* add teams to allowed frame-ancestors
* fix unit tests
* set SameSite attribute for session cookie
* further restrict ancestors
* skip landing page if in iframe
* Only set cookie SameSite=None if embedded in iframe
* don't set MMEMBED cookie on landing page (check only)
* fully parse MMEMBED cookie
* add comment
* more comments
---------
Co-authored-by: Mattermost Build <build@mattermost.com>
* WIP
* Add rate limiting for desktop token API
* Missing mocks
* Style fixes
* Update snapshots
* Maybe use an actual redirect link :P
* Refactoring for tests
* Add tests for server
* Fix lint issue
* Fix tests
* Fix lint
* Add front-end screen component
* Component logic
* Style changes
* Quick style fix
* Lint fixes
* Initial PR feedback
* Enable logging into the browser as well when completing the login process
* Refactor to push more logic to the other component
* Remove unnecessary helper code
* Fix i18n
---------
Co-authored-by: Mattermost Build <build@mattermost.com>
* calls will notify in GM/DM channels for call started posts
* fix types
* add registerDesktopNotificationHook
* remove callsWillNotify
* cleanup unused types
* use an args object to shorten params
* add CUSTOM_CALLS_RECORDING to constants
* update for guest demotion and sysadmin edits
* update unit test
* update unit test
* use existing disabled flag
* remove commented line
---------
Co-authored-by: Mattermost Build <build@mattermost.com>
* Revert "Revert "[MM-52547] Include current user profile in every redux action (#23219)""
This reverts commit 8f96888b1a.
* Revert "Revert "[MM-52546] webapp/channels : Update current user and status on WebSocket reconnect (#23071)""
This reverts commit 69ee162a6e.
* MM-53647 Fix overwriting the current user with sanitized data
* [MM-53124] Add optional Forgot Password custom link to override the default flow on the login page
* Fix i18n
* Fix test
* Added the enable/disable flag
* Fix test
* Fix e2e
* Add blockable link for the Customization navigation
* Revert "[MM-52547] Include current user profile in every redux action (#23219)"
This reverts commit a85c0b87b8.
* Revert "[MM-52546] webapp/channels : Update current user and status on WebSocket reconnect (#23071)"
This reverts commit 6d3354266a.
* Remove global draft feature flag
* More removal - in progress
* Removed the rest in webapp
* Removed the rest in webapp
* Fix tests
* Update feature_flags.go
---------
Co-authored-by: Mattermost Build <build@mattermost.com>
* Converted searcheable_list_test to TypeScript
* Reverted mock data for channels props. Resolved minor formatting issues
* Updated snapshot for searcheable_channel_list test file
* Removed obsolete snapshot of searchable_channel_list.test.jsx as searchable_channel_list.test has been converted to TypeScript
* enable redux-devools in all environments
[Redux DevTools](https://github.com/reduxjs/redux-devtools) gives developers and users insight into the client-side state of the Mattermost application. Instead of restricting this to developer builds, allow it for production builds too, simplifyin debugging when an issue reproduces in production but not in a development environment.
There is no performance overhead unless the devtools are installed and opened by the enduser. There is should be no security impact, since all this information is already client-side. Furthermore, major websites expose Redux in production: e.g. https://cbc.ca and https://medium.com/.
* preserve window.store for all environments, not as a supported API
* MM-51676 - korean chars create duplicate categories
* use isProcessing as a property instead of state; move validation of isComposing to generic modal
* prevent media keys from controlling calls ring sounds
* stop ring on pause
* expose notifyMe as sendDesktopNotificationToMe
* Revert "stop ring on pause"
This reverts commit 83d62ad02d.
* Revert "prevent media keys from controlling calls ring sounds"
This reverts commit 6d4ff63936.
* move into WebappUtils
---------
Co-authored-by: Mattermost Build <build@mattermost.com>