0a19cd7e2c
Stoken filtering: abstract getting the stoken id.
5 years ago
f6ef514661
Collection members: order by id so order is consistent.
5 years ago
1bed39af9d
Collection/item uid: allow base64-url not just base62.
5 years ago
2da49bb95e
Item revisions: don't exclude current, let the client decide.
5 years ago
68365f5d75
Collection revision: support the inline parameter.
5 years ago
7183b97541
Collection revision: implement iteration.
5 years ago
786948c456
Item revisions: never return the current revision, only old ones.
5 years ago
317c492688
CollectionItem: add support for filtering collections' main items.
...
This used to be the default, so it still is.
It only affects the list endpoint, the rest all support withCollection
anyway, because IDs are passed directly.
5 years ago
291ebaa3f7
Items must have a uid now (not null).
...
This is due to the previous change.
5 years ago
267d749c45
Collection: change collections to be an extension of items
...
Each collection now has an item and the item's UID is the collections
UID. This lets us manipulate collections just like items, and as part of
transactions. This is significant because it lets us change them as part
of transactions!
5 years ago
37bae63a46
Invitations: add support for fetching using an iterator
5 years ago
d5300a76d8
Members: add support for iterators when listing members
5 years ago
b4db35bca1
List APIs: add done to APIs that didn't have it.
5 years ago
fcb58f0f4c
List APIs: fix the stoken calculation for collections.
...
I'm not sure why it just wouldn't work with aggregate. I also couldn't get it
to work with annotate then aggregate or any other alternative.
5 years ago
6117cac111
List APIs: return a done field to indicate the fetch is done.
5 years ago
2d7b90e848
Collection items: also show deleted items.
...
This was a mistake. We want deleted items to show because we want to
know when things have been deleted when we ask for updates.
5 years ago
ab0d85c84f
Change password: change to require a signed request, just like login.
...
Without this, it would be sufficient to steal an auth token to render the account
unusable because it would be possible to just reset the encrypted content
of the account. With this change we require the user to actually know
the account password in order to do it.
5 years ago
54268ac027
Login: add an action indicator to know the user signed a login request.
5 years ago
d1017aac76
Rename django_etesync to django_etebase.
5 years ago
23b2bb3c0a
Batch: refactor code and allow passing deps to check against.
5 years ago
653341115f
Chunks: add stricter validation.
5 years ago
e062fcd429
Revision: add salt.
5 years ago
119479d22b
Test reset: allow anyone to reset test users and fully init accounts.
5 years ago
29145f2215
Logout: don't use internal auth accessor.
5 years ago
c00c208199
Change to our own token authentication.
5 years ago
cc23d516a0
Add an endpoint to change password.
5 years ago
9cc68291df
Authentication classes: add permissions to logout.
5 years ago
ad184f0ac3
Rename encryptedSeckey to encryptedContent.
5 years ago
7842bd4d9c
CollectionItem list: don't return the main item.
5 years ago
1bd4c5be52
Send the login signal on login.
5 years ago
c2337f244d
Signup: fix signup for users without user info.
5 years ago
15cd41db83
login: gracefully handle bad login attempts.
5 years ago
215a260700
Login: use only the username (not email) for login.
...
We may add support for email in the future.
5 years ago
6051a5ae3a
Signup: use the recommended drf style for validation.
5 years ago
40db4e14b0
Signup: rename the UserQuerySerializer to Signup.
5 years ago
5b2040fda3
Fix running with postgres: convert memoryview to bytes for nacl.
5 years ago
ddc43c638a
Requirements: remove unused requirements.
5 years ago
9347682997
Collection update: support limiting vs not limiting based on stoken.
5 years ago
64b947d455
Change invitations to also follow our list return type format.
5 years ago
89b47c67b7
Removed redundant get_serializer_context.
...
This is already provided by default in drf.
5 years ago
9f2140ffac
Change serializer fetching to the more drf way of doing it.
...
Also fix the ItemChunk serializer.
5 years ago
6c31b8fb30
CollectionItemView: disallow normal item creation
...
People should only use transaction/batch
5 years ago
f6960bb8cb
CollectionMember: fix collection list to return data in the right format.
5 years ago
e159bf971b
Collection/item viewsets: enforce access.
5 years ago
6e7fd5d0dd
Collection membership: implement leaving/revoking access.
5 years ago
d93a5d3f06
Collections: use the member stokens for filtering based on stoken
...
While at it, also generalised the stoken handling to be generic and
extendible.
5 years ago
1f18f4e50b
CollectionMember: add stokens when we create/change the member.
5 years ago
91aadb6565
Make etag write-only.
5 years ago
9c63f8d674
Rename stoken to etag and cstoken to stoken.
...
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
5 years ago
8eee280bbb
Split cstoken and stoken to be different concepts
...
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.
A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
5 years ago
Tom Hacohen