Tom Hughes
c12f8959dd
Require user names to be unique after unicode normalisation
...
As with the previous checks on case sensitivity this only affects
new users, and changes to names of existing users.
2023-12-13 22:27:36 +00:00
Andy Allan
4bca24a7be
Resourceful routing for passwords
...
This also matches the routes used by devise
2023-12-06 18:41:00 +00:00
Tom Hughes
0c2e471708
Fix new rubocop warnings
2023-12-05 18:13:13 +00:00
Tom Hughes
12b4d11d44
Use SecureRandom to generate user tokens
2023-12-04 17:25:57 +00:00
Tom Hughes
7f6f015636
Update expected response for doorkeeper errors
2023-11-28 18:35:11 +00:00
Tom Hughes
efd2b92a80
Prevent unauthenticated users commenting on notes via the API
2023-11-23 16:56:07 +00:00
Anton Khorev
b5f8df642a
Disallow account deletion after confirmation
2023-11-22 17:37:04 +03:00
Anton Khorev
14bd660114
Disable delete account button if there are recent changesets
2023-11-22 17:37:04 +03:00
Anton Khorev
a8aaf62e62
Add earliest allowed deletion time to user model
2023-11-22 17:02:48 +03:00
Anton Khorev
91a4fd6b5a
Add user account deletion delay test helper
2023-11-22 16:15:59 +03:00
Tom Hughes
2fcee9625d
Merge remote-tracking branch 'upstream/pull/4349'
2023-11-15 22:30:41 +00:00
Andy Allan
100a7f8979
Use friendly_date for note disappear description
...
There's no need to reimplement this in its own helper.
2023-11-15 19:36:35 +00:00
Andy Allan
d8400320a7
Use time instead of abbr element for changesets_helper
2023-11-15 19:19:57 +00:00
Andy Allan
d739943b36
Avoid wrapping time tags in abbr for note_helper
2023-11-15 19:18:01 +00:00
Andy Allan
0d33820150
Add missing tests for friendly_date_ago helper
2023-11-15 19:16:18 +00:00
Andy Allan
24a562f885
Use html 'time' element for friendly date helpers
...
This provides more structure than just a simple span.
2023-11-15 17:53:38 +00:00
Tom Hughes
cebda5ffb9
Merge remote-tracking branch 'upstream/pull/4319'
2023-11-15 17:14:49 +00:00
Anton Khorev
562e7e7d32
Remove some tag table custom css
2023-11-14 17:17:18 +00:00
Tom Hughes
7e974b8662
Add tests for API change rate limits
2023-11-02 08:59:57 +00:00
Tom Hughes
ba503e02d2
Enforce rate limit for API calls which make changes
2023-11-02 08:59:57 +00:00
Tom Hughes
c6bb4a5f4e
Add importer role that can be associated with higher rate limits
2023-11-02 08:58:12 +00:00
Tom Hughes
ee3f045495
Assign proper sequence numbers to relation members in tests
2023-10-26 18:22:41 +01:00
Anton Khorev
62ba143c3c
Remove some search/directions custom css
2023-10-20 16:58:59 +03:00
Tom Hughes
45be62391f
Update test results for changes to rescuable exception handling
...
https://github.com/rails/rails/pull/45867
2023-10-18 18:26:14 +01:00
Tom Hughes
3e3873a7c2
Fix test as rails no longer seems to return a body for redirects
2023-10-18 18:26:14 +01:00
Tom Hughes
46cd08b1c8
Replace composite_primary_keys with rails builtin support
2023-10-18 18:26:14 +01:00
Tom Hughes
8d7b98a618
Drop workaround to force UTF8 form upload in IE8
...
This has been disabled by default in rails for some time.
2023-10-07 11:57:54 +01:00
Andy Allan
1700c23dd1
Prefer find_by() instead of where().first
...
These are very similar, differing only if we would expect multiple
results and the sorting is important. However, in all our cases
we're only expecting one result to be returned, and so find_by is
easier to read.
2023-10-04 17:53:58 +01:00
Tom Hughes
c8fc2218e5
Merge remote-tracking branch 'upstream/pull/4226'
2023-10-03 19:39:41 +01:00
Milan Cvetkovic
408f2918d0
Load openid signing key from endpoint during openid connect test
2023-10-03 18:55:10 +01:00
Milan Cvetkovic
2d5acd199b
Add test for openid discovery
2023-10-03 18:55:10 +01:00
Milan Cvetkovic
1f62a2b342
Add a test for openid connect support
2023-10-03 18:55:10 +01:00
Anton Khorev
0fae5627a5
Remove <picture>s around <img srcset=...>
2023-10-03 03:06:12 +03:00
Andy Allan
0a046673d6
Merge pull request #4201 from AntonKhorev/issues-limit-settings
...
Move max value of issues counter to settings
2023-09-27 15:47:44 +01:00
Tom Hughes
e8af4b85bf
Fix new rubocop warnings
2023-09-26 18:42:57 +01:00
Tom Hughes
85b17a1f2a
Merge remote-tracking branch 'upstream/pull/4240'
2023-09-14 17:42:04 +01:00
Anton Khorev
4b92988555
Add comment ids to changeset discussion api responses
2023-09-10 17:30:06 +03:00
Anton Khorev
9442829d31
Add json output for show user block api
2023-09-09 16:50:36 +03:00
Anton Khorev
71654e563e
Add show user block api endpoint
2023-09-09 15:53:22 +03:00
Anton Khorev
9682fe6431
Add user id to api trace output
2023-09-08 17:13:57 +03:00
Tom Hughes
f138055849
Merge remote-tracking branch 'upstream/pull/4225'
2023-09-06 18:42:29 +01:00
Andy Allan
cb4f99fef2
Use implicit style for associations with factory overrides
...
This matches our usage of implicit style for associations generally,
e.g. `user`.
2023-09-06 10:20:23 +01:00
Tom Hughes
dc6e30bab6
Merge remote-tracking branch 'upstream/pull/4231'
2023-09-05 17:22:04 +01:00
Tom Hughes
dc54ce7d0a
Update argon2 tests for change in library default costs
2023-09-05 17:16:53 +01:00
Anton Khorev
caf49bb25d
Show user id on profile pages to moderators and admins
2023-09-05 13:35:08 +03:00
Anton Khorev
7e6de66444
Swap older/newer diary entries buttons
2023-09-04 16:32:54 +03:00
Tom Hughes
be3baea4de
Merge remote-tracking branch 'upstream/pull/4222'
2023-09-03 18:54:18 +01:00
Anton Khorev
11df872c3e
Add bbox parameter to notes search api
2023-09-03 11:26:05 +03:00
Anton Khorev
0ef4a299bb
Check required bbox parameter presence outside of BoundingBox class
2023-09-03 09:47:27 +03:00
Anton Khorev
963b8f43f1
Change issue count logic from (n-1)+ to n+
2023-09-01 08:05:01 +03:00