Toby Zerner
6beb4fe898
Add external authenticator (social login) API
...
Allows registrations to be completed with a pre-confirmed email address
and no password.
2015-09-15 11:27:31 +09:30
Toby Zerner
cbcad27679
Improve installer validation
...
Very rough, but works for now. The basic premise being that we need to
collect all user data before we proceed with installation.
2015-09-14 18:13:24 +09:30
Toby Zerner
60323e0cf9
Bump version number
2015-09-14 16:32:31 +09:30
Toby Zerner
8cccaaaf6b
Improve API error handling
...
- Change 'path' key to 'source.pointer', as per spec
- Add 500 error detail if debug mode is on
2015-09-14 15:40:07 +09:30
Franz Liedke
e7d7df3b0c
Cleanup
2015-09-11 09:16:53 +02:00
Franz Liedke
4b4cea4d87
Implement interface to serialize exceptions to JSON-API format
...
Related to #118
2015-09-08 22:35:39 +02:00
Toby Zerner
8c4e095f23
Allow first post to be hidden/restored
...
Anti-spam extensions may automatically hide the first post in a
discussion, and thus we had to implement smarter permissions so
discussions with zero posts wouldn't be visible to users other than the
author/mods. This change allows those hidden posts to be restored again.
2015-09-07 16:03:45 +09:30
Toby Zerner
fc7fc41383
Prevent error when hiding/restoring a post with a deleted user
2015-09-04 13:51:13 +09:30
Toby Zerner
ece23de750
API: Add User::hasPermissionLike() and User::getPermissions()
2015-09-04 12:23:50 +09:30
Toby Zerner
8423de754c
Fix bad query in isVisibleTo
2015-09-04 12:23:17 +09:30
Toby Zerner
b597e6f8f6
Don't load a custom relation if the relation is already loaded
2015-09-04 12:22:49 +09:30
Toby Zerner
276334ec52
Improve some post/discussion permission logic
...
- Allow users to see their own posts, even if they have been hidden by
someone else
- Don't require hiding a post to be necessarily attributed to a user
- Hide discussions with zero posts, unless the user can edit posts, or
they are the discussion author
2015-09-04 12:22:27 +09:30
Daniel Klabbers
0413daab74
call to $this-> assertValidPassword from static context
2015-09-04 00:00:24 +02:00
Toby Zerner
6aafe54ee7
Fix potential error when discussion doesn't exist
...
Not sure how this could be the case, but can't hurt to add the checks.
addresses #343
2015-09-01 10:08:36 +09:30
Toby Zerner
c72bdc8238
Fix Laravel 5.1 compat
...
closes #307
2015-08-31 14:07:11 +09:30
Toby Zerner
bcc16a3329
Add target="_blank" and rel="nofollow" to all formatted links
...
closes #247
2015-08-31 13:36:54 +09:30
Toby Zerner
f5517fbd88
Validate password length
...
We can't do this using the ValidatesBeforeSave trait because the
password has been hashed by then. Instead, we must validate the
original password as it comes in.
2015-08-31 12:38:15 +09:30
Toby Zerner
6a0e3fcf2d
Validate post length to prevent truncation
...
closes #235
2015-08-31 12:36:19 +09:30
Franz Liedke
1d1cc9e443
Fix asset URL generation
...
This is important when Flarum is deployed in a subfolder.
Closes #291 .
2015-08-29 22:38:31 +02:00
Lorenz Bausch
a4fe6f3ce3
limit max title length to 80 characters
2015-08-29 11:26:18 +02:00
Lorenz Bausch
ae06b45bc1
remove executable flag from file
2015-08-29 11:23:05 +02:00
Toby Zerner
d5074c5286
Use gd as the image driver
...
Presumably gd is more common than imagick, and we already check for it
during installation.
2015-08-28 05:41:25 +09:30
Toby Zerner
b0db7bf751
Polish admin dashboard
2015-08-27 10:50:15 +09:30
Franz Liedke
559110a83f
Coding standards
2015-08-27 01:40:18 +02:00
Franz Liedke
9ec54ad892
Change base URL etc. in config.php file
2015-08-27 00:47:54 +02:00
Toby Zerner
0b8aa5c124
Add header comment; PSR-2 fixes; remove seeders
2015-08-26 16:56:32 +09:30
Toby Zerner
8ec342f6cb
Autoload the cached PHP renderer
2015-08-26 09:46:20 +09:30
Toby Zerner
b67ae4c8a3
Use PHP formatter rendering engine
...
Removes dependency on XSLT extension
2015-08-26 09:34:49 +09:30
Toby Zerner
edccd10693
Only delete avatar if it exists
2015-08-17 16:06:51 +09:30
Toby Zerner
a32250884c
Ensure posts are sorted correctly
2015-08-17 15:52:39 +09:30
Toby Zerner
212880640d
Support table custom table prefix
...
Laravel automatically adds a table prefix to any table names, so we
need to wrap our aliased table in DB::raw.
2015-08-14 12:51:30 +09:30
Toby Zerner
34d4a7ed89
Fix Laravel 5.1 compat
2015-08-14 12:50:32 +09:30
Toby Zerner
014bacb7ab
Add ability to uninstall an extension
2015-08-14 12:48:29 +09:30
Toby Zerner
2edcbacccc
Improve install command, add custom migrations system
...
Implemented our own migration repository + migrator (based on Laravel's
stuff) so that we can keep track of which migrations have been run for
core and per-extension. That way we can simple call the migrator to
upgrade core/extensions, and to uninstall extensions.
2015-08-14 12:47:59 +09:30
Toby Zerner
5bcf6ae630
Add Escaper plugin so that formatting can be escaped
2015-08-13 13:04:56 +09:30
Toby Zerner
58223b8a23
Don't allow empty post content
...
Parsing the post content makes it non-empty (`<t></t>`), so we don't
parse it if it is empty. Also delete a created discussion if the first
post was invalid.
closes flarum/core#224
2015-08-13 13:03:49 +09:30
Toby Zerner
9a0190e13a
Allow post author to see their own deleted post
...
closes flarum/core#225
2015-08-13 13:02:13 +09:30
Toby Zerner
6dd6942e17
Fix avatar uploading permissions
...
closes flarum/core#230
2015-08-13 12:59:40 +09:30
Toby Zerner
8aafce5fd8
Fix Laravel 5.1 compat
2015-08-13 10:41:17 +09:30
Toby Zerner
47595ff9c4
Decouple from Laravel, implement translator
2015-08-12 18:33:39 +09:30
Toby Zerner
9f0358bb39
Update to Laravel 5.1
...
Eloquent `lists()` now returns a collection
2015-08-12 13:24:11 +09:30
Toby Zerner
3aebd458b0
Make sure access/email/password tokens are valid
2015-08-06 15:04:38 +09:30
Toby Zerner
c361c97394
Enforce discussion renaming/deleting/post editing timed permissions
2015-08-05 19:21:33 +09:30
Toby Zerner
4c06e78b57
Allow/disallow signup per config
2015-08-05 18:19:26 +09:30
Toby Zerner
023eff95e3
Let users see themselves even if they can't see the forum
2015-08-05 18:12:09 +09:30
Toby Zerner
ff8dc5ef25
Enforce forum.view permission
2015-08-05 18:08:31 +09:30
Toby Zerner
42e382045a
API: Add event for determining user groups for permissions
2015-08-05 16:06:55 +09:30
Toby Zerner
f42c3cd1ed
Allow admins to delete users
2015-08-05 12:08:28 +09:30
Toby Zerner
1679f1e27b
Implement edit user modal
...
EditUserHandler is a bit rough
2015-08-05 11:49:37 +09:30
Toby Zerner
f49d0e5341
Allow locale to be selected in footer
2015-08-05 09:50:57 +09:30
