Tom Hacohen
6c31b8fb30
CollectionItemView: disallow normal item creation
...
People should only use transaction/batch
2020-05-27 16:59:28 +03:00
Tom Hacohen
f6960bb8cb
CollectionMember: fix collection list to return data in the right format.
2020-05-27 16:51:12 +03:00
Tom Hacohen
e159bf971b
Collection/item viewsets: enforce access.
2020-05-27 16:40:08 +03:00
Tom Hacohen
6e7fd5d0dd
Collection membership: implement leaving/revoking access.
2020-05-27 16:03:16 +03:00
Tom Hacohen
d93a5d3f06
Collections: use the member stokens for filtering based on stoken
...
While at it, also generalised the stoken handling to be generic and
extendible.
2020-05-27 12:47:21 +03:00
Tom Hacohen
1f18f4e50b
CollectionMember: add stokens when we create/change the member.
2020-05-27 10:52:31 +03:00
Tom Hacohen
91aadb6565
Make etag write-only.
2020-05-27 10:30:23 +03:00
Tom Hacohen
9c63f8d674
Rename stoken to etag and cstoken to stoken.
...
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
2020-05-27 10:30:22 +03:00
Tom Hacohen
8eee280bbb
Split cstoken and stoken to be different concepts
...
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.
A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
2020-05-27 10:30:22 +03:00
Tom Hacohen
6e7ad92a12
Add missing migrations forgotten in the previous commit
...
Missing from: 73f4ff765c7713c9aa48dec2bfc4c3c1c0c7e9f3
2020-05-27 10:30:07 +03:00
Tom Hacohen
2a39f3538e
Change to standalone stoken objects (+ small optimisation).
...
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.
We also slightly improved how we filter by revs.
2020-05-26 18:53:51 +03:00
Tom Hacohen
3cdb7783fe
Make sure to always return fresh stokens.
2020-05-26 18:14:39 +03:00
Tom Hacohen
fce844bfc3
Uid: Change how validation is done.
2020-05-26 16:36:37 +03:00
Tom Hacohen
10b9d33ffe
UidValidator: fix to actually validate.
2020-05-26 16:13:18 +03:00
Tom Hacohen
e94e2f9d70
Add a separate pubkey/privatekey for sharing.
...
It's separated from the login one so that encryption key and identity
can be rotated separately.
2020-05-26 13:44:40 +03:00
Tom Hacohen
863c405802
Rename pubkey to loginPubkey because we'll soon have another pubkey.
...
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
2020-05-26 13:24:00 +03:00
Tom Hacohen
2412c295de
Signup: fix bug making signup not to work.
2020-05-26 13:17:35 +03:00
Tom Hacohen
8323f23561
Add a nop for api/logout/
...
It's there for etesync.com and is used to invalidate the token.
Unfortunately we can't fully implement it here because the token
implementation is lacking. This will be fixed soon once we update the
token library with the next version of the protocol.
2020-05-25 17:44:46 +03:00
Tom Hacohen
a965a76c36
Invitation: move outgoing invitations to invite/outgoing.
2020-05-24 18:24:47 +03:00
Tom Hacohen
118dbea4e3
InvitationSerializer: fix user validator.
2020-05-24 17:52:09 +03:00
Tom Hacohen
7f7d223b9b
Fix indentation error.
2020-05-24 17:22:43 +03:00
Tom Hacohen
40b7edcb84
Add a way to fetch a user's pubkey.
2020-05-24 17:18:57 +03:00
Tom Hacohen
47e1eec122
Incoming invitations: implement incoming invitations and accepting them
2020-05-24 17:18:57 +03:00
Tom Hacohen
8d1c02dcb9
Collection invitation: implement creating and manipulating collections invitations.
2020-05-24 15:08:12 +03:00
Tom Hacohen
edd88427b0
Add a viewset to control collection membership.
2020-05-21 15:44:15 +03:00
Tom Hacohen
4ca74bc69b
Permissions: start from scratch and add IsCollectionAdmin permission.
2020-05-20 13:47:06 +03:00
Tom Hacohen
c30cc2f229
Improve and rename bulk_get to filter by item stokens too + cstoken changes
...
Also change how we return cstokens
2020-05-19 19:25:49 +03:00
Tom Hacohen
aaee8f5e38
Fix new_cstoken getting for list functions.
...
We were getting the general cstoken, and were not honouring our limit.
2020-05-19 17:41:27 +03:00
Tom Hacohen
9bbb7ef3d7
Fix filter by cstoken function to not fetch twice.
2020-05-19 17:29:54 +03:00
Tom Hacohen
c63210fe77
CollectionItem: implement batch updating.
2020-05-19 16:16:40 +03:00
Tom Hacohen
b6571c93f6
Collection: fix stoken and add cstoken for the collection token.
2020-05-19 15:33:10 +03:00
Tom Hacohen
e851fb9877
Views: fix wrong items name.
2020-05-19 15:28:20 +03:00
Tom Hacohen
ae4aafcf96
Transaction: make it possible to pass a global stoken to block by.
2020-05-19 14:54:44 +03:00
Tom Hacohen
eeaea6e6ab
Transaction: return 200 rather than 201.
2020-05-19 13:19:25 +03:00
Tom Hacohen
f7c66eaadb
CollectionItem: add a batch endpoint for batch operations.
2020-05-19 13:10:50 +03:00
Tom Hacohen
4c7e30eca5
CollectionItem: implement both update and create.
2020-05-19 13:10:29 +03:00
Tom Hacohen
23dcbc1f9e
CollectionItem: always run both serializers when serializing.
2020-05-19 12:58:26 +03:00
Tom Hacohen
306e7dcd11
Item deps: fix.
2020-05-19 11:44:20 +03:00
Tom Hacohen
775f438e61
Change deps to be pairs of uid/stoken.
2020-05-19 11:20:09 +03:00
Tom Hacohen
00a80740ca
Collection/item create/update require stoken.
2020-05-19 10:59:16 +03:00
Tom Hacohen
bd1d11fe5f
Fix signup and let signup to an empty account.
2020-05-18 16:13:48 +03:00
Tom Hacohen
bced00dc8a
Enable logout for now so client tests pass.
2020-05-15 13:03:04 +03:00
Tom Hacohen
644539bd68
Reset view: adjust reset view path and class.
2020-05-15 12:59:18 +03:00
Tom Hacohen
48ebbfb322
Disable host verification for debug mode.
...
Was causing issues with mitm proxy and etc which was a pain.
2020-05-15 12:52:52 +03:00
Tom Hacohen
f438d0e947
Trim salt when creating the challenge.
2020-05-15 12:44:10 +03:00
Tom Hacohen
4083be8e8c
Username: disallow @ in usernames.
2020-05-15 11:12:24 +03:00
Tom Hacohen
e9e77945a6
Return token and user on signup/login.
2020-05-14 17:19:18 +03:00
Tom Hacohen
93a0e41f03
Change login flow to better verify all relevant fields.
2020-05-14 16:26:02 +03:00
Tom Hacohen
32a8b9c90d
Implement a ZKPP login flow.
2020-05-14 16:26:02 +03:00
Tom Hacohen
6b0a40e9dd
Set custom user model and reset migrations.
2020-05-13 16:01:49 +03:00
