Simple forum software for building great communities.
Go to file
Franz Liedke 86d890d043 Restore beta.9 behavior of assertCan()
In flarum/core#1854, I changed the implementation of `assertCan()` to be
more aware of the user's log-in status. I came across this when unifying
our API's response status code when actors are not authenticated or not
authorized to do something.

@luceos rightfully had to tweak this again in ea84fc4, because the
behavior changed for one of the few API endpoints that checked for a
permission that even guests can have.

It turns out having this complex behavior in `assertCan()` is quite
misleading, because the name suggests a simple permission check and
nothing more.

Where we actually want to differ between HTTP 401 and 403, we can do
this using two method calls, and enforce it with our tests.

If this turns out to be problematic or extremely common, we can revisit
this and introduce a method with a different, better name in the future.

This commit restores the method's behavior in the last release, so we
also avoid another breaking change for extensions.
2020-02-04 22:59:02 +01:00
.github Fix instructions in PR template 2020-02-04 22:58:49 +01:00
js Update vulnerable JS dependencies 2020-02-04 22:59:02 +01:00
less Mark notification as read without visiting discussion (#1874) 2020-02-04 22:58:48 +01:00
migrations Apply fixes from StyleCI 2020-02-04 21:11:08 +00:00
src Restore beta.9 behavior of assertCan() 2020-02-04 22:59:02 +01:00
stubs/migrations Remove extension generator 2016-10-04 23:26:03 +03:30
tests Restore beta.9 behavior of assertCan() 2020-02-04 22:59:02 +01:00
views Determine error view and message based on type 2020-02-04 22:55:25 +01:00
.editorconfig part one of adding tests, updating core 2018-04-13 07:13:10 +02:00
.gitattributes Webpack (#1367) 2018-06-20 13:20:31 +09:30
.gitignore Move integration tests to separate directory 2019-02-01 19:01:12 +01:00
.styleci.yml Update StyleCI rules 2016-11-16 15:47:12 +10:30
CHANGELOG.md Update Application version string to beta 9 (#1784) 2019-07-05 12:37:02 +02:00
composer.json Remove unnecessary dependency 2020-02-04 22:58:28 +01:00
LICENSE Remove copyright year from LICENSE 2018-11-21 18:24:59 +10:30
README.md Clearer delineation of installation pointer 2018-11-22 18:37:00 +10:30

Build Status Total Downloads Latest Stable Version License

About Flarum

Flarum is a delightfully simple discussion platform for your website. It's fast and easy to use, with all the features you need to run a successful community. It is designed to be:

  • Fast and simple. No clutter, no bloat, no complex dependencies. Flarum is built with PHP so its quick and easy to deploy. The interface is powered by Mithril, a performant JavaScript framework with a tiny footprint.

  • Beautiful and responsive. This is forum software for humans. Flarum is carefully designed to be consistent and intuitive across platforms, out-of-the-box.

  • Powerful and extensible. Customize, extend, and integrate Flarum to suit your community. Flarums architecture is amazingly flexible, with a powerful Extension API.

Installation

This repository contains Flarum's core code. If you want to set up a forum, visit the Flarum skeleton repository.

Contributing

Thank you for considering contributing to Flarum! Please read the Contributing guide to learn how you can help.

Security Vulnerabilities

If you discover a security vulnerability within Flarum, please send an e-mail to security@flarum.org. All security vulnerabilities will be promptly addressed.

License

Flarum is open-source software licensed under the MIT License.