Ted Johansson 3d11e3ca10

DEV: Require at least one scope for API key granular mode (#31253) ...

Currently, if creating an API key in "granular" mode, and not selecting any scopes, a globally scoped API key is created. This can be surprising and is not ideal. Having a key with no scopes isn't useful in the first place, so this PR adds client- and server side validations to check that at least one scope is selected if using "granular" mode.

2025-02-10 13:22:08 +08:00

..

admin

DEV: Require at least one scope for API key granular mode (#31253)

2025-02-10 13:22:08 +08:00

users

SECURITY: When enabled only allow Discourse Connect logins

2024-12-19 13:13:23 -03:00

about_controller.rb

…

application_controller.rb

SECURITY: Preload data only when rendering application layout

2025-02-04 13:32:30 -03:00

associated_groups_controller.rb

…

badges_controller.rb

…

bookmarks_controller.rb

…

bootstrap_controller.rb

…

categories_controller.rb

FEATURE: add new setting to select view for category page on mobile (#30519)

2025-01-06 09:25:25 +05:30

clicks_controller.rb

…

composer_controller.rb

…

composer_messages_controller.rb

…

csp_reports_controller.rb

…

custom_homepage_controller.rb

…

directory_columns_controller.rb

…

directory_items_controller.rb

FIX: Allow user directory searches to return more than 20 matching results (#31032)

2025-01-29 11:02:42 -04:00

do_not_disturb_controller.rb

…

drafts_controller.rb

FIX: corrently handle hidden tags when checking for edit conflicts

2024-12-09 19:17:16 +01:00

edit_directory_columns_controller.rb

…

email_controller.rb

DEV: refactor email_controller.rb

2024-12-31 15:28:59 +01:00

embed_controller.rb

…

emojis_controller.rb

DEV: unifies emoji picker (#28277)

2025-01-08 11:41:36 +01:00

exceptions_controller.rb

…

export_csv_controller.rb

FIX: Only apply the rate limit to user exports, not downloads (#30965)

2025-01-24 09:37:05 +11:00

extra_locales_controller.rb

DEV: Remove logical OR assignment of constants (#29201)

2024-10-16 10:09:07 +08:00

finish_installation_controller.rb

SECURITY: Preload data only when rendering application layout

2025-02-04 13:32:30 -03:00

form_templates_controller.rb

…

forums_controller.rb

…

groups_controller.rb

FEATURE: Allow add group member endpoint to skip invite emails (#29962)

2024-11-27 11:33:09 -06:00

hashtags_controller.rb

…

highlight_js_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

inline_onebox_controller.rb

SECURITY: Limit /inline-onebox to 10 URLs at a time

2025-02-04 13:32:53 -03:00

invites_controller.rb

UX: Do not use generic username suggestions for invites (#31175)

2025-02-07 10:52:41 +00:00

list_controller.rb

Don't allow loading tagged PMs in another user's inbox.

2025-02-04 13:32:46 -03:00

metadata_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

new_invite_controller.rb

FEATURE: Add invite link to the sidebar (#29448)

2024-10-30 05:31:14 +03:00

new_topic_controller.rb

…

notifications_controller.rb

FEATURE: add new hidden site setting to show full names in user card

2025-01-23 12:26:59 -05:00

offline_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

onebox_controller.rb

…

pageview_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

permalinks_controller.rb

FIX: Don’t raise an error on permalinks with external URL

2024-06-28 10:09:37 +02:00

post_action_users_controller.rb

…

post_actions_controller.rb

…

post_readers_controller.rb

…

posts_controller.rb

DEV: remove another deprecation notice when serializing args (#31240)

2025-02-09 15:10:41 +01:00

presence_controller.rb

DEV: Remove logical OR assignment of constants (#29201)

2024-10-16 10:09:07 +08:00

published_pages_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

push_notification_controller.rb

…

qunit_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

reviewable_claimed_topics_controller.rb

FEATURE: Support designating multiple groups as mods on category (#28655)

2024-09-04 04:38:46 +03:00

reviewables_controller.rb

FEATURE: Gracefully handle unhandled reviewables (#31118)

2025-02-05 14:38:45 +11:00

robots_txt_controller.rb

FIX: Remove /u/ from robots (#30782)

2025-01-15 13:42:08 +08:00

safe_mode_controller.rb

…

search_controller.rb

DEV: Add proper error response when searching with an invalid page param (#31026)

2025-01-28 15:12:52 -05:00

session_controller.rb

FIX: staff only mode blocks admin password resets (#29289)

2024-10-21 09:29:37 +02:00

sidebar_sections_controller.rb

…

similar_topics_controller.rb

…

site_controller.rb

SECURITY: Preload data only when rendering application layout

2025-02-04 13:32:30 -03:00

sitemap_controller.rb

…

slugs_controller.rb

…

static_controller.rb

FIX: Do not ignore redirects containing "/login" in the path (#29960)

2024-11-27 11:22:45 -05:00

steps_controller.rb

…

stylesheets_controller.rb

FEATURE: Dark/light mode selector (#31086)

2025-02-07 03:28:34 +03:00

svg_sprite_controller.rb

FIX: bump the number of svg icons we return to first 500 (#29286)

2024-10-18 19:22:13 +02:00

tag_groups_controller.rb

FEATURE: Log tag group changes in staff action log (#28787)

2024-09-09 10:50:48 +08:00

tags_controller.rb

DEV: Ignore invalid tag parameter in TagsController (#28557)

2024-08-27 12:06:54 -04:00

test_requests_controller.rb

FIX: Set sane default for Net::HTTP when processing a request (#28141)

2024-08-06 07:12:42 +08:00

theme_javascripts_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

topic_view_stats_controller.rb

…

topics_controller.rb

FIX: Hijack controller for topic move posts (#31029)

2025-01-28 16:27:30 +10:00

uploads_controller.rb

FIX: Incorrect topic per-minute invitation rate limit (#31252)

2025-02-10 13:12:16 +10:00

user_actions_controller.rb

…

user_api_key_clients_controller.rb

Add user api key client rate limit settings (#30402)

2024-12-30 11:10:48 -05:00

user_api_keys_controller.rb

Require permitted scopes when registering a client (#29718)

2024-11-19 15:28:04 -05:00

user_avatars_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

user_badges_controller.rb

PERF: Enqueue Job::BackfillBadge in Jobs::BadgeGrant (#30945)

2025-01-24 09:35:01 +08:00

user_status_controller.rb

…

users_controller.rb

SECURITY: Disable access to "activate-account" route for existing users

2025-02-04 13:32:38 -03:00

users_email_controller.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

webhooks_controller.rb

…

wizard_controller.rb

…