PaulD987
90087149d9
Merge bfc4ade6c3 into 6ae53bf1bd
2 weeks ago
NGPixel
4eb9dabb63
refactor: update docker images to Node 24 and fix promisify calls
1 month ago
NGPixel
e954b50a7a
feat: footer text override option
3 years ago
Leangseu Kim
0d914b061e
feat: add singleByPath GraphQL resolver ( #6011 )
...
Co-authored-by: k k <kleangseu@yahoo.com>
3 years ago
NGPixel
f3133a72ec
feat: toc sidebar position
3 years ago
NGPixel
d10f2a1966
feat: send UPGRADE_COMPANION_REF in automated upgrade call
3 years ago
natsutteatsuiyone
2cb304100c
fix: Page Rules based on Tag Matches do not work for comment permissions ( #5819 )
3 years ago
Rodrigo Ribeiro Gomes
db0255cb7c
fix: add missing scriptJs and scriptCss to single page resolver ( #5689 )
3 years ago
NGPixel
8715cd69b2
feat: edit shortcuts
3 years ago
NGPixel
48077fc9e5
feat(admin): make page extensions configurable
4 years ago
Nicolas Giard
046e4b98cb
fix(graphql): remove required flag on MailConfig schema
4 years ago
David Wheatley
97a744556b
feat(mail): allow setting of mailer identifying name ( #5363 )
4 years ago
Nicolas Giard
cd33ff0afb
feat(admin): export tool for full migration / backup ( #5294 )
...
* feat: export content utility (wip)
* feat: export navigation + groups + users
* feat: export comments + navigation + pages + pages history + settings
* feat: export assets
4 years ago
NGPixel
78d02dc8e5
fix: prevent manage system assignment from manage groups permission
4 years ago
rajatchauhanyti
44b3fd1794
fix: admin - general settings not saving with empty value ( #5165 )
4 years ago
NGPixel
79bdd44093
fix: force download of unsafe extensions
4 years ago
NGPixel
5d3e81496f
fix: sanitize SVG uploads
4 years ago
Paul S Dennis
bfc4ade6c3
Merge remote-tracking branch 'upstream/dev' into fix-bypass-unauthorized-screen
5 years ago
NGPixel
26f1c0f372
feat: convert page
5 years ago
Paul S Dennis
535d47c3fe
Optionally always redirect user to login page if they are not authenticated and land on a page that guest is not authorized to view
...
If a wiki is configured to be private, eg guest does not have any permissions to view any of the pages on the wiki, it is an annoyance to always be told that you aren't authorized to view a page when you aren't logged in. A more natural flow in this sort of scenario would be to be automatically directed to the login page so that the user can authenticate (and then hopefully gain access to the page).
This change adds a configuration option to the security page to enable "Bypass Unauthatorized Screen" functionality. This option defaults to false, so there is no change in behavior for existing/new installations, it is an opt-in configuration change.
Two new translatable strings are added:
"admin:security.bypassUnauthorized": "Bypass Unauthorized Screen"
"admin:security.bypassUnauthorizedHint": "Should the user be redirected automatically to the login screen if they are not authenticated and attempt to access a page not accessible to Guest"
5 years ago
Paul
806e4e8f11
fix: get syncInterval from model instead of module data ( #3003 )
5 years ago
Jafar Akhondali
5ba36ee421
refactor: server code ( #2545 )
...
+ Remove duplicated await
+ Replace some legacy codes with ES6
+ Fix some of eslint problems
5 years ago
Riccardo Re
660b78d9e2
fix: support permissions by tags for basic db search engine ( #2416 )
...
This code will allow the "search" component to correctly filter pages by usergroup permissions based on tags instead of paths
Co-authored-by: Riccardo Re <riccardo.re@clevermind.cloud>
5 years ago
NGPixel
7c0d6e2883
fix: prevent write:groups from self-promoting
5 years ago
NGPixel
ef739de970
feat: purge history utility
6 years ago
NGPixel
8490fc1267
feat: handle disabled auth strategies
6 years ago
NGPixel
ae733392f3
feat: password reset
6 years ago
NGPixel
e319355017
feat: enable/disable TFA per user
6 years ago
NGPixel
32d67adee1
feat: social login providers with dynamic instances
6 years ago
NGPixel
f72530bf84
refactor: deps update + 2FA setup + verify
6 years ago
Marks Polakovs
95b6a7ad82
fix: resolve tags on pages in GraphQL ( #2247 )
6 years ago
NGPixel
26af63a80b
fix: login input hints
6 years ago
NGPixel
4f16dd0c81
fix: admin permissions + restrict nav settings
6 years ago
NGPixel
10f17c5712
feat: redirect on login based on group
6 years ago
NGPixel
be499e5795
fix: auth strategy dependent username label
6 years ago
NGPixel
1ced9649c7
feat: enforce 2fa admin setting + hide local on login screen
6 years ago
NGPixel
b475795595
feat: login bg + bypass + hide local option
6 years ago
Nicolas Giard
c009cc1392
feat: new login experience ( #2139 )
...
* feat: multiple auth instances
* fix: auth setup + strategy initialization
* feat: admin auth - add strategy
* feat: redirect on login - group setting
* feat: oauth2 generic - props definitions
* feat: new login UI (wip)
* feat: new login UI (wip)
* feat: admin security login settings
* feat: tabset editor indicators + print view improvements
* fix: code styling
6 years ago
Regev Brody
1c4829f70f
fix: tags filtered by access ( #2100 )
6 years ago
NGPixel
a690e5597f
fix: revocation token list for users + groups
6 years ago
Regev Brody
33a9d5774c
fix: GraphQL error with MySQL and FULL OUTER JOIN ( #2104 )
...
* fix: GraphQL error with MySQL and FULL OUTER JOIN #2071
6 years ago
NGPixel
53ddb50b51
feat: save page scripts + styles
6 years ago
Regev Brody
a508a27475
fix: validate permissions when listing assets ( #1928 )
...
* fix: assets permission issues #1926
6 years ago
NGPixel
c2a0773633
fix: site config host slice
6 years ago
NGPixel
7a946ec0f5
feat: edit comment
6 years ago
NGPixel
e74605501f
feat: comments post min delay
6 years ago
NGPixel
8a74904731
feat: comments delete + refresh on post + formatting
6 years ago
NGPixel
1f9e5b3fd0
feat: delete user with replace target
6 years ago
daneallen
20e6bc1a70
fix: Open Redirect Vulnerability Mitigation - CWE 601 ( #1963 )
...
* Open redirect vulnerabilty mitigation
* Refacted Open Redirect to user configurable and corrected incorrect security variable names.
Co-authored-by: danallendds <daniel.allen@friends.dds.mil>
6 years ago
NGPixel
1222355046
feat: comments - default provider create (wip) + permissions
6 years ago