Commit Graph

68 Commits

Author SHA1 Message Date
dependabot[bot] c8411340be
chore(deps): bump github.com/volatiletech/sqlboiler/v4
Bumps [github.com/volatiletech/sqlboiler/v4](https://github.com/volatiletech/sqlboiler) from 4.13.0 to 4.14.0.
- [Release notes](https://github.com/volatiletech/sqlboiler/releases)
- [Changelog](https://github.com/volatiletech/sqlboiler/blob/master/CHANGELOG.md)
- [Commits](https://github.com/volatiletech/sqlboiler/compare/v4.13.0...v4.14.0)

---
updated-dependencies:
- dependency-name: github.com/volatiletech/sqlboiler/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-19 08:11:50 +00:00
dependabot[bot] e55f152905
chore(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-12 10:19:55 +00:00
dependabot[bot] 0c0f34dac9
chore(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-12 08:10:28 +00:00
dependabot[bot] 78ca74fe7a
chore(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-05 08:12:26 +00:00
dependabot[bot] fe4c05474f
Bump golang.org/x/crypto from 0.2.0 to 0.3.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-21 08:37:26 +00:00
decentral1se c0efe13e0c
Merge pull request #355 from decentral1se/arm-insert-deb
feat: armhf/arm64 & including insert-user
2022-11-17 14:39:01 +01:00
dependabot[bot] 10f2e44c87
Bump golang.org/x/crypto from 0.1.0 to 0.2.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 11:47:26 +00:00
decentral1se 71167234d8
Merge pull request #359 from ssbc/dependabot/go_modules/github.com/nicksnyder/go-i18n/v2-2.2.1
Bump github.com/nicksnyder/go-i18n/v2 from 2.2.0 to 2.2.1
2022-11-14 12:47:04 +01:00
dependabot[bot] 88eb972e60
Bump github.com/nicksnyder/go-i18n/v2 from 2.2.0 to 2.2.1
Bumps [github.com/nicksnyder/go-i18n/v2](https://github.com/nicksnyder/go-i18n) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/nicksnyder/go-i18n/releases)
- [Changelog](https://github.com/nicksnyder/go-i18n/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nicksnyder/go-i18n/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: github.com/nicksnyder/go-i18n/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 08:13:10 +00:00
dependabot[bot] 9126215e01
Bump golang.org/x/tools from 0.2.0 to 0.3.0
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 08:12:47 +00:00
decentral1se dc6ff365fb
chore: upgrade go-muxrpc
Avoids https://github.com/ssbc/go-muxrpc/issues/13 in arm* builds.

Also see https://github.com/ssbc/go-muxrpc/issues/17.
2022-11-11 20:08:07 +01:00
decentral1se b81c03c837
chore: bump to latest go-secretstream commit
See https://github.com/ssbc/go-secretstream/pull/21
2022-11-11 17:43:52 +01:00
dependabot[bot] 0be5899235
Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.3.0 to 6.5.0
Bumps [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/maxbrunsfeld/counterfeiter/releases)
- [Commits](https://github.com/maxbrunsfeld/counterfeiter/compare/v6.3.0...v6.5.0)

---
updated-dependencies:
- dependency-name: github.com/maxbrunsfeld/counterfeiter/v6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-08 15:09:45 +00:00
dependabot[bot] 6a7b7f2b66
Bump golang.org/x/tools from 0.1.12 to 0.2.0
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.1.12 to 0.2.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.1.12...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-08 14:56:47 +00:00
decentral1se c506340a2d
chore: update deps 2022-11-07 21:14:24 +01:00
decentral1se 00a1452cfc
Migrate to ssbc urls (#336)
* fix: ssbc urls

Closes https://github.com/ssbc/go-ssb-room/issues/332

* fix: go-ssb-refs API changes

* test: go-ssb-refs API changes

Co-authored-by: decentral1se <cellarspoon@riseup.net>
Co-authored-by: André Staltz <andre@staltz.com>
2022-11-07 11:18:13 +02:00
Andre Staltz 642022cb0a fix support for SSB URIs on Android Chrome 2021-11-23 09:20:08 -03:00
Henry a249fd8bee fix SPDX headers and add reuse API badge 2021-10-08 14:39:31 +02:00
Henry Bubert 73415e54c6 small fixes
add missing preremove file
v2 fix goreleaser file
use relative import goreleaser
fix secretstream dependency
2021-06-01 08:03:12 +02:00
Henry 4d3610e2fb prepare v2 release 2021-05-31 14:51:05 +02:00
Henry 3e53570638 dependency updates
* use LICENSEd version of nocomment
* use forked kitlog
* cleanup of various dependencies
2021-05-25 12:40:00 +02:00
henry 1f680c5cf6 use goreleaser for packaging .deb release
updates #203
2021-05-24 16:31:20 +02:00
Henry 385b98a3a1 add privacy mode and role tests (fixes #185)
* denied/remove
* denied/add
* invites/revoke
* members/remove
* notices/edit
* notices/add

also:
* add members.CheckAction helper
* fix muxrpc abort bug and update to v2.0.5
* strictly use SeeOther not 307 (fixes #149)
2021-05-14 14:27:01 +02:00
Henry 653d0926f7 add password change form 2021-05-11 10:16:35 +02:00
Henry 800023b9fc update muxrpc 2021-05-10 13:52:45 +02:00
Henry 3969372993 reconnect testing 2021-04-26 10:06:34 +02:00
Henry 38148aadcb update muxrpc branch 2021-04-20 18:17:56 +02:00
Henry 940cd2b3d1 Fix ssb-ws connections
The landing path (/) can now also be used as a websocket endpoint.
This enables use of the room server with ssb-browser-demo and similar
applications that can't use TCP connections.

also pin WIP muxrpc branch (fix-stupid-timeout)
2021-04-20 18:10:26 +02:00
Henry cec7bc0e44 add flash message helper 2021-04-12 14:09:09 +02:00
Henry 81bd94344e web/handlers: revamp error localization
fixes #66
2021-04-12 14:09:07 +02:00
Henry a62ad21165 integrate counterfeiter dependency 2021-03-29 15:33:58 +02:00
Henry 57c6baf43d add ratelimiter middleware for HTTP and relax server timeouts
these timeouts affect server-sent events, too and interfer with sign-in with ssb.
2021-03-26 13:45:21 +01:00
Henry 396961e5e8 implement bridge between muxrcp and http 2021-03-26 13:36:48 +01:00
Henry afa6bee285 add server-sent events handler 2021-03-26 13:36:48 +01:00
Henry a180c74c38 begin sign-in with ssb
* sketch session store
* use session store and unify authentication handling
* sketch muxrpc handlers
2021-03-26 13:36:42 +01:00
Henry 3cea539128 overhauling a bunch of stuff 2021-03-23 08:14:49 +01:00
Henry e6b65e3d5d fix AdminInvitesCount pluralization 2021-03-16 17:49:26 +01:00
Henry 0f82c29f48 track created_at column for invites 2021-03-16 17:13:01 +01:00
Henry bbcab73cb5 add admindb.InviteService
interface methods: create, consume, list and revoke.

SQLite implementation and some light testing.

Related changes:

* have authfallback.Create return the user id

At some point we will need to not assume that authfallback is our users
table but that will not become relevant before we start adding
moderation roles.

* Update package documentation of admindb and admindb/sqlite

* remove leftover generated.db

now using the roomdb file created by TestSimple

Review comments by @cblgh

* better documentation of hashed token storage
* space between %d and `bytes`
* make interface assertion comments less scary
2021-03-05 08:42:11 +01:00
Henry e5a07fd8bc (Pinned)Notices
Notices are pages that admins can fill with their content to describe
and customize the room.

Pinned notices are common notices that each room has. Like a description
and privacy policy.

* update models
* simple crud test for basic notices
* edit and save notices as admin
2021-02-25 10:07:44 +01:00
Andre Staltz 743cc074d7
implement pagination in allow-list overview 2021-02-24 15:54:36 +02:00
Henry 73471b5ff6 update http/render 2021-02-22 16:20:26 +01:00
Henry 5829cb1197 migrate migrations
had to patch the upstream dependency, nothing too big though. Expecting
a merge after some small backwards compat discussion.
2021-02-22 14:49:11 +01:00
Henry dd575aa0c7 use embed package of go1.16 for embedding assets (fixes #20) 2021-02-22 14:48:45 +01:00
Henry 6a4c1e54d9 add default CSP and some other browser mitigations
Though, CSP is primarily a tool against cross-site scripting and we
don't plan to host any user-generated or 3rd party content it's still a
good practice.  The primary requirment with this rule is
 to move all inline style tags to a seperate file.
2021-02-22 14:39:45 +01:00
Henry aefa2a266c update login test to do the csrf dance
also: use pre-release of http/tester with better header handling
2021-02-22 14:19:21 +01:00
Henry f1f4e9dcb9 add CSRF protection
updates #14
2021-02-17 12:22:05 +01:00
Henry 99c2e95aa3 setup logging in http handlers (fixes #10)
in a http.Handler you can now do the following to log events:

logger := logging.FromContext(req.Context())
level.Info(logger).Log("event", "happend", ...)
2021-02-11 16:43:37 +01:00
Henry 158ef5221e web/i18n: Add defaults and test for labels (fixes #8) 2021-02-10 14:39:38 +01:00
Henry fec92d428c change name to go-ssb-room
It has been brought to my attention that "gossb" reads like "gossip..?"
to the untrained eye. That's just confusing.

Also the project hosts a single room so the plural was just wrong.
2021-02-09 17:38:51 +01:00