2eddeab66b
Escape the hyphen
2016-09-16 19:07:46 -04:00
0d2d8797b6
FIX: Backup validation wasn't escaping hyphens
2016-09-16 15:20:42 -04:00
75f3f7fcbd
FEATURE: clean API method for reading a single notification
2016-09-16 16:14:15 +10:00
512922d776
SECURITY: Add filename validation for backup uploads.
2016-09-16 11:58:14 +08:00
e6fcaadd45
FIX: redirects back to origin for SSO and omniauth login
2016-09-16 13:48:50 +10:00
25a82e7d22
PERF: only publish notification state if we changed it
...
also publish seen_notification_id so we can tell what is new and what is old
cleanup controller so it correctly checks user
fix bug around clearing notification when people click mark read
2016-09-16 12:02:19 +10:00
b0752b1f91
FIX: Don't bypass validations.
2016-09-15 10:15:17 +08:00
2d859ba0ed
FIX: user api should always be available to staff
2016-09-12 15:42:06 +10:00
19ddf95efa
FIX: add custom invite email templates
2016-09-08 00:54:48 +05:30
9ce61b4586
FEATURE: Webhooks.
2016-09-05 18:44:00 +08:00
aabb7a8592
FIX: DiscourseEvent should not be triggered from within the controller.
2016-09-05 15:58:04 +08:00
1d281e02c7
id is optional if already specified in header
2016-09-02 17:08:46 +10:00
be0fd5b4cc
FEATURE: allow user api key revocation for read only keys
2016-09-02 17:04:00 +10:00
e064e6f7a3
FEATURE: new 'categories_and_latest' endpoint
2016-08-29 22:47:44 +02:00
0303080586
we do not define auth providers for builtins
2016-08-29 11:12:24 +10:00
22b8c0d44e
FIX: fullscreen login set from client needs to be respected
2016-08-29 10:13:51 +10:00
2251104e32
FEATURE: avatar flair can be font awesome icons
2016-08-26 17:15:37 -04:00
ca79c4b276
stop eating up push_urls
2016-08-26 13:23:06 +10:00
2b15919aee
missing spot where old api was used
2016-08-26 10:58:34 +10:00
eaf87f0770
FIX: correctly handle api key so it uses current user provider
2016-08-26 10:39:13 +10:00
bfefda06f6
FIX: handle embed count when topic not found
2016-08-25 07:12:20 +05:30
50a8eb1810
Merge pull request #4405 from gdpelican/fix/intersection-pagination
...
FIX: Don't join on tags unnecessarily when matching all tags
2016-08-24 14:45:15 -04:00
c3a3aff120
FEATURE: Support for a whitelist for embeddable host paths
2016-08-23 14:56:12 -04:00
691f739f11
better error handling
...
push notifications imply read access, no need for a special permission
2016-08-23 16:48:00 +10:00
2690ef7050
prefix setting with 'desktop_' since it's only used for desktop
2016-08-22 23:43:42 +02:00
d06e2793aa
fix logic for when to include topics in category list
2016-08-22 23:11:08 +02:00
4d6028ea2d
UX: new 'category_page_style' site setting
2016-08-22 23:01:43 +02:00
386b8b8498
Don't join on tags unnecessarily when matching all tags
2016-08-19 10:37:32 -05:00
eb953c0904
FIX: /categories page on mobile
2016-08-19 01:47:00 +02:00
a644602612
FIX: infinite scrolling of topic list when filtered to one tag
2016-08-18 16:36:30 -04:00
6d1d7b7c8f
UX: new /categories layout
2016-08-17 23:23:16 +02:00
d079f69b7b
FEATURE: add flair to avatars using new settings in the groups admin UI
2016-08-17 15:13:15 -04:00
79c1d3459b
line was there twice
2016-08-17 17:03:48 +10:00
91b72936c4
Normalize away a requested push if for some reason we can not push there
2016-08-17 16:44:38 +10:00
b4dfb84f37
PERF: stop doing work for HEAD requests on topics
2016-08-17 10:04:23 +10:00
a25a8115e8
FEATURE: support HEAD request to /user-api-key/new
...
This allows us to cleanly sniff to find if it exists
2016-08-17 09:58:19 +10:00
416e7e0d1e
FEATURE: basic UI to view user api keys
2016-08-16 17:06:52 +10:00
b7cea24d76
FEATURE: more user API flow, support key creation
2016-08-16 17:06:52 +10:00
0b334cdf74
FIX: stop removing query params from destination url in sso
2016-08-16 17:06:52 +10:00
3b792054f2
Merge pull request #4387 from gdpelican/feature/tags-intersection
...
FEATURE: Tags intersection page
2016-08-15 16:24:29 -04:00
037e9bb7b8
Support any number of tag intersections
2016-08-15 15:30:17 -04:00
fc095acaaa
Feature: User API key support (server side implementation)
...
- Supports throttled read and write
- No support for push yet, but data is captured about intent
2016-08-15 17:59:36 +10:00
7e73b933c7
First pass
2016-08-12 15:28:46 -04:00
7e4503dd99
FEATURE: basic info route for all sites, even ones that require login
...
This information is public in meta tags already on home page, providing a
route allows consumers to check it way more cheaply
2016-08-12 17:10:35 +10:00
afaba56de3
FEATURE: missing API endpoint for topic tracking states
2016-08-12 17:10:35 +10:00
429f27ec96
SECURITY: Avoid mass assignment on user create
2016-08-05 11:57:13 -04:00
5f67cd7b45
FIX: tag input detects when a tag is not allowed and won't offer to create it anyway
2016-08-03 13:18:56 -04:00
bf683178a8
FIX: Remove tag plugin code from tag hashtag check.
2016-08-02 10:59:12 +08:00
681f566a66
FIX: staff members should be able to see raw email of deleted posts
2016-08-01 23:55:22 +02:00
1f12e41029
FIX: query for tag with no sub-categories
2016-07-28 16:59:00 -04:00
cpradio
Sam
Guo Xiang Tan
Arpit Jalan
Erick Guan
Régis Hanol
Neil Lalonde
Robin Ward
James Kiesel