969 Commits (a79ed0be8bc45629d78e6c59d0cdeb29a14f77d5)

Author	SHA1	Message	Date
Kyle Gehmlich	545ba4ec95	fix: remove duplicate query parameters on HTTPS redirect (#6460) ... HTTPS redirection rebuilds the full URL using req.originalUrl, which includes query parameters (see https://expressjs.com/en/api.html#req.originalUrl). Prior to this patch, appending the stringified query params to req.originalUrl resulted in duplicate parameters, e.g. wiki.js/callback?session=123&code=abc?session=123&code=abc which caused errors when being redirected from an insecure (http://) callback URL to a secure version when using OIDC (e.g. with keycloak). This issue is probably rare, but in cases where HTTPS redirection is enabled and a user tries to hit an insecure URL with query parameters, it could cause problems.	3 years ago
Nicolas Giard	3bf1d9cf28	fix: disable template compilation in source view	3 years ago
Nicolas Giard	e1d282ad11	feat: warn and exit on unsupported node version	3 years ago
DerekJarvis	fd00272314	feat(auth): allow custom GitLab endpoints for self-managed instances (#6399) ... * Allow custom GitLab endpoints for self-hosting --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
robinho81	8db4be668b	feat: expose skipUserProfile option in passport-oidc (#6190) ... Co-authored-by: Robin Chalmers <robin.chalmers@kairostech.no>	3 years ago
Charlotte County Public Schools	5acc7e752e	fix: add new props to existing auth strategies (#6250)	3 years ago
NGPixel	490fab1173	fix: handle empty ToC position value	3 years ago
NGPixel	e495e0aaab	fix: update google analytics field help to refer to the new ID format	3 years ago
NGPixel	e954b50a7a	feat: footer text override option	3 years ago
Dan Nicholson	78a35c377c	feat: include query parameters in locale redirect (#6132) ... * feat: include query parameters in locale redirect * refactor: code cleanup --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
gueldi	bba1d1b574	fix(oidc): use _json prop when setting displayName (#6135) ... * Fixes setting displayName from OIDC Relates to: https://github.com/requarks/wiki/pull/6096 * Update authentication.js --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
NGPixel	ac930fc23e	fix: change simple-git import	3 years ago
Eric Knibbe	2e8585478f	fix(git): handle file renames between folders (#6020) ... * git storage: handle file renames between folders --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Charlotte County Public Schools	8fa771c4ce	feat: set groups based on LDAP groups (#5903) ... * Add mapping ldap groups to wiki groups --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Leangseu Kim	0d914b061e	feat: add singleByPath GraphQL resolver (#6011) ... Co-authored-by: k k <kleangseu@yahoo.com>	3 years ago
Aurélien Lajoie	1da80eaab8	feat: oauth2 add groups mapping (#6053) ... Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
gueldi	43a797d322	feat: adds displayName property to OIDC authentication module (#6096) ... * Adds displayName property to oidc authentication method * fix: update displayName prop * fix: use blank display name in oidc auth --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
NGPixel	5f876ced20	feat: optional oauth2 module nonce toggle	3 years ago
Sleuth56	12233c476d	feat: enable state key on generic oauth2 (#6104)	3 years ago
Eric Knibbe	41454cfd30	fix(git): disable color.ui in git storage (#6014)	3 years ago
Boris	54dbf9ad00	feat: add asciidoc editor module (#5954) ... * feat: add asciidoc editor module * fix storage file extension for asciidoc pages * fix: asciidoc editor + rendering improvements * fix: description list css improvements Co-authored-by: NGPixel <github@ngpixel.com>	3 years ago
topdev-spetermann	eadefb8827	fix: sideloading locales should import availabilities (#5973)	3 years ago
NGPixel	f3133a72ec	feat: toc sidebar position	3 years ago
CDN	73af37b81b	fix: git log should explicitly separate branch from paths (#5911)	3 years ago
CDN	0a2a32db47	feat: add artalk comment module (#5868) ... Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
CDN	86c9407057	feat: add umami analytics module (#5869) ... Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
NGPixel	d10f2a1966	feat: send UPGRADE_COMPANION_REF in automated upgrade call	3 years ago
cannorin	db2ad81a1f	feat: katex persistent macro support (#5838) ... Co-authored-by: cannorin <cannorin@users.noreply.github.com>	3 years ago
NGPixel	9fbc25adb8	feat: improve table rendering + add markdown-it-decorate module	3 years ago
natsutteatsuiyone	445ad05a3d	fix: incompatibility issues with passport-openidconnect@0.1.1 (#5799) ... * fix: incompatibility issues with passport-openidconnect * fix: remove a trailing semicolon	3 years ago
natsutteatsuiyone	2cb304100c	fix: Page Rules based on Tag Matches do not work for comment permissions (#5819)	3 years ago
Simon Lichtinghagen	1893fd499a	fix: login with Keycloak 20 by explicit set OAuth scopes (#5808) ... * Fix login with Keycloak 20 by explicit set OAuth scopes * moved scopes to definition.yml Co-authored-by: Simon Lichtinghagen <sl@bnmsp.de>	3 years ago
Andrei Senchuk	e6bbf9d088	fix: oidc module - map() call on undefined; fix unrelate() usage (#5781)	3 years ago
Rodrigo Ribeiro Gomes	db0255cb7c	fix: add missing scriptJs and scriptCss to single page resolver (#5689)	3 years ago
cleaverm	17c11b3f4e	fix: typo in letsencrypt.js logging output (#5712)	3 years ago
adroslice	15206efc57	fix: comment edit not updating original content (#5646)	3 years ago
NGPixel	8715cd69b2	feat: edit shortcuts	3 years ago
NGPixel	ebf4da9bea	fix: oidc auth groups relate / unrelate	3 years ago
NGPixel	4b3005057f	fix: prevent user enumeration using local login timings	3 years ago
Fionera	91221e73eb	feat: set groups based on OIDC claim (#5568) ... Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Jared Brogan	31bd327487	fix: correct azure blob storage typo (#5591)	3 years ago
Pam S	8290e86aaf	feat: add logout for auth0 (#5545) ... Co-authored-by: Pam Selle <pam@thewebivore.com>	3 years ago
Hexaflexagon	933293a997	feat: add elasticsearch ssl options (#5499)	3 years ago
Mirco T	628c72ea16	feat: CAS authentication module (#5452) ... Co-authored-by: SeaLife <mtries@united-internet.de>	3 years ago
NGPixel	48077fc9e5	feat(admin): make page extensions configurable	4 years ago
Nicolas Giard	0425b82c83	fix(kernel): handle SIGTERM graceful shutdown	4 years ago
Nicolas Giard	046e4b98cb	fix(graphql): remove required flag on MailConfig schema	4 years ago
David Wheatley	97a744556b	feat(mail): allow setting of mailer identifying name (#5363)	4 years ago
Nicolas Giard	b78026e49f	fix(auth): handle null SAML authnContext context	4 years ago
El Gato da Great	e3d94f7177	fix: don't push files to git if ignored (#5334) ... * fix: don't push files to git if ignored * tweak: change gitPath var to gitFilePath * fix: "update" instead of "create" of updated file Co-authored-by: Jacob Parker <blocckba5her@gmail.com> Co-authored-by: DevBlocky <16978528+DevBlocky@users.noreply.github.com>	4 years ago
Nicolas Giard	cd33ff0afb	feat(admin): export tool for full migration / backup (#5294) ... * feat: export content utility (wip) * feat: export navigation + groups + users * feat: export comments + navigation + pages + pages history + settings * feat: export assets	4 years ago
Nicolas Giard	a37d733523	fix(auth): update SAML authnContext hint text for multiple values	4 years ago
Maximilian Bosch	b345375477	fix(auth): SAML authnContext parameter should be an array (#5290) ... * saml auth: `authnContext` must be a list now This fixes this.options.authnContext.forEach is not a function when trying to login via SAML on wiki-js 2.5.281. Reason for that is that `authnContext` must be a list now which is apparently a breaking change that was missed while upgrading passport-saml[1]. Resolves #5289 [1] https://github.com/node-saml/passport-saml/pull/615 * fix(auth): split authnContext for SAML authenticaiton module Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Erik Bigler	9b40d60261	fix: update to working twitch passport strategy (#5279)	4 years ago
Nicolas Giard	d9076c4ee9	fix: typo in saml auth module	4 years ago
myml	b3731dd26e	fix: handle unicode chars when syncing files using git storage (#5272) ... git has the quotopath option enabled by default, filepaths with unicode characters will be escaped, causing the wiki to not handle changes.	4 years ago
NGPixel	78d02dc8e5	fix: prevent manage system assignment from manage groups permission	4 years ago
Nicolas Giard	8205c1f243	fix: update saml strategy to use new config options	4 years ago
NGPixel	2cb7b9fb4e	fix: update passport-saml dependency + set cert as required	4 years ago
myml	559b8ae8cf	fix: undefined author in git commit when deleting a page (#5215)	4 years ago
Nicolas Giard	485aa765d0	fix: add sfo3 to digitalocean spaces module	4 years ago
NGPixel	13890a92ab	fix: default comment provider not displaying	4 years ago
Ivan Fedorov	3407ac8829	feat: add X-Mailer header to outgoing emails (#5238) ... Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Trisztán Piller	de151031ea	feat(auth): OAuth2 access_token in GET query string in userInfoURL (#5188)	4 years ago
Nicolas Giard	a647626a51	fix: external comments template using incorrect page variables	4 years ago
myml	74887baa86	feat(auth): OAuth2 scope support (#5181)	4 years ago
rajatchauhanyti	44b3fd1794	fix: admin - general settings not saving with empty value (#5165)	4 years ago
NGPixel	dc5d8ddeb2	fix: handle page metadata parse failure	4 years ago
NGPixel	05b4053954	fix: encode filenames for assets force download	4 years ago
NGPixel	a50712ea80	fix: handle links to same host but different port as external	4 years ago
Nicolas Giard	a652e43ab1	fix: handle multi social auth strategies	4 years ago
Manuel	1f489a3d8e	fix: handle multiple LDAP strategies (#5116)	4 years ago
Gabriel A. Devenyi	2c83472b63	fix(ldap): typo spelling of distinguished (#5066)	4 years ago
NGPixel	a3bf1f7916	fix: apply locale restrictions to page rules	4 years ago
NGPixel	411802ec2f	fix: check update page access using original page path	4 years ago
Nicolas Giard	3f5388d093	fix(logging): add default fallback for logFormat config	4 years ago
Marián Skrip	de6d4beef9	feat(config): add option to specify default value to env var expansion (#5020) ... * feat: Add option to specify default value to env var expansion * fix: remove unused capturing group for env var replacement Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Marián Skrip	2815f38c52	feat(logging): add option to configure JSON logging (#5022) ... * fix: Use logger for logs using console logging * feat: Add option to configure JSON logging * fix: use generic logFormat instead of json specific * fix: use logFormat for docker config * fix: use logFormat to build winston formatters Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Marián Skrip	69e9ccc636	fix: remove wild log that was possibly for debugging (#5021)	4 years ago
NGPixel	afafb4f4e0	fix: md task list - use same config as client	4 years ago
matthgyver	7988fa62ca	fix: use body parser limit config with fallback value (#4985) ... * permit bodyParserLimitSize configuration set bodyParserLimitSize by default to 1mb permit modifications by environment variable * fix: use bodyparserlimit config with fallback default Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Nicolas Giard	8e3af9ac15	feat: use config value for json body parser limit	4 years ago
Nicolas Giard	7b14b39de0	fix: prevent upload bypass via uppercase path	4 years ago
NGPixel	a04f7bd650	fix: force uploads to use auth headers instead of cookie	4 years ago
NGPixel	92fe9d3e31	fix: view source of page version crash (#3297)	4 years ago
NGPixel	e84c15b926	fix: scanSVG incorrect ext reference (#4825)	4 years ago
cybrwshl	802dbd96c3	feat: extends plausible analytics to support self hosted installations (#4824)	4 years ago
NGPixel	79bdd44093	fix: force download of unsafe extensions	4 years ago
NGPixel	57b56d3a5b	fix: validate svg file extension in addition to client mime type	4 years ago
NGPixel	5d3e81496f	fix: sanitize SVG uploads	4 years ago
NGPixel	5173c4802e	fix: use replace instead of replaceAll to support pre-Node16	4 years ago
NGPixel	414033de9d	fix: asset path traversal on windows	4 years ago
Nicolas Giard	87fcfca6d7	feat: add Plausible Analytics module	4 years ago
NGPixel	5911867b21	fix: various OAuth2 fixes	4 years ago
Artur Shaik	87084c66b0	feat: Generic OAuth2 authentication implementation (#3094) ... * OAuth2 authentication implementation This PR shoul fix #2392. Used `passport-oauth2` strategy. * indentations cleanup * cleanup code	4 years ago
broxen	12aef93cd6	fix: remove excess div wrappers (#4528) ... * Removing superfluous div wrapping It seems like standalone text is already wrapped in paragraph elements, so this code seems superfluous. Additionally, it adds div wrappers at every line break as described in #4524 * Fix for newlines and returns This change skips newlines and returns to focus on unbounded text only. * misc: fix indentation * misc: fix indentation (2) Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
mordini	d93bd1ad5a	fix: git storage - 'import everything' feature restored (#4559) (#4572)	4 years ago
broxen	db73b650c9	fix: issue with Custom Header IDs (#4527) ... Fix the issue described in discussion #3502 regarding header links and TOC failing to properly generate when header ID is custom defined.	4 years ago
Beh	ed3925b1c5	fix: use first email address in Rocket.Chat auth response (#3122)	4 years ago
craph	3814eef922	fix: admin email setup toLowerCase (#4516)	4 years ago