Commit graph

45 commits

Author SHA1 Message Date
Laura Hausmann
0c18f50a1a
[backend/federation] Reject requests signed by suspended remote users in AuthorizedFetchMiddleware and InboxValidationMiddleware (ISH-639) 2025-01-07 13:01:33 +01:00
Laura Hausmann
c21147c86f
[backend/federation] Bypass authorized fetch for relay actor (ISH-529) 2025-01-07 07:38:57 +01:00
Kopper
1e1364e2bb
[backend/masto-client] Add feature flag for inline media 2024-12-13 22:19:31 +01:00
Laura Hausmann
7b61865287
[backend/libmfm] Fix HTML markup being dropped for federation & public preview requests 2024-12-03 23:33:47 +01:00
Laura Hausmann
705e061f74
[backend/asp] Refactor middleware stack
This commit splits the request pipeline conditionally instead of invoking every middleware in the stack.

It also simplifies middleware instantiation by using runtime discovery, allowing for Plugins to add Middleware.
2024-11-18 19:02:44 +01:00
Laura Hausmann
f19a414b27
[backend/federation] Refactor UserResolver (ISH-548) 2024-10-24 01:48:09 +02:00
Laura Hausmann
1c2079e1ee
[backend] Rework GracefulException throws without additional detail 2024-09-24 00:45:18 +02:00
Laura Hausmann
8267bc06de
[backend] Code cleanup 2024-08-14 03:53:15 +02:00
Laura Hausmann
4f98fa8461
[backend/federation] Fix possibly unbounded UserResolver recursion 2024-08-14 03:44:14 +02:00
Laura Hausmann
df3a7bdfe5
[backend] Apply formatting rules 2024-06-29 01:06:19 +02:00
Laura Hausmann
24bde5ad29
[backend] Use User.IsLocalUser / .IsRemoteUser instead of null-checks where applicable (ISH-370) 2024-06-17 17:25:29 +02:00
Laura Hausmann
3ca926cfbd
[backend/federation] Don't require date header in http signatures if (created) is present and signed 2024-04-29 20:44:30 +02:00
Laura Hausmann
aaa3f91e1f
[backend/api-shared] Add Cache-Control: private, no-store for all authenticated requests 2024-04-27 21:54:11 +02:00
Laura Hausmann
7dd0262333
[backend/federation] Add Cache-Control: no-store to authorized fetch endpoints 2024-04-27 20:32:31 +02:00
Laura Hausmann
4878d82463
[backend/federation] Fix sporadic key fetch failures (ISH-194) 2024-03-16 17:25:47 +01:00
Laura Hausmann
921f6a19b3
[backend/federation] Separate authorized fetch & inbox validation (ISH-127)
This fixes user creates & sporadic errors resulting from creating users during validation of their deletion
2024-03-13 00:21:51 +01:00
Laura Hausmann
c083305123
[backend] Code cleanup 2024-02-24 21:03:29 +01:00
Laura Hausmann
f22c4a7c32
[backend/core] Improve error handling in code paths that try to resolve a deleted remote user 2024-02-21 19:04:46 +01:00
Laura Hausmann
399595ad1c
[backend/federation] Make LD signatures configurable 2024-02-21 18:56:49 +01:00
Laura Hausmann
1c8df9879d
[backend/core] Fix long application exit times by passing IHostApplicationLifetime.ApplicationStopping to long-running awaits 2024-02-21 03:50:38 +01:00
Laura Hausmann
d4dd1ca104
[backend/federation] Fail fast when instance is blocked in AuthorizedFetchMiddleware 2024-02-19 03:04:34 +01:00
Laura Hausmann
bc7db3fab9
[backend/federation] Fix confusing log output in AuthorizedFetchMiddleware 2024-02-18 01:07:03 +01:00
Laura Hausmann
b46e587132
[backend/federation] Improve log handling in AuthorizedFetchMiddleware 2024-02-18 01:05:06 +01:00
Laura Hausmann
e74e7654fe
[backend/federation] Refetch user pubkey if auth fetch validation fails 2024-02-18 00:51:18 +01:00
Laura Hausmann
de6211d6fb
[backend/federation] Handle JSON-LD signed requests in authorized fetch mode 2024-02-18 00:36:58 +01:00
Laura Hausmann
d4e1d92771
[backend] Code cleanup: switch to BSD braces style, tweak code style 2024-02-17 02:31:00 +01:00
Laura Hausmann
1148bb5ee6
[backend/middleware] Rethrow gracefulexceptions in AuthorizedFetchMiddleware 2024-02-14 02:57:49 +01:00
Laura Hausmann
2756e19399
[backend/middleware] Improve error handling in AuthorizedFetchMiddlewre 2024-02-14 02:53:01 +01:00
Laura Hausmann
a1fbe6f9b5
[backend/federation] Enforce note visibility checks in AP controller 2024-02-12 05:09:06 +01:00
Laura Hausmann
02e003afa3
[backend/federation] Resolve incoming activity objects (ISH-20, ISH-12) 2024-02-09 13:28:07 +01:00
Laura Hausmann
5978f1abc4
[backend] Implement federation control (ISH-2) 2024-02-07 17:52:41 +01:00
Laura Hausmann
e31a0719f4
[backend] Replace mastodon-specific middleware with modes triggered on MastodonApiControllerAttribute 2024-02-05 21:08:20 +01:00
Laura Hausmann
626b267692
All methods that return a Task should end in Async 2024-01-28 22:21:58 +01:00
Laura Hausmann
e755f9f96f
Add basic authentication system 2024-01-28 00:31:54 +01:00
Laura Hausmann
37e7f339bc
Add basic api rate limiter 2024-01-27 22:11:46 +01:00
Laura Hausmann
a3441a1f35
Fix instance actor comparison for authorized fetch 2024-01-27 19:37:37 +01:00
Laura Hausmann
331f3a5322
Allow fetching the instance actor without authorized fetch 2024-01-27 03:59:45 +01:00
Laura Hausmann
431bbaccb2
Handle follow and unfollow activity types 2024-01-26 18:57:59 +01:00
Laura Hausmann
bf3e72da9b
Basic note create 2024-01-25 03:16:29 +01:00
Laura Hausmann
59a55d0821
Implement GracefulException details attribute 2024-01-24 20:35:26 +01:00
Laura Hausmann
5569fe061f
Rename CustomException to GracefulException 2024-01-24 19:14:01 +01:00
Laura Hausmann
2e4a1137ed
Implement IMiddleware for all middlewares 2024-01-24 19:10:43 +01:00
Laura Hausmann
bb365ddc66
Improve & refactor exception handling 2024-01-24 18:58:19 +01:00
Laura Hausmann
f15fd9cc79
Implement exception handler 2024-01-24 04:11:56 +01:00
Laura Hausmann
7524c5acc7
Add authorized fetch middleware 2024-01-24 03:03:20 +01:00