routesHazelnoot2025-05-081-4/+4
| | | | Required, according to docs: https://fastify.dev/docs/latest/Reference/Routes/#async-await
* improve compatibility with multipart/form-data mastodon API requestsHazelnoot2025-05-081-33/+7
|
* remove outdated packages from megalodonHazelnoot2025-04-291-1/+1
|
* lint and type fixesHazelnoot2025-04-011-3/+0
|
* normalize mastodon BAD_REQUEST errorsHazelnoot2025-03-271-2/+2
|
* refactor mastodon API and preserve remote user agent for requestsHazelnoot2025-03-271-65/+39
|
* merge: upstreamMarie2024-02-191-1/+1
|\
| * (re) update SPDX-FileCopyrightTexttamaina2024-02-131-1/+1
| | | | | | | | Fix #13290
| * Revert "update SPDX-FileCopyrightText"tamaina2024-02-131-1/+1
| | | | | | | | This reverts commit 9b5aeb76d8c9372d67058c512597152b6bf222f2.
| * update SPDX-FileCopyrightTextsyuilo2024-02-121-1/+1
| |
| * feat(backend/oauth): allow CORS for token endpoint (#12814)Kagami Sascha Rosylight2023-12-271-32/+39
| | | | | | | | | | | | | | * feat(backend/oauth): allow CORS for token endpoint * no need to explicitly set origin to `*` * Update CHANGELOG.md
| * Merge pull request from GHSA-7pxq-6xx9-xpgmChocolate Pie2023-12-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix: fix improper authorization when accessing with third-party application * refactor: refactor type definitions * fix: get rid of unnecessary access limitation * enhance: サードパーティアプリケーションがWebsocket APIを使えるように * fix: add missing parentheses * Revert "fix(backend): add missing kind definition for admin endpoints to improve security" This reverts commit 5150053275594278e9eb23e72d98b16593c4c230. * frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする * enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加 * enhance(test): Websocket APIに対するテストも追加 * enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合 * fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正 * enhance(backend): Websocketの接続に最低限必要な権限を変更 * fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように * fix(backend): エンドポイントにアクセスするために必要な権限を変更 * fix(frontend/locale): Add missing type declaration * chore: update `misskey-js/src/autogen` --------- Co-authored-by: tamaina <tamaina@hotmail.co.jp>
| * perf(backend): createdAtをidから取得するように & ↵syuilo2023-10-161-2/+1
| | | | | | | | 無駄なDateインスタンスの生成を避けるように
* | fix: /oauth/oauth to /oauthMarie2023-12-311-3/+3
| |
* | merge: upstreamMarie2023-12-281-13/+35
| |
* | feat(backend/oauth): allow CORS for token endpoint (#12814)Kagami Sascha Rosylight2023-12-281-0/+29
| | | | | | | | | | | | | | | | * feat(backend/oauth): allow CORS for token endpoint * no need to explicitly set origin to `*` * Update CHANGELOG.md
* | upd: register contentParserMar0xy2023-11-161-0/+2
| |
* | fix: errorsMar0xy2023-11-161-0/+2
| |
* | upd: add multipart support to oauth/tokenMar0xy2023-11-161-3/+12
| |
* | revert: deletion of oauth.pugMar0xy2023-11-091-0/+11
| |
* | test: oauth/authorize on api endpointMar0xy2023-11-081-0/+11
| |
* | fix: oauth/authorize not workingMar0xy2023-11-081-19/+0
| |
* | upd: add oauth decision endpointMar0xy2023-11-081-2/+10
| |
* | Revert "test: check old megalodon version"Mar0xy2023-09-251-489/+0
| | | | | | | | This reverts commit 89eea5df5286a9fdf2976d41cdbaf0c40dd19b62.
* | test: check old megalodon versionMar0xy2023-09-251-0/+489
| |
* | chore: lintMar0xy2023-09-241-4/+4
| |
* | upd: change parser and fix fetchAccessTokenMar0xy2023-09-241-11/+26
| |
* | fix: oauth headersMar0xy2023-09-241-0/+14
| |
* | chore: make lint happyMar0xy2023-09-241-2/+0
| |
* | upd: change oauthMar0xy2023-09-241-452/+66
| |
* | fix oauth loginMar0xy2023-09-241-2/+4
|/
* refactor(backend): update directory structure for modelssyuilo2023-09-201-2/+2
|
* update deps (#11820)syuilo2023-09-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update deps * fix * wip * wip * wip * Update docker-compose.yml.example * Delete reviewer-lottery.yml * Update RepositoryModule.ts * wip * wip * clean up * update deps * wip * wip
* refactor: prefix Mi for all entities (#11719)syuilo2023-08-161-2/+2
| | | | | | | | | | | | | | | | | | | | | * wip * wip * wip * wip * Update RepositoryModule.ts * wip * wip * wip * Revert "wip" This reverts commit c1c13b37d2aaf3c65bc148212da302b0eb7868bf.
* chore: add missing license identifiersyuilo2023-07-281-0/+5
|
* feat(backend): support OAuth 2.0 authorization (#11053)Kagami Sascha Rosylight2023-07-271-0/+482
* feat(backend): support OAuth 2.0 authorization * secureRndstr fix * nanndekowareta * nanndekowareta2 * nanndekowareta3 * unref? * refactor to not close fastify * use microformats-parser * Update OAuth2ProviderService.ts * clarify the reason behind dns lookup * refactor(backend): use @types/oauth2orize-pkce (#11350) * refactor(backend): use @types/oauth2orize-pkce * Update package.json * Update pnpm-lock.yaml --------- Co-authored-by: Kagami Sascha Rosylight <saschanaz@outlook.com> --------- Co-authored-by: mtgto <hogerappa@gmail.com> Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>