178 Commits

Author SHA1 Message Date
Mystikfluu
7e14d7da8d add length check to post endpoint 2022-06-23 21:11:24 +02:00
Mystikfluu
2666b0b075 add cache to getPost 2022-06-22 20:25:45 +02:00
Mystikfluu
f36b98f0d6 return the single post object on getPost
insstead of an array with the one post object in it
2022-06-22 20:24:10 +02:00
Mystikfluu
a2e0b69791 only send websocket update if the posted message is for everyone 2022-06-22 20:20:25 +02:00
Mystikfluu
dcd1013e38 add getPost api endpoint
for getting a post by its id
2022-06-22 20:16:33 +02:00
Mystikfluu
297d7c6eb0 add auto redirect to https 2022-06-22 09:30:00 +02:00
Mystikfluu
7c38022e0b fix bug when getting avatar 2022-06-22 09:25:48 +02:00
Mystikfluu
29dbd58831 add caching header to avatars 2022-06-22 09:23:12 +02:00
Mystikfluu
35df3913da make getotheruser browser accessible (CORS) 2022-06-21 23:32:26 +02:00
Mystikfluu
285c31d58b add a config for an api endpoint
to decide if `getotheruser` should be allowed to be called without a 
cookie
2022-06-21 23:21:58 +02:00
Mystikfluu
3cf533cc0a add individual url ratelimiting 2022-06-18 18:28:29 +02:00
Mystikfluu
2db1f8ec64 add check for completely invalid reply ids 2022-06-18 12:27:38 +02:00
Mystikfluu
225179b0dc add id-based replies 2022-06-17 23:18:01 +02:00
Mystikfluu
983cd54c2d added limit to getPosts 2022-06-17 22:53:58 +02:00
Mystikfluu
579ea0dd54 add ports to server config 2022-06-17 20:08:03 +02:00
Mystikfluu
03a5803786 add ssl privatekey/certificate to config 2022-06-17 20:00:50 +02:00
Mystikfluu
1e64231556 fix bug where it would log messages multiple times 2022-06-16 18:13:13 +02:00
Mystikfluu
b41d420ce1 add logout button to user page 2022-06-16 16:03:26 +02:00
Mystikfluu
824eb99851 add bot identifier to posts 2022-06-16 13:51:03 +02:00
Mystikfluu
ae538b33af added CORS headers to post endpoint
added messages to websockets
2022-06-15 23:26:18 +02:00
Mystikfluu
3fe83455a3 add key pairs for encryption, as well as better styling for posts page 2022-06-15 00:16:16 +02:00
Mystikfluu
286fe9d74b added limit to search 2022-06-11 19:48:53 +02:00
Mystikfluu
026ad8bca4 fixed crash when trying to set long bio 2022-06-11 19:37:03 +02:00
Mystikfluu
1c5b146827 now unlinks temp files 2022-06-11 15:40:59 +02:00
Mystikfluu
6c239f0e9a added user avatars 2022-06-11 15:36:50 +02:00
Mystikfluu
2a1f82b374 added changeUsername api endpoint 2022-06-11 12:08:20 +02:00
Mystikfluu
8f619fc793 allowing api calls with user+pass instead of cookie 2022-06-10 22:18:45 +02:00
Mystikfluu
0fc8eed5a7 removed unneeded comments 2022-06-10 22:08:22 +02:00
Mystikfluu
bf733806b9 added blocking self-revealing proxies
enabled by default in the config
2022-06-10 20:06:41 +02:00
Mystikfluu
07e36cd2d3 added account-based ratelimiting 2022-06-09 18:58:14 +02:00
Mystikfluu
e5614a0e01 fixed error 2022-06-09 10:34:27 +02:00
none
b41d97985d made logging level optional 2022-06-09 10:05:49 +02:00
none
98845c4454 fixed logging issue 2022-06-09 10:04:58 +02:00
Mystikfluu
3d36086134 even more input validation 2022-06-04 14:09:53 +02:00
Mystikfluu
6b86ab0223 better input validation for post endpoint 2022-06-04 13:58:30 +02:00
Mystikfluu
0e7be58c41 added search api endpoint 2022-06-04 13:19:26 +02:00
Mystikfluu
92d62685fc you know what
un-base64's your website
2022-06-04 13:17:35 +02:00
Mystikfluu
a11cc7380c fixed server error when not passing along a username or password 2022-06-03 08:47:34 +02:00
Mystikfluu
00e5ed3c21 added /api/getalluserinformation endpoint
new endpoint shows all user information that is being stored
2022-06-02 22:47:28 +02:00
Mystikfluu
89a44cf837 now using this.seed instead of seed 2022-06-01 20:49:00 +02:00
Mystikfluu
e41aefd9cc added log levels 2022-05-27 12:56:45 +02:00
Mystikfluu
03e022b3d8 added logfiles 2022-05-27 12:52:18 +02:00
Mystikfluu
3a16265fe7 fixed minor bugs 2022-05-26 15:20:43 +02:00
Mystikfluu
eee57759f9 now actually sends a correct statuscode when not being logged in 2022-05-26 14:36:05 +02:00
Mystikfluu
bc2fc5d9a1 optimized sql queries 2022-05-26 14:10:57 +02:00
Mystikfluu
bb969aa39a better ip handling
no longer stores ips as plaintext, instead hashes them
2022-05-25 17:41:04 +02:00
Mystikfluu
06e9924777 usernames now allow non-utf8 characters as well 2022-05-25 17:36:37 +02:00
Mystikfluu
531b0cab53 now trims posts 2022-05-25 17:35:59 +02:00
Mystikfluu
a6743bcb07 added non-utf8 character compatability 2022-05-25 13:38:54 +02:00
Mystikfluu
fe09679b0a added config file
x-forwarded-for request header is now ignored when getting the ip
2022-05-07 15:21:17 +02:00