8a9f7845d4
Fix #947 : Make media and static files serving more reliable when reverse proxy X_FORWARDED_* headers are incorrect
2019-11-27 15:05:50 +01:00
6bbe48598e
See #170 : exclude by default all channels-related entities from /artists, /albums and /tracks endpoints results, for backward compatibility
2019-11-25 09:49:49 +01:00
c84396e669
Attachments
2019-11-25 09:49:06 +01:00
77ff3c2ff2
Add direct bind option for LDAP authentication
2019-11-05 11:59:36 +01:00
cceade4abb
Merge branch 'audio-denormalization' into 'master'
...
Audio denormalization / Performance enhancement in music API
See merge request funkwhale/funkwhale!939
2019-10-28 09:04:42 +01:00
ae0f7588e4
Disabled cacheops by default
2019-10-25 10:23:13 +02:00
cad4c9f923
Fixed broken user login when cacheops is enabled
2019-10-25 10:22:40 +02:00
d224f74f5d
Merge branch 'api-serializers-enhancements' into 'master'
...
Api serializers enhancements
See merge request funkwhale/funkwhale!941
2019-10-24 11:33:02 +02:00
5623b6d88b
Added profiling middleware (enable locally by adding ?prof param to url)
2019-10-22 10:58:37 +02:00
4e7f1e63d2
Denormalized audio permission logic in a separate table to enhance performance
2019-10-22 00:13:25 +02:00
b974568e31
Added django-cacheops to cache expensive count queries
2019-10-21 23:55:27 +02:00
28b334ad33
Reduce DB connection leaks
2019-10-17 15:17:26 +02:00
01223afa80
Resolve "Add optional donation/contribution link in-app"
2019-09-23 11:30:25 +02:00
f44abfecfb
Fix #883 : Prevent usage of too weak passwords
2019-09-21 16:11:08 +02:00
d28bf65d00
See #261 : Added a rate-limiting (throttling system) to limit the number of requests handled per user/IP
2019-09-17 11:23:59 +02:00
c9a9615be8
See #890 : web UI and email notifications on new reports
2019-09-13 06:09:48 +02:00
4a277c17bb
Added "refresh=true" API param to artist, track and album detail to retrieve up-to-date data if needed
2019-07-22 12:16:47 +02:00
49978081b0
See #880 : added XSS filter and content-type nosniff headers
2019-07-18 10:21:54 +02:00
039856688f
See #880 : fixed missing x-frame-options=Sameorigin header
2019-07-18 10:21:54 +02:00
1b34ae2335
See #432 : enforce a maximum number of tags per entity
2019-07-15 11:53:58 +02:00
d39cfab283
Increase the security of JWT token generation by using DJANGO_SECRET_KEY as well as user-specific salt for the signature
2019-07-13 16:02:10 +02:00
6dde4b73cd
Implement tag models
2019-07-08 15:26:14 +02:00
8f261f96e9
Merge branch 'master' into develop
2019-06-28 10:38:52 +02:00
bfff79301d
Fix #867 : Added a SUBSONIC_DEFAULT_TRANSCODING_FORMAT env var to support clients that don't provide the format parameter
2019-06-28 09:59:57 +02:00
aa368ec5eb
Hugh logging…………
2019-06-24 15:57:01 +02:00
fd522bc0de
Fixed some logging issues
2019-06-24 15:32:35 +02:00
b43bf42efc
Revert "Fixed broken logging"
...
This reverts commit 68b21d706c
2019-06-24 15:31:11 +02:00
68b21d706c
Fixed broken logging
2019-06-24 15:30:17 +02:00
08262529ec
MRF / Dropping of incoming/outgoing messages based on allow-list
2019-06-20 10:27:07 +02:00
2523108b6a
Fix #847 : Use ASCII filename before upload to S3 to avoid playback issues
2019-06-11 09:56:46 +02:00
2600631528
Added variables to connect to Amazon S3 directly
2019-05-10 13:33:03 +01:00
8db9ec979e
Fix #824 : Fixed invalid OEmbed URL when using a local FUNKWHALE_SPA_HTML_ROOT
2019-05-09 12:02:08 +02:00
86269c1b07
Can now serve audio content directly from S3
2019-05-09 11:43:35 +02:00
c8fcf1b0d9
Support oauth token in URL
2019-05-03 12:30:57 +02:00
0be93ec05b
Fix #563 : unplayable radios for anonymous users
2019-05-02 10:05:20 +02:00
6135d427e7
Fixed some issues
2019-04-24 12:56:15 +02:00
101ae27885
Fix #565 : store media files in S3 bucket
2019-04-23 18:01:42 +02:00
b42dfb71d1
Keep persistent connections to the database instead of recreating a new one for each request
2019-04-19 14:29:43 +02:00
84e2f0af9f
See #689 : added a task to refresh nodeinfo data on known domain periodically
2019-04-11 11:14:27 +02:00
63c3c22534
Fix #783 : migration issue on develop
2019-04-04 16:05:34 +02:00
4c13d47387
Resolve "Implement a Oauth provider in Funkwhale"
2019-03-25 17:02:51 +01:00
b9f0c6aecd
Revert "Merge branch '629-cookie-auth' into 'develop'"
...
This reverts commit 8b47af8b81c0055b3b20
2019-03-15 15:52:30 +01:00
c395076fce
Resolve "Use cookies instead of local storage for auth in Web UI"
2019-03-13 16:50:49 +01:00
e0c5ffcb16
[EPIC] Audio metadata update - UI / API
2019-02-28 09:31:04 +01:00
253f026dc0
System actor
2019-01-30 11:54:43 +01:00
5fe30cf59b
Fix #658 : Support blind key rotation in HTTP Signatures
2019-01-11 15:39:33 +01:00
a6fafad34f
Removed unused whitenoise dependency and wsgi module
2019-01-11 14:10:02 +01:00
fe03d08a8e
Removed unused acoustid dependency / logic
2019-01-11 14:10:02 +01:00
53ade20722
Merge branch 'more-performant-favorites' into 'develop'
...
More performant favorites
See merge request funkwhale/funkwhale!522
2019-01-10 12:00:35 +01:00
81e7b900fe
Fixed https url-reversing issue in development
2019-01-10 11:55:48 +01:00
993a0092c2
Fixed broken debug-toolbar when jquery was not included on page
2019-01-10 11:11:31 +01:00
0bc9bb65b0
Model, view and serializer for instance-level policies
2019-01-07 09:45:53 +01:00
b6902009ac
Use cache session engine to reduce load on DB
2019-01-04 14:15:07 +01:00
67de32ccc2
Removed 2 DB queries per request when user is authenticated
2019-01-04 13:52:36 +01:00
7657db4212
Fix #648 : Improved test suite speed by reducing / disabling expensive operations
2019-01-04 11:47:23 +01:00
7ac3bb98da
Moved actor domain to a dedicated table
2018-12-27 20:33:11 +01:00
d27ea30b26
Fix #640 : support connecting with to a password protected redis server
2018-12-20 17:36:32 +01:00
9220b2f0f1
See #578 : added opengraph and oembed data on artist / album / track urls
2018-12-19 15:04:33 +01:00
8679edb160
Fix #626 : Load env file in config/.env automatically to avoid sourcing it by hand
2018-11-28 19:56:56 +01:00
409b076c23
Removed the need to specify the DJANGO_ALLOWED_HOSTS variable
2018-11-25 18:40:56 +01:00
8489c79c89
See #272 : clean transcoding files task
2018-10-24 19:44:31 +02:00
f5373a9dbf
Cleanup unused code
2018-09-28 22:49:59 +02:00
e49a460203
Audio federation
2018-09-22 12:29:30 +00:00
2ea21994ee
Resolve "Per-user libraries" (use !368 instead)
2018-09-06 18:35:02 +00:00
cb5b3be844
Add support for setting the musicbrainz hostname
...
Useful for using a local musicbrainz mirror.
Fixes #471 .
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-08-31 22:36:12 +02:00
4ce46ff2a0
Implement LDAP authentication
2018-08-22 18:10:39 +00:00
13a1c6daac
Fixed #487 : typos in scheduled tasks configuration
2018-08-19 16:25:42 +02:00
ba76fe9f49
Apply restrictions to username characters during signup
2018-07-22 13:05:43 +02:00
3a94462bd6
Removed django-cacheops dependency
2018-07-21 12:57:48 +02:00
27d54ee971
Merge branch 'playlist-perfs' into 'develop'
...
Use smaller images when possible to increase performance on client-side
See merge request funkwhale/funkwhale!328
2018-07-20 17:24:53 +00:00
979c554b4a
Use cropped covers/avatars to reduce bandwidth use
2018-07-20 19:17:39 +02:00
ba5c3bfc90
Update common.py with more blacklisted usernames
2018-07-19 10:49:01 +00:00
99a37dcb7a
Resolve "UX, UI : Browse Library"
2018-07-17 11:09:13 +00:00
af270f4abd
Resolve "An avatar for users"
2018-07-13 12:10:39 +00:00
789bef38cb
See #248 : model / migration
2018-06-21 19:28:59 +02:00
2e4f862387
See #212 : record user last activity date
2018-06-17 17:53:40 +02:00
d17ceec1f0
See #297 : linting of various, uncommon errors
2018-06-10 12:06:46 +02:00
ab80dffeea
See #297 : sorted config imports
2018-06-10 11:29:24 +02:00
62ca3bd736
Blacked the code
2018-06-09 15:36:16 +02:00
290cae9a8f
Fix #231 and #219 : ensure we import covers regarless of the import method
...
Can now import covers from track metadata and track directory as well
2018-06-02 17:34:46 +02:00
14c8073e26
Ensure we can serve images securely locally
2018-06-02 09:17:32 +02:00
2569f136b7
Fix #241 : autoremove media files on model instance deletion
2018-05-28 22:17:36 +02:00
2586444db2
Fix #229 : removed last hardcoded settings to protect audio files
2018-05-24 21:34:59 +02:00
155a40e296
Fixed #205 : Disabled browsable HTML API in production
2018-05-15 19:06:08 +02:00
7595936260
See #75 : added a preference do enable/disable the subsonic API on the instance level
2018-05-09 22:13:04 +02:00
82f5dc20f3
Documentation for missing DEFAULT_FROM_EMAIL setting
2018-05-06 16:23:23 +02:00
4a7105ae7e
Fix #187 : documentation and changelog for email configuration
2018-05-06 13:48:23 +02:00
22f0b1a2d8
See #187 : API logic for password reset
2018-05-06 11:30:41 +02:00
929b50183a
Now reset cookie on profile fetch, to avoid CSRF bugs
2018-05-06 11:21:36 +02:00
4325b1be4f
Removed radios and listening recording for anonymous users as it was buggy
2018-05-06 11:18:28 +02:00
a3b2125d2a
See #186 : moved api authentication required setting to preference
2018-04-28 06:11:50 +02:00
7222f7b710
See #186 : moved PLAYLISTS_MAX_TRACKS to playlists__max_tracks
2018-04-28 05:30:23 +02:00
6dcde77b1e
Avoid fetching Actor object on every request authentication
2018-04-28 00:25:47 +02:00
d2c2fb837e
Now support Bearer auth in complement of JWT
2018-04-26 15:17:51 +02:00
0f7de68f0d
Update common.py to add USE_APACHE_HEADERS set to false
...
Update views.py to modify headers depending on Nginx or Apache
Update common.py with future proof REVERSE_PROXY_TYPE setting
Update views.py to adapt headers based on REVERSE_PROXY_TYPE
Update views.py, typo on apache
2018-04-22 15:11:04 +02:00
a8bf44a494
Added dedicated settings to manage in-place import
2018-04-21 18:15:29 +02:00
a37183f57e
Additional celery beat systemd unit file
2018-04-17 21:26:35 +02:00
6c0a43a0ea
We can now work on federation locally thank to traefik
2018-04-15 11:25:31 +02:00
b5ff339efa
We now use a proper user agent including instance version and url during outgoing requests
2018-04-07 16:20:34 +02:00
393110a7f0
Serializers for paginated collections
2018-04-06 17:58:43 +02:00
a81c92dbf5
Additional setting to control wether music library federation needs approval
2018-04-02 22:43:59 +02:00
3cf1a17087
We are now able to receive a toot and react to it
2018-04-01 22:11:46 +02:00
3650c3699b
Minor tweaks (logs, exceptions)
2018-03-31 18:41:53 +02:00
6c3b7ce154
More reserved usernames
2018-03-31 15:44:46 +02:00
22370d1b2c
Use pytest-env plugin to manage test settings instead of settings file
2018-03-31 14:45:11 +02:00
90c1d02919
Added FUNKWHALE_HOSTNAME and FEDERATION_HOSTNAME settings
2018-03-29 00:00:01 +02:00
85ce220f29
Merge branch 'federation-signing-requests' into 'develop'
...
Federation signing requests
See merge request funkwhale/funkwhale!106
2018-03-26 20:14:28 +00:00
f36a9e2ac9
Merge branch '138-import-unicode' into 'develop'
...
Resolve "Importer chokes on files with bad unicode characters"
Closes #138 and #120
See merge request funkwhale/funkwhale!108
2018-03-25 13:46:26 +00:00
f1cf250e29
Fix #138 : Better handling of utf-8 filenames during file import
2018-03-25 15:40:37 +02:00
4b69d64db2
Fix #139 : We now restrict some usernames from being used during signup
2018-03-24 20:31:36 +01:00
aa7365b71f
Basic logic for signing/verifying requests
2018-03-24 15:20:15 +01:00
1729c4f83e
250 is a saner default for playlist size
2018-03-20 19:55:36 +01:00
8821a1bb43
Removed superfluous mptt requirement
2018-03-20 15:34:33 +01:00
944135e752
Capped number of tracks in playlists
2018-03-20 15:34:33 +01:00
99f33dd392
Make api docker image able to run tests
2018-03-12 23:07:08 +01:00
a448eaaf17
Fix #117 : Use django-cacheops to cache common ORM requests
2018-03-08 23:21:59 +01:00
88092322d8
Fix #110 : completely removed django cachalot
2018-03-06 20:51:28 +01:00
2167c1731c
Removed duplicate variable
2018-03-06 17:44:53 +01:00
7f7a62cfa2
Replaced gunicorn with daphne
2018-03-03 10:52:48 +01:00
dd5881f2c6
Founndations for real-time event serialization/subscription/broadcasting
2018-03-01 20:38:20 +01:00
93e4a4f123
Added FUNWHALE_URL setting to use in activity stream in representations
2018-03-01 18:38:32 +01:00
498aa1137b
Initial channels integration
2018-03-01 18:38:31 +01:00
62d0381f91
Fixed #81 : Search now unaccent letters for queries
2018-02-27 19:56:02 +01:00
0ed3f68305
Allow login with email or username
2018-02-24 14:28:17 +01:00
d1b5895b78
Removed now useless REGISTRATION_MODE setting
2018-02-24 12:21:02 +01:00
98b62caa24
Import request viewset, serializer and url
2018-02-21 00:09:15 +01:00
2f8a026afa
Can now configure allowed host in all settings
2018-02-18 14:42:17 +01:00
d60804c9db
Added raven on server side
2018-02-17 21:31:33 +01:00
6152b3bb36
Added API endpoint for listing public instance settings
2018-02-17 21:31:32 +01:00
c7636c9528
Now use postgres in tests
2018-01-07 22:21:01 +01:00
5d2dbbc828
Upgraded celery to 4.1, added endpoint logic for fingerprinting audio files
2017-12-27 17:30:09 +01:00
3c08722e92
Fixed #56 : invalidate tokens on password change, also added change password form
2017-12-26 15:56:04 +01:00
e04c0ef4c0
Upgraded packages
2017-12-16 15:19:32 +01:00
7c0b4b9a8f
New-style middlewares
2017-12-15 23:48:45 +01:00
6b1b2a1227
Fixed #49 : set CSRF_TRUSTED_ORIGINS from ALLOWED_HOSTS
2017-12-15 23:10:42 +01:00
e90e9dc7aa
Fixed #44 : now bind track file to import job
2017-12-14 23:06:21 +01:00
4c9469ac54
Merge branch 'feature/22-debian-installation' into 'develop'
...
Initial documentation on debian
See merge request funkwhale/funkwhale!15
2017-12-13 21:57:47 +00:00
926db0f366
Fixed #40 : added artist browsing view
2017-12-12 23:41:47 +01:00
c6d408924b
Added artist filtering on API
2017-12-12 23:27:17 +01:00
d63e7677e4
WIP: Debian installation instructions
2017-07-20 23:30:25 +02:00
da4c76ace8
Now return media files with absolute URL
2017-07-11 09:14:54 +02:00
6172c0beac
upgrade to latest dynamic_preferences and use redis as cache even locally
2017-07-09 13:27:15 +02:00
aa80bd15fa
Fixed #4 : can now import artists and releases with a clean interface :party:
2017-07-09 11:33:33 +02:00
3ccb70d0a8
Fixed #15 again, now check authorization also using query param
2017-06-29 02:27:35 +02:00
bab3981d25
Fixed #15 : Ensure we check for authorization for serving audio files, meaning we don't leak the absolute URL anymore
2017-06-28 23:31:43 +02:00
80cfd7180a
Fixed #20 : added admin serving under /api/, minor tweaks to production nginx and env file
2017-06-26 19:18:31 +02:00
072605dea6
CI builds / pipeline now run tests and build static assets
2017-06-25 18:31:00 +02:00
76f98b74dd
Initial commit that merge both the front end and the API in the same repository
2017-06-23 23:00:42 +02:00
Eliot Berriot