91aadb6565
Make etag write-only.
5 years ago
9c63f8d674
Rename stoken to etag and cstoken to stoken.
...
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
5 years ago
8eee280bbb
Split cstoken and stoken to be different concepts
...
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.
A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
5 years ago
6e7ad92a12
Add missing migrations forgotten in the previous commit
...
Missing from: 73f4ff765c7713c9aa48dec2bfc4c3c1c0c7e9f3
5 years ago
2a39f3538e
Change to standalone stoken objects (+ small optimisation).
...
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.
We also slightly improved how we filter by revs.
5 years ago
3cdb7783fe
Make sure to always return fresh stokens.
5 years ago
fce844bfc3
Uid: Change how validation is done.
5 years ago
10b9d33ffe
UidValidator: fix to actually validate.
5 years ago
e94e2f9d70
Add a separate pubkey/privatekey for sharing.
...
It's separated from the login one so that encryption key and identity
can be rotated separately.
5 years ago
863c405802
Rename pubkey to loginPubkey because we'll soon have another pubkey.
...
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
5 years ago
2412c295de
Signup: fix bug making signup not to work.
5 years ago
8323f23561
Add a nop for api/logout/
...
It's there for etesync.com and is used to invalidate the token.
Unfortunately we can't fully implement it here because the token
implementation is lacking. This will be fixed soon once we update the
token library with the next version of the protocol.
5 years ago
a965a76c36
Invitation: move outgoing invitations to invite/outgoing.
5 years ago
118dbea4e3
InvitationSerializer: fix user validator.
5 years ago
7f7d223b9b
Fix indentation error.
5 years ago
40b7edcb84
Add a way to fetch a user's pubkey.
5 years ago
47e1eec122
Incoming invitations: implement incoming invitations and accepting them
5 years ago
8d1c02dcb9
Collection invitation: implement creating and manipulating collections invitations.
5 years ago
edd88427b0
Add a viewset to control collection membership.
5 years ago
4ca74bc69b
Permissions: start from scratch and add IsCollectionAdmin permission.
5 years ago
c30cc2f229
Improve and rename bulk_get to filter by item stokens too + cstoken changes
...
Also change how we return cstokens
5 years ago
aaee8f5e38
Fix new_cstoken getting for list functions.
...
We were getting the general cstoken, and were not honouring our limit.
5 years ago
9bbb7ef3d7
Fix filter by cstoken function to not fetch twice.
5 years ago
c63210fe77
CollectionItem: implement batch updating.
5 years ago
b6571c93f6
Collection: fix stoken and add cstoken for the collection token.
5 years ago
e851fb9877
Views: fix wrong items name.
5 years ago
ae4aafcf96
Transaction: make it possible to pass a global stoken to block by.
5 years ago
eeaea6e6ab
Transaction: return 200 rather than 201.
5 years ago
f7c66eaadb
CollectionItem: add a batch endpoint for batch operations.
5 years ago
4c7e30eca5
CollectionItem: implement both update and create.
5 years ago
23dcbc1f9e
CollectionItem: always run both serializers when serializing.
5 years ago
306e7dcd11
Item deps: fix.
5 years ago
775f438e61
Change deps to be pairs of uid/stoken.
5 years ago
00a80740ca
Collection/item create/update require stoken.
5 years ago
bd1d11fe5f
Fix signup and let signup to an empty account.
5 years ago
bced00dc8a
Enable logout for now so client tests pass.
5 years ago
644539bd68
Reset view: adjust reset view path and class.
5 years ago
48ebbfb322
Disable host verification for debug mode.
...
Was causing issues with mitm proxy and etc which was a pain.
5 years ago
f438d0e947
Trim salt when creating the challenge.
5 years ago
4083be8e8c
Username: disallow @ in usernames.
5 years ago
e9e77945a6
Return token and user on signup/login.
5 years ago
93a0e41f03
Change login flow to better verify all relevant fields.
5 years ago
32a8b9c90d
Implement a ZKPP login flow.
5 years ago
6b0a40e9dd
Set custom user model and reset migrations.
5 years ago
df0f7d134d
Collection items: add a transaction endpoint.
5 years ago
d66d0640dc
Collection: disallow partial updates.
5 years ago
af27871955
Revision: change the shape of the list response.
5 years ago
9f0f00a594
Unify the stoken filtering and calculation.
5 years ago
f23815d46d
Fix calculation of stoken.
5 years ago
d134934f8c
Bulk_get: implement stoken, limit and inline
5 years ago
Tom Hacohen