Sharkey/packages/backend/src/server/api/endpoints/notes
Chocolate Pie 82822e29d9
Merge pull request from GHSA-7pxq-6xx9-xpgm
* fix: fix improper authorization when accessing with third-party application

* refactor: refactor type definitions

* fix: get rid of unnecessary access limitation

* enhance: サードパーティアプリケーションがWebsocket APIを使えるように

* fix: add missing parentheses

* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"

This reverts commit 5150053275.

* frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする

* enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加

* enhance(test): Websocket APIに対するテストも追加

* enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合

* fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正

* enhance(backend): Websocketの接続に最低限必要な権限を変更

* fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように

* fix(backend): エンドポイントにアクセスするために必要な権限を変更

* fix(frontend/locale): Add missing type declaration

* chore: update `misskey-js/src/autogen`

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-12-28 09:45:54 +01:00
..
favorites perf(backend): createdAtをidから取得するように & 無駄なDateインスタンスの生成を避けるように 2023-10-16 10:45:22 +09:00
polls Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
reactions chore(backend): Resolve import/no-default-export rule violations (#11732) 2023-08-17 21:20:58 +09:00
thread-muting perf(backend): createdAtをidから取得するように & 無駄なDateインスタンスの生成を避けるように 2023-10-16 10:45:22 +09:00
bubble-timeline.ts fix the spacing 2023-12-04 14:26:37 +00:00
children.ts upd: Separate quote from boost 2023-10-15 02:16:02 +02:00
clips.ts update deps (#11820) 2023-09-15 14:28:29 +09:00
conversation.ts upd: show poll in non-detailed post if poll exists 2023-10-06 20:36:28 +02:00
create.test.ts upd: increase cw limit 2023-12-03 17:56:54 +01:00
create.ts merge: upstream 2023-12-23 02:09:23 +01:00
delete.ts enhance(backend): refine moderation log (#10939) 2023-09-23 18:28:16 +09:00
edit.ts fix: edit when it comes to quotes 2023-12-04 15:45:26 +01:00
featured.ts fix (backend): 「みつける」のなかにミュートしたユーザが現れてしまう問題を修正 (#12559) 2023-12-03 20:46:19 +09:00
global-timeline.ts merge: upstream 2023-11-04 14:32:28 +01:00
hybrid-timeline.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
like.ts upd: change the way likes get handled 2023-11-16 23:47:44 +01:00
local-timeline.ts merge: upstream 2023-12-23 02:09:23 +01:00
mentions.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
reactions.ts fix(backend): notes/reactionsのページネーションが機能しない 2023-09-23 10:00:38 +09:00
renotes.ts upd: Separate quote from boost 2023-10-15 02:16:02 +02:00
replies.ts update deps (#11820) 2023-09-15 14:28:29 +09:00
search-by-tag.ts upd: fix tag view not respecting blocks and suspensions 2023-12-21 22:24:23 +01:00
search.ts upd: use Meilisearch for file type searching 2023-11-21 22:23:01 +01:00
show.ts chore(backend): Resolve import/no-default-export rule violations (#11732) 2023-08-17 21:20:58 +09:00
state.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
timeline.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
translate.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
unrenote.ts upd: Separate quote from boost 2023-10-15 02:16:02 +02:00
user-list-timeline.ts Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-28 09:45:54 +01:00
versions.ts upd: add additional checks 2023-10-22 19:19:44 +02:00