487 Commits (f52facad1c0adaa84b9418428b35c8e4fb067bf8)
 

Author SHA1 Message Date
Tom Hacohen cc23d516a0 Add an endpoint to change password. 4 years ago
Tom Hacohen 9cc68291df Authentication classes: add permissions to logout. 4 years ago
Tom Hacohen ad184f0ac3 Rename encryptedSeckey to encryptedContent. 4 years ago
Tom Hacohen 7842bd4d9c CollectionItem list: don't return the main item. 4 years ago
Tom Hacohen 1bd4c5be52 Send the login signal on login. 4 years ago
Tom Hacohen c2337f244d Signup: fix signup for users without user info. 4 years ago
Tom Hacohen 15cd41db83 login: gracefully handle bad login attempts. 4 years ago
Tom Hacohen 215a260700 Login: use only the username (not email) for login.
We may add support for email in the future.
4 years ago
Tom Hacohen 6051a5ae3a Signup: use the recommended drf style for validation. 4 years ago
Tom Hacohen 40db4e14b0 Signup: rename the UserQuerySerializer to Signup. 4 years ago
Tom Hacohen 5b2040fda3 Fix running with postgres: convert memoryview to bytes for nacl. 4 years ago
Tom Hacohen ddc43c638a Requirements: remove unused requirements. 4 years ago
Tom Hacohen 9347682997 Collection update: support limiting vs not limiting based on stoken. 4 years ago
Tom Hacohen 64b947d455 Change invitations to also follow our list return type format. 4 years ago
Tom Hacohen 89b47c67b7 Removed redundant get_serializer_context.
This is already provided by default in drf.
4 years ago
Tom Hacohen 9f2140ffac Change serializer fetching to the more drf way of doing it.
Also fix the ItemChunk serializer.
4 years ago
Tom Hacohen 6c31b8fb30 CollectionItemView: disallow normal item creation
People should only use transaction/batch
4 years ago
Tom Hacohen f6960bb8cb CollectionMember: fix collection list to return data in the right format. 4 years ago
Tom Hacohen e159bf971b Collection/item viewsets: enforce access. 4 years ago
Tom Hacohen 6e7fd5d0dd Collection membership: implement leaving/revoking access. 4 years ago
Tom Hacohen d93a5d3f06 Collections: use the member stokens for filtering based on stoken
While at it, also generalised the stoken handling to be generic and
extendible.
4 years ago
Tom Hacohen 1f18f4e50b CollectionMember: add stokens when we create/change the member. 4 years ago
Tom Hacohen 91aadb6565 Make etag write-only. 4 years ago
Tom Hacohen 9c63f8d674 Rename stoken to etag and cstoken to stoken.
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
4 years ago
Tom Hacohen 8eee280bbb Split cstoken and stoken to be different concepts
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.

A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
4 years ago
Tom Hacohen 6e7ad92a12 Add missing migrations forgotten in the previous commit
Missing from: 73f4ff765c7713c9aa48dec2bfc4c3c1c0c7e9f3
4 years ago
Tom Hacohen 2a39f3538e Change to standalone stoken objects (+ small optimisation).
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.

We also slightly improved how we filter by revs.
4 years ago
Tom Hacohen 3cdb7783fe Make sure to always return fresh stokens. 4 years ago
Tom Hacohen fce844bfc3 Uid: Change how validation is done. 4 years ago
Tom Hacohen 10b9d33ffe UidValidator: fix to actually validate. 4 years ago
Tom Hacohen e94e2f9d70 Add a separate pubkey/privatekey for sharing.
It's separated from the login one so that encryption key and identity
can be rotated separately.
4 years ago
Tom Hacohen 863c405802 Rename pubkey to loginPubkey because we'll soon have another pubkey.
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
4 years ago
Tom Hacohen 2412c295de Signup: fix bug making signup not to work. 4 years ago
Tom Hacohen 8323f23561 Add a nop for api/logout/
It's there for etesync.com and is used to invalidate the token.
Unfortunately we can't fully implement it here because the token
implementation is lacking. This will be fixed soon once we update the
token library with the next version of the protocol.
4 years ago
Tom Hacohen a965a76c36 Invitation: move outgoing invitations to invite/outgoing. 4 years ago
Tom Hacohen 118dbea4e3 InvitationSerializer: fix user validator. 4 years ago
Tom Hacohen 7f7d223b9b Fix indentation error. 4 years ago
Tom Hacohen 40b7edcb84 Add a way to fetch a user's pubkey. 4 years ago
Tom Hacohen 47e1eec122 Incoming invitations: implement incoming invitations and accepting them 4 years ago
Tom Hacohen 8d1c02dcb9 Collection invitation: implement creating and manipulating collections invitations. 4 years ago
Tom Hacohen edd88427b0 Add a viewset to control collection membership. 4 years ago
Tom Hacohen 4ca74bc69b Permissions: start from scratch and add IsCollectionAdmin permission. 4 years ago
Tom Hacohen c30cc2f229 Improve and rename bulk_get to filter by item stokens too + cstoken changes
Also change how we return cstokens
4 years ago
Tom Hacohen aaee8f5e38 Fix new_cstoken getting for list functions.
We were getting the general cstoken, and were not honouring our limit.
4 years ago
Tom Hacohen 9bbb7ef3d7 Fix filter by cstoken function to not fetch twice. 4 years ago
Tom Hacohen c63210fe77 CollectionItem: implement batch updating. 4 years ago
Tom Hacohen b6571c93f6 Collection: fix stoken and add cstoken for the collection token. 4 years ago
Tom Hacohen e851fb9877 Views: fix wrong items name. 4 years ago
Tom Hacohen ae4aafcf96 Transaction: make it possible to pass a global stoken to block by. 4 years ago
Tom Hacohen eeaea6e6ab Transaction: return 200 rather than 201. 4 years ago