PapaTutuWawa/etesync-server
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
177 Commits 1 Branch 0 Tags
4aa3daaa97d62fb6b826374a0b17a64383b743b1
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Hacohen 4aa3daaa97 Create a new django project. 2020-07-08 17:57:57 +03:00
Tom Hacohen f69c3a327c Revert "django_etebase: make migration generic and not depend on myauth." 
This reverts commit 925dcac0fb99204e3373251e12f8496721879361.
 2020-07-05 13:15:42 +03:00
Tom Hacohen f147f4ae58 Serializers: allow encryptionKey to be null. 2020-06-29 15:39:40 +03:00
Tom Hacohen 3dfceb63b1 Views: move the base64 encoding to the renderers. 
Hard-coding the serialization encoding in the serializers is wrong.
This fix now enables us to change to easily change to msgpack as the
transport layer.
 2020-06-29 15:39:40 +03:00
Tom Hacohen 2880673e27 drf_msgpack: add code to parse/serialise msgpack 
It's not actually used by clients but it's there and can be used. It
works for receiving msgpack messages, but doesn't yet work for sending
because some of the types will be converted to base64.
 2020-06-29 14:21:43 +03:00
Tom Hacohen fbf5552a62 Modify binary64 field to support binary renderers/parsers 
Fixes 39c1dfc53c30e65bcbff9e0ba0bb07bfc8bfc577
 2020-06-29 13:36:37 +03:00
Tom Hacohen 453275eadf Authentication: move to msgpack for the encrypted parts. 2020-06-29 11:30:59 +03:00
Tom Hacohen 85de674ee2 Move the etebase urls configuration to django_etebase. 2020-06-28 17:11:20 +03:00
Tom Hacohen 4948e91c65 django_etebase: make migration generic and not depend on myauth. 2020-06-28 16:52:14 +03:00
Tom Hacohen 785e4fae97 Merge the uidvalidator with the base64url validator and set a min length. 2020-06-26 12:14:06 +03:00
Tom Hacohen c00cf50163 Revision: remove salt field. 
It's not really needed. More information in the respective change
in the js client.
 2020-06-26 11:21:53 +03:00
Tom Hacohen 2b52eec41f Allow chunk UIDs to be longer. 2020-06-26 11:05:01 +03:00
Tom Hacohen 625df22989 Make item encryption key optional for collections/items 
Collections still have a unique encryption key (their collection key), and items
just have a unique key per item in a collection that's derived from the main key
and if we ever want to share items across collections or do something fancy like
that we can just add an encrypted key in there.
 2020-06-26 10:31:03 +03:00
Tom Hacohen cbb1d81850 Rename inline to prefetch and have it on by default. 2020-06-24 15:55:36 +03:00
Tom Hacohen c21c6af1d7 Filter by stoken: fix the done implementation for more functions 
The done implementation wasn't great because it would indicate we are
not done even when we are when the last chunk returned is exactly the
size of limit.
 2020-06-24 14:38:29 +03:00
Tom Hacohen 0ce2e8d996 Filter by stoken: cleanup and fix the done implementation 
The done implementation wasn't great because it would indicate we are
not done even when we are when the last chunk returned is exactly the
size of limit.
 2020-06-24 14:35:58 +03:00
Tom Hacohen 61383b9896 Stoken filtering: order by max_stoken to make sure we have a reliable order. 2020-06-24 13:39:59 +03:00
Tom Hacohen caa84c2a96 Stoken filtering: clean up stoken filtering and annotation. 
We are now querying the database less and simplified the queries.
 2020-06-24 13:39:59 +03:00
Tom Hacohen 0a19cd7e2c Stoken filtering: abstract getting the stoken id. 2020-06-24 11:30:37 +03:00
Tom Hacohen f6ef514661 Collection members: order by id so order is consistent. 2020-06-24 10:58:27 +03:00
Tom Hacohen 1bed39af9d Collection/item uid: allow base64-url not just base62. 2020-06-24 10:48:47 +03:00
Tom Hacohen 2da49bb95e Item revisions: don't exclude current, let the client decide. 2020-06-24 10:02:55 +03:00
Tom Hacohen 68365f5d75 Collection revision: support the inline parameter. 2020-06-23 18:35:09 +03:00
Tom Hacohen 7183b97541 Collection revision: implement iteration. 2020-06-23 18:25:23 +03:00
Tom Hacohen 786948c456 Item revisions: never return the current revision, only old ones. 2020-06-23 18:04:49 +03:00
Tom Hacohen 317c492688 CollectionItem: add support for filtering collections' main items. 
This used to be the default, so it still is.

It only affects the list endpoint, the rest all support withCollection
anyway, because IDs are passed directly.
 2020-06-23 13:50:09 +03:00
Tom Hacohen 291ebaa3f7 Items must have a uid now (not null). 
This is due to the previous change.
 2020-06-23 13:05:34 +03:00
Tom Hacohen 267d749c45 Collection: change collections to be an extension of items 
Each collection now has an item and the item's UID is the collections
UID. This lets us manipulate collections just like items, and as part of
transactions. This is significant because it lets us change them as part
of transactions!
 2020-06-23 13:03:46 +03:00
Tom Hacohen 37bae63a46 Invitations: add support for fetching using an iterator 2020-06-22 18:26:32 +03:00
Tom Hacohen d5300a76d8 Members: add support for iterators when listing members 2020-06-22 17:52:00 +03:00
Tom Hacohen b4db35bca1 List APIs: add done to APIs that didn't have it. 2020-06-22 17:27:07 +03:00
Tom Hacohen fcb58f0f4c List APIs: fix the stoken calculation for collections. 
I'm not sure why it just wouldn't work with aggregate. I also couldn't get it
to work with annotate then aggregate or any other alternative.
 2020-06-22 14:20:30 +03:00
Tom Hacohen 6117cac111 List APIs: return a done field to indicate the fetch is done. 2020-06-22 13:03:58 +03:00
Tom Hacohen 2d7b90e848 Collection items: also show deleted items. 
This was a mistake. We want deleted items to show because we want to
know when things have been deleted when we ask for updates.
 2020-06-18 16:14:55 +03:00
Tom Hacohen ab0d85c84f Change password: change to require a signed request, just like login. 
Without this, it would be sufficient to steal an auth token to render the account
unusable because it would be possible to just reset the encrypted content
of the account. With this change we require the user to actually know
the account password in order to do it.
 2020-06-17 14:38:02 +03:00
Tom Hacohen 54268ac027 Login: add an action indicator to know the user signed a login request. 2020-06-17 14:08:08 +03:00
Tom Hacohen d1017aac76 Rename django_etesync to django_etebase. 2020-06-16 17:14:53 +03:00
Tom Hacohen 23b2bb3c0a Batch: refactor code and allow passing deps to check against. 2020-06-11 11:17:01 +03:00
Tom Hacohen 653341115f Chunks: add stricter validation. 2020-06-04 16:52:56 +03:00
Tom Hacohen e062fcd429 Revision: add salt. 2020-06-04 16:17:13 +03:00
Tom Hacohen 119479d22b Test reset: allow anyone to reset test users and fully init accounts. 2020-06-03 17:22:10 +03:00
Tom Hacohen 29145f2215 Logout: don't use internal auth accessor. 2020-06-03 16:19:07 +03:00
Tom Hacohen c00c208199 Change to our own token authentication. 2020-06-03 16:15:21 +03:00
Tom Hacohen cc23d516a0 Add an endpoint to change password. 2020-06-03 14:35:44 +03:00
Tom Hacohen 9cc68291df Authentication classes: add permissions to logout. 2020-06-03 14:21:52 +03:00
Tom Hacohen ad184f0ac3 Rename encryptedSeckey to encryptedContent. 2020-06-02 18:58:29 +03:00
Tom Hacohen 7842bd4d9c CollectionItem list: don't return the main item. 2020-06-01 12:45:06 +03:00
Tom Hacohen 1bd4c5be52 Send the login signal on login. 2020-05-31 18:26:21 +03:00
Tom Hacohen c2337f244d Signup: fix signup for users without user info. 2020-05-31 16:57:56 +03:00
Tom Hacohen 15cd41db83 login: gracefully handle bad login attempts. 2020-05-31 16:39:27 +03:00
Tom Hacohen 215a260700 Login: use only the username (not email) for login. 
We may add support for email in the future.
 2020-05-31 16:39:27 +03:00
Tom Hacohen 6051a5ae3a Signup: use the recommended drf style for validation. 2020-05-31 16:39:27 +03:00
Tom Hacohen 40db4e14b0 Signup: rename the UserQuerySerializer to Signup. 2020-05-31 16:39:27 +03:00
Tom Hacohen 5b2040fda3 Fix running with postgres: convert memoryview to bytes for nacl. 2020-05-31 16:39:27 +03:00
Tom Hacohen ddc43c638a Requirements: remove unused requirements. 2020-05-31 16:39:27 +03:00
Tom Hacohen 9347682997 Collection update: support limiting vs not limiting based on stoken. 2020-05-31 13:29:03 +03:00
Tom Hacohen 64b947d455 Change invitations to also follow our list return type format. 2020-05-27 17:14:38 +03:00
Tom Hacohen 89b47c67b7 Removed redundant get_serializer_context. 
This is already provided by default in drf.
 2020-05-27 17:06:22 +03:00
Tom Hacohen 9f2140ffac Change serializer fetching to the more drf way of doing it. 
Also fix the ItemChunk serializer.
 2020-05-27 17:05:00 +03:00
Tom Hacohen 6c31b8fb30 CollectionItemView: disallow normal item creation 
People should only use transaction/batch
 2020-05-27 16:59:28 +03:00
Tom Hacohen f6960bb8cb CollectionMember: fix collection list to return data in the right format. 2020-05-27 16:51:12 +03:00
Tom Hacohen e159bf971b Collection/item viewsets: enforce access. 2020-05-27 16:40:08 +03:00
Tom Hacohen 6e7fd5d0dd Collection membership: implement leaving/revoking access. 2020-05-27 16:03:16 +03:00
Tom Hacohen d93a5d3f06 Collections: use the member stokens for filtering based on stoken 
While at it, also generalised the stoken handling to be generic and
extendible.
 2020-05-27 12:47:21 +03:00
Tom Hacohen 1f18f4e50b CollectionMember: add stokens when we create/change the member. 2020-05-27 10:52:31 +03:00
Tom Hacohen 91aadb6565 Make etag write-only. 2020-05-27 10:30:23 +03:00
Tom Hacohen 9c63f8d674 Rename stoken to etag and cstoken to stoken. 
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
 2020-05-27 10:30:22 +03:00
Tom Hacohen 8eee280bbb Split cstoken and stoken to be different concepts 
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.

A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
 2020-05-27 10:30:22 +03:00
Tom Hacohen 6e7ad92a12 Add missing migrations forgotten in the previous commit 
Missing from: 73f4ff765c7713c9aa48dec2bfc4c3c1c0c7e9f3
 2020-05-27 10:30:07 +03:00
Tom Hacohen 2a39f3538e Change to standalone stoken objects (+ small optimisation). 
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.

We also slightly improved how we filter by revs.
 2020-05-26 18:53:51 +03:00
Tom Hacohen 3cdb7783fe Make sure to always return fresh stokens. 2020-05-26 18:14:39 +03:00
Tom Hacohen fce844bfc3 Uid: Change how validation is done. 2020-05-26 16:36:37 +03:00
Tom Hacohen 10b9d33ffe UidValidator: fix to actually validate. 2020-05-26 16:13:18 +03:00
Tom Hacohen e94e2f9d70 Add a separate pubkey/privatekey for sharing. 
It's separated from the login one so that encryption key and identity
can be rotated separately.
 2020-05-26 13:44:40 +03:00
Tom Hacohen 863c405802 Rename pubkey to loginPubkey because we'll soon have another pubkey. 
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
 2020-05-26 13:24:00 +03:00
Tom Hacohen 2412c295de Signup: fix bug making signup not to work. 2020-05-26 13:17:35 +03:00
Tom Hacohen a965a76c36 Invitation: move outgoing invitations to invite/outgoing. 2020-05-24 18:24:47 +03:00
Tom Hacohen 118dbea4e3 InvitationSerializer: fix user validator. 2020-05-24 17:52:09 +03:00
Tom Hacohen 7f7d223b9b Fix indentation error. 2020-05-24 17:22:43 +03:00
Tom Hacohen 40b7edcb84 Add a way to fetch a user's pubkey. 2020-05-24 17:18:57 +03:00
Tom Hacohen 47e1eec122 Incoming invitations: implement incoming invitations and accepting them 2020-05-24 17:18:57 +03:00
Tom Hacohen 8d1c02dcb9 Collection invitation: implement creating and manipulating collections invitations. 2020-05-24 15:08:12 +03:00
Tom Hacohen edd88427b0 Add a viewset to control collection membership. 2020-05-21 15:44:15 +03:00
Tom Hacohen 4ca74bc69b Permissions: start from scratch and add IsCollectionAdmin permission. 2020-05-20 13:47:06 +03:00
Tom Hacohen c30cc2f229 Improve and rename bulk_get to filter by item stokens too + cstoken changes 
Also change how we return cstokens
 2020-05-19 19:25:49 +03:00
Tom Hacohen aaee8f5e38 Fix new_cstoken getting for list functions. 
We were getting the general cstoken, and were not honouring our limit.
 2020-05-19 17:41:27 +03:00
Tom Hacohen 9bbb7ef3d7 Fix filter by cstoken function to not fetch twice. 2020-05-19 17:29:54 +03:00
Tom Hacohen c63210fe77 CollectionItem: implement batch updating. 2020-05-19 16:16:40 +03:00
Tom Hacohen b6571c93f6 Collection: fix stoken and add cstoken for the collection token. 2020-05-19 15:33:10 +03:00
Tom Hacohen e851fb9877 Views: fix wrong items name. 2020-05-19 15:28:20 +03:00
Tom Hacohen ae4aafcf96 Transaction: make it possible to pass a global stoken to block by. 2020-05-19 14:54:44 +03:00
Tom Hacohen eeaea6e6ab Transaction: return 200 rather than 201. 2020-05-19 13:19:25 +03:00
Tom Hacohen f7c66eaadb CollectionItem: add a batch endpoint for batch operations. 2020-05-19 13:10:50 +03:00
Tom Hacohen 4c7e30eca5 CollectionItem: implement both update and create. 2020-05-19 13:10:29 +03:00
Tom Hacohen 23dcbc1f9e CollectionItem: always run both serializers when serializing. 2020-05-19 12:58:26 +03:00
Tom Hacohen 306e7dcd11 Item deps: fix. 2020-05-19 11:44:20 +03:00
Tom Hacohen 775f438e61 Change deps to be pairs of uid/stoken. 2020-05-19 11:20:09 +03:00
Tom Hacohen 00a80740ca Collection/item create/update require stoken. 2020-05-19 10:59:16 +03:00
Tom Hacohen bd1d11fe5f Fix signup and let signup to an empty account. 2020-05-18 16:13:48 +03:00
Tom Hacohen bced00dc8a Enable logout for now so client tests pass. 2020-05-15 13:03:04 +03:00