yflory
c10fc37645
Merge branch 'totp-ui' into 5.4-rc
2023-07-11 10:30:36 +02:00
yflory
723ecc8bd6
Integration API prototype
2023-06-22 14:39:04 +02:00
ansuz
493bf1346c
Merge tag '5.3.0' into 5.3-auth
2023-05-06 15:26:21 +05:30
ansuz
e895990426
generate a secret at launch time
...
used for issuing and validating JWTs
2023-05-03 16:19:01 +05:30
ansuz
3c6a35b713
new types of storage for challenges, MFA settings, and sessions
2023-05-02 23:42:09 +05:30
yflory
6b743a787c
Fix mailbox message deletion
2023-03-28 12:19:16 +02:00
ansuz
b003d4d825
Merge branch 'staging' into http-workers
2023-03-02 11:59:58 +05:30
yflory
a0714b9cc8
Prevent type error with the new admin script
2023-01-12 15:54:16 +01:00
ansuz
7e4518b43d
More server cleanup:
...
* make the websocket port configurable
* reorder some tasks at launch time to use more consistent logging
* relaunch http workers if they crash
* refuse to launch if httpUnsafeOrigin cannot be parsed as a URL
* fix a path issue reintroduced by a git merge
2022-12-20 16:29:38 +05:30
ansuz
d58096636a
Merge tag '5.2.0' into test-merge
2022-12-20 14:49:47 +05:30
ansuz
6f19101f42
big server changes:
...
* use the nodejs cluster module to handle http traffic with multiple threads
* listen for websocket traffic on a new port because all such logic needs to share state
* proxy websocket URLs from the cluster to the new port so everything is backwards compatible
* implement logic for http workers to make requests and stay in sync with the main process
* unrelated: define the expected nodejs version in a constant
2022-12-20 14:20:59 +05:30
ansuz
ed981f2b63
generalize recommended version code for easier updates
2022-12-07 13:09:24 +05:30
ansuz
c762353cad
interpret maxWorkers config in lib/env instead of in worker handler
2022-12-07 13:04:07 +05:30
ansuz
863ab4f380
Merge branch 'soon' into absolute-paths
2022-10-06 15:34:05 +05:30
ansuz
e78e57c039
unify accounts_api and quota_api config options
2022-08-30 17:23:10 +05:30
yflory
6ae07bb480
Allow accounts server to trigger quota updates
2022-07-05 11:48:40 +02:00
ansuz
958b3e4376
remove references to removed pages and notes that have been addressed
2022-05-13 15:50:38 +05:30
ansuz
0be64ac958
simplify accounts configuration on dev instances
2022-05-11 13:12:12 +05:30
ansuz
a2731c44b0
assorted home page fixes/improvements
...
* link to home page from other static pages
* home notice
* moved to the top of the home page
* configured via server API instead of application_config.js
* WIP admin panel UI
* more debugging info for unsupported decrees
* lint compliance probably
2022-05-06 13:55:00 +05:30
ansuz
b014c4dbf1
fileHost is undefined for most use cases
2022-04-04 16:32:42 +05:30
ansuz
b4323b2c40
fix incorrect frame-ancestors and update test
2022-04-01 13:15:06 +05:30
ansuz
e6c51e3dff
remove hardcoded translations and invert remote embedding logic
2022-03-24 12:43:16 +05:30
ansuz
386827d825
handle 500 errors
2022-03-22 16:41:42 +05:30
ansuz
af10547dca
warn if node is not launched with 'NODE_ENV=production'
2022-03-22 15:40:43 +05:30
ansuz
f34a60665f
check that the server is running at least NodeJS v16.14.2
2022-03-22 14:27:07 +05:30
ansuz
d405a5f086
disable remote embedding by default
2022-03-15 15:29:18 +05:30
ansuz
1051fc4da7
fix undefined safe origin
2022-03-14 17:43:51 +05:30
ansuz
a54a0af604
more tests on checkup page
2022-03-14 17:09:22 +05:30
ansuz
e38e08fb6e
Merge branch 'soon' into block-embeds
2022-03-14 12:52:55 +05:30
ansuz
45d2eb0267
Merge branch 'soon' of github.com:xwiki-labs/cryptpad into support-categories
...
and include some tweaks for the checkup page
* sort errors above warnings
* improve messages for new tests
2022-03-10 11:33:41 +05:30
ansuz
b65730b853
allow admins to enable configurable disk I/O profiling
2022-03-07 18:42:00 +05:30
ansuz
1202b7a691
WIP configure instance name, jurisdiction, and description on admin panel
2022-02-24 15:28:24 +05:30
ansuz
0917b45035
implement proper support for forbidding remote media-tag inclusion
...
...and test that the basic headers are correctly set on the checkup page
2022-02-18 16:09:02 +05:30
ansuz
b40c81d088
support modifying CSP headers at runtime
2022-02-18 13:54:33 +05:30
ansuz
a93ab05310
handle absolute paths in a few obviously problematic cases
2021-11-22 18:16:35 +05:30
ansuz
b8d6af7891
adjust CSP headers for printing from OnlyOffice
...
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
2021-10-19 14:22:10 +05:30
ansuz
c1f9d11333
delay working on some flagged issues till next release
2021-08-16 18:32:34 +05:30
ansuz
854a635c5f
remove hardcoded translations and defer non-blocking issues till the next release
2021-07-27 03:40:03 +05:30
ansuz
f13b82bdf6
disable integrated eviction by default
...
we'll implement an admin panel checkbox to enable it later
2021-07-06 16:14:40 +05:30
ansuz
f7f2146fa5
miscellaneous cleanup and notes
2021-06-30 19:09:53 +05:30
ansuz
f5e91ef3ef
provide installMethod detail in server telemetry
2021-06-22 16:32:33 +05:30
ansuz
bb7c40237b
detect new versions in server telemetry responses
2021-06-10 20:56:12 +05:30
ansuz
2fd812ff36
WIP admin translations and update available button
2021-06-09 18:45:02 +05:30
ansuz
98c8d7086f
include instance version in Env
2021-06-09 18:43:31 +05:30
ansuz
41db88a360
WIP admin 'network' panel
2021-06-08 20:24:30 +05:30
ansuz
eb32651c67
leave some notes about a minor race condition
2021-05-05 12:07:45 +05:30
ansuz
50045c08d0
WIP restrict registration
2021-04-26 18:31:33 +05:30
yflory
8f679c141c
Broadcast update
2021-03-30 17:41:12 +02:00
yflory
7971a6d267
Major broadcast refactoring
2021-03-16 17:00:23 +01:00
yflory
d15c0461cc
Add /api/broadcast and improve message deletion
2021-03-12 12:46:11 +01:00