Commit Graph

197 Commits

Author SHA1 Message Date
Noah Petherbridge
a70e1c2b73 Minor bugfixes
- Revoke photo notifications if visibility moving to inner circle
- No longer show usernames in chat on the landing page
2023-09-14 17:40:12 -07:00
Noah Petherbridge
fdc6c5c0a7 Show currently on chat indicators 2023-09-13 23:13:02 -07:00
Noah Petherbridge
5ceeeb5fee LastLoginAtCooldown from 8 hours to 1 hour 2023-09-13 22:58:00 -07:00
Noah Petherbridge
de30f5e952 See who has "Liked" something 2023-09-13 21:28:38 -07:00
Noah Petherbridge
3543dd3e42 Allow updating birthdate, with admin report 2023-09-11 19:24:09 -07:00
Noah Petherbridge
7d3e04b869 Fix age min/max filter on search page 2023-09-10 12:07:16 -07:00
Noah Petherbridge
1e7ea6830c Reserved username check on signup page 2023-09-09 12:26:51 -07:00
Noah Petherbridge
618acc9f92 Update reserved usernames 2023-09-09 12:23:54 -07:00
Noah Petherbridge
de71d65be6 Only admin users can see banned accounts on search 2023-09-09 11:16:43 -07:00
Noah Petherbridge
e4c1142d55 More thorough blocking behavior 2023-09-05 13:57:56 -07:00
Noah Petherbridge
b619e0c02e Send inner circle status as VIP to BareRTC 2023-09-03 12:08:45 -07:00
Noah Petherbridge
6b0246edad Tweak private share badges 2023-09-01 23:07:15 -07:00
Noah Petherbridge
2d7f8c0d87 Fix private grants page 2023-09-01 22:41:33 -07:00
Noah Petherbridge
944dbb749b Private photos: see who shares back 2023-09-01 22:27:18 -07:00
Noah Petherbridge
577c92386e Filter for expressly non-certified 2023-09-01 17:20:34 -07:00
Noah Petherbridge
67a54c866e New search filters and friendship sent icon 2023-09-01 17:13:10 -07:00
Noah Petherbridge
8275cc3ad9 Bugfix on search page 2023-08-29 21:14:06 -07:00
Noah Petherbridge
6eb51cf545 Filter member directory by HereFor 2023-08-29 21:10:00 -07:00
Noah Petherbridge
f52fa47f3e More profile settings for HereFor 2023-08-29 20:40:23 -07:00
Noah Petherbridge
9f145c2f5e Tweak the login rate limiter 2023-08-20 20:58:51 -07:00
Noah Petherbridge
3f500cd019 Truncate location precision on RefreshGeoIP() 2023-08-20 10:25:13 -07:00
Noah Petherbridge
a785b093e7 Tweaks to Who's Nearby 2023-08-19 21:09:23 -07:00
Noah Petherbridge
cc628afd44 Who's Nearby Feature 2023-08-19 19:11:33 -07:00
Noah Petherbridge
73f89c7837 Chat country flags: stop at first subdivision 2023-08-17 18:47:52 -07:00
Noah Petherbridge
bf71ed421c Maintenance Mode + Blockable Admin Scope 2023-08-16 22:09:04 -07:00
Noah Petherbridge
5f5fe37350 Chat reports: attach target user ID table 2023-08-16 17:30:39 -07:00
Noah Petherbridge
dc5b82b59a Get better country and subdivision names 2023-08-15 21:08:07 -07:00
Noah Petherbridge
001477de61 Test chat room flags some more 2023-08-15 21:03:41 -07:00
Noah Petherbridge
ece83a0b23 Test update to chat country flags 2023-08-15 20:56:22 -07:00
Noah Petherbridge
1ee8acf060 Various quick fixes
* Signup: if entering an existing email, don't admit that the email
  exists. Instead, send a specialized email to its address.
* Search: no longer search for users by email address.
* Login: always hash the incoming password on user not found, to take
  constant time compared to when the user did exist.
* Fix a pagination bug when a private (shy account) views a non-friend's
  photo gallery.
2023-08-15 17:33:33 -07:00
Noah Petherbridge
868aef6fb0 Minor bugfix 2023-08-15 09:53:59 -07:00
Noah Petherbridge
4c398c9b13 Minor bugfix 2023-08-15 09:53:13 -07:00
Noah Petherbridge
666d3105b7 Privacy Improvements and Notification Fixes
* On user profile pages and gallery: the total photo count for the user
  will only include photos that the viewer can actually see (taking into
  account friendship and private grants), so that users won't harass
  each other to see the additional photos that aren't visible to them.
* On the member directory search: the photo counts will only show public
  photos on their page for now, and may be fewer than the number of
  photos the current user could actually see.
* Blocklist: you can now manually add a user by username to your block
  list. So if somebody blocked you on the site and you want to block
  them back, there is a way to do this.
* Friends: you can now directly unfriend someone from their profile
  page by clicking on the "Friends" button. You get a confirmation
  popup before the remove friend action goes through.
* Bugfix: when viewing a user's gallery, you were able to see their
  Friends-only photos if they granted you their Private photo access,
  even if you were not their friend.
* Bugfix: when uploading a new private photo, instead of notifying
  everybody you granted access to your privates it will only notify
  if they are also on your friend list.
2023-08-14 18:50:34 -07:00
Noah Petherbridge
47859ee204 Don't spam admins with chat room reports 2023-08-13 20:47:16 -07:00
Noah Petherbridge
f8487f92e7 Log when a user tried to block an admin 2023-08-12 23:23:49 -07:00
Noah Petherbridge
4d1a057a73 Signup page: check for username uniqueness 2023-08-12 22:37:09 -07:00
Noah Petherbridge
d37ab56f26 Tweak email formatting for chat room reports 2023-08-12 21:47:33 -07:00
Noah Petherbridge
8ac63bf800 Webhook for BareRTC Report endpoint 2023-08-12 21:37:11 -07:00
Noah Petherbridge
1badee3662 Bugfix: don't unset dm_privacy on profile settings update 2023-08-10 19:37:49 -07:00
Noah Petherbridge
79a6b8048c Fix country flag with code for chat room 2023-08-05 20:11:55 -07:00
Noah Petherbridge
0c5db949aa Country Flags and Genders for the chat room 2023-08-05 19:37:15 -07:00
Noah Petherbridge
fdc410c9f1 Clear/Delete Notifications, Private Photo Fixes
Added the ability to delete or clear notifications.
* A "Clear all" button deletes them all (with confirmation)
* A "Remove" button on individual notifications (one confirmation per
  page load, so you can remove several without too much tedium)

Fix some things regarding private photo notifications:
* When notifying your existing grants about a new upload, only users who
  opt-in for Explicit are notified about Explicit private pictures.
* When revoking private grants, clean up the "has uploaded a new private
  photo" notifications for all of your pics from their notification
  feeds.
2023-08-04 18:54:04 -07:00
Noah Petherbridge
47aaf15078 Admin Groups & Permissions
Add a permission system for admin users so you can lock down specific admins to
a narrower set of features instead of them all having omnipotent powers.

* New page: Admin Dashboard -> Admin Permissions Management
* Permissions are handled in the form of 'scopes' relevant to each feature or
  action on the site. Scopes are assigned to Groups, and in turn, admin user
  accounts are placed in those Groups.
* The Superusers group (scope '*') has wildcard permission to all scopes. The
  permissions dashboard has a create-once action to initialize the Superusers
  for the first admin who clicks on it, and places that admin in the group.

The following are the exhaustive list of permission changes on the site:

* Moderator scopes:
    * Chat room (enter the room with Operator permission)
    * Forums (can edit or delete user posts on the forum)
    * Photo Gallery (can see all private/friends-only photos on the site
      gallery or user profile pages)
* Certification photos (with nuanced sub-action permissions)
    * Approve: has access to the Pending tab to act on incoming pictures
    * List: can paginate thru past approved/rejected photos
    * View: can bring up specific user cert photo from their profile
    * The minimum requirement is Approve or else no cert photo page
      will load for your admin user.
* User Actions (each action individually scoped)
    * Impersonate
    * Ban
    * Delete
    * Promote to admin
* Inner circle whitelist: no longer are admins automatically part of the
  inner circle unless they have a specialized scope attached.

The AdminRequired decorator may also apply scopes on an entire admin route.
The following routes have scopes to limit them:

* Forum Admin (manage forums and their settings)
* Remove from inner circle
2023-08-01 20:39:48 -07:00
Noah Petherbridge
98c6a51951 Bugfix on chat URL 2023-07-30 10:56:14 -07:00
Noah Petherbridge
83391fe5c0 CachedBlocklist support for the chat room 2023-07-30 10:33:04 -07:00
Noah Petherbridge
61011efd9f Photo counts on member directory + inner circle removal privacy fix 2023-07-23 15:02:41 -07:00
Noah Petherbridge
271af4e9a2 Better fix for edit photo exception 2023-07-22 14:53:57 -07:00
Noah Petherbridge
27fc1c58dd Fix a range error exception 2023-07-22 14:50:20 -07:00
Noah Petherbridge
356f94698f Some bugfixes around profile picture cropping 2023-07-22 11:52:05 -07:00
Noah Petherbridge
82fe684d11 Safety check on Likes 2023-07-18 22:30:29 -07:00
Noah Petherbridge
26d2bc98f1 Minor quick fixes 2023-07-07 17:31:46 -07:00
Noah Petherbridge
2682512dd3 Geogate kill switch 2023-07-01 16:35:35 -07:00
Noah Petherbridge
9474625969 Update the About, Features and FAQ pages 2023-06-26 23:29:05 -07:00
Noah Petherbridge
7d4326e251 Fix GIF and PNG uploads 2023-06-25 23:03:41 -07:00
Noah Petherbridge
e051da21b5 Support GIF videos in your photo gallery 2023-06-25 22:55:07 -07:00
Noah Petherbridge
8bd1fac3ee Update geo gate list 2023-06-24 15:59:50 -07:00
Noah Petherbridge
3d30102ade Bugfix on geogate 2023-06-24 15:51:53 -07:00
Noah Petherbridge
c172565a56 Geo-gating on signup 2023-06-24 15:39:45 -07:00
Noah Petherbridge
45cb4d260e DM Privacy + Settings Page Tabs
* Refactor the Settings page into a tabbed UI to reduce confusion with
  all the different forms and save buttons
* Add a DM Privacy setting to your page
* Update the About page
2023-06-23 22:18:09 -07:00
Noah Petherbridge
0f6b627156 Spit and polish
* Refactor pagination into a DRY template func
* Better guide users with no profile pic to upload one
2023-06-21 20:46:27 -07:00
Noah Petherbridge
8afcbbe2be Fix age gate page to defend against common user error 2023-06-20 12:12:58 -07:00
Noah Petherbridge
a98c218628 Bugfixes with changing user birthdates 2023-06-16 17:31:40 -07:00
Noah Petherbridge
ae8ef83115 Option to hide age from profile display 2023-06-16 17:11:52 -07:00
Noah Petherbridge
d36e71549a Age gate: collect birthdates retroactively and on new signup 2023-06-16 13:05:33 -07:00
Noah Petherbridge
3d34306c7e Better comment notification links 2023-06-15 19:40:40 -07:00
Noah Petherbridge
70d252dd75 Like buttons in photo notifications 2023-06-15 19:06:16 -07:00
Noah Petherbridge
b262ac4be6 Better chat stats on landing page 2023-06-10 13:25:06 -07:00
Noah Petherbridge
d6c4512cee Tweak BareRTC watch worker 2023-06-10 11:51:50 -07:00
Noah Petherbridge
78abee6e9e Online users badge in the Chat link on nav bar 2023-06-07 21:59:15 -07:00
Noah Petherbridge
50d05f92f1 Fix Gallery checkbox always checking itself + small fixes 2023-05-24 18:40:27 -07:00
Noah Petherbridge
bcac316785 Fix gallery filters re: inner circle photos 2023-05-24 13:38:37 -07:00
Noah Petherbridge
eccc4f0044 Update some wording 2023-05-24 11:35:22 -07:00
Noah Petherbridge
6cad3cadc7 Inner circle followups: notifications, min public pictures 2023-05-24 11:27:42 -07:00
Noah Petherbridge
b9f2bafd7a Bugfix 2023-05-23 23:37:11 -07:00
Noah Petherbridge
081a22a6ef Logging for inner circle 2023-05-23 20:32:51 -07:00
Noah Petherbridge
3b3616f0c9 Inner circle bugfixes 2023-05-23 20:15:26 -07:00
Noah Petherbridge
9788ea6a33 The inner circle 2023-05-23 20:04:17 -07:00
Noah Petherbridge
17d9760b61 Bugfix: Owner of a private photo can see its comment page 2023-05-16 10:10:37 -07:00
Noah Petherbridge
ba9e90b32a Photo upload notification: only notify explicit friends of new explicit photo 2023-05-07 13:16:22 -07:00
Noah Petherbridge
7af6d82fc7 Shorter JWT token lifetime to enter chat 2023-04-19 19:56:09 -07:00
Noah Petherbridge
0527ff54b5 Display names for BareRTC 2023-04-18 22:19:08 -07:00
Noah Petherbridge
f98b6b2806 Notifications about new photo uploads for your friends 2023-03-16 20:04:43 -07:00
Noah Petherbridge
eb913844f7 Fix banned user photos appearing on Gallery 2023-03-09 17:14:20 -08:00
Noah Petherbridge
df65b1b260 Bugfixes around banned user accounts 2023-03-09 16:57:38 -08:00
Noah Petherbridge
1dc9afca5a Make ?view=external on profile page require a login if the profile is not actually public 2023-02-26 16:09:47 -08:00
Noah Petherbridge
99e9ef9c7b Fix bug when deleting user accounts if they own forum threads 2023-02-24 16:54:27 -08:00
Noah Petherbridge
a1d80fc2b0 Disable contact form for logged-out users due to spam 2023-02-21 11:45:26 -08:00
Noah Petherbridge
296b5a30b8 Spit and polish for Shy Accounts
* Add a Shy/Non-shy badge to user profile pages.
* Shy Accounts can always DM admin users.
2023-02-13 22:31:50 -08:00
Noah Petherbridge
7d17dce4d4 Shy Accounts
* Users with private profiles or no public photo at all are considered
  to be Shy Accounts and are isolated from the non-shy profiles.
* Restrictions include:
  * Site Gallery shows only them + their friends' photos.
  * User Galleries: must be a friend or had private photos granted to
    see a user's gallery page.
  * DMs: can not initiate a DM to a non-shy member (other shy members
    OK).
2023-02-13 22:19:18 -08:00
Noah Petherbridge
c4600ff6ce Use anonymized avatars in chat for non-public profile pics 2023-02-12 22:23:51 -08:00
Noah Petherbridge
c098c2f8d8 Chat API endpoint 2023-02-09 23:07:07 -08:00
Noah Petherbridge
050ce19160 Chat launch page for BareRTC 2023-02-05 20:26:36 -08:00
Noah Petherbridge
345285d7a3 Add Admin Guidelines to dashboard
* A reason must be entered to impersonate a user, and it triggers a
  Report and email notification to the admin.
* User gallery pages will show at the top whether the user had granted
  you access to their private photos.
2022-12-24 23:00:59 -08:00
Noah Petherbridge
7531acdcbf Security fix 2022-12-20 21:21:15 -08:00
Noah Petherbridge
72a7f57f03 Ability to delete DMs and minor spit & polish 2022-12-20 21:11:43 -08:00
Noah Petherbridge
1cc2306cbf Wrap Up Polls Support
* Add the PollVotes table and associated logic.
* Multiple choice polls supported.
* Expiring and non-expiring polls.
* Icons and badges on the forum pages to show posts with polls
* Bugfix: non-explicit users getting SQL errors on Newest Posts page.
2022-12-20 19:15:45 -08:00
Noah Petherbridge
bb79b5cbf3 WIP Web Polls
Got initial Poll table and UI started:
* Polls can be attached to any NEW forum post (can't edit poll details
  after creation)
* Max 100 options (theoretically unlimited), expiration time.
* UI: shows radio button list on posts having a poll, no submit handler
  yet created.
2022-12-14 22:57:06 -08:00
Noah Petherbridge
8e4bb85934 Raise photo cap to 100, fix filesize storage
The photo upload limit for user profiles is raised from 24 to 100.

The bug about Filesize not saving to the database for Photos and
CommentPhotos (storing zeroes in the DB) has been fixed. Run the
`nonshy backfill filesizes` to populate your existing database.
2022-12-06 21:50:42 -08:00
fd0ff31d3e Update delete_user to handle CommentPhotos 2022-10-20 21:51:53 -07:00
f1e12f344e Avoid a nil exception on error redirect 2022-10-20 21:07:21 -07:00