MirrorMirror
/
lufi
mirror of https://framagit.org/fiat-tux/hat-softwares/lufi.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
678 Commits 10 Branches 43 Tags 12 MiB
Commit Graph

102 Commits

Author SHA1 Message Date
Booteille 14f1267c5a
Password hashing is now handled client side, by Lufi API 2024-10-31 16:23:58 +01:00
Luc Didry 6b505f3e6d
✅🩹 — Update tests and code after dependencies upgrade 2023-12-18 05:05:48 +01:00
Luc Didry 470b262a22 Merge branch 'auth_header' into 'development' 
Ajout de vérification sur auth_headers dans le controlleur Files

See merge request fiat-tux/hat-softwares/lufi!100
 2022-04-04 05:58:23 +00:00
mildis cf85571f05 Ajout de verification sur auth_headers dans le controlleur Files 
auth_headers n etait pas verifie sur l upload, le download et d autres methodes.
Cela pourrait permettre des les appeler meme sans etre authentifie.

L appel initiel a Files/files n est pas verifie pour auth_headers car la redirection vers login n est pas utile.
En effet, c est un composant externe qui configure le header d authentification, il ne faut pas renvoyer vers une page de login interne.
 2022-04-03 10:31:54 +02:00
Luc Didry 3cb87757c9
🔀 Merge branch 'mildis/lufi-auth_header' into development 2022-03-19 18:20:52 +01:00
Luc Didry 3962188200
🔒 Detect schemeless URL in mail (#254) 2021-11-03 10:03:24 +01:00
Luc Didry ff9b320347
🔒 Fix unauthorized manipulations of invitations (#254) 2021-11-03 09:15:39 +01:00
Luc Didry 5845f31836
✨ Add `disable_mail_sending` config parameter 
This disable the ability to send mail through the server. Users need to
use their own mail client.
 2021-06-16 11:56:44 +02:00
Luc Didry 007dd11327
🐛 — Fix latest git tag improperly fetched 2021-01-28 09:25:33 +01:00
mildis 9348367213 allow define custom logout uri 
Fixes #234
 2020-12-02 16:15:18 +01:00
mildis 537764508d Add support for header authentication 2020-12-02 09:02:39 +01:00
Luc Didry 379df04588
🐛 — Fix #229 — Invitation, error 500 when guest send file with special character 2020-11-25 16:03:25 +01:00
Luc Didry c9efb5f44f
🐛 Remove breakingchanges migration from sqliteToOtherDB (no need for now) 2020-10-06 10:41:28 +02:00
Luc Didry 5e2dd60cf2
🔥 — Remove code from abandonned feature 2020-07-19 18:07:18 +02:00
Luc Didry 0b2ad4a66e
🔧 — Mark Swift as experimental + improve copyFilesToSwift command 2020-06-02 21:28:03 +02:00
Luc Didry ed302d5a4b
🐛 — Fix bug with accents in file name with Swift 2020-06-02 21:28:02 +02:00
Luc Didry 8d6f1032f0
✨ — Add support for Swift object storage 
- Swift support
- script to upload the existing files to Swift
 2020-06-02 21:28:02 +02:00
Luc Didry 17600fd679
✨ — Fix #174 — Show latest tag and commit of the instance 
It’s showed in about page and config API endpoint
 2020-06-02 21:27:43 +02:00
Luc Didry 53342a31ba
✨ — Fix #183 — Add config API endpoint 2020-04-24 18:39:00 +02:00
Luc Didry 3e3e84d6f4
🐛 — Fix #159 — Problem with badly detected URLs in mail sending 2019-10-08 00:47:47 +02:00
Luc Didry 83432f1625
🐛 — Fix #163 — Fix invitations sorting order 2019-10-07 23:30:39 +02:00
Luc Didry be0b3c7b2c
🐛 — Fix #161 — Translate dates in invitations 
Many thanks to https://framagit.org/RainX who reported the bug and
provided the fix 🙂
 2019-09-29 16:51:23 +02:00
Luc Didry 89f3efd1b4
📝 Fix #156 — Add setting to customize the instance name 2019-08-09 21:03:04 +02:00
Luc Didry c8533d0417
🌐 Fix english sentences 2019-08-03 17:29:23 +02:00
Luc Didry 2c98a3b8b5
🌐 Add Date::Language::Occitan to not have to wait for a new Date::Language release 
Thanks to Quenti! 😘
Related Date::Language PR: https://github.com/gbarr/perl-TimeDate/pull/18
 2019-08-03 14:32:28 +02:00
Luc Didry 913ae97ad3
🌐 Fix invitations date localization 2019-08-03 14:12:21 +02:00
Luc Didry e9fabba2db
🐜 Fix bad name used for a setting in code 2019-08-01 19:50:39 +02:00
Luc Didry 2f8758c865
🐜 Prevent to store a invitation file twice in DB / have it twice in mail 2019-08-01 19:50:37 +02:00
Luc Didry 8b68d7e821
Fix #150 — ✉️ Implement invitations to other people when using LDAP auth 2019-08-01 19:50:36 +02:00
Luc Didry e2cc5061d4
🗄 Create DB abstraction layer for invitations 2019-08-01 19:50:35 +02:00
Luc Didry 883ea82c55
🗄️ Databases migrations for invitations 2019-08-01 19:50:34 +02:00
Luc Didry d9928e61c1
🗜️ New Zip UI + 🐜 fix bug in upload cancellation 2019-08-01 19:50:10 +02:00
Luc Didry b35c0d126b
Use Mojolicious::Plugin::FiatTux::GrantAccess 0.06 2019-08-01 19:50:09 +02:00
Luc Didry 0700ea7375
Fix #130 — Allow to individually download files from zip 2019-08-01 19:50:08 +02:00
Luc Didry 40dc29d573
Add downloads count to stats 2019-08-01 19:49:38 +02:00
Luc Didry 74aac65849
Merge branch 'mildis/lufi-master' 2019-08-01 19:23:58 +02:00
mildis 9bb2bda93e add keep_ip_during and policy_when_full default settings. 
miss of keep_ip_during rises error with 'cron cleanbdd' when not set.
 2019-07-31 09:32:08 +02:00
Luc Didry 357361e406
Use configured prefix in base_url for mail. 2019-07-30 19:51:14 +02:00
mildis 13ed3cf3ab Do no force path while sending email. 
Preserve custom prefix.

Close #134
 2019-03-28 09:58:43 +01:00
Luc Didry 66a724147d
Fix default CSP Header 2018-10-29 22:54:25 +01:00
Luc Didry cd0c4fea4e
Fix warning in change lang endpoint 2018-10-28 21:52:21 +01:00
Luc Didry 9fb59173fc
Fix #129 — Add constraints on mail sending to prevent spam sending 2018-10-28 14:41:29 +01:00
Luc Didry c64d26a292
Fix header injection and open redirects from referrer header 2018-10-26 17:34:50 +02:00
Luc Didry 72404aaf99
Fix header injection from lang code 2018-10-26 17:26:14 +02:00
Luc Didry da7cb658df
Add CSRF token challenge on logout 2018-10-26 16:03:21 +02:00
Luc Didry 548f838e60
Add CSRF token challenge on login 2018-10-26 14:53:06 +02:00
Luc Didry 86c319bac9
Put shortener helper in Mojolicious::Plugin::FiatTux::Helpers 2018-10-25 19:41:49 +02:00
Luc Didry b57ed7605f
Create DefaultConfig module — DRY 2018-10-25 18:42:07 +02:00
Luc Didry 44507ccfa5
Add MySQL support 2018-10-24 23:05:19 +02:00
Luc Didry e41b08601d
Add a test suite 2018-10-24 21:56:37 +02:00