github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-24 02:36:31 -05:00
Code Issues Projects Releases Packages Wiki Activity
2532 commits 39 branches 47 tags 112 MiB
Commit graph

142 commits

Author SHA1 Message Date
Yannick Bungers
620468e843
Refactored dropbox.js -> dropbox.ts 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:14 +02:00
Philip Molares
c075eb769f
added auth/twitter.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:14 +02:00
David Mehren
e5961336b7
Add middleware/index.ts and remove default exports 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:13 +02:00
David Mehren
6de6aa1d89
Add AuthMiddleware interface 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:13 +02:00
Yannick Bungers
8a36aaaeb4
Fixed export 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:13 +02:00
Philip Molares
8ce724175b
check if req.user exists 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:13 +02:00
Philip Molares
395d9c671b
used the new named AuthRouter in app.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:13 +02:00
Philip Molares
5c49f42067
better typing in auth/index.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
3b7bab47be
used the new named UserRouter in app.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
ef6632cac9
added userRouter.ts 
- added @types/passport
- added @types/archiver
- types all req and res arguments
- renamed unused argument next to _

Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
f550c5b1b2
added auth/utils.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
be65042792
added auth/index.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
a642cfd22a
fixed bug with minio.ts 
- the provider can't be meaningfully initialized if this UploadProvider is not configured

Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:11 +02:00
Yannick Bungers
6cbd436454
Refactored middleware -> Typescript 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:11 +02:00
Philip Molares
a36c36d86a
removed AuthProvider 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:11 +02:00
Philip Molares
3b36e2e0e6
fixed lib/web/note/router.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:11 +02:00
Philip Molares
823bd5e432
added lib/web/index.ts to let others import all the routers from one place 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:10 +02:00
Philip Molares
d4dc9a4046
added statusRouter.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:10 +02:00
Philip Molares
fd57ed19c2
added historyRouter.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:10 +02:00
Philip Molares
621905bc97
added baseRouter.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:10 +02:00
Philip Molares
41726949e8
not specified errors should be undefined and not null in UploadProvider 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:10 +02:00
Philip Molares
982bbe9728
rewrote ImageRouter 
- introduced UploadProvider interface
- rewrote all current UploadProviders

Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:09 +02:00
David Mehren
038db39c0e
Fix missing newlines in actions.ts 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:07 +02:00
David Mehren
d44144630f
Migrate historyRouter.js and baseRouter.js to TypeScript 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:07 +02:00
David Mehren
0ca8e2dc7d
Fix error import 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:07 +02:00
Yannick Bungers
dd4ea6f488
Added Types to actions.js and reformat 
Added Types to actions.js and reformat

Readded csp.ts

Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:07 +02:00
Philip Molares
57675265fc
removed 'use-strict' 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:06 +02:00
Yannick Bungers
8e76c764e3
Added Types to actions.js and reformat 
Added Types to actions.js and reformat

Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:06 +02:00
Yannick Bungers
536c54ff0d
moved response.js to response.ts and readded missing return statements 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:06 +02:00
Yannick Bungers
bb8fb93fee
Moved utils.js to utils.ts and refactored import and exports 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:06 +02:00
David Mehren
9f284b752b
Use import syntax for logger and config 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:05 +02:00
Yannick Bungers
bb8297dca3
Added Types to actions.js and reformat 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:04 +02:00
David Mehren
77e336dfda
Various refactors to use the new models 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:01 +02:00
David Mehren
1d4107fe90
Migrate models to TypeScript 
Co-authored-by: David Mehren <dmehren1@gmail.com>
Co-authored-by: Yannick Bungers <git@innay.de>
Co-authored-by: Philipp Hochkamp <me@phochkamp.de>
Co-authored-by: nzbr <mail@nzbr.de>

Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:01 +02:00
Sheogorath
d2ace4b2a0
Merge pull request #330 from Skgland/master 
Pass through ldap starttls option
 2020-04-23 23:34:46 +02:00
Sheogorath
4104f9835d
Merge pull request #278 from elespike/master 
Add OIDC scopes for email & profile retrieval
 2020-04-22 20:56:58 +02:00
Bennet Bleßmann
5fad6a25a8
Pass through ldap starttls option 
Fixing Issue #329

(cherry picked from commit b9169eb279020f21b372a843a83c71929fb6fd1d)

Signed-off-by: Bennet Bleßmann <bb-github@t-online.de>
 2020-04-20 10:55:50 +02:00
Charles Parmentier
856fc01fb9 Fixes relative path for fetching the style when set 
Signed-off-by: Charles Parmentier <charles.parmentier@hotmail.com>
 2020-03-06 00:09:54 +01:00
Sheogorath
97628595ed
Fix unsused import of fs 
Let's make the CI happy again :-)

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-26 15:11:24 +01:00
Sheogorath
a2522888b2
Remove PDF export 
As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-26 15:05:54 +01:00
Sheogorath
37923d11f8
Rewrite slide controller to TypeScript 
Before this patch the non-TypeScript version of the slide mode causes
problems with the TypeScript code. Therefore, in order to get things
working, this patch does minimalistic changes to the slide mode
controller to bring it into TypeScript convention. And unbreak slide
mode. Further changes are required, but this gets slide mode back to a
usable state.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-26 15:05:51 +01:00
Erik Michelson
c976217c12
Remove mattermost integration 
Signed-off-by: Erik Michelson <erik@liltv.de>
 2020-02-25 14:33:30 +01:00
Sheogorath
004e2fbcb2
TypeScript: Tighten configs to improve type validation 
TypeScript considers null and undefined as fine for all variable by
default. This patch enables `strictNullChecks`, which should cause
errors to be thrown as soon as a variable is null or undefined without
having it explicitly decleared for itself.[1]

[1]: https://www.typescriptlang.org/docs/handbook/migrating-from-javascript.html#strict-null--undefined-checks

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-24 16:19:17 +01:00
David Mehren
f6eec0ce90
Convert first files to TypeScript 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-02-24 15:08:23 +01:00
Marius
6332fce5d8 Add OIDC scopes for email & profile retrieval 
Signed-off-by: Marius <elespike@lab26.net>
 2020-02-22 00:16:16 -05:00
ike
197223dc81 Add Google oauth variable: hostedDomain 
Which is part of `passport-google-oauth2`.
It could be used as whitelist to a domain supported by google oauth.
Ref: https://github.com/jaredhanson/passport-google-oauth2/issues/3

Signed-off-by: ike <developer@ikewat.com>
 2020-02-08 15:57:22 +08:00
Ralph Krimmel
3fb3ca54e9 Removing returnTo setting from referer in all other authentication sources 
Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
 2019-11-28 12:25:59 +01:00
Ralph Krimmel
e0a8872742 Moving the storage of referrer information to main authorization check instead of doing it in the authentication source 
Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
 2019-11-28 10:59:59 +01:00
Ralph Krimmel
3e8cf5778f Fixing linting problems 
Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
 2019-11-27 15:17:00 +01:00
foobarable
1881775379 Fixing redirection after SAML login 
Saving referer into session in SAML auth so passport can redirect correctly after SAML login.

Signed-off-by: Ralph Krimmel <rkrimme1@gwdg.de>
 2019-11-27 15:08:30 +01:00