335 Commits

Include renames

Author	SHA1	Message	Date
raucao	a669bf7c9b	Add storage dashboard card and per-app details modal ... - Rework RsAuthComponent into a card that shows the app, its device, an access summary and the permission status - Group connected apps by app and device, so repeated authorizations for the same app and device (e.g. after a browser update) are shown together, each with its own revoke action - Add RsAuthDetailsModalComponent with the full scope list, device, connected tokens and permission expiry, plus Launch and Revoke actions (built on the existing ModalComponent) - Add RemoteStorageAuthorization#device_name (parsed from the user agent) and #expired? Part of #254	2026-11-03 11:42:31 +04:00
raucao	8dd0bf10ce	Add PKCE support to remoteStorage OAuth ... Implements the optional OAuth 2.0 Authorization Code grant with PKCE (RFC 7636) for remoteStorage, as described in the remoteStorage spec (section 10.1). - Advertise the authorization and token endpoints plus the supported code_challenge method (S256) in WebFinger, and bump the advertised spec version to draft-dejong-remotestorage-27 - Add RsAuthorizationCode: a short-lived (5 min), single-use authorization code stored only as a SHA256 digest - Add RsOauthManager services for issuing and exchanging codes, including S256 verification - Add a cross-origin POST /rs/oauth/token endpoint that exchanges a code (and code_verifier) for an access token, with CORS and no CSRF token - Consent dialog now carries response_type / code_challenge through the form and redirects with the code in the query string for the code flow - Remove the existing-token reuse shortcut so every authorization results in a distinct authorization (and token) Part of #254	2026-11-03 09:17:43 +04:00
raucao	8fae099c12	Gate remoteStorage by serviceEnabled instead of Flipper ... The admin "Default services" setting writes the LDAP serviceEnabled attribute, but remoteStorage access was also gated behind an unused per-user Flipper flag that nothing ever enabled, so remoteStorage was inaccessible for everyone. Gate remoteStorage on service_enabled? like the other services, and make the admin toggle reflect the LDAP attribute (this also fixes it reading current_user instead of the user being viewed). E-Mail keeps its Flipper gate for now.	2026-10-06 15:10:00 +02:00
raucao	8a8d407bcc	Add missing whitespace between Devise (sign-in) errors and forms	2026-08-10 15:17:43 -06:00
raucao	d58c995230	Admin users page: filter by username ... Allow admins to filter the user list/index by username (partial matches allowed)	2026-08-10 10:36:05 -06:00
raucao	9f25b23e2e	Show ToS and Privacy Policy links when logged out	2026-08-09 14:10:25 -06:00
raucao	6a32dd5ee9	Show log-in link in header when logged out ... Except on the login page itself	2026-08-09 14:10:00 -06:00
raucao	3bd07472b2	Fix pages views when signed out	2025-06-12 16:09:42 +04:00
raucao	fc6cac8368	Remove superfluous link ... Already linked in the same paragraph	2025-05-30 16:53:05 +04:00
raucao	f2e8ca790c	Add Privacy and ToS pages, footer menu	2025-05-30 13:27:15 +04:00
raucao	32cd4d896d	Fix link color for Devise links	2025-05-29 17:26:18 +04:00
raucao	67c450860a	Fix tab links	2025-05-29 16:24:33 +04:00
raucao	f1d9cf1e3d	Remove special link class ... This cleans up the code quite a bit, but also allows links in editable content to be rendered with the default style.	2025-05-29 16:10:34 +04:00
raucao	ab1490f472	Remove Kosmos name from wording ... refs #222	2025-05-29 14:24:43 +04:00
raucao	6014134396	Finish MVP for content editing	2025-05-29 14:18:14 +04:00
raucao	6713665a61	WIP Rename "projects" page, make content editable	2025-05-28 18:42:10 +04:00
raucao	252b0f1792	Revert "Add ActionText configs, update spec helpers/configs" ... This reverts commit c9d23f829d.	2025-05-28 16:53:31 +04:00
raucao	57246ea76d	Fix navbar current link	2025-05-28 15:35:57 +04:00
raucao	c9d23f829d	Add ActionText configs, update spec helpers/configs	2025-05-28 14:52:31 +04:00
raucao	55111f1b8b	Allow using icons without custom class	2025-05-28 14:50:59 +04:00
raucao	4c6e64095f	Fix unused invitations count	2025-05-28 14:28:59 +04:00
raucao	450ccff65b	Add custom class to all remaining icons	2025-05-28 13:57:01 +04:00
raucao	c6a187b25a	Limit invitees on admin user page, link to invitations for more	2025-05-28 12:50:10 +04:00
raucao	c99d8545c1	Add username filter to admin invitations index	2025-05-28 12:34:52 +04:00
raucao	c94a0e34d1	Add donations to user details, link to filtered list	2025-05-27 19:04:35 +04:00
raucao	04094efbdb	Add username filter with UI to admin donations page	2025-05-27 18:43:45 +04:00
raucao	71352d13d2	Add pending donations to admin donations index ... And add more info to the details page	2025-05-27 18:08:22 +04:00
raucao	fff7527694	Don't show njump link when no pubkey set	2025-05-27 17:35:48 +04:00
raucao	7a8ca0707a	Add missing dash for no member status	2025-05-27 17:18:47 +04:00
raucao	b657a25d4d	Wording	2025-05-27 17:16:26 +04:00
raucao	e48132cf5f	Set member status to sustainer upon payment ... Introduces a state machine for the payment status as well. refs #213	2025-05-27 16:39:03 +04:00
raucao	f313686b13	Add settings for member statuses	2025-05-27 14:59:10 +04:00
raucao	393f85e45c	WIP Add member/contributor status to users	2025-05-27 13:32:58 +04:00
raucao	3538067da6	Use production link	2025-05-18 14:58:34 +04:00
raucao	c374bcd3bc	Merge branch 'master' into feature/mastodon_api	2025-05-18 14:56:42 +04:00
raucao	655009ad7a	Add example link for PGP pubkey	2025-05-18 14:56:29 +04:00
raucao	92e6b1395a	Add avatar to admin user page	2025-05-17 18:56:33 +04:00
raucao	f0cfde560b	Add Mastodon API service class, auth token config ... Add a new REST API service class to keep things DRY	2025-05-17 14:18:16 +04:00
raucao	582d339c0a	Remove feature gate for avatar upload	2025-05-14 18:55:26 +04:00
raucao	417e346074	Do not use ActiveStorage variants, process original avatar ... Variants are currently broken. So we process the original file with the most common avatar dimensions and stripping metadata, then hash and upload only that version.	2025-05-14 14:42:03 +04:00
raucao	17ffbde03a	WIP Store avatars as ActiveStorage attachments ... Also push to LDAP as jpegPhoto	2025-05-11 18:43:21 +04:00
raucao	9e2210c45b	Store avatars as binary instead of base64	2025-05-10 20:58:36 +04:00
raucao	eae370b737	Migrate from lockbox to ActiveRecord encryption (1/2)	2025-05-06 18:09:27 +04:00
raucao	646c95ecc2	Fix local/development RS auth URL	2025-04-27 16:09:32 +04:00
raucao	bfd8ca16a9	Merge branch 'master' into feature/191-gpg_keys_wkd	2024-09-25 00:16:39 +02:00
raucao	64de4deddd	Fix serviceEnabled indicator on admin page	2024-09-24 21:38:01 +02:00
raucao	9f6fa6deba	Remove example link ... Until we have a live example on kosmos.org	2024-09-23 20:36:05 +02:00
raucao	37b106e73c	Whitespace	2024-09-23 19:22:52 +02:00
raucao	c3f1f97e1a	Add display name and PGP key to admin user page ... Link the key to the ASCII Armor WKD endpoint, if it contains the user's account address	2024-09-23 19:21:59 +02:00
raucao	3042a02a17	Allow users to update their OpenPGP pubkey	2024-09-23 18:13:39 +02:00