c8411340be
chore(deps): bump github.com/volatiletech/sqlboiler/v4
...
Bumps [github.com/volatiletech/sqlboiler/v4](https://github.com/volatiletech/sqlboiler ) from 4.13.0 to 4.14.0.
- [Release notes](https://github.com/volatiletech/sqlboiler/releases )
- [Changelog](https://github.com/volatiletech/sqlboiler/blob/master/CHANGELOG.md )
- [Commits](https://github.com/volatiletech/sqlboiler/compare/v4.13.0...v4.14.0 )
---
updated-dependencies:
- dependency-name: github.com/volatiletech/sqlboiler/v4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-19 08:11:50 +00:00
e55f152905
chore(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/crypto/releases )
- [Commits](https://github.com/golang/crypto/compare/v0.3.0...v0.4.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-12 10:19:55 +00:00
0c0f34dac9
chore(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.3.0...v0.4.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-12 08:10:28 +00:00
78ca74fe7a
chore(deps): bump golang.org/x/text from 0.4.0 to 0.5.0
...
Bumps [golang.org/x/text](https://github.com/golang/text ) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.4.0...v0.5.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/text
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-05 08:12:26 +00:00
fe4c05474f
Bump golang.org/x/crypto from 0.2.0 to 0.3.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/crypto/releases )
- [Commits](https://github.com/golang/crypto/compare/v0.2.0...v0.3.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-21 08:37:26 +00:00
c0efe13e0c
Merge pull request #355 from decentral1se/arm-insert-deb
...
feat: armhf/arm64 & including insert-user
2022-11-17 14:39:01 +01:00
10f2e44c87
Bump golang.org/x/crypto from 0.1.0 to 0.2.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/crypto/releases )
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.2.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 11:47:26 +00:00
71167234d8
Merge pull request #359 from ssbc/dependabot/go_modules/github.com/nicksnyder/go-i18n/v2-2.2.1
...
Bump github.com/nicksnyder/go-i18n/v2 from 2.2.0 to 2.2.1
2022-11-14 12:47:04 +01:00
88eb972e60
Bump github.com/nicksnyder/go-i18n/v2 from 2.2.0 to 2.2.1
...
Bumps [github.com/nicksnyder/go-i18n/v2](https://github.com/nicksnyder/go-i18n ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/nicksnyder/go-i18n/releases )
- [Changelog](https://github.com/nicksnyder/go-i18n/blob/main/CHANGELOG.md )
- [Commits](https://github.com/nicksnyder/go-i18n/compare/v2.2.0...v2.2.1 )
---
updated-dependencies:
- dependency-name: github.com/nicksnyder/go-i18n/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 08:13:10 +00:00
9126215e01
Bump golang.org/x/tools from 0.2.0 to 0.3.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.2.0...v0.3.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-14 08:12:47 +00:00
decentral1se
dc6ff365fb
chore: upgrade go-muxrpc
...
Avoids https://github.com/ssbc/go-muxrpc/issues/13 in arm* builds.
Also see https://github.com/ssbc/go-muxrpc/issues/17 .
2022-11-11 20:08:07 +01:00
decentral1se
b81c03c837
chore: bump to latest go-secretstream commit
...
See https://github.com/ssbc/go-secretstream/pull/21
2022-11-11 17:43:52 +01:00
0be5899235
Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.3.0 to 6.5.0
...
Bumps [github.com/maxbrunsfeld/counterfeiter/v6](https://github.com/maxbrunsfeld/counterfeiter ) from 6.3.0 to 6.5.0.
- [Release notes](https://github.com/maxbrunsfeld/counterfeiter/releases )
- [Commits](https://github.com/maxbrunsfeld/counterfeiter/compare/v6.3.0...v6.5.0 )
---
updated-dependencies:
- dependency-name: github.com/maxbrunsfeld/counterfeiter/v6
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-08 15:09:45 +00:00
6a7b7f2b66
Bump golang.org/x/tools from 0.1.12 to 0.2.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.1.12 to 0.2.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.1.12...v0.2.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-08 14:56:47 +00:00
decentral1se
c506340a2d
chore: update deps
2022-11-07 21:14:24 +01:00
00a1452cfc
Migrate to ssbc urls ( #336 )
...
* fix: ssbc urls
Closes https://github.com/ssbc/go-ssb-room/issues/332
* fix: go-ssb-refs API changes
* test: go-ssb-refs API changes
Co-authored-by: decentral1se <cellarspoon@riseup.net>
Co-authored-by: André Staltz <andre@staltz.com>
2022-11-07 11:18:13 +02:00
642022cb0a
fix support for SSB URIs on Android Chrome
2021-11-23 09:20:08 -03:00
73415e54c6
small fixes
...
add missing preremove file
v2 fix goreleaser file
use relative import goreleaser
fix secretstream dependency
2021-06-01 08:03:12 +02:00
3e53570638
dependency updates
...
* use LICENSEd version of nocomment
* use forked kitlog
* cleanup of various dependencies
2021-05-25 12:40:00 +02:00
1f680c5cf6
use goreleaser for packaging .deb release
...
updates #203
2021-05-24 16:31:20 +02:00
385b98a3a1
add privacy mode and role tests ( fixes #185 )
...
* denied/remove
* denied/add
* invites/revoke
* members/remove
* notices/edit
* notices/add
also:
* add members.CheckAction helper
* fix muxrpc abort bug and update to v2.0.5
* strictly use SeeOther not 307 (fixes #149 )
2021-05-14 14:27:01 +02:00
653d0926f7
add password change form
2021-05-11 10:16:35 +02:00
800023b9fc
update muxrpc
2021-05-10 13:52:45 +02:00
3969372993
reconnect testing
2021-04-26 10:06:34 +02:00
38148aadcb
update muxrpc branch
2021-04-20 18:17:56 +02:00
940cd2b3d1
Fix ssb-ws connections
...
The landing path (/) can now also be used as a websocket endpoint.
This enables use of the room server with ssb-browser-demo and similar
applications that can't use TCP connections.
also pin WIP muxrpc branch (fix-stupid-timeout)
2021-04-20 18:10:26 +02:00
cec7bc0e44
add flash message helper
2021-04-12 14:09:09 +02:00
81bd94344e
web/handlers: revamp error localization
...
fixes #66
2021-04-12 14:09:07 +02:00
6ee11a3fce
add Count() to Members, Invites, DeniedKeys
2021-03-30 11:50:13 +03:00
a62ad21165
integrate counterfeiter dependency
2021-03-29 15:33:58 +02:00
57c6baf43d
add ratelimiter middleware for HTTP and relax server timeouts
...
these timeouts affect server-sent events, too and interfer with sign-in with ssb.
2021-03-26 13:45:21 +01:00
396961e5e8
implement bridge between muxrcp and http
2021-03-26 13:36:48 +01:00
afa6bee285
add server-sent events handler
2021-03-26 13:36:48 +01:00
a180c74c38
begin sign-in with ssb
...
* sketch session store
* use session store and unify authentication handling
* sketch muxrpc handlers
2021-03-26 13:36:42 +01:00
3cea539128
overhauling a bunch of stuff
2021-03-23 08:14:49 +01:00
e6b65e3d5d
fix AdminInvitesCount pluralization
2021-03-16 17:49:26 +01:00
0f82c29f48
track created_at column for invites
2021-03-16 17:13:01 +01:00
bbcab73cb5
add admindb.InviteService
...
interface methods: create, consume, list and revoke.
SQLite implementation and some light testing.
Related changes:
* have authfallback.Create return the user id
At some point we will need to not assume that authfallback is our users
table but that will not become relevant before we start adding
moderation roles.
* Update package documentation of admindb and admindb/sqlite
* remove leftover generated.db
now using the roomdb file created by TestSimple
Review comments by @cblgh
* better documentation of hashed token storage
* space between %d and `bytes`
* make interface assertion comments less scary
2021-03-05 08:42:11 +01:00
e5a07fd8bc
(Pinned)Notices
...
Notices are pages that admins can fill with their content to describe
and customize the room.
Pinned notices are common notices that each room has. Like a description
and privacy policy.
* update models
* simple crud test for basic notices
* edit and save notices as admin
2021-02-25 10:07:44 +01:00
743cc074d7
implement pagination in allow-list overview
2021-02-24 15:54:36 +02:00
73471b5ff6
update http/render
2021-02-22 16:20:26 +01:00
5829cb1197
migrate migrations
...
had to patch the upstream dependency, nothing too big though. Expecting
a merge after some small backwards compat discussion.
2021-02-22 14:49:11 +01:00
6a4c1e54d9
add default CSP and some other browser mitigations
...
Though, CSP is primarily a tool against cross-site scripting and we
don't plan to host any user-generated or 3rd party content it's still a
good practice. The primary requirment with this rule is
to move all inline style tags to a seperate file.
2021-02-22 14:39:45 +01:00
aefa2a266c
update login test to do the csrf dance
...
also: use pre-release of http/tester with better header handling
2021-02-22 14:19:21 +01:00
f1f4e9dcb9
add CSRF protection
...
updates #14
2021-02-17 12:22:05 +01:00
99c2e95aa3
setup logging in http handlers ( fixes #10 )
...
in a http.Handler you can now do the following to log events:
logger := logging.FromContext(req.Context())
level.Info(logger).Log("event", "happend", ...)
2021-02-11 16:43:37 +01:00
830678c914
admindb: add migrations based on rubenv/sql-migrate
...
This removes the nasty need for creating the database manually.
Migrations are kept in an embedded filesystem, just like the templates
and assets for the web frontend. The same -tags dev trick applies for
them.
2021-02-09 16:49:48 +01:00
31cbf00c93
use new auth.SetErrorHandler option
2021-02-09 13:40:57 +01:00
ef4a2f3f22
sqlite and auth setup
2021-02-08 17:47:42 +01:00
01ed66d6df
basic auth middleware setup
2021-02-08 13:02:45 +01:00
dependabot[bot]
decentral1se
decentral1se
Andre Staltz
Henry Bubert
henry