Commit Graph

468 Commits

Author SHA1 Message Date
Cohee 411a8ef8a7 Enable CSRF for public endpoints. Split users module. Add rate limiter. 2024-04-09 21:58:16 +03:00
Cohee 497f38111f Merge branch 'staging' into neo-server 2024-04-09 20:26:03 +03:00
Cohee 877824a4f9 Add deprecated endpoint redirection 2024-04-09 16:20:38 +03:00
Cohee 3f3e23420d Working login flow 2024-04-07 23:08:19 +03:00
Cohee 6be86be0a7 Save user session to cookies 2024-04-07 19:12:22 +03:00
Cohee 0f105e0300 Fix circular deps, add Helmet https://helmetjs.github.io/ 2024-04-07 18:11:23 +03:00
Cohee c6ffe4502a Add user management endpoints 2024-04-07 17:44:40 +03:00
Cohee b07aef02c7 Persist CSRF and cookie secrets across server launches 2024-04-07 16:41:23 +03:00
Cohee 11193896b2 Add data migration procedure 2024-04-07 03:01:55 +03:00
Cohee b07a6a9a78 Update all endpoints to use user directories 2024-04-07 01:47:07 +03:00
Cohee cd5aec7368 Split user directories from public, part 1 2024-04-06 20:09:39 +03:00
Cohee 59daeeb37a Move default backgrounds to content manager 2024-04-06 17:43:59 +03:00
Cohee f71ec73d56 Fix tpyo + add clarity + lint 2024-04-03 01:00:20 +03:00
Wolfsblvt 3ccb63dd21 Server logging utilize tracking branch
- Use tracking branch instead of hardcoded "origin"
- Remove dev logging message if not on "staging" or "release"
2024-04-02 22:51:43 +02:00
Wolfsblvt 514c40228c Improve server version logging info
- Capture commit date and print that next to the branch
- Info for being on a dev branch
- Info for not being on the latest commit (fetch should've gotten it, if update script was run)
2024-04-02 22:17:21 +02:00
Cohee 50670c1e6a + more reused config variable 2024-03-30 22:52:57 +02:00
Cohee af6deda64d Null safety + reuse variable 2024-03-30 22:46:18 +02:00
Cohee 98dbe3364c Merge branch 'staging' into patch-1 2024-03-30 22:44:02 +02:00
Cohee c94460714d Whitelist to check listen mode via console 2024-03-30 22:42:51 +02:00
Cohee 4d98310848 Limit console log depth again (a little bit) 2024-03-30 22:38:09 +02:00
Lumi a8388259ab
Update server.js
Print warning if basicAuth username or password fails to parse.

In a normal case the user has no way to be informed if the username or password fails to parse. While this might end up being a skill issue on the users side it could help them to troubleshoot the issue.
2024-03-30 19:57:23 +01:00
Cohee a17206dd38 Merge branch 'staging' into instruct-rework 2024-03-30 14:56:37 +02:00
Wolfsblvt a951f68c8d cli server args precedency fix + port/listen arg
- Fixes precedence: cli > (env) > yaml > default
- Add cli arguments for port and listen
2024-03-29 02:35:43 +01:00
Cohee 1c01aafd51 Unrestrict console depth nesting 2024-03-28 00:16:35 +02:00
Cohee abb8bdbc1e Extract API endpoint for moving UI 2024-03-20 01:07:28 +02:00
Cohee b261c8c4a9 Extract API endpoints for images 2024-03-20 00:59:06 +02:00
Cohee 7dcd39c806 Extract API endpoints for quick replies 2024-03-20 00:46:46 +02:00
Cohee d448d4f65b Extract API endpoints for user avatars 2024-03-20 00:39:48 +02:00
Cohee 41528d0423 Add ability to delete UI themes 2024-03-20 00:14:32 +02:00
Cohee cbc14279e7 Display node version on startup 2024-03-15 15:30:13 +02:00
Cohee a7aa5fccf9 Update startup scripts (see below)
1. Set NODE_ENV to production and skip dev dependencies when running from scripts.
2. Remove pkg leftovers. Indicate current environment instead.
2024-03-06 22:09:31 +02:00
based 64d9c9dc5d anthropic captioning 2024-03-05 07:07:38 +10:00
Cohee 7acd2916ec Fix image uploading if character name contains a dot 2024-03-03 20:39:20 +02:00
Cohee 4b845dd442 Add backend for transformers.js whisper 2024-02-02 00:36:40 +02:00
LenAnderson 3722bd25d4 Merge branch 'staging' into qr-rewrite 2023-12-23 22:05:10 +00:00
Cohee f1453a3e8a Await plugin cleanup 2023-12-23 19:05:21 +02:00
Cohee ea85cfcbdd Plugin cleanup and validation fixes 2023-12-23 19:03:13 +02:00
LenAnderson 41a88e165c add deletequickreply request handler 2023-12-22 13:45:37 +00:00
valadaptive 7ae0e05946 Allow plugins to specify "exit" functions 2023-12-17 12:26:34 -05:00
Cohee 16795dd5cc Add server plugin loader 2023-12-16 22:21:40 +02:00
Cohee dd7ac914a6 Rename basic auth middleware 2023-12-15 18:43:00 +02:00
Cohee fad718baa1
Merge pull request #1537 from valadaptive/separate-whitelist-middleware
Move whitelist middleware to its own module
2023-12-15 18:38:37 +02:00
Cohee ef17702f6a Merge branch 'staging' into bg-load-improvements 2023-12-15 17:02:10 +02:00
Cohee 6c16b94f9d
Merge pull request #1540 from valadaptive/refactor-device-check
Refactor mobile device check
2023-12-15 17:01:32 +02:00
valadaptive 0ee19d2ede Set background client-side 2023-12-15 05:45:21 -05:00
Cohee 332ab81524
Merge pull request #1535 from valadaptive/separate-settings-endpoints
Move settings endpoints into their own module
2023-12-15 01:49:29 +02:00
valadaptive 66953ceba3 Move device type detection to client side
We don't need the server to tell us our user agent--we can get it
ourselves through navigator.userAgent and parse it on the frontend.

I've replaced device-detector-js with Bowser because device-detector-js
is really slow, freezing for up to 500ms to parse a single user agent.
2023-12-14 18:43:59 -05:00
valadaptive b0827ca815 Remove /notes endpoint
It's been unused since docs were moved to their own site.
2023-12-14 18:20:39 -05:00
valadaptive 1ed9267174 Move whitelist middleware to its own module 2023-12-14 17:36:41 -05:00
valadaptive d935b2a132 Move settings endpoints to their own module 2023-12-14 16:56:45 -05:00