25 Commits

Include renames

Author	SHA1	Message	Date
raucao	05e2b1abac	Store per-device user agent for remoteStorage authorizations ... - Add user_agent to remote_storage_authorizations and rs_authorization_codes - Capture the browser's user agent at consent, carry it on the authorization code, and store it on the authorization when the code is exchanged - Store it directly for the implicit flow too With the reuse shortcut gone, each authorization is already a distinct per-device token; this adds the metadata needed to label and display them. Part of #254	2026-11-03 11:40:58 +04:00
raucao	8dd0bf10ce	Add PKCE support to remoteStorage OAuth ... Implements the optional OAuth 2.0 Authorization Code grant with PKCE (RFC 7636) for remoteStorage, as described in the remoteStorage spec (section 10.1). - Advertise the authorization and token endpoints plus the supported code_challenge method (S256) in WebFinger, and bump the advertised spec version to draft-dejong-remotestorage-27 - Add RsAuthorizationCode: a short-lived (5 min), single-use authorization code stored only as a SHA256 digest - Add RsOauthManager services for issuing and exchanging codes, including S256 verification - Add a cross-origin POST /rs/oauth/token endpoint that exchanges a code (and code_verifier) for an access token, with CORS and no CSRF token - Consent dialog now carries response_type / code_challenge through the form and redirects with the code in the query string for the code flow - Remove the existing-token reuse shortcut so every authorization results in a distinct authorization (and token) Part of #254	2026-11-03 09:17:43 +04:00
raucao	1957df3bbd	Fix avatars failing to be set on XMPP accounts ... There's a stray `end` that prematurely closes the class	2026-08-10 21:35:28 -06:00
raucao	d737d9f6b8	Refactor ejabberd API integration	2025-05-26 14:10:27 +04:00
raucao	eae370b737	Migrate from lockbox to ActiveRecord encryption (1/2)	2025-05-06 18:09:27 +04:00
raucao	3042a02a17	Allow users to update their OpenPGP pubkey	2024-09-23 18:13:39 +02:00
raucao	ba683a7b95	Move some Rails app services to UserManager namespace	2024-09-23 16:03:02 +02:00
raucao	b91d90d75c	Fix some specs, improve config ... Allow empty string to unset nostr relay URL config	2024-08-14 13:37:15 +02:00
raucao	cbfa148051	Publish zap receipts to own relay in addition to requested ones	2024-06-19 20:26:24 +02:00
raucao	48041630ca	Limit number of relays to publish zap receipts to	2024-05-10 13:57:25 +02:00
raucao	c6c5d80fb4	WIP Persist zaps, create and send zap receipts	2024-05-09 14:31:37 +02:00
raucao	c3b82fc2a9	WIP Verify and respond to zap requests	2024-04-16 19:13:10 +02:00
raucaoandgreg	80e69df75c	Add global setting for default services, enable for preconfirmed accounts ... Co-authored-by: Greg Karékinian <greg@karekinian.com>	2024-03-28 17:21:20 +04:00
raucao	67689dcce3	Add service for creating invites	2024-02-09 17:59:07 +01:00
raucao	179a82d2dd	Use keyword arguments for ApplicationService calls ... Not all services are using keywords, which breaks those calls in Ruby 3	2024-02-02 15:50:25 +02:00
Râu Cao	5b46f3adf5	Move exchanging of XMPP contacts to account confirmation ... Since the ejabberd service is now being enabled after the confirmation, we also need to move the exchanging of roster contacts to that point.	2023-03-20 17:59:43 +07:00
Râu Cao	e62bf67262	Use v2 API for creating new lndhub accounts	2022-12-23 12:39:57 +07:00
basti	bc20e89617	Fix exception during signup	2022-01-10 09:28:12 -06:00
basti	58cc6811f9	Move XMPP contacts exchange to background job	2021-02-03 13:16:47 +01:00
basti	8ad85636d9	Create LDAP users asynchronously	2021-02-02 21:16:24 +01:00
basti	26e9073674	Fix XMPP API POST request ... Faraday does not turn hashes into JSON by itself apparently.	2020-12-13 14:07:25 +01:00
basti	ee72a32c7e	Exchange XMPP contacts when invitee signs up	2020-12-08 19:16:08 +01:00
basti	6dac732a7f	Move invitation invalidation to service	2020-12-08 17:52:53 +01:00
basti	e8c1a6066a	Move user db creation to service	2020-12-08 17:39:54 +01:00
basti	18df8fe449	Add account creation service	2020-11-29 17:31:08 +01:00