843b59a0ac
Login/Changepassword: change to verifying the hostname without the part.
...
Verifying the port was causing issues, and anyhow, this check is
paranoid and isn't strictly necessary for security.
The problem is that Django's `get_host()` and the equivalent on some
platforms returns it without the port, though on others (like e.g. the
library we use from JS) it returns with the port. This was inconsistent
and was causing authentication to fail.
We thus relaxed the test to not include the port when matching, which
should make it work consistently across all platforms.
4 years ago
a6f5e070a4
Update changelog.
4 years ago
422b62d5b2
Disallow creating new collections without a collection type set.
4 years ago
f55ebeae7c
Collection saving: add another verification for collection UID uniqueness.
...
Even with the previous check, there could still be a race condition where two
collections with the same UID are created. Adding this extra check after
will prevent that from happening.
4 years ago
b097f3b8fa
README: update instructions and fix type
...
Fixes #60
4 years ago
46abeac2c0
Test reset: also reset memberships.
4 years ago
037f0f79a7
README: improve the update instructions for versions < 0.5.0
4 years ago
0a246aaa8d
README: improve self-hosting instructions
4 years ago
3b4cd424ab
Update changelog.
4 years ago
529b5c22e8
README: mention that this is EteSync 2.0
4 years ago
0e814ea410
Merge: merge in the new etebase (EteSync 2.0) code
4 years ago
5bce4d9932
Collection Type: fix backwards compatibility for creating new collections.
...
Continuation to 409248d419
4 years ago
409248d419
CollectionTypes: add backward compatibility adjustments until 2.0 is out.
4 years ago
5d8a92f000
Collections: add support for collection types.
...
We also added the field for invitations, as it's needed for collections
to work.
4 years ago
acd22b9b47
Serializers: remove unused field.
4 years ago
741b6d7c52
Collection removed memberships: only return removed memberships within our returned range.
...
Before this change we were returning all of the removed memberships that happened
after stoken. Though instead, we should just return the removed memberships that
happened after stoken and before the new stoken we are returning.
4 years ago
aa7b049b62
Stoken: always return the stoken object, not the rev.
4 years ago
c7bd01b2d1
Logout: allow any authenticated user (instead of normal permissions).
...
We should always allow users to log out if they are authenticated. This
doesn't need to use the global permissions.
4 years ago
47f3e08846
Signup: improve docs.
4 years ago
24c161b0d8
Signup: don't try to clean fields for objects we haven't created.
4 years ago
9cad5d62e1
Account: change Dashboard URL endpoint's permissions.
...
We only want to require that the account is authenticated, not the rest of
the permissions. As we want to be able to get a dashboard url for accounts
that aren't currently valid.
4 years ago
74f40abc65
Account: add a dashboard url endpoint.
...
This lets servers share a dashboard url with clients so that they in
turn can present clients with a settings dashboard.
We currently use it on the main server, but self-hosted servers may
also benefit from it for letting users manage some of their settings
(e.g. 2FA).
4 years ago
9152e6f42d
Fix bad stoken error.
...
We were calling the validation constructor wrong.
4 years ago
06f2dd72a7
Exception: fix detail/code for exception.
4 years ago
6214688170
Invitations: share the username of the inviter.
4 years ago
c9983fd79d
Update README for Etebase with new wiki links ( #56 )
4 years ago
1e7e9eceac
README: update signup instructions to EteSync 2.0.
...
Fixes #55 .
4 years ago
8a557ff82c
Disable signups by default.
...
The next commit includes README instructions on how to create users
and enable signups.
4 years ago
f5ced873ac
Lint: fix lint errors.
4 years ago
5c803d8a51
Only expose drf's auth in debug mode.
4 years ago
5d9b47531b
Collectin: make sure collections always have a unique UID.
4 years ago
18b3f45b79
Collection main_item: make a OneToOneField intsead of just a foreign key.
4 years ago
7b8b0a5685
Login: make case insensitive.
4 years ago
4dbdb3d7cf
Invitations: gracefully error when trying to invite an already invited user.
4 years ago
374048f013
Fix disabling of browseable API when debug is off.
4 years ago
00cf2d83a0
Only enable browsable API when debugging is on.
...
The reason for that is that the API may expose data that shouldn't be exposed,
such as the list of users on the service.
4 years ago
3de1d48b9e
Browsable API: use input fields for relations.
4 years ago
c04650f890
README: update contribution information.
4 years ago
eac8fae376
README: update contribution information.
4 years ago
9efb8d4c40
Update example-configs to etebase.
4 years ago
b9f20d251a
Add example config for using using nginx with uwsgi
4 years ago
38e0700ac0
Update django and remove unused deps.
4 years ago
5785f803ac
Port over easyconfig from the etesync server code.
...
Migrated by Tom, but kept the credit to daftaupe
4 years ago
9c6a7e9428
Login: fix server error when trying to login to users without userinfo.
4 years ago
a85e816810
User not found: return a 401 instead of a 404.
4 years ago
d90931fbe5
Make access level an int instead of a string.
...
We started with a string because we thought it could maybe provide more
flexibility, though really, an int makes much more sense, especially on
all the platforms etebase runs nowadays.
4 years ago
43569727f4
Signup: send a signal on account signup.
4 years ago
42a72ce5c7
Serializers user signup: correctly handle EtebaseValidationErrors.
...
Don't coerce them to strings
4 years ago
7ab9513e05
Serializers: rename message to detail to conform with the rest of the API.
...
This was a mistake in the previous commit.
4 years ago
bf22b1676f
Serializers: improve field serialization errors.
4 years ago
Tom Hacohen