Jorge Manrubia 31542373ee Merge pull request #2112 from JangoCG/feature/rate-limit-join-codes ...

feat: protect join codes from brute-force attacks

2025-12-14 09:43:28 +01:00

..

accounts

Add validation for the join code usage limit

2025-12-10 10:10:08 -05:00

active_storage

Allow direct uploads via API

2025-12-11 11:52:38 +01:00

admin

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

boards

update columns controller destroy test

2025-12-11 10:49:05 +01:00

cards

API: Support created_at for API card and comment creation (#2056)

2025-12-10 19:57:38 -08:00

columns

update tests

2025-12-11 10:36:56 +01:00

concerns

Use Sec-Fetch-Site exclusively for CSRF protection

2025-12-12 18:37:32 +01:00

events/day_timeline

Update test

2025-11-24 12:04:33 +01:00

my

Move Identities to My::Identities

2025-12-10 15:13:35 +01:00

notifications

Add API for reading notifications

2025-12-10 09:23:52 +01:00

prompts

Constrain user queries to the current or relevant account

2025-11-17 09:11:57 -05:00

public

Replace collection with board in the code, tests green

2025-11-05 13:41:12 +01:00

searches

Format

2025-06-24 13:26:37 +02:00

sessions

Test that you can't go to the magic link screen without an email

2025-12-12 07:16:07 +01:00

signup

Bring simple signup flow from the fizzy-saas gem

2025-11-28 15:53:58 +01:00

users

Fix stale-read race when creating push subscriptions

2025-12-09 01:34:37 -08:00

webhooks

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

allow_browser_test.rb

Update useragent to recognize twitterbot/facebot

2025-11-25 18:05:21 -05:00

api_test.rb

Move tests into their controller tests

2025-12-10 09:23:52 +01:00

boards_controller_test.rb

Add API for creating and updating boards

2025-12-10 09:23:52 +01:00

cards_controller_test.rb

feat: expose closed boolean in card JSON API

2025-12-12 10:12:21 +01:00

controller_authentication_test.rb

Remove the internal API

2025-10-31 16:26:08 +01:00

events_controller_test.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

filters_controller_test.rb

Make IDs more time-sortable in tests

2025-11-17 09:12:40 -05:00

join_codes_controller_test.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller_test.rb

Redirect to root to avoid changing the path by default

2025-11-05 19:00:50 +01:00

notifications_controller_test.rb

Add API for reading notifications

2025-12-10 09:23:52 +01:00

qr_codes_controller_test.rb

Add QrCodesController test

2025-12-11 13:51:18 -05:00

searches_controller_test.rb

Fix rubocop

2025-11-21 15:30:14 +00:00

sessions_controller_test.rb

Add test coverage for the require_unauthenticated_access redirect

2025-12-11 13:02:54 -05:00

signups_controller_test.rb

Use initializer to configure tenant mode

2025-12-11 11:20:43 +00:00

tags_controller_test.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller_test.rb

Validate avatar sizes

2025-12-13 13:05:30 -05:00

webhooks_controller_test.rb

Pass correct params to webhook reactivation url helper.

2025-12-05 22:44:34 -05:00