99f4d5082b
FIX: Improve token rotation and increase logging
...
- avoid access denied on bad cookie, instead just nuke it
- avoid marking a token unseen for first minute post rotation
- log path in user auth token logs
2017-03-07 13:27:43 -05:00
6aab8cb331
FEATURE: new category setting for whether to show latest topics or top topics by default
2017-03-03 11:30:44 -05:00
66a0a89591
PERF: Add index to speed up `DirectoryItem.refresh_period!` query.
2017-03-03 16:25:06 +08:00
262016604d
FEATURE: each category can control how many topics to show on categories page
2017-03-01 15:12:57 -05:00
3532957ce1
index should have always been unique
2017-02-22 12:37:11 -05:00
a702330ccd
FEATURE: make show_subcategory_list a per-category setting
2017-02-22 11:42:36 -05:00
f51e3b2131
FIX: should not be able to rename a system badge
2017-02-20 14:35:05 +01:00
2c59ffeb2c
FIX: token rotation not accounting for overlapping tokens correctly
...
also... freeze_time has no block form, correct all usages and specs
2017-02-15 10:58:18 -05:00
0ab96a7691
FEATURE: add hidden setting for verbose auth token logging
...
This is only needed to debug auth token issues, will result in lots
of logging
2017-02-13 14:01:09 -05:00
4d57c95e9b
delay the removal of auth token column from user table
2017-02-07 09:39:41 -05:00
ff49f72ad9
FEATURE: per client user tokens
...
Revamped system for managing authentication tokens.
- Every user has 1 token per client (web browser)
- Tokens are rotated every 10 minutes
New system migrates the old tokens to "legacy" tokens,
so users still remain logged on.
Also introduces weekly job to expire old auth tokens.
2017-02-07 09:22:16 -05:00
dfc8178308
Revert "FIX: Wait 30 days before dropping the column."
...
This reverts commit ffc97f2298
2017-01-04 11:56:43 +08:00
49dda1e025
Merge pull request #4628 from caugner/move-welcome-topic-to-i18n
...
FIX: Move Welcome topic to I18n
2016-12-27 10:31:03 +01:00
e129e656d1
FIX: Move Welcome topic to I18n
2016-12-26 16:03:07 +01:00
59c04d0f37
FIX: Add assets_topic_title to I18n
2016-12-26 15:38:48 +01:00
2b808ad9da
Merge pull request #4609 from joebuhlig/category-topics-wiki
...
FEATURE: Category setting to make all topics wikis
2016-12-20 09:15:51 +11:00
923cf73c6e
Topic Featured Links: move data from custom fields to topics and categories tables. Invert behaviour of topic_featured_link_allowed checkbox. Fix a bug with invalid topic records due to changing that category checkbox.
2016-12-19 14:54:07 -05:00
87251fded7
FEATURE: Category setting to make all topics wikis
...
FEATURE: Category setting to make all topics wikis
2016-12-19 06:42:18 -06:00
ffc97f2298
FIX: Wait 30 days before dropping the column.
...
* Regressions from the past is resulting in `logo_url` with
no uploads record.
2016-12-15 22:45:04 +08:00
c47b60a1e4
FIX: Check for column that we want to drop instead.
...
* Otherwise, the migration is called multiple times.
2016-12-15 20:53:10 +08:00
43ee9f884e
FEATURE: Add `Group#full_name`.
2016-12-13 16:16:26 +08:00
53086fdb98
FIX: Drop columns only after app has been deployed with updated code.
2016-12-13 09:10:27 +08:00
303282670f
FIX: Skip callbacks when migrating.
2016-12-13 08:57:07 +08:00
98fd77fb6c
FIX: Don't drop the columns immediately.
2016-12-13 08:07:12 +08:00
da7009a968
FEATURE: Add request membership button for allowed groups.
2016-12-12 22:48:08 +08:00
9a800107cb
FIX: Associate category logo and background to uploads record.
2016-12-12 17:37:28 +08:00
05f55dbc10
FEATURE: Group logs.
2016-12-12 17:29:54 +08:00
3e19b738d7
Add 'Group#public'.
2016-12-12 17:00:30 +08:00
adb7fcb6b3
FEATURE: Add bio to group page.
2016-12-05 16:58:04 +08:00
1db9d17756
Make removal of topic columns more resilient to deploys
2016-12-05 12:11:46 +11:00
c04d4171ff
FIX: whisper no longer experimental
...
- Regular users are not notified of whispers
- Regular users no longer have "stuck" topics in unread
- Additional tracking for staff highest post number
- Remove a bunch of unused columns in topics table
2016-12-02 17:03:31 +11:00
1867442fbc
PERF: Add score indexes for top topics.
2016-11-24 10:11:52 +08:00
f03d9cad06
PERF: `NOT IN` query is really inefficient for large tables.
2016-11-02 13:09:18 +08:00
9ef1688a76
FEATURE: per-category default topic list sort order
2016-11-01 12:18:41 -04:00
382803cb05
FEATURE: include post image in OpenGraph image tag
2016-10-31 15:11:33 +05:30
6d68aac6eb
FIX: add_directory_items_indexes causes migration to timeout on large databases, so create indexes concurrently
2016-10-25 15:30:21 -04:00
52b338db62
FIX: category logo & background URLs should not use the CDN
2016-10-25 10:43:57 +02:00
9a94d1b212
FIX: everyone is not a visible group
2016-10-24 13:03:22 +11:00
18d032ad91
PERF: Remove ordering by username.
...
* Ordering by username results in a very expensive query
for very little upside UX wise.
2016-10-15 01:13:58 +08:00
f4f5524190
FEATURE: user API now contains scopes so permission is granular
...
previously we supported blanket read and write for user API, this
change amends it so we can define more limited scopes. A scope only
covers a few routes. You can not grant access to part of the site and
leave a large amount of the information hidden to API consumer.
2016-10-14 16:05:42 +11:00
eacfdf92cd
FIX: increase external_avatar_url to 1000 limit
2016-10-11 10:12:11 +11:00
6f1c31d777
Add notification level user preference when replying to a topic
2016-09-30 14:58:07 -04:00
b0ee7930e8
Server side support for inviting as a moderator via the wizard
2016-09-22 09:52:19 -04:00
c94e6f1b96
Add locale step
2016-09-22 09:52:19 -04:00
3f6e3b9aff
Wizard - Color Scheme Step
2016-09-22 09:52:19 -04:00
8dc4329094
FEATURE: optionally get extra profile info from facebook
...
This feature requires the application be approved by facebook, so it is
default off
2016-09-19 16:14:11 +10:00
5b3cd3fac9
FEATURE: Import facebook avatars when logging in via facebook
...
FIX: warning about popup dimensions when using facebook login
Rules are:
- On account creation we always import
- If you already have an avatar uploaded, nothing is changed
- If you have no avatar uploaded, we upload from facebook on login
- If you have no avatar uploaded, we select facebook unless gravatar already selected
This also fixes SSO issues where on account creation accounts had missing avatar uploads
2016-09-19 15:10:23 +10:00
c463cf63d4
FEATURE: Webhook for user creation and approval
2016-09-19 10:12:55 +08:00
9ce61b4586
FEATURE: Webhooks.
2016-09-05 18:44:00 +08:00
2251104e32
FEATURE: avatar flair can be font awesome icons
2016-08-26 17:15:37 -04:00
4f68fd970d
FIX: Forgot to include a file in the previous commit :)
2016-08-23 15:09:09 -04:00
d079f69b7b
FEATURE: add flair to avatars using new settings in the groups admin UI
2016-08-17 15:13:15 -04:00
416e7e0d1e
FEATURE: basic UI to view user api keys
2016-08-16 17:06:52 +10:00
fc095acaaa
Feature: User API key support (server side implementation)
...
- Supports throttled read and write
- No support for push yet, but data is captured about intent
2016-08-15 17:59:36 +10:00
e55e2aff94
FIX: FirstReplyByEmail badge wasn't granted
...
DEPRECATED: PostProcess badge trigger
2016-08-10 19:24:01 +02:00
ab68e0c9db
FEATURE: allow "developer" account flagging via developers table
...
This mechanism for flagging developer accounts will eventually replace
DISCOURSE_DEVELOPER_EMAILS
2016-07-28 10:14:06 +10:00
df535c6346
FEATURE: refresh session cookie at most once an hour
...
This feature ensures session cookie lifespan is extended
when user is online.
Also decreases session timeout from 90 to 60 days.
Ensures all users (including logged on ones) get expiring sessions.
2016-07-25 12:07:31 +10:00
a9207dafa7
FEATURE: configure session time via site setting for all the users ( #4343 )
2016-07-23 02:57:30 +05:30
a5d0e0f277
PERF: index for deleted posts in a topic to speed up has_deleted detection
2016-07-19 10:29:22 +10:00
46b34e3c62
FEATURE: remove user option for edit history public
...
Users can no longer opt-in for "public" edit history
if site owner disables it.
This feature adds cost and complexity to post rendering since
user options need to be premeptively loaded for every user in the
stream. It is also confusing to explain to communities with private edit
history.
2016-07-16 21:30:00 +10:00
e5293f2c9a
FIX: Force HTML to recompile
2016-07-11 12:57:05 -04:00
20359788dc
Rename `SiteSetting#use_https` to `force_https`.
2016-06-29 15:02:43 +08:00
852860de66
FEATURE: simpler and friendlier unsubscribe workflow
...
- All unsubscribes go to the exact same page
- You may unsubscribe from watching a category on that page
- You no longer need to be logged in to unsubscribe from a topic
- Simplified footer on emails
2016-06-17 11:28:49 +10:00
17b1179103
oops, missed a file
2016-06-15 13:56:56 -04:00
e97e0bb311
FEATURE: new FirstReplyByEmail bronze badge
2016-06-13 15:37:14 +02:00
d7622f0665
remove unused broken tag_count column
2016-06-09 16:50:09 -04:00
a6090339a7
FEATURE: tag group options: limit usage of one tag per group, tags in a group can't be used unless a prerequisite tag is used
2016-06-09 16:01:19 -04:00
a49ace0ffb
FEATURE: ability to restrict tags to categories using groups
2016-06-07 15:36:20 -04:00
f3f6c2f98f
FEATURE: tag groups
2016-06-06 14:18:48 -04:00
9704603fab
FEATURE: sendgrid webhooks
2016-06-01 21:48:06 +02:00
6796b15857
FEATURE: restrict tags to be used in a category
2016-05-30 16:56:33 -04:00
706624c9fc
workaround incorrect uncategorized category id set in site settings
2016-05-30 13:59:58 +10:00
c9dcffe434
FEATURE: store history for scheduled job execution
2016-05-30 11:38:08 +10:00
8c3a0b44ba
FIX: restore "every email" default for old accounts in mailing list mode
...
- Change default for mailing list mode frequency to daily
- Remove bootbox warning for mailing list mode (cause default is daily)
2016-05-27 12:07:10 +10:00
f13470b96b
Use db schema for tags instead of plugin store and custom fields
2016-05-26 14:29:48 -04:00
feffe23cc5
FEATURE: More granular mailing list mode ( #4068 )
...
* Rearrange frontend to account for mailing list mode
* Allow update of user preference for mailing list frequency
* Add mailing list frequency estimate
* Simplify frequency estimate; disable activity summary for mailing list mode
* Remove combined updates
* Add specs for enqueue mailing list mode job
* Write mailing list method for mailer
* Fix linting error
* Account for stale topics
* Add translations for default mailing list setting
* One query for mailing list topics
* Fix failing spec
* WIP
* Flesh out html template
* First pass at text-based mailing list summary
* Add user avatar
* Properly format posts for mailing list
* Move make_all_links_absolute into Email::Styles
* Apply first_seen_at to user
* Send mailing list email summary hourly based on first_seen_at
* Branch and test cleanup
* Use existing mailing list mode estimate
* Fix failing specs
2016-05-21 15:17:54 +02:00
0cf5a1705a
FIX: custom field index must only index short values
2016-05-20 12:35:09 +10:00
aebb15337b
remove invalid topic_users rows
2016-05-14 18:34:03 +02:00
8e611ec7a1
FEATURE: handle bounced emails
2016-05-02 23:15:32 +02:00
e72f63e311
add index on post_id for the incoming_emails table
2016-04-25 17:50:50 +02:00
4960b62110
FEATURE: new 'block_auto_generated_emails' site setting
2016-04-20 21:29:27 +02:00
fad017d842
FEATURE: add support for bounce emails
...
We now optionally add a Variable Email Return Path to every email we send.
This allows us to cleanly handle email bounces, which in turn will improve
deliverability.
2016-04-18 17:14:01 +10:00
0396b14b70
FEATURE: New "First Onebox" badge
2016-04-12 15:31:14 -04:00
f95f488a0b
only drop 'user_firsts' table if it exists
2016-04-12 19:56:25 +02:00
fe6f587d4d
continues with other migrations if we can't delete the 'user_firsts' table
2016-04-12 17:04:04 +02:00
cc25716e47
FIX: Allow message format translations to be overridden
2016-04-08 14:49:50 -04:00
cf8b3fbd56
FEATURE: add user custom fields to user card
...
The user's custom fields are now displayed on the user card. This has to be enabled for each custom field in the custom field settings. See https://meta.discourse.org/t/custom-user-fields-on-usercard/22662/
2016-04-08 14:35:41 +02:00
078b3bc87e
Log once off jobs and enqueue on `db:migrate`
2016-04-07 14:32:31 -04:00
855f72deb6
On second thought, enqueuing a job in a migration might be bad.
2016-04-07 13:58:31 -04:00
526573074c
Add one off job to grant the emoji badge retroactively
2016-04-07 13:49:44 -04:00
5059ee04b9
Remove `UserFirst` table and grant Emoji badge directly
2016-04-07 12:31:41 -04:00
5866f0df18
Remove UserFirst for mention since it can be retrieved elsewhere
2016-04-06 14:01:37 -04:00
50fbda1ab7
FIX: Not sure why the default group didn't work
2016-04-05 15:37:41 -04:00
c30d327b77
FEATURE: Two new badges - First Emoji and First Mention
2016-04-05 15:17:41 -04:00
b40efb98b8
FIX: remove deleted wiki color from existing color schemes
2016-03-29 12:12:33 +02:00
5f54dd908a
Recategorize link badges
2016-03-25 12:21:24 -04:00
56c13856dd
Move Editor and First Flag to "Getting Started" category
2016-03-25 12:19:12 -04:00
717b54d64b
Adjust badges to match descriptions cc @coding-horror
2016-03-22 10:51:42 -04:00
1fba835d4f
FIX: Use a logging table for daily likes given. Use it for badges.
2016-03-18 11:18:54 -04:00
213950e4cf
FEATURE: add option to include topics from trust level 0 users in digest emails
2016-03-17 17:35:23 -04:00
Sam
Neil Lalonde
Guo Xiang Tan
Régis Hanol
Claas Augner
Joe Buhlig
Arpit Jalan
cpradio
Robin Ward
Erick Guan
James Kiesel
Thorben Egberts