Commit Graph
100 Commits
Author SHA1 Message Date
Sam 262297965f Merge pull request #4442 from pfaffman/kunena3-improvements
KUNENA3 importer: parameterize database and fields, link to attachments
2016-09-23 10:36:45 +10:00
Sam 8458badc44 Merge pull request #4436 from AhmadFCheema/patch-1
Rubygems upgrade needed for mailcatcher
2016-09-23 10:35:34 +10:00
Sam df751ed6ec Merge pull request #4457 from JaredReisinger/github-auth-with-email-whitelist
Add support for email whitelist/blacklist to GitHub auth
2016-09-23 09:49:14 +10:00
Sam ff35ea87fb Merge pull request #4454 from JaredReisinger/remove-external-facts
Don't look for external facts when benchmarking
2016-09-22 07:28:11 +10:00
Sam ce841027e5 mobile can be a bit bursty, allow a few more reqs per minute 2016-09-20 10:47:40 +10:00
Sam 8dc4329094 FEATURE: optionally get extra profile info from facebook
This feature requires the application be approved by facebook, so it is
default off
2016-09-19 16:14:11 +10:00
Sam 5b3cd3fac9 FEATURE: Import facebook avatars when logging in via facebook
FIX: warning about popup dimensions when using facebook login

Rules are:

- On account creation we always import
- If you already have an avatar uploaded, nothing is changed
- If you have no avatar uploaded, we upload from facebook on login
- If you have no avatar uploaded, we select facebook unless gravatar already selected

This also fixes SSO issues where on account creation accounts had missing avatar uploads
2016-09-19 15:10:23 +10:00
Sam fd9056973a FEATURE: increase interval to 24 hours for "please refresh site"
Used to be 2 hours, which is a bit tight, especially for people who leave
computer running overnight.

Keep in mind we always refresh on route change, so clicking on a topic will
trigger a refresh
2016-09-19 10:12:27 +10:00
Sam 24401e71bf FEATURE: add seen_notification_id to current user serializer 2016-09-18 14:30:32 +10:00
Sam 75f3f7fcbd FEATURE: clean API method for reading a single notification 2016-09-16 16:14:15 +10:00
Sam e6fcaadd45 FIX: redirects back to origin for SSO and omniauth login 2016-09-16 13:48:50 +10:00
Sam 2f8c14fef1 FEATURE: allow write user api keys by default
app needs to write data regarding notifications and set read status etc
default allow.
2016-09-16 12:27:53 +10:00
Sam 25a82e7d22 PERF: only publish notification state if we changed it
also publish seen_notification_id so we can tell what is new and what is old
cleanup controller so it correctly checks user
fix bug around clearing notification when people click mark read
2016-09-16 12:02:19 +10:00
Sam 33578a2c17 FIX: always import avatars during SSO if they are missing 2016-09-16 09:45:00 +10:00
Sam fe7883eeea UX: don't allow user scaling in mobile view
on iOS 10 behavior of zoom restriction has changed.

This does not disable zooming on iOS 10 but it DOES stop it from randomly
zooming when you are composing
2016-09-15 07:36:16 +10:00
Sam 2d859ba0ed FIX: user api should always be available to staff 2016-09-12 15:42:06 +10:00
Sam e0a2346b92 no more protocol-less CDN urls 2016-09-05 16:05:48 +10:00
Sam 59640bae3b FIX: absolute URL for CDN should always be rooted with a protocol 2016-09-05 15:57:46 +10:00
Sam 39e6cbc442 FIX: disable double submission which invalidates nonce 2016-09-04 16:05:25 +10:00
Sam 340874d345 FIX: post notifications in JSON so we properly support arrays and so on 2016-09-04 15:51:16 +10:00
Sam 1d281e02c7 id is optional if already specified in header 2016-09-02 17:08:46 +10:00
Sam be0fd5b4cc FEATURE: allow user api key revocation for read only keys 2016-09-02 17:04:00 +10:00
Sam 0a39ba43ed FIX: always respect avatar_force_update 2016-09-02 12:04:22 +10:00
Sam 211c374df6 Merge pull request #4213 from fantasticfears/sso
FIX: Importing user avatar when new user login by SSO
2016-09-01 18:05:18 -07:00
Sam 034dc52beb UX: adjust to show all and stat period 2016-09-02 11:03:52 +10:00
Sam 1d7df97c30 FIX: display old category style on mobile 2016-09-01 15:57:23 +10:00
Sam 282a4e1efb FIX: remove from preload store so it is not cached forever 2016-08-31 14:07:31 +10:00
Sam 55fad7b339 FIX: missing avatars from categories page when ajax loaded
UX: display last poster on categories page instead of OP
2016-08-31 14:02:30 +10:00
Sam 50379183e1 FIX: allow the Dont-Chunk header for remote message bus access 2016-08-31 12:57:19 +10:00
Sam 591dab1bb5 FIX: on load categories list not showing create button 2016-08-31 09:35:23 +10:00
Sam 653f94975c FIX: don't fail if targetUsernames is not set 2016-08-29 12:39:25 +10:00
Sam 0303080586 we do not define auth providers for builtins 2016-08-29 11:12:24 +10:00
Sam 22b8c0d44e FIX: fullscreen login set from client needs to be respected 2016-08-29 10:13:51 +10:00
Sam 896732975e correct url linked in push notification 2016-08-26 13:45:56 +10:00
Sam ca79c4b276 stop eating up push_urls 2016-08-26 13:23:06 +10:00
Sam fcdf13f52d add some more testing 2016-08-26 13:18:20 +10:00
Sam a37db9448f correctly return access rights in auth redirect 2016-08-26 13:12:38 +10:00
Sam 4fe52c8cbe FEATURE: backend support for pushing notifications to clients 2016-08-26 12:47:10 +10:00
Sam 2b15919aee missing spot where old api was used 2016-08-26 10:58:34 +10:00
Sam c4bf138d2c FIX: incorrect error being raised 2016-08-26 10:39:13 +10:00
Sam eaf87f0770 FIX: correctly handle api key so it uses current user provider 2016-08-26 10:39:13 +10:00
Sam 846a08d3c7 FIX: improve error results for message bus failures 2016-08-25 15:39:39 +10:00
Sam 691f739f11 better error handling
push notifications imply read access, no need for a special permission
2016-08-23 16:48:00 +10:00
Sam 0a1d7896bf Merge pull request #4407 from dtbaker/patch-1
Typo: Unmatched braces }}
2016-08-21 03:22:51 -07:00
Sam 1e9ca3c7c1 need to pass category on mobile as well 2016-08-21 20:21:07 +10:00
Sam c51fec7fda FIX: improve last visited detection
- clear line detection cache on category change
- don't show last visited unless latest / descending
- improve perf of last visited detection algorithm
2016-08-21 17:06:00 +10:00
Sam b09922b58a we have to allow message bus for read clients 2016-08-19 15:22:52 +10:00
Sam 9b1e81cd6d Only display in discovery, correct double highlighting 2016-08-19 12:43:48 +10:00
Sam 11f9a463ac FEATURE: highlight last visited topic in topic list 2016-08-19 11:58:39 +10:00
Sam 3ea68f8f6c tweak headers so they can be consumed 2016-08-18 14:38:33 +10:00
Sam 206d056798 also support schema cause it is simpler to redirect 2016-08-18 13:52:30 +10:00
Sam 79c1d3459b line was there twice 2016-08-17 17:03:48 +10:00
Sam 91b72936c4 Normalize away a requested push if for some reason we can not push there 2016-08-17 16:44:38 +10:00
Sam b4dfb84f37 PERF: stop doing work for HEAD requests on topics 2016-08-17 10:04:23 +10:00
Sam a25a8115e8 FEATURE: support HEAD request to /user-api-key/new
This allows us to cleanly sniff to find if it exists
2016-08-17 09:58:19 +10:00
Sam 416e7e0d1e FEATURE: basic UI to view user api keys 2016-08-16 17:06:52 +10:00
Sam b7cea24d76 FEATURE: more user API flow, support key creation 2016-08-16 17:06:52 +10:00
Sam 0b334cdf74 FIX: stop removing query params from destination url in sso 2016-08-16 17:06:52 +10:00
Sam fc095acaaa Feature: User API key support (server side implementation)
- Supports throttled read and write
- No support for push yet, but data is captured about intent
2016-08-15 17:59:36 +10:00
Sam d3c8985030 missing annotation 2016-08-15 17:59:36 +10:00
Sam 7e4503dd99 FEATURE: basic info route for all sites, even ones that require login
This information is public in meta tags already on home page, providing a
route allows consumers to check it way more cheaply
2016-08-12 17:10:35 +10:00
Sam afaba56de3 FEATURE: missing API endpoint for topic tracking states 2016-08-12 17:10:35 +10:00
Sam 8a792508e9 PERF: improve offset discovery query 2016-08-12 14:36:38 +10:00
Sam Saffron 58322617ec UX: on mobile devices iOS or Android always use full screen login
This simplifies life for users and embedded browsers and works around
all popup blocking.

There is no point to popup tabs on Android or iOS, it just causes
confusion.
2016-08-11 23:15:45 +10:00
Sam 73b6a22f61 UX: link to PM list from pm suggested topics 2016-08-09 10:12:56 +10:00
Sam 5cc8bb535b SECURITY: do cookie auth rate limiting earlier 2016-08-09 10:02:18 +10:00
Sam 9b011cb75d UX: increase mobile line height for readability 2016-08-05 09:22:54 +10:00
Sam 05c1adf718 Merge pull request #4361 from discourse/revert-4116-remap-regex
Revert "FEATURE: make discourse remap optionally do regex_replace"
2016-08-02 08:38:28 +10:00
Sam 31c0ce3dac Revert "FEATURE: make discourse remap optionally do regex_replace" 2016-08-02 08:38:15 +10:00
Sam 9018de39ed FEATURE: allow shipping bio markdown via SSO
- Also adds site setting for sso_overrides_bio to disable bio editing by end users
2016-08-01 15:29:28 +10:00
Sam 16a383ea1e SECURITY: limit bad cookie auth attempts
- Also cleans up the _t cookie if it is invalid
2016-07-28 12:58:49 +10:00
Sam 0ba8da9658 reduce amount of cache setting 2016-07-28 10:20:29 +10:00
Sam 83f80341b3 FIX: topic id cache should be a multi process cache 2016-07-28 10:20:14 +10:00
Sam ab68e0c9db FEATURE: allow "developer" account flagging via developers table
This mechanism for flagging developer accounts will eventually replace
DISCOURSE_DEVELOPER_EMAILS
2016-07-28 10:14:06 +10:00
Sam c6dbaca0dc SECURITY: disable user entered badge SQL by default
- Hidden site settings now must be change via rails console
2016-07-28 09:03:00 +10:00
Sam cb3afd11b4 SECURITY: limit route access when using external avatars 2016-07-28 09:00:43 +10:00
Sam b5fbff947b FIX: don't expire old sessions when logging in 2016-07-26 11:37:41 +10:00
Sam 521d3d11f2 allow some more tags through 2016-07-26 09:43:30 +10:00
Sam a4aedddd38 shuffle code around so excerpt is not messed up 2016-07-25 17:12:01 +10:00
Sam 12ecf8624a FIX: tokenize words with dots correctly
hello.world is now tokenized as "hello.world" and "world" that way the word
"world" will find the post with "hello.world"
2016-07-25 16:26:33 +10:00
Sam e01802a13b FIX: strip quote from search term when searching within topic 2016-07-25 15:06:25 +10:00
Sam c1f62d8657 Revert "make upgrade a bit more seamless"
This reverts commit 78b88a1633.
2016-07-25 12:49:33 +10:00
Sam 78b88a1633 make upgrade a bit more seamless 2016-07-25 12:30:52 +10:00
Sam df535c6346 FEATURE: refresh session cookie at most once an hour
This feature ensures session cookie lifespan is extended
when user is online.

Also decreases session timeout from 90 to 60 days.
Ensures all users (including logged on ones) get expiring sessions.
2016-07-25 12:07:31 +10:00
Sam 12dc511fea PERF: make score calculator cheaper when site has long topics 2016-07-22 09:48:44 +10:00
Sam 1c964bf730 PERF: cache category topic ids 2016-07-19 12:34:54 +10:00
Sam c1a01b2a28 PERF: limit maximum number of topic links to 50
When a giant topic has huge numbers of links only show top 50
if expanded from the show more links... button.
2016-07-19 10:55:35 +10:00
Sam a5d0e0f277 PERF: index for deleted posts in a topic to speed up has_deleted detection 2016-07-19 10:29:22 +10:00
Sam Saffron 46b34e3c62 FEATURE: remove user option for edit history public
Users can no longer opt-in for "public" edit history
if site owner disables it.

This feature adds cost and complexity to post rendering since
user options need to be premeptively loaded for every user in the
stream. It is also confusing to explain to communities with private edit
history.
2016-07-16 21:30:00 +10:00
Sam Saffron 9893953f62 PERF: no need to nest a transaction when featuring topics
adding featured topics is already in a transaction, no need to nest
2016-07-16 15:36:40 +10:00
Sam Saffron 4cef1c1750 PERF: stop featuring users on categories
(this feature has long been removed, no need to run expensive queries
every 15 minutes)
2016-07-16 15:33:57 +10:00
Sam Saffron 6777bd2629 warm up v8 after fork 2016-07-16 15:11:34 +10:00
Sam Saffron bea06afd3d UX: suppress description excerpt on mobile 2016-07-14 22:38:16 +10:00
Sam Saffron fa8ba3b408 UX: don't expand pinned on mobile categories page 2016-07-14 22:30:51 +10:00
Sam Saffron 3dcd6edb46 FEATURE: stage post in stream on edit 2016-07-14 22:20:43 +10:00
Sam Saffron f369d492b3 FEATURE: stop linking to last post in crawler view
This only makes stuff harder for google AND does not even function correctly
2016-07-12 21:11:33 +10:00
Sam Saffron 86b3de510b UX: staged posts show up with opacity 0.4 till on server 2016-07-12 17:03:42 +10:00
Sam Saffron dbc25a9d64 FEATURE: flags for suppressing pinned expansion
To suppress pinned excerpt expansion
on mobile set "show_pinned_excerpt_mobile" to false

To suppress pinned excerpt expansion
on desktop set "show_pinned_excerpt_desktop" to false
2016-07-12 13:53:59 +10:00
Sam 64ca5552bc correct scoping 2016-07-10 16:45:24 +10:00
Sam c5c443fda3 correct typo 2016-07-10 10:51:49 +10:00