Commit Graph

26 Commits

Author SHA1 Message Date
Vincent Breitmoser 10162c6f88 Revert social-proof commits
This reverts commit 149a698a3f.
This reverts commit 29018f024d.
This reverts commit 42372f27cb.
This reverts commit a424642256.
2020-11-06 11:25:40 +00:00
Vincent Breitmoser 860bd6e552 update to sequoia-0.20 2020-11-04 22:21:00 +01:00
Wiktor Kwapisiewicz 42372f27cb profiles: display pretty error page for not-found profiles 2020-08-06 11:08:00 +02:00
Wiktor Kwapisiewicz a424642256 profiles: add profile pages with social proofs support 2020-08-06 11:08:00 +02:00
Vincent Breitmoser 4934d15165
i18n: streamline upload errors 2019-11-02 23:55:51 +01:00
Vincent Breitmoser 3355c7e5d4
upload: fix template 2019-10-03 18:18:44 +02:00
Vincent Breitmoser 9152e2d3dd
i18n: translate more dynamic messages 2019-10-03 18:18:43 +02:00
Vincent Breitmoser 0fced131c5
i18n: working i18n based on gettext 2019-10-03 18:18:42 +02:00
Vincent Breitmoser 77e9c13b5b
i18n: localize mail templates 2019-10-03 18:18:41 +02:00
Vincent Breitmoser 6e0ab047ee
vks: slightly improve wording for quick upload 2019-10-03 18:18:39 +02:00
Vincent Breitmoser ecdf1001f4
upload: improve error message for double verifications
Keep a rate limiter token around, and tell the user that a link was
already clicked recently if that is the case.
2019-09-26 23:10:13 +02:00
Daniel Silverstone 6df212f087
upload: Require POST for token verification
In order to mitigate against MUAs previewing URLs, move the token
verification flow to a POST handler, and add a new GET handler
which returns a form requiring the user to click an additional time
in order to verify their address.

The returned form also carries some JavaScript which will attempt to
do this for the user, meaning the experience for the user should be
almost exactly as before, while mitigating MUA previews.

Closes: #53

Signed-off-by: Daniel Silverstone <dsilvers@digital-scurf.org>
2019-09-26 21:42:48 +02:00
Vincent Breitmoser 41ea7111d9
update to rust 2018 edition 2019-09-02 23:09:52 +02:00
Vincent Breitmoser 9a71103fe7
hkp: welcome email on upload of previously unknown key 2019-07-16 10:09:57 +02:00
Vincent Breitmoser f38a530ae9
vks_web: split up request and response processing 2019-07-16 10:09:55 +02:00
Vincent Breitmoser 65df904cd0
mail: use base_uri from RequestOrigin
This will cause outgoing emails to contain onion addresses for backlinks
to the server, if the request comes via onion service.
2019-06-23 01:41:29 +02:00
Vincent Breitmoser 52bb3aeab6 web: use base_uri from RequestOrigin everywhere 2019-06-22 22:45:17 +00:00
Vincent Breitmoser e5b7d83433
slightly improve wording in publish dialog 2019-06-12 16:57:19 +02:00
Vincent Breitmoser 8026d3e311
be more clear about multiple keys in curl shortcut 2019-06-12 16:04:42 +02:00
Vincent Breitmoser f8df6ed1e7
split human-readable interface and hkp 2019-06-11 17:55:39 +02:00
Vincent Breitmoser 377b935bb8
fix 400-plain template name 2019-06-11 13:02:57 +02:00
Vincent Breitmoser 97dc7d8a3c
report number of unparsed uids in web upload 2019-06-10 21:51:45 +02:00
Vincent Breitmoser 315a3c6615
fix error reporting for shortcut upload 2019-06-06 17:45:11 +02:00
Vincent Breitmoser f8b6fab897
add gpg/curl shortcut 2019-06-06 14:18:45 +02:00
Vincent Breitmoser b4509d19d1
rework upload dialog 2019-06-05 15:15:43 +02:00
Vincent Breitmoser 9a225410c9
Rework API 2019-06-04 16:12:36 +02:00