4484ca29b7
Fix pagination not working because the filter was lost
2025-09-18 12:47:54 +02:00
98edc2cdfb
Format
2025-09-18 12:19:33 +02:00
607541a9fd
Fetch workflow from collection, since the stage can be stale after changing collections
2025-09-18 12:07:36 +02:00
375b16b26e
Introduce columns and column entity
...
To refactor some messy code used to render the cards index screen
2025-09-18 11:41:28 +02:00
b625ad4530
Invalidate previews when workflows themselves are changed
2025-09-18 11:02:49 +02:00
690734d8ab
Fix several caching issues when viewing card permas
2025-09-18 10:58:09 +02:00
87c0e3faaa
Merge pull request #1126 from basecamp/notify-system
...
Don´t add system users to collections
2025-09-17 13:32:00 +02:00
f1d76a7cb7
Exclude inactive users
...
The system user should never be a subsriber but we should not serve it if it is
2025-09-17 13:26:53 +02:00
5710aa724f
Send HTML to campfire instead of JSON
2025-09-17 13:16:00 +02:00
9b55ff241c
Merge pull request #1124 from basecamp/fix-missing-default-value-for-delinquency-tracker
...
Fix crash due to missing default value
2025-09-17 11:53:41 +02:00
661471e9e8
Fix crash due to missing default value
2025-09-17 11:47:46 +02:00
b5d880c063
Merge pull request #1101 from basecamp/involvement-defaults
...
Involvement defaults
2025-09-16 14:16:24 -05:00
1258b0e6e0
Merge pull request #1111 from basecamp/on-deck-entropic
...
Cards in On Deck adopt the same entropy behavior as ones in Doing
2025-09-16 14:15:47 -05:00
34222b9717
Add missing actions
2025-09-16 20:23:50 +02:00
ce1d6469e7
Rename methods for clarity
2025-09-16 20:08:06 +02:00
dd3063b01d
Simplify delinquency tracking
2025-09-16 20:08:03 +02:00
02a421675f
Scope Webhooks to Collections
2025-09-16 20:07:25 +02:00
25b2daad93
Limit access to webhooks to admins
2025-09-16 20:04:20 +02:00
1d192c9d42
Ignore low-volume webhooks for delinquency checks
2025-09-16 20:04:20 +02:00
fee25a49ea
Periodically cleanup deliveries
2025-09-16 20:04:20 +02:00
9d77b17b8c
Remove encryption
2025-09-16 20:04:20 +02:00
d7db973397
Use the same timestamp from the body in the header
...
Else replay attack prevention doesn't work
2025-09-16 20:04:20 +02:00
df87ee8b35
Rename private IP ranges to disallowed IP ranges
2025-09-16 20:04:20 +02:00
b8317ce88d
Fix indentation
2025-09-16 20:04:20 +02:00
2fc9215b1d
Add support for Basecamp, Campfire & Slack webhooks
2025-09-16 20:04:20 +02:00
4879995013
Serialize events
2025-09-16 20:04:20 +02:00
0bdbc5f5e8
Add abuse prevention
2025-09-16 20:04:18 +02:00
4da69fb69f
Move reactivation out of edit
2025-09-16 20:03:57 +02:00
5c6cad057f
Extract triggering logic into a concern
2025-09-16 20:03:57 +02:00
9d717239e7
Dispatch Webhooks on event creation
2025-09-16 20:03:57 +02:00
9cfd1e43af
Enable subscribing to specific actions
2025-09-16 20:03:57 +02:00
a515ea3b1f
Create webhooks
2025-09-16 20:03:55 +02:00
b5a2c4a25e
Tidy up code a bit
2025-09-16 13:18:13 +02:00
6fe28c53e7
Extract common method
2025-09-16 13:06:01 +02:00
c56eb9ecd1
Cards in On Deck adopt some entropy behavior as ones in Doing
2025-09-16 13:06:01 +02:00
12d57678da
Minor tweaks for default settings
2025-09-16 13:00:05 +02:00
4b61c3ae30
Grant access to the creator and set their involvement to watching
2025-09-16 12:58:56 +02:00
7750b2e776
Merge pull request #1117 from basecamp/bundles-fixes
...
Fix problem where we can generate overlapping bundles due to flushing
2025-09-16 12:32:04 +02:00
a6eb928688
Fix: update ends_at when flushing bundles
...
If not, it can happen that the bundlers remains in a delivered state
even when it is not covering its window anymore because it has been delivered.
2025-09-16 12:10:06 +02:00
0e2c7f7d4d
Escape HTML everywhere where html_safe is used ( #1114 )
...
* Escape HTML everywhere where html_safe is used
* Mark search results as HTML safe at the attribute
2025-09-16 11:52:15 +02:00
97506c9a6c
Remove trace
2025-09-16 11:22:44 +02:00
09325403e5
Add missing test (we were only testing this logic via the bundle test)
2025-09-16 11:22:14 +02:00
d5a4239d19
Rename the queenbee_id and signal_user_id columns
...
to be more generic for the open-source release.
Find the signal account via Account#external_account
Find the signal user via User#external_user
2025-09-15 13:57:53 -04:00
48f7f914dc
Fix: the system to filter at the current view was broken after moving menu to turbo frame
...
https://fizzy.37signals.com/5986089/cards/1723
2025-09-15 17:07:09 +02:00
3d8437bd5f
Truncate summaries to keep within API limits
...
https://fizzy.37signals.com/5986089/cards/1739
2025-09-15 16:14:29 +02:00
0e3d25707c
Debug the overlapping bundle
2025-09-15 14:01:57 +02:00
2630e4bd74
Extract 37id and QB controllers, models, and tests
2025-09-13 16:03:02 -04:00
e7dcefb25b
Extract SignalUser and SignalAccount, and QB routes
2025-09-13 16:03:02 -04:00
8f39c015ea
Tests now pass with local authentication
...
This is the first step of a multi-step SaaS engine extraction.
Looking ahead to an open source release, we need to make sure that
local authentication is treated as an "official" option, and not just
a hack I added for Kevin to do load testing outside our DC. So this PR
gets to green, and adds a CI step in "local authentication" mode.
This all probably feels a little hacky to you, Reader, but the goal of
this change is to ease the next step, which will be extracting the
37id and Queenbee integrations into a proprietary "SaaS mode" engine.
In service of that goal, this commit simply wraps all of the dependent
code and tests with a conditional check on
`config.x.local_authentication`.
2025-09-13 15:21:00 -04:00
9e5108bcae
Touch user on modification to invalidate cache
...
For the new "add card" in the cards screen
2025-09-12 18:59:18 +02:00
Jorge Manrubia