github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-21 09:16:30 -05:00
Code Issues Projects Releases Packages Wiki Activity
6540 commits 39 branches 47 tags 111 MiB
Commit graph

399 commits

Author SHA1 Message Date
Erik Michelson
157a0fe278 refactor(media): store filenames, use pre-signed s3/azure URLs, UUIDs 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-09-12 14:49:17 +02:00
Erik Michelson
4132833b5d refactor(api-docs): move api docs to /api/doc/ 
The API documentation belongs strictly to the API itself.
Due to the usage of version-prefixed API endpoints, there is no conflict
with existing or future endpoints.
The reason behind this is that we already have enough exceptions in the
routing (default everything to react-frontend, exceptions for backend)
and it is hard to keep it synchronized throughout all relevant places.
This came to attention as the dev setup didn't proxy the API docs to the
backend.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-09-12 14:49:17 +02:00
Erik Michelson
7f665fae4b feat(auth): refactor auth, add oidc 
Thanks to all HedgeDoc team members for the time discussing,
helping with weird Nest issues, providing feedback
and suggestions!

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-09-11 21:29:49 +02:00
renovate[bot]
61fc33fc73 chore(deps): update yarn to v4.4.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: David Mehren <git@herrmehren.de>
 2024-09-02 16:38:54 +02:00
renovate[bot]
0bad560ece chore(deps): update dependency mkdocs-material to v9.5.34 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-01 16:12:36 +00:00
renovate[bot]
d85f2d6e00 chore(deps): update dependency mkdocs to v1.6.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-30 15:32:46 +00:00
renovate[bot]
695f2e350a chore(deps): update dependency pymdown-extensions to v10.9 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 13:03:49 +02:00
renovate[bot]
fbd9f7eb07 chore(deps): update dependency markdownlint-cli2 to v0.13.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:40:25 +02:00
renovate[bot]
cf53e99c5a chore(deps): update dependency mkdocs to v1.6.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 12:39:50 +02:00
renovate[bot]
44d41a5ec5 chore(deps): update yarn to v4.1.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-08-29 10:08:54 +00:00
renovate[bot]
7d842960a9 chore(deps): update dependency pymdown-extensions to v10.7.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-29 02:15:38 +00:00
renovate[bot]
c3863a4e27 chore(deps): update dependency mkdocs-material to v9.5.33 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-28 22:53:03 +00:00
Erik Michelson
1f1231a730 ci: remove netlify deployment workflow 
This workflow was used in an early stage of development of HedgeDoc 2.
It allowed the core developers to quickly check fixes, improvements or
new features to the HedgeDoc UI without the requirement to check-out
the branch locally. As not every pull request required a deployment,
this workflow was only triggered when the "ci: force deployment"
label was added. Since some time already, the frontend and backend
are so tightly coupled that the netfliy deployment doesn't make any
sense anymore and therefore hasn't been used anymore. This commit
therefore removes this leftover workflow.

@RedYetiDev contacted us privately and reported that this deployment
workflow could have been abused to invoke arbitrary commands, including
extraction of environment variables which include our tokens for the
turborepo build cache or the netlify deployment token. For this it
would have been required that somebody created a "safe" pull request,
which would have been labelled with the deployment label and then
changed afterwards since the workflow checks out the pull request
source repository, not the target. We assured that the label was only
added to pull requests from trusted members of the HedgeDoc core team.
There was never any malicious use of the workflow. Furthermore, no
released versions of HedgeDoc (1.x) could have been affected by this,
even in the worst-case scenario.

We're thankful for putting this risk at our attention!
If you too encounter something unusual regarding security in HedgeDoc
itself or our toolchain around it, don't hesitate to contact us.
Details on this are wriiten in our SECURITY.md in the root of the
repository.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2024-07-30 08:48:38 +02:00
Jochen Martin Eppler
cdb9a5cbb0 Fix typo 
defition --> definition

Signed-off-by: Jochen Martin Eppler <jougs@gmx.net>
 2024-06-27 12:45:50 +02:00
renovate[bot]
663faaf8f7 chore(deps): update yarn to v4.1.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 18:00:34 +01:00
renovate[bot]
3ea720d601 chore(deps): update dependency pymdown-extensions to v10.7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 18:00:34 +01:00
renovate[bot]
5dd85b9fc3 chore(deps): update dependency mkdocs-material to v9.5.9 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 18:00:34 +01:00
Tilman Vatteroth
631b641041 fix(docs): linting of ldap config 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-02-10 16:02:31 +01:00
renovate[bot]
e1fdfb9095 chore(deps): update dependency markdownlint-cli2 to v0.12.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-10 16:02:31 +01:00
renovate[bot]
e8a500fb76 chore(deps): update dependency mkdocs-material to v9.5.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-28 16:53:29 +00:00
renovate[bot]
442aa2a004 chore(deps): update dependency mkdocs-material to v9.5.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-24 21:56:38 +00:00
renovate[bot]
ff595561d2 chore(deps): update dependency mkdocs-material to v9.5.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-22 16:05:01 +00:00
yamashush
275988716c doc: update e2e test script name 
Signed-off-by: yamashush <38120991+yamashush@users.noreply.github.com>
 2024-01-21 15:31:10 +01:00
Tilman Vatteroth
01d7eb9529 fix(deps): bump minimum node version to v20 
With node 18 the tests always crash.

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2024-01-18 19:12:46 +01:00
Erik Michelson
482cb7729f docs: fix reverse-proxy how-to using wrong host header 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2023-12-25 12:58:48 +01:00
renovate[bot]
ad6a0faed6 chore(deps): update dependency pymdown-extensions to v10.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-07 20:26:48 +01:00
renovate[bot]
77b63e0368 chore(deps): update dependency mkdocs-material to v9.5.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-07 20:12:23 +01:00
renovate[bot]
4b99dc2d49 chore(deps): update dependency markdownlint-cli2 to v0.11.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-07 20:11:43 +01:00
renovate[bot]
7b1870b6b9 chore(deps): update yarn to v4.0.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-12-07 17:14:34 +00:00
renovate[bot]
c2ffcd763c chore(deps): update dependency mkdocs-material to v9.4.14 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-01 00:20:57 +00:00
renovate[bot]
93cdfb0a0a chore(deps): update dependency mkdocs-material to v9.4.8 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-12 21:07:16 +00:00
renovate[bot]
a18638aac5 chore(deps): update yarn to v4.0.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-12 20:00:30 +00:00
renovate[bot]
7cd394b8f8 chore(deps): update dependency mkdocs-material to v9.4.7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-29 19:53:22 +00:00
Philip Molares
e797d600d4 chore: release alpha 2 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-10-25 21:55:27 +02:00
renovate[bot]
daecf20dd6 chore(deps): update yarn to v4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-24 11:26:16 +02:00
renovate[bot]
ad1d7cbb29 chore(deps): update dependency pymdown-extensions to v10.3.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-20 01:25:30 +00:00
renovate[bot]
ea57f5bb3b chore(deps): update dependency mkdocs-material to v9.4.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-14 10:23:52 +00:00
Erik Michelson
520953d0bd enhancement(docs): add info about ports in the setup tutorial 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2023-10-13 09:58:33 +02:00
Erik Michelson
b237836dd0 fix(docs): set docs title 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2023-10-13 09:58:33 +02:00
renovate[bot]
4c60bdb492 chore(deps): update dependency mkdocs-material to v9.4.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-10 09:10:23 +00:00
David Mehren
3d03835af9 chore: set version in all packae.jsons 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-10-08 22:01:47 +02:00
David Mehren
0df8533450 docs: set HD_INTERNAL_API_URL in docker-compose.yml example 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-10-08 21:12:51 +02:00
Tilman Vatteroth
f43c9fd2b1 feat: add internal api url 
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
 2023-10-08 21:12:51 +02:00
Philip Molares
74ba21711c docs: add faq entry about fork awesome deprecation 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-10-08 21:12:15 +02:00
Yannick Bungers
8f66447ab9 Update docs for HD_SHOW_LOG_TIMESTAMP 
Signed-off-by: Yannick Bungers <git@innay.de>

Signed-off-by: Yannick Bungers <git@innay.de>
 2023-10-08 20:42:37 +02:00
David Mehren
3aee932736 docs: add alpha version warning to setup instructions 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-10-08 19:25:19 +02:00
David Mehren
de14b75369 docs: fix alpha image tag 
Signed-off-by: David Mehren <git@herrmehren.de>
 2023-10-08 19:25:19 +02:00
Philip Molares
d10c922cba docs: add netlify badge 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-10-08 19:21:10 +02:00
Philip Molares
09698579a7 fix: docs deployment 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-10-08 17:54:39 +02:00
Philip Molares
c1aa396a3e fix: docs deployment 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2023-10-08 17:44:00 +02:00