Commit Graph

555 Commits

Author SHA1 Message Date
yflory
c10fc37645 Merge branch 'totp-ui' into 5.4-rc 2023-07-11 10:30:36 +02:00
Wolfgang Ginolas
6f76972c47 Upgrade drawio to 21.5.2
https://github.com/jgraph/drawio/issues/3691
2023-06-29 10:23:49 +02:00
yflory
da5626cbae TOTP: Use session token instead of JWT to prepare for SSO 2023-06-23 18:35:18 +02:00
Wolfgang Ginolas
f7d56eea16 Rename drawio to digram
https://github.com/cryptpad/cryptpad/issues/1062
2023-06-22 14:59:13 +02:00
Wolfgang Ginolas
b5c0cada55 Update draw.io script hashes 2023-06-22 14:39:06 +02:00
Wolfgang Ginolas
17e6d24de4 Use hashes instead of unsafe-eval to secure drawio 2023-06-22 14:39:06 +02:00
Wolfgang Ginolas
67362fc2b9 Remove unsave-eval from draw.ios CSP 2023-06-22 14:39:06 +02:00
yflory
2be39c3749 API: reload content on server restart 2023-06-22 14:39:04 +02:00
yflory
723ecc8bd6 Integration API prototype 2023-06-22 14:39:04 +02:00
yflory
9aac9d1c2f TOTP: Use HTTP challenges to write and remove blocks 2023-06-09 15:06:17 +02:00
yflory
b3a620edc0 lint compliance 2023-06-06 16:09:17 +02:00
yflory
36a1c604d8 Auth: Disable TOTP/MFA from the admin panel 2023-05-16 15:11:43 +02:00
Mathilde Grünig
f5fb24031e replace xwiki-labs by cryptpad 2023-05-16 14:54:39 +02:00
yflory
e893613b43 TOTP: recovery by secret key 2023-05-15 17:33:58 +02:00
yflory
d789627920 TOTP setup and revocation in settings 2023-05-12 18:21:19 +02:00
ansuz
bd19288869 notes on pending improvements to add before merge/release 2023-05-11 16:42:47 +05:30
ansuz
f82c877cbe serialize possible errors 2023-05-07 12:17:28 +05:30
ansuz
921c46956d fix a type error by ensuring Env.Log is defined 2023-05-06 20:42:11 +05:30
ansuz
493bf1346c Merge tag '5.3.0' into 5.3-auth 2023-05-06 15:26:21 +05:30
ansuz
31dc7b523a XXXs and TODOs for handling blocks now that 2FA is in play 2023-05-05 18:20:51 +05:30
ansuz
06232ab6d7 overwriting basic storage should fail with an error 2023-05-05 18:18:46 +05:30
ansuz
41e870d3db serverside protocol work for authentication enforcement and configuration 2023-05-05 18:17:58 +05:30
ansuz
b753a067ac avoid logging for common 404s 2023-05-03 16:32:09 +05:30
ansuz
e895990426 generate a secret at launch time
used for issuing and validating JWTs
2023-05-03 16:19:01 +05:30
ansuz
3c6a35b713 new types of storage for challenges, MFA settings, and sessions 2023-05-02 23:42:09 +05:30
yflory
7b03df37f7 Merge remote-tracking branch 'origin/deprecatedcache' into staging 2023-04-24 14:52:56 +02:00
yflory
6b743a787c Fix mailbox message deletion 2023-03-28 12:19:16 +02:00
ansuz
cbaff2f3c0 Merge branch 'soon' into staging 2023-03-07 15:34:00 +05:30
ansuz
b5a01231b7 Merge branch '5.3-storage' into merge-storage 2023-03-07 14:49:28 +05:30
ansuz
d231451b49 Merge branch 'http-workers' into merge-storage 2023-03-07 14:49:22 +05:30
ansuz
d8ef2c8371 print login block size when it exceeds the maximum 2023-03-07 13:30:30 +05:30
ansuz
64d24f8b20 clean up http-worker code and add comments 2023-03-07 11:17:46 +05:30
ansuz
8fce5bcaf6 use configured http ports 2023-03-02 12:45:38 +05:30
ansuz
b003d4d825 Merge branch 'staging' into http-workers 2023-03-02 11:59:58 +05:30
ansuz
6bb336034b Merge branch 'staging' into 5.3-storage 2023-03-02 10:53:05 +05:30
ansuz
47afa26fc5 Merge branch 'soon' into 5.3-storage 2023-02-09 16:16:26 +05:30
yflory
f4b477ee37 Clean XXX 2023-02-01 18:02:03 +01:00
ansuz
7b65d3e8c8 judge blob activity based on mtime instead of atime
and output a basic overview when eviction completes
2023-01-23 08:29:36 +05:30
ansuz
c7dedf4054 more logging for potentially long-running eviction processes 2023-01-19 10:14:22 +05:30
ansuz
0bf26588e5 Merge branch 'soon' into 5.3-storage 2023-01-19 09:57:16 +05:30
ansuz
15272a6604 relocate blobs that have been archived to the wrong location 2023-01-19 08:57:39 +05:30
ansuz
911c15df25 fix incorrectly constructed archival path for blobs 2023-01-19 08:56:32 +05:30
yflory
a0714b9cc8 Prevent type error with the new admin script 2023-01-12 15:54:16 +01:00
ansuz
b0d10c3777 oops - fix inverted not 2023-01-11 15:08:16 +05:30
ansuz
3f18a38714 report http-worker RPC errors to the main process for logging 2023-01-11 15:02:02 +05:30
ansuz
4968bbf961 WIP limit on block size 2023-01-11 14:50:16 +05:30
ansuz
96de4dffe9 fix an inverted not in a non-functional telemetry attribute 2023-01-11 13:03:10 +05:30
yflory
1971553e1f Flush cache when adding new admin 2022-12-20 17:25:54 +01:00
yflory
70e602d9c9 Prototype install app 2022-12-20 16:57:51 +01:00
ansuz
953c817c5b clean up more prototype code:
* remove commented code
* serialize errors sent from http workers to the main process
* drop support for custom http headers set via config.js#httpHeaders
* websockets: only listen on localhost, respect websocketPort config in workers' proxy config
2022-12-20 18:03:52 +05:30