Commit graph

2293 commits

Author SHA1 Message Date
Tom Hughes
d8b468e7a1 Add validation for maximum ID passed to changesets#index 2024-04-11 10:08:20 +01:00
Tom Hughes
e3c43e4a1a Add validation for before/after parameters to pagination concern 2024-04-11 10:08:20 +01:00
Tom Hughes
5d887a37bf Add validation for page number passed to notes#index 2024-04-11 10:08:20 +01:00
Tom Hughes
feff501b25 Add framework for parameter validation using rails_param gem 2024-04-11 10:08:20 +01:00
Anton Khorev
588b77244b Rename api OldController to OldElementsController 2024-04-02 16:11:09 +03:00
Tom Hughes
c79da4746a Merge remote-tracking branch 'upstream/pull/4637' 2024-04-01 18:54:52 +01:00
Tom Hughes
d2688d4d63 Merge remote-tracking branch 'upstream/pull/4639' 2024-04-01 18:37:27 +01:00
Anton Khorev
c2c5892112 Rename api changesets index template 2024-03-30 08:39:29 +03:00
Anton Khorev
765165777e Rename api changesets index action 2024-03-30 08:26:58 +03:00
Anton Khorev
558c8765f5 Rename api changeset show template
Make template name correspond to action name.
2024-03-30 08:10:24 +03:00
Anton Khorev
134f9e2df1 Use before/after pagination on users page 2024-03-29 18:21:15 +03:00
Tom Hughes
50df5eefcc Merge remote-tracking branch 'upstream/pull/4632' 2024-03-28 17:11:58 +00:00
Tom Hughes
df4349a050 Merge remote-tracking branch 'upstream/pull/4631' 2024-03-28 17:06:24 +00:00
Anton Khorev
16cc2e75a7 Remove unused includes of ConsistencyValidations 2024-03-28 11:49:49 +03:00
Anton Khorev
fba5528731 Remove require "xml/libxml" from controllers 2024-03-28 11:18:31 +03:00
Anton Khorev
a969e08641 Use "visible" scope when finding traces
Allows to eliminate some :not_found branches.
2024-03-28 08:34:18 +03:00
Anton Khorev
180a61bcc3 Move trace pictures/icons into their own controllers 2024-03-27 13:25:28 +03:00
Tom Hughes
af5d76ecab Merge remote-tracking branch 'upstream/pull/4625' 2024-03-26 18:32:52 +00:00
Tom Hughes
f4b8510744 Merge remote-tracking branch 'upstream/pull/4622' 2024-03-26 18:17:05 +00:00
Anton Khorev
f0d05c20ae Add found users count to users page 2024-03-26 05:44:35 +03:00
Anton Khorev
9f8e4fd60a Use before/after pagination on users page 2024-03-26 05:44:35 +03:00
Anton Khorev
274a516bc6 Make "include" and "limit" keyword args of pagination method 2024-03-26 04:41:07 +03:00
Anton Khorev
addf99f191 Move common pagination code to mixin 2024-03-26 02:36:28 +03:00
Anton Khorev
604bba10ec Remove assert_method from api controllers 2024-03-25 07:15:16 +03:00
Anton Khorev
1e9d390c1e Replace lookup_user_by_id with load_resource 2024-03-25 06:29:46 +03:00
Tom Hughes
b2acd6e49c Merge remote-tracking branch 'upstream/pull/4612' 2024-03-21 17:25:41 +00:00
Anton Khorev
9c0d74fe69 Simplify and test downloaded changeset element sorting 2024-03-21 20:02:18 +03:00
Gregory Igelmund
1a7b7f5d18 Enable Turbo Drive with morphing for Messages#{destroy,mark} 2024-03-21 14:55:16 +01:00
Anton Khorev
54dec27949 Move current element actions to their own controllers 2024-03-15 03:24:45 +03:00
Anton Khorev
d87d06fee5 Move element history actions to old element controllers 2024-03-14 18:10:18 +03:00
Andy Allan
ac01ada274
Merge pull request #4557 from AntonKhorev/rename-api-old-version
Rename api old element actions and path helpers
2024-03-13 15:51:41 +00:00
Andy Allan
0a10ac2e9b
Merge pull request #4550 from tomhughes/drop-user-tokens
Drop user tokens table
2024-03-07 13:51:44 +00:00
Anton Khorev
cbf6b39464 Rename api element version action to show 2024-03-04 11:19:50 +03:00
Andy Allan
4e237db390 Be paranoid when sending password reset emails
This implements what is known as "paranoid" password reset flash
messages (using the terminology from Devise). It avoids revealing
whether the supplied email address is already registered.

Added an explicit test for this situation, so that the test for
email non-existance is separate from the duplicate-case tests.
2024-03-02 15:48:54 +00:00
Tom Hughes
664d02982c Merge remote-tracking branch 'upstream/pull/4324' 2024-03-01 19:23:51 +00:00
Anton Khorev
ee4c34172f Don't show unredacted element versions to non-moderators 2024-03-01 12:29:06 +03:00
Anton Khorev
533816a3c2 Add link to unredacted element history for moderators 2024-03-01 11:21:49 +03:00
Anton Khorev
c1b5ae0aa0 Move changeset show action to changesets controller 2024-03-01 10:48:30 +03:00
Tom Hughes
29cc21c599 Drop user tokens table 2024-02-28 21:02:54 +00:00
Tom Hughes
c3a14b195b Generate email change token before changing the address 2024-02-27 20:53:51 +00:00
Tom Hughes
53817fa9e8 Merge remote-tracking branch 'upstream/pull/4251' 2024-02-25 14:06:56 +00:00
Andy Allan
a1a6c577e8
Merge pull request #4534 from tomhughes/list-headers
Add standard List-XXX headers to some notification mails
2024-02-25 11:36:05 +01:00
Andy Allan
52f755cb27
Merge pull request #4535 from tomhughes/rails-tokens
Use rails generated tokens for emails
2024-02-25 11:32:15 +01:00
Tom Hughes
1b5200b797 Treat github and wikipedia provided emails as confirmed
Fixes #4270
2024-02-25 10:04:18 +00:00
Tom Hughes
f0764d3eca Add unsubscribe link to changeset notification mails 2024-02-25 09:48:11 +00:00
Tom Hughes
8e21e4e801 Move mechanics of changeset subscriptions into the model 2024-02-25 09:48:11 +00:00
Tom Hughes
33d292e981 Move scheduling of trace import and destruction to the model 2024-02-24 17:07:38 +00:00
Tom Hughes
4dff06a629 Use rails tokens for signup confirmations 2024-02-24 13:53:05 +00:00
Tom Hughes
ad2739347b Use rails tokens for email changes 2024-02-24 13:52:35 +00:00
Tom Hughes
b8fad531e4 Use rails tokens for password resets 2024-02-24 13:23:19 +00:00