468 Commits

Author SHA1 Message Date
Cohee
411a8ef8a7 Enable CSRF for public endpoints. Split users module. Add rate limiter. 2024-04-09 21:58:16 +03:00
Cohee
497f38111f Merge branch 'staging' into neo-server 2024-04-09 20:26:03 +03:00
Cohee
877824a4f9 Add deprecated endpoint redirection 2024-04-09 16:20:38 +03:00
Cohee
3f3e23420d Working login flow 2024-04-07 23:08:19 +03:00
Cohee
6be86be0a7 Save user session to cookies 2024-04-07 19:12:22 +03:00
Cohee
0f105e0300 Fix circular deps, add Helmet https://helmetjs.github.io/ 2024-04-07 18:11:23 +03:00
Cohee
c6ffe4502a Add user management endpoints 2024-04-07 17:44:40 +03:00
Cohee
b07aef02c7 Persist CSRF and cookie secrets across server launches 2024-04-07 16:41:23 +03:00
Cohee
11193896b2 Add data migration procedure 2024-04-07 03:01:55 +03:00
Cohee
b07a6a9a78 Update all endpoints to use user directories 2024-04-07 01:47:07 +03:00
Cohee
cd5aec7368 Split user directories from public, part 1 2024-04-06 20:09:39 +03:00
Cohee
59daeeb37a Move default backgrounds to content manager 2024-04-06 17:43:59 +03:00
Cohee
f71ec73d56 Fix tpyo + add clarity + lint 2024-04-03 01:00:20 +03:00
Wolfsblvt
3ccb63dd21 Server logging utilize tracking branch
- Use tracking branch instead of hardcoded "origin"
- Remove dev logging message if not on "staging" or "release"
2024-04-02 22:51:43 +02:00
Wolfsblvt
514c40228c Improve server version logging info
- Capture commit date and print that next to the branch
- Info for being on a dev branch
- Info for not being on the latest commit (fetch should've gotten it, if update script was run)
2024-04-02 22:17:21 +02:00
Cohee
50670c1e6a + more reused config variable 2024-03-30 22:52:57 +02:00
Cohee
af6deda64d Null safety + reuse variable 2024-03-30 22:46:18 +02:00
Cohee
98dbe3364c Merge branch 'staging' into patch-1 2024-03-30 22:44:02 +02:00
Cohee
c94460714d Whitelist to check listen mode via console 2024-03-30 22:42:51 +02:00
Cohee
4d98310848 Limit console log depth again (a little bit) 2024-03-30 22:38:09 +02:00
Lumi
a8388259ab
Update server.js
Print warning if basicAuth username or password fails to parse.

In a normal case the user has no way to be informed if the username or password fails to parse. While this might end up being a skill issue on the users side it could help them to troubleshoot the issue.
2024-03-30 19:57:23 +01:00
Cohee
a17206dd38 Merge branch 'staging' into instruct-rework 2024-03-30 14:56:37 +02:00
Wolfsblvt
a951f68c8d cli server args precedency fix + port/listen arg
- Fixes precedence: cli > (env) > yaml > default
- Add cli arguments for port and listen
2024-03-29 02:35:43 +01:00
Cohee
1c01aafd51 Unrestrict console depth nesting 2024-03-28 00:16:35 +02:00
Cohee
abb8bdbc1e Extract API endpoint for moving UI 2024-03-20 01:07:28 +02:00
Cohee
b261c8c4a9 Extract API endpoints for images 2024-03-20 00:59:06 +02:00
Cohee
7dcd39c806 Extract API endpoints for quick replies 2024-03-20 00:46:46 +02:00
Cohee
d448d4f65b Extract API endpoints for user avatars 2024-03-20 00:39:48 +02:00
Cohee
41528d0423 Add ability to delete UI themes 2024-03-20 00:14:32 +02:00
Cohee
cbc14279e7 Display node version on startup 2024-03-15 15:30:13 +02:00
Cohee
a7aa5fccf9 Update startup scripts (see below)
1. Set NODE_ENV to production and skip dev dependencies when running from scripts.
2. Remove pkg leftovers. Indicate current environment instead.
2024-03-06 22:09:31 +02:00
based
64d9c9dc5d anthropic captioning 2024-03-05 07:07:38 +10:00
Cohee
7acd2916ec Fix image uploading if character name contains a dot 2024-03-03 20:39:20 +02:00
Cohee
4b845dd442 Add backend for transformers.js whisper 2024-02-02 00:36:40 +02:00
LenAnderson
3722bd25d4 Merge branch 'staging' into qr-rewrite 2023-12-23 22:05:10 +00:00
Cohee
f1453a3e8a Await plugin cleanup 2023-12-23 19:05:21 +02:00
Cohee
ea85cfcbdd Plugin cleanup and validation fixes 2023-12-23 19:03:13 +02:00
LenAnderson
41a88e165c add deletequickreply request handler 2023-12-22 13:45:37 +00:00
valadaptive
7ae0e05946 Allow plugins to specify "exit" functions 2023-12-17 12:26:34 -05:00
Cohee
16795dd5cc Add server plugin loader 2023-12-16 22:21:40 +02:00
Cohee
dd7ac914a6 Rename basic auth middleware 2023-12-15 18:43:00 +02:00
Cohee
fad718baa1
Merge pull request #1537 from valadaptive/separate-whitelist-middleware
Move whitelist middleware to its own module
2023-12-15 18:38:37 +02:00
Cohee
ef17702f6a Merge branch 'staging' into bg-load-improvements 2023-12-15 17:02:10 +02:00
Cohee
6c16b94f9d
Merge pull request #1540 from valadaptive/refactor-device-check
Refactor mobile device check
2023-12-15 17:01:32 +02:00
valadaptive
0ee19d2ede Set background client-side 2023-12-15 05:45:21 -05:00
Cohee
332ab81524
Merge pull request #1535 from valadaptive/separate-settings-endpoints
Move settings endpoints into their own module
2023-12-15 01:49:29 +02:00
valadaptive
66953ceba3 Move device type detection to client side
We don't need the server to tell us our user agent--we can get it
ourselves through navigator.userAgent and parse it on the frontend.

I've replaced device-detector-js with Bowser because device-detector-js
is really slow, freezing for up to 500ms to parse a single user agent.
2023-12-14 18:43:59 -05:00
valadaptive
b0827ca815 Remove /notes endpoint
It's been unused since docs were moved to their own site.
2023-12-14 18:20:39 -05:00
valadaptive
1ed9267174 Move whitelist middleware to its own module 2023-12-14 17:36:41 -05:00
valadaptive
d935b2a132 Move settings endpoints to their own module 2023-12-14 16:56:45 -05:00