gotosocial/internal
Daenney 9cfb69f75d
[feature] Make OIDC admin groups configurable (#1555)
This removes the current default of checking for membership of the admin
or admins group and makes it required to explicitly configure which
groups should grant admin access, if any.

Relying on the implicit default of admin or admins is potentially
dangerous as that group may contain a different subset of people that we
may wish to grant admin access to GtS. This is probably not an issue for
a single-person instance, but for a community instance different admin
groups may exist in an OIDC provider for different applications.

I'm explicitly opting for not defaulting the value of oidc-admin-groups
to admin,admins because I think it's better for those things to be
explicitly configured.
2023-02-25 16:37:39 +00:00
..
ap [bugfix] Fix failure to look up remote profiles with duplicate emojis in some cases (#1534) 2023-02-20 16:27:41 +01:00
api [feature] Make OIDC admin groups configurable (#1555) 2023-02-25 16:37:39 +00:00
cache [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
concurrency [chore] Update more log calls to include context (#1517) 2023-02-17 19:05:43 +00:00
config [feature] Make OIDC admin groups configurable (#1555) 2023-02-25 16:37:39 +00:00
db [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
email [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
federation [chore] Update more log calls to include context (#1517) 2023-02-17 19:05:43 +00:00
gotosocial [performance] processing media and scheduled jobs improvements (#1482) 2023-02-13 18:40:48 +00:00
gtserror [chore] Update/add license headers for 2023 (#1304) 2023-01-05 12:43:00 +01:00
gtsmodel [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
httpclient [chore] Move request validation earlier in client (#1531) 2023-02-19 11:01:15 +00:00
id [chore] reformat GetAccount() functionality, support updating accounts based on last_fetch (#1411) 2023-02-03 20:03:05 +00:00
iotools [bugfix] Parse video metadata more accurately; allow Range in fileserver (#1342) 2023-01-16 16:19:17 +01:00
log [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
media [bugfix] Keep png transparency (#1522) 2023-02-18 16:52:15 +01:00
messages [chore] Update/add license headers for 2023 (#1304) 2023-01-05 12:43:00 +01:00
middleware [bug] Pass context in logging middleware (#1514) 2023-02-17 12:37:57 +01:00
netutil [chore] Update/add license headers for 2023 (#1304) 2023-01-05 12:43:00 +01:00
oauth [bugfix] fix oob token route, update templates+css for oob and errors (#1519) 2023-02-18 16:47:42 +01:00
oidc [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
processing [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
regexes [feature] Federate reports to remote instance as Flag (if desired) (#1386) 2023-01-27 14:48:11 +01:00
router [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
state [performance] processing media and scheduled jobs improvements (#1482) 2023-02-13 18:40:48 +00:00
storage [bugfix] Remove initial storage cleanup (#1545) 2023-02-21 10:49:57 +01:00
stream [chore] Update/add license headers for 2023 (#1304) 2023-01-05 12:43:00 +01:00
text [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
timeline [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
trans [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
transport [chore] transport improvements (#1524) 2023-02-18 17:02:19 +01:00
typeutils [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
uris [feature] Implement Report database model and utility functions (#1310) 2023-01-10 14:19:05 +00:00
util [chore] Text formatting overhaul (#1406) 2023-02-03 11:58:58 +01:00
validate [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
visibility [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
web [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
workers [performance] processing media and scheduled jobs improvements (#1482) 2023-02-13 18:40:48 +00:00