Commit Graph

362 Commits

Author SHA1 Message Date
Tom Hacohen
6e7ad92a12 Add missing migrations forgotten in the previous commit
Missing from: 73f4ff765c7713c9aa48dec2bfc4c3c1c0c7e9f3
2020-05-27 10:30:07 +03:00
Tom Hacohen
2a39f3538e Change to standalone stoken objects (+ small optimisation).
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.

We also slightly improved how we filter by revs.
2020-05-26 18:53:51 +03:00
Tom Hacohen
3cdb7783fe Make sure to always return fresh stokens. 2020-05-26 18:14:39 +03:00
Tom Hacohen
fce844bfc3 Uid: Change how validation is done. 2020-05-26 16:36:37 +03:00
Tom Hacohen
10b9d33ffe UidValidator: fix to actually validate. 2020-05-26 16:13:18 +03:00
Tom Hacohen
e94e2f9d70 Add a separate pubkey/privatekey for sharing.
It's separated from the login one so that encryption key and identity
can be rotated separately.
2020-05-26 13:44:40 +03:00
Tom Hacohen
863c405802 Rename pubkey to loginPubkey because we'll soon have another pubkey.
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
2020-05-26 13:24:00 +03:00
Tom Hacohen
2412c295de Signup: fix bug making signup not to work. 2020-05-26 13:17:35 +03:00
Tom Hacohen
8323f23561 Add a nop for api/logout/
It's there for etesync.com and is used to invalidate the token.
Unfortunately we can't fully implement it here because the token
implementation is lacking. This will be fixed soon once we update the
token library with the next version of the protocol.
2020-05-25 17:44:46 +03:00
Tom Hacohen
a965a76c36 Invitation: move outgoing invitations to invite/outgoing. 2020-05-24 18:24:47 +03:00
Tom Hacohen
118dbea4e3 InvitationSerializer: fix user validator. 2020-05-24 17:52:09 +03:00
Tom Hacohen
7f7d223b9b Fix indentation error. 2020-05-24 17:22:43 +03:00
Tom Hacohen
40b7edcb84 Add a way to fetch a user's pubkey. 2020-05-24 17:18:57 +03:00
Tom Hacohen
47e1eec122 Incoming invitations: implement incoming invitations and accepting them 2020-05-24 17:18:57 +03:00
Tom Hacohen
8d1c02dcb9 Collection invitation: implement creating and manipulating collections invitations. 2020-05-24 15:08:12 +03:00
Tom Hacohen
edd88427b0 Add a viewset to control collection membership. 2020-05-21 15:44:15 +03:00
Tom Hacohen
4ca74bc69b Permissions: start from scratch and add IsCollectionAdmin permission. 2020-05-20 13:47:06 +03:00
Tom Hacohen
c30cc2f229 Improve and rename bulk_get to filter by item stokens too + cstoken changes
Also change how we return cstokens
2020-05-19 19:25:49 +03:00
Tom Hacohen
aaee8f5e38 Fix new_cstoken getting for list functions.
We were getting the general cstoken, and were not honouring our limit.
2020-05-19 17:41:27 +03:00
Tom Hacohen
9bbb7ef3d7 Fix filter by cstoken function to not fetch twice. 2020-05-19 17:29:54 +03:00
Tom Hacohen
c63210fe77 CollectionItem: implement batch updating. 2020-05-19 16:16:40 +03:00
Tom Hacohen
b6571c93f6 Collection: fix stoken and add cstoken for the collection token. 2020-05-19 15:33:10 +03:00
Tom Hacohen
e851fb9877 Views: fix wrong items name. 2020-05-19 15:28:20 +03:00
Tom Hacohen
ae4aafcf96 Transaction: make it possible to pass a global stoken to block by. 2020-05-19 14:54:44 +03:00
Tom Hacohen
eeaea6e6ab Transaction: return 200 rather than 201. 2020-05-19 13:19:25 +03:00
Tom Hacohen
f7c66eaadb CollectionItem: add a batch endpoint for batch operations. 2020-05-19 13:10:50 +03:00
Tom Hacohen
4c7e30eca5 CollectionItem: implement both update and create. 2020-05-19 13:10:29 +03:00
Tom Hacohen
23dcbc1f9e CollectionItem: always run both serializers when serializing. 2020-05-19 12:58:26 +03:00
Tom Hacohen
306e7dcd11 Item deps: fix. 2020-05-19 11:44:20 +03:00
Tom Hacohen
775f438e61 Change deps to be pairs of uid/stoken. 2020-05-19 11:20:09 +03:00
Tom Hacohen
00a80740ca Collection/item create/update require stoken. 2020-05-19 10:59:16 +03:00
Tom Hacohen
bd1d11fe5f Fix signup and let signup to an empty account. 2020-05-18 16:13:48 +03:00
Tom Hacohen
bced00dc8a Enable logout for now so client tests pass. 2020-05-15 13:03:04 +03:00
Tom Hacohen
644539bd68 Reset view: adjust reset view path and class. 2020-05-15 12:59:18 +03:00
Tom Hacohen
48ebbfb322 Disable host verification for debug mode.
Was causing issues with mitm proxy and etc which was a pain.
2020-05-15 12:52:52 +03:00
Tom Hacohen
f438d0e947 Trim salt when creating the challenge. 2020-05-15 12:44:10 +03:00
Tom Hacohen
4083be8e8c Username: disallow @ in usernames. 2020-05-15 11:12:24 +03:00
Tom Hacohen
e9e77945a6 Return token and user on signup/login. 2020-05-14 17:19:18 +03:00
Tom Hacohen
93a0e41f03 Change login flow to better verify all relevant fields. 2020-05-14 16:26:02 +03:00
Tom Hacohen
32a8b9c90d Implement a ZKPP login flow. 2020-05-14 16:26:02 +03:00
Tom Hacohen
6b0a40e9dd Set custom user model and reset migrations. 2020-05-13 16:01:49 +03:00
Tom Hacohen
df0f7d134d Collection items: add a transaction endpoint. 2020-04-19 18:56:04 +03:00
Tom Hacohen
d66d0640dc Collection: disallow partial updates. 2020-04-19 15:29:04 +03:00
Tom Hacohen
af27871955 Revision: change the shape of the list response. 2020-04-16 17:38:07 +03:00
Tom Hacohen
9f0f00a594 Unify the stoken filtering and calculation. 2020-04-16 17:37:16 +03:00
Tom Hacohen
f23815d46d Fix calculation of stoken. 2020-04-16 17:37:16 +03:00
Tom Hacohen
d134934f8c Bulk_get: implement stoken, limit and inline 2020-04-16 17:37:03 +03:00
Tom Hacohen
19b93265d7 Add a comment. 2020-04-16 16:59:01 +03:00
Tom Hacohen
687bf9924b API: change how pagination and stoken are done 2020-04-16 16:59:01 +03:00
Tom Hacohen
c5af5fd4e6 Collection: move stoken to the model. 2020-04-16 16:33:16 +03:00