Mario
e511220022
Merge branch 'remove-direct-access-to-app-observer' into 'dev'
...
Don't access App::$observer directly in core
See merge request hubzilla/core!2197
2025-05-11 18:08:16 +00:00
Harald Eilertsen
7cb8a56b6a
Don't access APP:$observer directly in core
...
Introduce helper functions to access the various fields of the xchan
stored in `App::$observer'. This removes direct access to the attribute
from core, with the aim of allowing further refactoring later.
We can not yet make the `App::$observer` attribute private, though, as
it is also accessed directly by some addons.
2025-05-09 15:15:35 +02:00
Mario
b6f0fe7583
refactor with permissions
2025-04-29 09:52:30 +00:00
Mario
7c59dd9fd7
more deprecate x()
2025-04-23 18:17:23 +00:00
Mario
39ee872f49
prefer token if available
2024-09-19 06:59:27 +00:00
Mario
10acf90d06
refactor get_security_ids() to remove some legacy code from the zot/zot6 transition and re-add scope sql to item_permissions_sql()
2024-09-18 08:48:25 +00:00
Mario
6e0d0e3832
docu and remove superfluous break statement after return statement
2024-06-13 10:17:13 +00:00
Harald Eilertsen
0dc959d9fe
Deprecate *_config() functions in core.
2024-03-24 09:58:21 +00:00
Mario
7755936a2e
remove unused pseudo abook code
2023-06-29 12:31:32 +00:00
Mario
cd26ead043
implement optional moderation of unsolicited comments, minor css fixes and some more work on ocap
2023-06-23 09:13:51 +00:00
Mario
48a33f08e2
ocap initial checkin
2023-06-02 11:33:44 +00:00
Mario
4b17ea04a7
add owner and author to item_permissions_sql()
2023-06-01 10:15:35 +00:00
Mario
fcfb9e9758
fix random php warnings
2022-09-07 12:50:46 +00:00
Mario
f1c0034a18
more work on access tokens
2022-01-06 21:09:18 +00:00
Mario
5aefe0b74f
guest token xchan_network = "token" and remove permission checks since the guest tokens are now added to the abook automatically
2021-12-18 19:09:15 +00:00
Mario
bfd3da43ac
access token refactor
2021-12-17 19:48:09 +01:00
Mario
1c8000d026
remove more legacy zot quirks
2021-05-26 19:02:13 +00:00
Mario
85d000e792
air: revert min_livetime of the form security token - it has had its issues and air can be configured for delayed registration verification
2021-03-18 19:51:30 +00:00
Mario
3ba42d3dcf
air: deal with timezones when displaying open/close time - this should finally fix issue #1544
2021-03-18 14:55:01 +01:00
Hilmar R
c26dede97f
get dev
2021-03-01 18:48:11 +01:00
Hilmar R
67db1c6e9b
melt diff prod fork 4.6.2 air onto 5.2.1 to 5.2.2 DB 1241
2021-01-23 15:24:24 +01:00
Mario
aafdeb9000
Revert "more prefer zot6"
...
This reverts commit e9a264cb43
2020-08-24 11:26:52 +02:00
Mario Vavti
e9a264cb43
more prefer zot6
2020-08-24 11:18:47 +02:00
Max Kostikov
4db38ec64a
Add minimum form displaying time before login
2020-07-21 23:59:26 +02:00
zotlabs
11116bdcb7
typos
2019-03-12 03:40:43 -07:00
zotlabs
5fb0d38ad8
security updates for multiple xchans
2019-03-11 16:29:12 -07:00
zotlabs
4e97fb0e58
testing init_groups_visitor changes - also add virtual groups for both zot identities
2019-03-10 22:32:37 -07:00
zotlabs
cada0b6df1
init_groups_visitor: include xchans from all zot-like networks
2019-03-10 15:50:45 -07:00
Max Kostikov
2836bce8fe
Update security.php
2018-09-28 00:51:21 +02:00
Max Kostikov
b54aabc958
Update security.php
2018-09-27 23:52:46 +02:00
zotlabs
42c4a0da51
Zot/Finger: ignore deleted hublocs
2018-08-21 21:38:10 -07:00
Mario Vavti
de63e40a70
we must now provide the full path to the profile image for the cavatar plugin to work
2018-05-15 10:20:20 +02:00
zotlabs
43e55eb9a6
Active channels information is a bit imprecise. Provide a higher accuracy method. This will require a transition period
2018-04-16 21:40:43 -07:00
zotlabs
92e0c502f7
make most recent cloud_tiles setting for local channels persistent across logins
2017-11-07 19:34:00 -08:00
zotlabs
b106b53d05
don't translate 'guest:' since it is part of a url
2017-10-16 23:01:00 -07:00
zotlabs
a791809a84
ensure guests hve a unique (non-existent) url so that network discovery on remote servers doesn't come up mis-attributing the token. Future work should probably provide an actual page at this location describing it as a guest account of 'xyz'.
2017-10-16 22:31:38 -07:00
zotlabs
9d5b6858ea
stream_perms_xchans wasn't working which has effects in mod_display and there are also issues with the oembed provider for mod_display. This is a first cut for the second but hasn't yet been tested
2017-08-21 02:01:41 -07:00
zotlabs
893ae17b99
provide ability to search webpages (either public or which contain the observer in the acl) in addition to conversations
2017-05-30 17:06:50 -07:00
zotlabs
c845d20352
ugly postgres fixes
2017-04-30 16:03:01 -07:00
zotlabs
ccdfbc721f
Create virtual privacy groups for private profile member lists
2017-02-12 15:56:33 -08:00
zotlabs
5aa0017e91
provide lowlevel xchan storage function to ensure that all non-null rows are initialised
2017-01-28 15:01:19 -08:00
Klaus Weidenbach
7b41839ea8
[TASK] Update Doxyfile and fix Doxygen errors.
...
Updated Doxyfile to include new folders.
Add a list for @hooks tags.
Fixed some parsing problems for Doxygen.
2016-10-13 11:27:23 +02:00
zotlabs
e7233c0c94
more backquotes - this should take care of most except for the array import queries
2016-10-09 16:31:04 -07:00
redmatrix
b5d093e5ca
finish the channel_reddress() conversion
2016-09-21 15:28:37 -07:00
redmatrix
3a7d3e3a54
This checkin should make all permission modes work correctly with atokens (they should be able to post content if allowed to). It also removes the strict linkage between permissions and connections so any individual permission can be set for any xchan; even those for which you have no connections.
2016-08-01 20:12:52 -07:00
redmatrix
86eb923f29
make guest access tokens work with PERMS_NETWORK, PERMS_SITE, PERMS_PENDING, and PERMS_CONTACTS; or everything but PERMS_SPECIFIC. PERMS_SITE could be contentious, but we're currently denying them as they are a guest and don't actually have a channel on this site. We can't easily make PERMS_SPECIFIC work without providing an abook entry for the guest since we would need to set specific permissions for the guest login, but unfortunately this could be the most desirable setting to use in many cases. There is also an update of hmessages.po in this commit.
2016-07-31 18:08:41 -07:00
redmatrix
6a56a509d3
Merge branch 'dev' into perms
2016-07-20 19:03:18 -07:00
redmatrix
3affb2e817
sort out some of the authentication mess - with luck this may fix the DAV auth issue which I simply could not duplicate or find a reason for.
2016-07-20 17:55:40 -07:00
redmatrix
de4f9d68bd
Merge branch 'dev' into perms
2016-07-17 21:40:04 -07:00
redmatrix
397a23499d
make the xchan_hash for the access token location independent
2016-07-14 21:28:17 -07:00
