Daniel Schalla 2936dc87d0 CSRF Token Implementation for Plugins (#9192) ...

deleted test config

fix test config

Dont wipe the session token for plugins

Simplified Tokens; Generate CSRF for other sessions

Remove CSRF from Access Token; Remove Getter/Setter from Context

fix removed setter

remove getcsrf helper from plugin api

enforce csrf only for cookie auth

2018-08-01 15:16:04 -07:00

..

gitlab

Simplify oauth (#8972)

2018-06-26 17:23:13 -07:00

testdata

PLT-3383: image proxy support (#7991)

2018-01-22 15:32:50 -06:00

access_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

access.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

analytics_row_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

analytics_row.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

audit_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

audit.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

audits_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

audits.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

authorize_test.go

Increase OAuth2 state parameter limit

2018-02-07 16:21:22 -05:00

authorize.go

Implement OAuth2 implicit grant flow (#9178)

2018-07-27 17:35:43 -04:00

builtin.go

add model.NewX funcs for builtin types (#7692)

2017-10-23 09:40:35 -07:00

bundle_info_test.go

Implement experimental REST API endpoints for plugins (#7279)

2017-09-01 09:00:27 -04:00

bundle_info.go

MM-10702 Moving plugins to use hashicorp go-plugin. (#8978)

2018-06-25 12:33:13 -07:00

channel_count.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel_data.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel_list.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel_member_history_result.go

XYZ-110: Cherrypicking changes from release-4.7 to master (#8254)

2018-02-13 15:17:29 -05:00

channel_member_history.go

Remove bad field from ChannelMemberHistory model

2018-02-16 17:03:12 -05:00

channel_member_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

channel_member.go

MM-8796: Full implementation of "Schemes" in Store/Model/App layers. (#8357)

2018-04-20 14:49:13 -04:00

channel_mentions.go

MM-10833: send down computed channel props (#8953)

2018-06-26 16:46:57 -04:00

channel_search_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

channel_search.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel_stats.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel_test.go

Fixing race in update channel (#7269)

2017-08-22 10:20:54 -07:00

channel_view_test.go

PLT-7404 Return viewed at times in view channel API response (#7428)

2017-09-29 08:45:59 -07:00

channel_view.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

channel.go

MM-10833: send down computed channel props (#8953)

2018-06-26 16:46:57 -04:00

client4_test.go

revert master changes

2018-02-12 16:01:02 -05:00

client4.go

Pr 9039 (#9187)

2018-07-30 15:06:08 -04:00

cluster_discovery_test.go

PLT-6080 moving clustering to memberlist (#6499)

2017-06-19 08:44:04 -07:00

cluster_discovery.go

Add missed translations (#8959)

2018-06-19 19:40:26 +02:00

cluster_info_test.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

cluster_info.go

general cleanup (#8387)

2018-03-07 12:36:40 -06:00

cluster_message_test.go

PLT-6080 moving clustering to memberlist (#6499)

2017-06-19 08:44:04 -07:00

cluster_message.go

MM-8796: Full implementation of "Schemes" in Store/Model/App layers. (#8357)

2018-04-20 14:49:13 -04:00

cluster_stats_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

cluster_stats.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

command_args.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

command_response_test.go

MM-10232, MM-10259: Improve error handling from invalid json (#8668)

2018-04-26 11:19:25 -04:00

command_response.go

MM-10232, MM-10259: Improve error handling from invalid json (#8668)

2018-04-26 11:19:25 -04:00

command_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

command_webhook_test.go

PLT-1649: add response_url support for custom slash commands (#6739)

2017-08-16 08:17:57 -04:00

command_webhook.go

PLT-1649: add response_url support for custom slash commands (#6739)

2017-08-16 08:17:57 -04:00

command.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

compliance_post_test.go

Fixing issue with compliance export encoding (#7042)

2017-07-28 09:32:37 -06:00

compliance_post.go

MM-8839: Adds ChannelType to compliance-related model. (#8424)

2018-03-09 10:30:05 -05:00

compliance_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

compliance.go

ABC-173: introduce Normalize(Username|Email) (#8183)

2018-02-05 14:56:01 -05:00

config_test.go

MM-11301: Validates listen address config value. (#9138)

2018-07-30 14:59:08 -04:00

config.go

Pr 9039 (#9187)

2018-07-30 15:06:08 -04:00

data_retention_policy.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

emoji_data.go

[MM-9777] Avoids adding custom emojis with the same name as a system emoji (#8461)

2018-03-23 09:11:43 -04:00

emoji_search_test.go

ABC-90 Add POST /emoji/search and GET /emoji/autocomplete API endpoints (#8125)

2018-01-23 08:04:44 -08:00

emoji_search.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

emoji_test.go

Add ability to bulk import emoji (#9048)

2018-07-05 09:08:49 -04:00

emoji.go

Add ability to bulk import emoji (#9048)

2018-07-05 09:08:49 -04:00

file_info_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

file_info.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

file.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

gitlab.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

incoming_webhook_test.go

[PLT-8173] Strip the post_ prefix on incoming webhook overrides. (#8019)

2018-01-03 10:35:36 -05:00

incoming_webhook.go

Add missed translations (#8959)

2018-06-19 19:40:26 +02:00

initial_load_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

initial_load.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

job.go

MM-9728: Online migration for advanced permissions phase 2 (#8744)

2018-05-14 15:59:04 +01:00

ldap.go

general cleanup (#8387)

2018-03-07 12:36:40 -06:00

license_test.go

[MM-10718] Move custom branding to TE (#8871)

2018-06-02 06:33:59 +08:00

license.go

[MM-10718] Move custom branding to TE (#8871)

2018-06-02 06:33:59 +08:00

manifest_test.go

MM-11420: plugins: compute bundle hash on load (#9172)

2018-07-31 16:29:52 -04:00

manifest.go

MM-11420: plugins: compute bundle hash on load (#9172)

2018-07-31 16:29:52 -04:00

message_export.go

Adding RootId information to MessageExport (#9030)

2018-07-03 16:33:10 +02:00

mfa_secret_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

mfa_secret.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

migration.go

MM-9728: Online migration for advanced permissions phase 2 (#8744)

2018-05-14 15:59:04 +01:00

modeltestlib_test.go

platform/model: Don't pull in the "testing" package in normal builds (#6735)

2017-06-26 14:32:39 -04:00

oauth_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

oauth.go

Implement OAuth2 implicit grant flow (#9178)

2018-07-27 17:35:43 -04:00

outgoing_webhook_test.go

added the custom icon and username for the outgoing webhook and its response (#9141)

2018-07-25 08:31:41 -04:00

outgoing_webhook.go

added the custom icon and username for the outgoing webhook and its response (#9141)

2018-07-25 08:31:41 -04:00

permission_test.go

XYZ-37: Advanced Permissions Phase 1 Backend. (#8159)

2018-02-06 15:34:08 +00:00

permission.go

MM-8853: Adding MANAGE_EMOJIS and MANAGE_OTHERS_EMOJIS permissions (#8860)

2018-05-29 15:58:12 +01:00

plugin_key_value_test.go

PLT-8131 (part2) Add plugin key value store support (#7902)

2017-11-27 17:23:35 -05:00

plugin_key_value.go

Hash key for plugin store and limit id length (#7933)

2017-12-05 15:19:33 -08:00

plugin_status.go

MM-10702 Moving plugins to use hashicorp go-plugin. (#8978)

2018-06-25 12:33:13 -07:00

plugins_response_test.go

Support server, deprecate backend in plugin manifest (#9127)

2018-07-18 15:32:33 -07:00

plugins_response.go

MM-10702 Moving plugins to use hashicorp go-plugin. (#8978)

2018-06-25 12:33:13 -07:00

post_list_test.go

PLT-7822: Fix search order for SQL search backend. (#7704)

2017-10-24 14:27:15 -04:00

post_list.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

post_search_results.go

MM-6992 Added highlighting to elasticsearch results (#8861)

2018-06-19 11:46:29 +02:00

post_test.go

Relax 4k post message limit (#8478)

2018-03-26 17:55:35 -04:00

post.go

MM-10833: send down computed channel props (#8953)

2018-06-26 16:46:57 -04:00

preference_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

preference.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

preferences.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

push_notification_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

push_notification.go

Relese5.0 merge master 20180607 (#8927)

2018-06-07 15:52:07 +02:00

push_response_test.go

PLT-6112: Add some more unit tests to the model package (#6142)

2017-04-20 09:58:54 -04:00

push_response.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

reaction_test.go

fix reaction's name validation with + sign in it (#6221)

2017-04-26 10:11:32 -04:00

reaction.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

role.go

MM-8796: Full implementation of "Schemes" in Store/Model/App layers. (#8357)

2018-04-20 14:49:13 -04:00

saml_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

saml.go

general cleanup (#8387)

2018-03-07 12:36:40 -06:00

scheduled_task_test.go

fix scheduled task race (#8355)

2018-02-23 12:56:32 -06:00

scheduled_task.go

fix scheduled task race (#8355)

2018-02-23 12:56:32 -06:00

scheme.go

MM-10233: Add scheme importing to bulk importer. (#8928)

2018-06-21 12:02:35 +01:00

search_params_test.go

simplify things (#7735)

2017-10-30 11:57:24 -05:00

search_params.go

Pr 9039 (#9187)

2018-07-30 15:06:08 -04:00

security_bulletin_test.go

PLT-6112: Add some more unit tests to the model package (#6142)

2017-04-20 09:58:54 -04:00

security_bulletin.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

session_test.go

CSRF Token Implementation for Plugins (#9192)

2018-08-01 15:16:04 -07:00

session.go

CSRF Token Implementation for Plugins (#9192)

2018-08-01 15:16:04 -07:00

slack_attachment.go

PLT-7824 Added support for mentions with <@userid> and <!here> (#7615) (#7737)

2017-11-17 11:17:59 -05:00

status_test.go

MM-10425 Include active_channel in cluster update user status messages (#8967)

2018-06-21 10:42:20 -07:00

status.go

MM-10425 Include active_channel in cluster update user status messages (#8967)

2018-06-21 10:42:20 -07:00

suggest_command_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

suggest_command.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

switch_request_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

switch_request.go

MM-4998 Adding LoginIdAttribute to allow LDAP users to change their login ID without losing their account (#8756)

2018-05-10 09:46:09 -07:00

system_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

system.go

revert master changes

2018-02-12 16:01:02 -05:00

team_member_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

team_member.go

MM-8796: Full implementation of "Schemes" in Store/Model/App layers. (#8357)

2018-04-20 14:49:13 -04:00

team_search_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

team_search.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

team_stats.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

team_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

team.go

MM-8796: Full implementation of "Schemes" in Store/Model/App layers. (#8357)

2018-04-20 14:49:13 -04:00

timezone.go

Timezone feature (#8185)

2018-03-22 09:53:43 -04:00

token.go

Minor fix

2017-07-06 17:28:38 -04:00

user_access_token_search_test.go

[PLT-7793] Add /users/tokens/search endpoint (#8088)

2018-01-11 16:30:55 -05:00

user_access_token_search.go

[PLT-7793] Add /users/tokens/search endpoint (#8088)

2018-01-11 16:30:55 -05:00

user_access_token_test.go

PLT-6763 Implement user access tokens and new roles (server-side) (#6972)

2017-07-31 12:59:32 -04:00

user_access_token.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

user_autocomplete.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

user_search_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

user_search.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

user_test.go

MM-11521/MM-11522 Fix being able to create users with invalid emails through API (#9199)

2018-08-01 15:18:14 -04:00

user.go

MM-11521/MM-11522 Fix being able to create users with invalid emails through API (#9199)

2018-08-01 15:18:14 -04:00

users_stats.go

Get the count of the all system users at endpoint /users/stats (#8847)

2018-06-07 12:45:49 -04:00

utils_test.go

MM-11521/MM-11522 Fix being able to create users with invalid emails through API (#9199)

2018-08-01 15:18:14 -04:00

utils.go

MM-11521/MM-11522 Fix being able to create users with invalid emails through API (#9199)

2018-08-01 15:18:14 -04:00

version_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

version.go

Uncomment upgrade for 5.1.0 (#9040)

2018-07-03 18:15:15 +02:00

webrtc_test.go

Revert PLT-7809 (#7793)

2017-11-06 10:23:15 -08:00

webrtc.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00

websocket_client.go

MM-8708 Remove api package (#8784)

2018-05-16 13:43:22 -04:00

websocket_message_test.go

MM-8710: Web Hub optimizations (#8293)

2018-02-20 10:50:10 -08:00

websocket_message.go

Add back enable/disable WS events (#9052)

2018-07-05 07:23:55 -07:00

websocket_request_test.go

PLT-5860 Updated copyright date (#6058)

2017-04-12 08:27:57 -04:00

websocket_request.go

unnamed return (#8170)

2018-01-30 15:23:00 -08:00