Sam
262297965f
Merge pull request #4442 from pfaffman/kunena3-improvements
...
KUNENA3 importer: parameterize database and fields, link to attachments
2016-09-23 10:36:45 +10:00
Sam
8458badc44
Merge pull request #4436 from AhmadFCheema/patch-1
...
Rubygems upgrade needed for mailcatcher
2016-09-23 10:35:34 +10:00
Sam
df751ed6ec
Merge pull request #4457 from JaredReisinger/github-auth-with-email-whitelist
...
Add support for email whitelist/blacklist to GitHub auth
2016-09-23 09:49:14 +10:00
Sam
ff35ea87fb
Merge pull request #4454 from JaredReisinger/remove-external-facts
...
Don't look for external facts when benchmarking
2016-09-22 07:28:11 +10:00
Sam
ce841027e5
mobile can be a bit bursty, allow a few more reqs per minute
2016-09-20 10:47:40 +10:00
Sam
8dc4329094
FEATURE: optionally get extra profile info from facebook
...
This feature requires the application be approved by facebook, so it is
default off
2016-09-19 16:14:11 +10:00
Sam
5b3cd3fac9
FEATURE: Import facebook avatars when logging in via facebook
...
FIX: warning about popup dimensions when using facebook login
Rules are:
- On account creation we always import
- If you already have an avatar uploaded, nothing is changed
- If you have no avatar uploaded, we upload from facebook on login
- If you have no avatar uploaded, we select facebook unless gravatar already selected
This also fixes SSO issues where on account creation accounts had missing avatar uploads
2016-09-19 15:10:23 +10:00
Sam
fd9056973a
FEATURE: increase interval to 24 hours for "please refresh site"
...
Used to be 2 hours, which is a bit tight, especially for people who leave
computer running overnight.
Keep in mind we always refresh on route change, so clicking on a topic will
trigger a refresh
2016-09-19 10:12:27 +10:00
Sam
24401e71bf
FEATURE: add seen_notification_id to current user serializer
2016-09-18 14:30:32 +10:00
Sam
75f3f7fcbd
FEATURE: clean API method for reading a single notification
2016-09-16 16:14:15 +10:00
Sam
e6fcaadd45
FIX: redirects back to origin for SSO and omniauth login
2016-09-16 13:48:50 +10:00
Sam
2f8c14fef1
FEATURE: allow write user api keys by default
...
app needs to write data regarding notifications and set read status etc
default allow.
2016-09-16 12:27:53 +10:00
Sam
25a82e7d22
PERF: only publish notification state if we changed it
...
also publish seen_notification_id so we can tell what is new and what is old
cleanup controller so it correctly checks user
fix bug around clearing notification when people click mark read
2016-09-16 12:02:19 +10:00
Sam
33578a2c17
FIX: always import avatars during SSO if they are missing
2016-09-16 09:45:00 +10:00
Sam
fe7883eeea
UX: don't allow user scaling in mobile view
...
on iOS 10 behavior of zoom restriction has changed.
This does not disable zooming on iOS 10 but it DOES stop it from randomly
zooming when you are composing
2016-09-15 07:36:16 +10:00
Sam
2d859ba0ed
FIX: user api should always be available to staff
2016-09-12 15:42:06 +10:00
Sam
e0a2346b92
no more protocol-less CDN urls
2016-09-05 16:05:48 +10:00
Sam
59640bae3b
FIX: absolute URL for CDN should always be rooted with a protocol
2016-09-05 15:57:46 +10:00
Sam
39e6cbc442
FIX: disable double submission which invalidates nonce
2016-09-04 16:05:25 +10:00
Sam
340874d345
FIX: post notifications in JSON so we properly support arrays and so on
2016-09-04 15:51:16 +10:00
Sam
1d281e02c7
id is optional if already specified in header
2016-09-02 17:08:46 +10:00
Sam
be0fd5b4cc
FEATURE: allow user api key revocation for read only keys
2016-09-02 17:04:00 +10:00
Sam
0a39ba43ed
FIX: always respect avatar_force_update
2016-09-02 12:04:22 +10:00
Sam
211c374df6
Merge pull request #4213 from fantasticfears/sso
...
FIX: Importing user avatar when new user login by SSO
2016-09-01 18:05:18 -07:00
Sam
034dc52beb
UX: adjust to show all and stat period
2016-09-02 11:03:52 +10:00
Sam
1d7df97c30
FIX: display old category style on mobile
2016-09-01 15:57:23 +10:00
Sam
282a4e1efb
FIX: remove from preload store so it is not cached forever
2016-08-31 14:07:31 +10:00
Sam
55fad7b339
FIX: missing avatars from categories page when ajax loaded
...
UX: display last poster on categories page instead of OP
2016-08-31 14:02:30 +10:00
Sam
50379183e1
FIX: allow the Dont-Chunk header for remote message bus access
2016-08-31 12:57:19 +10:00
Sam
591dab1bb5
FIX: on load categories list not showing create button
2016-08-31 09:35:23 +10:00
Sam
653f94975c
FIX: don't fail if targetUsernames is not set
2016-08-29 12:39:25 +10:00
Sam
0303080586
we do not define auth providers for builtins
2016-08-29 11:12:24 +10:00
Sam
22b8c0d44e
FIX: fullscreen login set from client needs to be respected
2016-08-29 10:13:51 +10:00
Sam
896732975e
correct url linked in push notification
2016-08-26 13:45:56 +10:00
Sam
ca79c4b276
stop eating up push_urls
2016-08-26 13:23:06 +10:00
Sam
fcdf13f52d
add some more testing
2016-08-26 13:18:20 +10:00
Sam
a37db9448f
correctly return access rights in auth redirect
2016-08-26 13:12:38 +10:00
Sam
4fe52c8cbe
FEATURE: backend support for pushing notifications to clients
2016-08-26 12:47:10 +10:00
Sam
2b15919aee
missing spot where old api was used
2016-08-26 10:58:34 +10:00
Sam
c4bf138d2c
FIX: incorrect error being raised
2016-08-26 10:39:13 +10:00
Sam
eaf87f0770
FIX: correctly handle api key so it uses current user provider
2016-08-26 10:39:13 +10:00
Sam
846a08d3c7
FIX: improve error results for message bus failures
2016-08-25 15:39:39 +10:00
Sam
691f739f11
better error handling
...
push notifications imply read access, no need for a special permission
2016-08-23 16:48:00 +10:00
Sam
0a1d7896bf
Merge pull request #4407 from dtbaker/patch-1
...
Typo: Unmatched braces }}
2016-08-21 03:22:51 -07:00
Sam
1e9ca3c7c1
need to pass category on mobile as well
2016-08-21 20:21:07 +10:00
Sam
c51fec7fda
FIX: improve last visited detection
...
- clear line detection cache on category change
- don't show last visited unless latest / descending
- improve perf of last visited detection algorithm
2016-08-21 17:06:00 +10:00
Sam
b09922b58a
we have to allow message bus for read clients
2016-08-19 15:22:52 +10:00
Sam
9b1e81cd6d
Only display in discovery, correct double highlighting
2016-08-19 12:43:48 +10:00
Sam
11f9a463ac
FEATURE: highlight last visited topic in topic list
2016-08-19 11:58:39 +10:00
Sam
3ea68f8f6c
tweak headers so they can be consumed
2016-08-18 14:38:33 +10:00
Sam
206d056798
also support schema cause it is simpler to redirect
2016-08-18 13:52:30 +10:00
Sam
79c1d3459b
line was there twice
2016-08-17 17:03:48 +10:00
Sam
91b72936c4
Normalize away a requested push if for some reason we can not push there
2016-08-17 16:44:38 +10:00
Sam
b4dfb84f37
PERF: stop doing work for HEAD requests on topics
2016-08-17 10:04:23 +10:00
Sam
a25a8115e8
FEATURE: support HEAD request to /user-api-key/new
...
This allows us to cleanly sniff to find if it exists
2016-08-17 09:58:19 +10:00
Sam
416e7e0d1e
FEATURE: basic UI to view user api keys
2016-08-16 17:06:52 +10:00
Sam
b7cea24d76
FEATURE: more user API flow, support key creation
2016-08-16 17:06:52 +10:00
Sam
0b334cdf74
FIX: stop removing query params from destination url in sso
2016-08-16 17:06:52 +10:00
Sam
fc095acaaa
Feature: User API key support (server side implementation)
...
- Supports throttled read and write
- No support for push yet, but data is captured about intent
2016-08-15 17:59:36 +10:00
Sam
d3c8985030
missing annotation
2016-08-15 17:59:36 +10:00
Sam
7e4503dd99
FEATURE: basic info route for all sites, even ones that require login
...
This information is public in meta tags already on home page, providing a
route allows consumers to check it way more cheaply
2016-08-12 17:10:35 +10:00
Sam
afaba56de3
FEATURE: missing API endpoint for topic tracking states
2016-08-12 17:10:35 +10:00
Sam
8a792508e9
PERF: improve offset discovery query
2016-08-12 14:36:38 +10:00
Sam Saffron
58322617ec
UX: on mobile devices iOS or Android always use full screen login
...
This simplifies life for users and embedded browsers and works around
all popup blocking.
There is no point to popup tabs on Android or iOS, it just causes
confusion.
2016-08-11 23:15:45 +10:00
Sam
73b6a22f61
UX: link to PM list from pm suggested topics
2016-08-09 10:12:56 +10:00
Sam
5cc8bb535b
SECURITY: do cookie auth rate limiting earlier
2016-08-09 10:02:18 +10:00
Sam
9b011cb75d
UX: increase mobile line height for readability
2016-08-05 09:22:54 +10:00
Sam
05c1adf718
Merge pull request #4361 from discourse/revert-4116-remap-regex
...
Revert "FEATURE: make discourse remap optionally do regex_replace"
2016-08-02 08:38:28 +10:00
Sam
31c0ce3dac
Revert "FEATURE: make discourse remap optionally do regex_replace"
2016-08-02 08:38:15 +10:00
Sam
9018de39ed
FEATURE: allow shipping bio markdown via SSO
...
- Also adds site setting for sso_overrides_bio to disable bio editing by end users
2016-08-01 15:29:28 +10:00
Sam
16a383ea1e
SECURITY: limit bad cookie auth attempts
...
- Also cleans up the _t cookie if it is invalid
2016-07-28 12:58:49 +10:00
Sam
0ba8da9658
reduce amount of cache setting
2016-07-28 10:20:29 +10:00
Sam
83f80341b3
FIX: topic id cache should be a multi process cache
2016-07-28 10:20:14 +10:00
Sam
ab68e0c9db
FEATURE: allow "developer" account flagging via developers table
...
This mechanism for flagging developer accounts will eventually replace
DISCOURSE_DEVELOPER_EMAILS
2016-07-28 10:14:06 +10:00
Sam
c6dbaca0dc
SECURITY: disable user entered badge SQL by default
...
- Hidden site settings now must be change via rails console
2016-07-28 09:03:00 +10:00
Sam
cb3afd11b4
SECURITY: limit route access when using external avatars
2016-07-28 09:00:43 +10:00
Sam
b5fbff947b
FIX: don't expire old sessions when logging in
2016-07-26 11:37:41 +10:00
Sam
521d3d11f2
allow some more tags through
2016-07-26 09:43:30 +10:00
Sam
a4aedddd38
shuffle code around so excerpt is not messed up
2016-07-25 17:12:01 +10:00
Sam
12ecf8624a
FIX: tokenize words with dots correctly
...
hello.world is now tokenized as "hello.world" and "world" that way the word
"world" will find the post with "hello.world"
2016-07-25 16:26:33 +10:00
Sam
e01802a13b
FIX: strip quote from search term when searching within topic
2016-07-25 15:06:25 +10:00
Sam
c1f62d8657
Revert "make upgrade a bit more seamless"
...
This reverts commit 78b88a1633 .
2016-07-25 12:49:33 +10:00
Sam
78b88a1633
make upgrade a bit more seamless
2016-07-25 12:30:52 +10:00
Sam
df535c6346
FEATURE: refresh session cookie at most once an hour
...
This feature ensures session cookie lifespan is extended
when user is online.
Also decreases session timeout from 90 to 60 days.
Ensures all users (including logged on ones) get expiring sessions.
2016-07-25 12:07:31 +10:00
Sam
12dc511fea
PERF: make score calculator cheaper when site has long topics
2016-07-22 09:48:44 +10:00
Sam
1c964bf730
PERF: cache category topic ids
2016-07-19 12:34:54 +10:00
Sam
c1a01b2a28
PERF: limit maximum number of topic links to 50
...
When a giant topic has huge numbers of links only show top 50
if expanded from the show more links... button.
2016-07-19 10:55:35 +10:00
Sam
a5d0e0f277
PERF: index for deleted posts in a topic to speed up has_deleted detection
2016-07-19 10:29:22 +10:00
Sam Saffron
46b34e3c62
FEATURE: remove user option for edit history public
...
Users can no longer opt-in for "public" edit history
if site owner disables it.
This feature adds cost and complexity to post rendering since
user options need to be premeptively loaded for every user in the
stream. It is also confusing to explain to communities with private edit
history.
2016-07-16 21:30:00 +10:00
Sam Saffron
9893953f62
PERF: no need to nest a transaction when featuring topics
...
adding featured topics is already in a transaction, no need to nest
2016-07-16 15:36:40 +10:00
Sam Saffron
4cef1c1750
PERF: stop featuring users on categories
...
(this feature has long been removed, no need to run expensive queries
every 15 minutes)
2016-07-16 15:33:57 +10:00
Sam Saffron
6777bd2629
warm up v8 after fork
2016-07-16 15:11:34 +10:00
Sam Saffron
bea06afd3d
UX: suppress description excerpt on mobile
2016-07-14 22:38:16 +10:00
Sam Saffron
fa8ba3b408
UX: don't expand pinned on mobile categories page
2016-07-14 22:30:51 +10:00
Sam Saffron
3dcd6edb46
FEATURE: stage post in stream on edit
2016-07-14 22:20:43 +10:00
Sam Saffron
f369d492b3
FEATURE: stop linking to last post in crawler view
...
This only makes stuff harder for google AND does not even function correctly
2016-07-12 21:11:33 +10:00
Sam Saffron
86b3de510b
UX: staged posts show up with opacity 0.4 till on server
2016-07-12 17:03:42 +10:00
Sam Saffron
dbc25a9d64
FEATURE: flags for suppressing pinned expansion
...
To suppress pinned excerpt expansion
on mobile set "show_pinned_excerpt_mobile" to false
To suppress pinned excerpt expansion
on desktop set "show_pinned_excerpt_desktop" to false
2016-07-12 13:53:59 +10:00
Sam
64ca5552bc
correct scoping
2016-07-10 16:45:24 +10:00
Sam
c5c443fda3
correct typo
2016-07-10 10:51:49 +10:00