A platform for community discussion. Free, open, simple.
Go to file
Jeff Wong 0e553f1fd1 FIX: correctly remove authentication_data cookie on oauth login flow (#9238)
Additionally correctly handle cookie path for authentication_data

There were two bugs that exposed an interesting case where two discourse
instances hosted across two subfolder installs in the same domain
with oauth may clash and cause strange redirection on first login:

Log in to example.com/forum1. authentication_data cookie is set with path /
On the first redirection, the current authentication_data cookie is not unset.
Log in to example.com/forum2. In this case, the authentication_data cookie
is already set from forum1 - the initial page load will incorrectly redirect
the user to the redirect URL from the already-stored cookie, to /forum1.

This removes this issue by:
* Setting the cookie for the correct path, and not having it on root
* Correctly removing the cookie on first login
2020-03-23 16:01:39 -07:00
.github/workflows DEV: Fix the CI workflow 2020-01-20 18:51:55 +01:00
.tx Add Hungarian locale (#6260) 2018-08-13 01:02:35 +02:00
app FIX: correctly remove authentication_data cookie on oauth login flow (#9238) 2020-03-23 16:01:39 -07:00
bin DEV: resolve symlinks in docker dev 2020-01-13 10:33:34 +11:00
config FEATURE: prevent accidental canceling when drafting penalties (#9129) 2020-03-23 16:01:39 -07:00
db FEATURE: Improving bookmarks part 2 -- Topic Bookmarking (#8954) 2020-02-13 16:26:02 +10:00
docs DOCS: Clarify what a DNS "A record" is with a link 2020-02-12 16:50:56 -05:00
images
lib Let's not log the username/password 2020-03-11 12:54:19 -04:00
log
plugins FIX: Polyfill Promise for IE11 (#9057) 2020-03-05 11:44:33 -05:00
public Revert "FIX: lower case URLs before comparing for embedding comments" 2020-01-23 20:36:05 +05:30
script FIX: Google Groups scraper failed to login 2020-03-05 11:46:36 -05:00
spec FIX: correctly remove authentication_data cookie on oauth login flow (#9238) 2020-03-23 16:01:39 -07:00
test FEATURE: prevent accidental canceling when drafting penalties (#9129) 2020-03-23 16:01:39 -07:00
vendor DEV: makes popper.js part of javascript rake task (#8847) 2020-02-04 15:34:46 +01:00
.editorconfig Set trim_trailing_whitespace false for markdown 2016-06-25 22:29:01 +04:30
.eslintignore DEV: Yarn-manage moment and moment-timezone libraries 2019-02-12 13:57:52 -05:00
.eslintrc DEV: Ember linting - disallow Ember.* variable usage (#8782) 2020-02-05 10:14:42 -06:00
.git-blame-ignore-revs DEV: introduces git-blame-ignore-revs (#8880) 2020-02-06 11:37:54 -05:00
.gitattributes Use proper encoding for email fixtures. 2018-02-21 17:06:35 +08:00
.gitignore REFACTOR: Restoring of backups and migration of uploads to S3 2020-01-14 11:41:35 +01:00
.prettierignore DEV: Prettify *.en_US.yml files 2019-05-20 23:21:43 +02:00
.rspec DEV: Use --profile and --fail-fast in CI only 2019-03-11 22:04:47 -04:00
.rspec_parallel DEV: Introduce parallel rspec testing 2019-04-01 11:06:47 -04:00
.rubocop.yml This rule was removed from Rubocop due to different behavior in Ruby 3. 2020-02-19 13:44:20 -05:00
.ruby-gemset.sample
.ruby-version.sample Make version the same as install docs (#8713) 2020-01-14 12:33:37 +11:00
.template-lintrc.js DEV: enforces no-invalid-interactive linting rule (#8907) 2020-02-11 15:55:16 +01:00
.travis.yml Fix frontend tests on Travis (#8089) 2019-09-12 10:31:51 +10:00
adminjs
Brewfile DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
config.ru DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
CONTRIBUTING.md Proper long form for CLA 2015-09-10 20:49:03 +02:00
COPYRIGHT.txt
crowdin.yml DEV: Add configuration file for Crowdin 2020-02-12 22:45:17 +01:00
d add wrappers for mailcatcher and sidekiq 2016-12-13 09:05:45 +11:00
Dangerfile FEATURE: English locale with international date formats 2019-05-20 13:47:20 +02:00
discourse.sublime-project DEV: Exclude i18n .yml files from Sublime Text project. (#6473) 2018-10-10 20:21:24 +08:00
Gemfile DEV: flag MRI specific gems 2020-02-18 11:04:56 +11:00
Gemfile.lock Build(deps): Bump bootsnap from 1.4.5 to 1.4.6 (#9032) 2020-02-25 07:54:24 +11:00
jsapp
lefthook.yml FIX: Lefthook was not excluding enough JS 2020-02-25 17:28:53 -05:00
LICENSE.txt
package.json Support for Ember Template linting 2020-02-05 11:33:15 -05:00
Rakefile DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
README.md Update browser support matrix 2020-01-07 12:20:46 -05:00
yarn.lock Support for Ember Template linting 2020-02-05 11:33:15 -05:00

Discourse is the 100% open source discussion platform built for the next decade of the Internet. Use it as a:

  • mailing list
  • discussion forum
  • long-form chat room

To learn more about the philosophy and goals of the project, visit discourse.org.

Screenshots

Boing Boing


Mobile

Browse lots more notable Discourse instances.

Development

To get your environment setup, follow the community setup guide for your operating system.

  1. If you're on macOS, try the macOS development guide.
  2. If you're on Ubuntu, try the Ubuntu development guide.
  3. If you're on Windows, try the Windows 10 development guide.

If you're familiar with how Rails works and are comfortable setting up your own environment, you can also try out the Discourse Advanced Developer Guide, which is aimed primarily at Ubuntu and macOS environments.

Before you get started, ensure you have the following minimum versions: Ruby 2.5+, PostgreSQL 10+, Redis 2.6+. If you're having trouble, please see our TROUBLESHOOTING GUIDE first!

Setting up Discourse

If you want to set up a Discourse forum for production use, see our Discourse Install Guide.

If you're looking for business class hosting, see discourse.org/buy.

Requirements

Discourse is built for the next 10 years of the Internet, so our requirements are high.

Discourse supports the latest, stable releases of all major browsers and platforms:

Browsers Tablets Phones
Apple Safari iPadOS iOS
Google Chrome Android Android
Microsoft Edge
Mozilla Firefox

Built With

  • Ruby on Rails — Our back end API is a Rails app. It responds to requests RESTfully in JSON.
  • Ember.js — Our front end is an Ember.js app that communicates with the Rails API.
  • PostgreSQL — Our main data store is in Postgres.
  • Redis — We use Redis as a cache and for transient data.

Plus lots of Ruby Gems, a complete list of which is at /master/Gemfile.

Contributing

Build Status

Discourse is 100% free and open source. We encourage and support an active, healthy community that
accepts contributions from the public including you!

Before contributing to Discourse:

  1. Please read the complete mission statements on discourse.org. Yes we actually believe this stuff; you should too.
  2. Read and sign the Electronic Discourse Forums Contribution License Agreement.
  3. Dig into CONTRIBUTING.MD, which covers submitting bugs, requesting new features, preparing your code for a pull request, etc.
  4. Always strive to collaborate with mutual respect.
  5. Not sure what to work on? We've got some ideas.

We look forward to seeing your pull requests!

Security

We take security very seriously at Discourse; all our code is 100% open source and peer reviewed. Please read our security guide for an overview of security measures in Discourse, or if you wish to report a security issue.

The Discourse Team

The original Discourse code contributors can be found in AUTHORS.MD. For a complete list of the many individuals that contributed to the design and implementation of Discourse, please refer to the official Discourse blog and GitHub's list of contributors.

Copyright 2014 - 2019 Civilized Discourse Construction Kit, Inc.

Licensed under the GNU General Public License Version 2.0 (or later);
you may not use this work except in compliance with the License.
You may obtain a copy of the License in the LICENSE file, or at:

https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

Discourse logo and “Discourse Forum” ®, Civilized Discourse Construction Kit, Inc.

Dedication

Discourse is built with love, Internet style.