422 Commits

Author SHA1 Message Date
Robert Schäfer
aee0403cc7
Merge pull request #823 from Human-Connection/343_whitelist_all_queries_and_mutations
Whitelist queries/mutations, fix tests
2019-06-14 13:22:00 +02:00
Robert Schäfer
0fc7061333 Disable broken cucumber tests for now
@Mastercuber the justification for simply disabling the tests is that
the entire implemntation for the follow activities is wrong. It's still
using the `AddUserFollowedBy` auto-generated mutation. The mutation that
is actually used when you do a follow or unfollow are called `follow`
and `unfollow` - these are custom mutations implemented by ourselves.

So the proper fix for these tests would be to refactor the entire
ActivityPub implementation. Since there is a pending PR already I
decided not to go down the rabbit hole and simply tag the failing
sceario as "work-in-progress" (@wip).
2019-06-14 11:33:32 +02:00
Robert Schäfer
eb4b05e431 Add relevant permissions to let cypress tests pass 2019-06-14 10:14:48 +02:00
dependabot-preview[bot]
2bab4d5563
Bump date-fns from 2.0.0-alpha.31 to 2.0.0-alpha.33 in /backend
Bumps [date-fns](https://github.com/date-fns/date-fns) from 2.0.0-alpha.31 to 2.0.0-alpha.33.
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md)
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.31...v2.0.0-alpha.33)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-14 08:04:36 +00:00
Robert Schäfer
354d8787b0 Merge remote-tracking branch 'origin/master' into 343_whitelist_all_queries_and_mutations 2019-06-14 09:45:54 +02:00
mattwr18
920234ec2a
Merge pull request #819 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-server-testing-2.6.3
Bump apollo-server-testing from 2.6.2 to 2.6.3 in /backend
2019-06-13 21:18:27 -03:00
mattwr18
3f87b42987
Merge pull request #818 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-server-2.6.3
Bump apollo-server from 2.6.2 to 2.6.3 in /backend
2019-06-13 21:17:58 -03:00
Robert Schäfer
fc4e9f40b3 Whitelist queries/mutations, fix backend tests 2019-06-13 23:29:29 +02:00
dependabot-preview[bot]
bbe6d63512
Bump apollo-server-testing from 2.6.2 to 2.6.3 in /backend
Bumps [apollo-server-testing](https://github.com/apollographql/apollo-server) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server-testing@2.6.2...apollo-server-testing@2.6.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:04:29 +00:00
dependabot-preview[bot]
f77aa4ec4e
Bump apollo-server from 2.6.2 to 2.6.3 in /backend
Bumps [apollo-server](https://github.com/apollographql/apollo-server) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server@2.6.2...apollo-server@2.6.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:04:05 +00:00
dependabot-preview[bot]
6507b97fdf
Bump date-fns from 2.0.0-alpha.31 to 2.0.0-alpha.32 in /backend
Bumps [date-fns](https://github.com/date-fns/date-fns) from 2.0.0-alpha.31 to 2.0.0-alpha.32.
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md)
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.31...v2.0.0-alpha.32)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:03:26 +00:00
mattwr18
d0fd4de079
Merge pull request #809 from Human-Connection/800_fix_broken_image_urls
Fix #800
2019-06-12 19:53:18 -03:00
Robert Schäfer
113cf04c60 Fix build 2019-06-13 00:26:20 +02:00
Robert Schäfer
1ffa3cd046 Fix #799
For target `production` the badges were simply not copied. It also
explains why we never saw that error in development. For development we
use docker build target `build-and-test`.

FYI: @ulfgebhardt @Tirokk @ogerly
2019-06-12 23:55:42 +02:00
Robert Schäfer
4166936e5f Fix #800
Ok, so apparently all we have to do is to remove the `/api` prefix from
fixImageUrlMiddleware. I guess that's just a leftover.
2019-06-12 23:27:43 +02:00
Robert Schäfer
45fc604c25
Merge pull request #797 from Human-Connection/dependabot/npm_and_yarn/backend/graphql-shield-5.3.8
Bump graphql-shield from 5.3.7 to 5.3.8 in /backend
2019-06-12 10:27:45 +02:00
Robert Schäfer
c2bcc9f595
Merge pull request #754 from Human-Connection/402-userprofil-tab-click-function
402 userprofil tab click function
2019-06-12 10:24:41 +02:00
dependabot-preview[bot]
78607dfd0e
Bump graphql-shield from 5.3.7 to 5.3.8 in /backend
Bumps [graphql-shield](https://github.com/maticzav/graphql-shield) from 5.3.7 to 5.3.8.
- [Release notes](https://github.com/maticzav/graphql-shield/releases)
- [Commits](https://github.com/maticzav/graphql-shield/compare/v5.3.7...v5.3.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-12 04:56:09 +00:00
Robert Schäfer
90107cfb18
Merge pull request #789 from Human-Connection/dependabot/npm_and_yarn/backend/prettier-1.18.2
Bump prettier from 1.17.1 to 1.18.2 in /backend
2019-06-11 23:44:00 +02:00
Robert Schäfer
54c7c204c2 Run yarn run lint --fix 2019-06-11 23:10:26 +02:00
Robert Schäfer
d1364e4aed Merge remote-tracking branch 'origin/master' into 402-userprofil-tab-click-function 2019-06-11 17:41:17 +02:00
dependabot-preview[bot]
db37d085f8
Bump graphql-shield from 5.3.6 to 5.3.7 in /backend
Bumps [graphql-shield](https://github.com/maticzav/graphql-shield) from 5.3.6 to 5.3.7.
- [Release notes](https://github.com/maticzav/graphql-shield/releases)
- [Commits](https://github.com/maticzav/graphql-shield/compare/v5.3.6...v5.3.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-11 04:51:32 +00:00
dependabot-preview[bot]
f18ae14741
Bump prettier from 1.17.1 to 1.18.2 in /backend
Bumps [prettier](https://github.com/prettier/prettier) from 1.17.1 to 1.18.2.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/1.17.1...1.18.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-10 11:12:27 +00:00
mattwr18
0259eeee66
Merge pull request #771 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-cache-inmemory-1.6.2
Bump apollo-cache-inmemory from 1.6.1 to 1.6.2 in /backend
2019-06-08 11:48:23 -03:00
dependabot-preview[bot]
f0a4149b9e
Bump apollo-cache-inmemory from 1.6.1 to 1.6.2 in /backend
Bumps [apollo-cache-inmemory](https://github.com/apollographql/apollo-client) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/apollo-cache-inmemory@1.6.1...apollo-cache-inmemory@1.6.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 22:07:23 +00:00
mattwr18
a0f9e90ce2
Merge pull request #783 from Human-Connection/remove_unnecessary_dependency_ms
Replace dependency `ms` completely
2019-06-07 19:06:11 -03:00
Robert Schäfer
314b257b45 Replace dependency ms completely
I have seen this PR here: https://github.com/Human-Connection/Human-Connection/pull/774 and I thought: Never saw that one before, where is it used and what is the purpose? I could find this line only and thought this is not a justification for having the package installed.
2019-06-07 15:49:18 +02:00
Robert Schäfer
02dca83358
Merge pull request #768 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-client-2.6.2
Bump apollo-client from 2.6.1 to 2.6.2 in /backend
2019-06-07 14:37:21 +02:00
dependabot-preview[bot]
7d50c8f9fd
Bump apollo-client from 2.6.1 to 2.6.2 in /backend
Bumps [apollo-client](https://github.com/apollographql/apollo-client) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/apollo-client@2.6.1...apollo-client@2.6.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 11:20:30 +00:00
dependabot-preview[bot]
850121015f
Bump apollo-server-testing from 2.6.1 to 2.6.2 in /backend
Bumps [apollo-server-testing](https://github.com/apollographql/apollo-server) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server-testing@2.6.1...apollo-server-testing@2.6.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 11:20:28 +00:00
Robert Schäfer
5503df0895
Merge pull request #776 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-server-2.6.2
Bump apollo-server from 2.6.1 to 2.6.2 in /backend
2019-06-07 13:18:28 +02:00
dependabot-preview[bot]
34a9799fac
Bump apollo-server from 2.6.1 to 2.6.2 in /backend
Bumps [apollo-server](https://github.com/apollographql/apollo-server) from 2.6.1 to 2.6.2.
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server@2.6.1...apollo-server@2.6.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 05:00:10 +00:00
dependabot-preview[bot]
b5b3293af0
Bump date-fns from 2.0.0-alpha.29 to 2.0.0-alpha.31 in /backend
Bumps [date-fns](https://github.com/date-fns/date-fns) from 2.0.0-alpha.29 to 2.0.0-alpha.31.
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md)
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.29...v2.0.0-alpha.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 04:59:36 +00:00
Robert Schäfer
a978591843 Fix bug introduced in 6f0447515
@ulfgebhardt For the `deleted` and `disabled` flags I would be glad if we could
take only one value, that is `true`, in case the post is considered disabled or
deleted respectively.

There might be more bugs like this now. Please keep in mind that these
counts are also used as total limits for pagination and you break the
pagination if you change the cypher statement.
2019-06-07 01:39:09 +02:00
Robert Schäfer
574b42a2a7 "commentedCount" is different from "commentsCount"
One is how many comments you wrote, one is how many **posts** are there
with at least one comment of you.

E.g. you can comment twice on the same post. You will have a
`commentedCount` increase of 1 but a `commentsCount` of 2.

FYI @ogerly @Tirokk
2019-06-07 01:39:09 +02:00
Robert Schäfer
c4316a81de Refactor backend to use filterParams directly
Revert this commit to implement a later performance improvement
2019-06-06 15:43:43 +02:00
dependabot-preview[bot]
1d4b77cc59
Bump date-fns from 2.0.0-alpha.27 to 2.0.0-alpha.29 in /backend
Bumps [date-fns](https://github.com/date-fns/date-fns) from 2.0.0-alpha.27 to 2.0.0-alpha.29.
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md)
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.27...v2.0.0-alpha.29)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-06 04:58:41 +00:00
mattwr18
2615f5dcfe
Merge pull request #741 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-cache-inmemory-1.6.1
Bump apollo-cache-inmemory from 1.6.0 to 1.6.1 in /backend
2019-06-05 22:35:41 -03:00
Robert Schäfer
93107bc0f8 Fix lint 2019-06-05 18:39:11 +02:00
Robert Schäfer
16ef304d70 Follow suggestions by @mattwr18 2019-06-05 18:37:19 +02:00
Robert Schäfer
d59c43330b Rename value of enum type to following
As discussed in our daily standup with @mattwr18
2019-06-05 18:34:02 +02:00
Robert Schäfer
0d8a748094 Apparently I was wrong: types don't get merged 2019-06-05 17:28:31 +02:00
Robert Schäfer
ed0c9b775b Implement+test filterBubble middleware
@Tirokk @ulfgebhardt @ogerly @mattwr18

This is interesting because I found out that `neo4j-graphql-js` allows
to customize graphql queries. If you define it, then it will merge the
other inputs and stuff on top of it. Fair enough!
2019-06-05 17:28:31 +02:00
Robert Schäfer
8e9b0318da Fix missing check if user is unauthenticated 2019-06-05 17:28:31 +02:00
Robert Schäfer
b9b103b424 Implement+test replaceParams helper method 2019-06-05 17:28:31 +02:00
Robert Schäfer
908a89759e
Merge branch 'master' into 206_setup_neo4j_db_constraints_on_startup 2019-06-05 13:40:12 +02:00
dependabot-preview[bot]
bd71d1bf66
Bump apollo-cache-inmemory from 1.6.0 to 1.6.1 in /backend
Bumps [apollo-cache-inmemory](https://github.com/apollographql/apollo-client) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/apollo-cache-inmemory@1.6.0...apollo-cache-inmemory@1.6.1)
2019-06-05 08:44:49 +00:00
Robert Schäfer
dc84b913d4
Merge pull request #743 from Human-Connection/dependabot/npm_and_yarn/backend/graphql-shield-5.3.6
Bump graphql-shield from 5.3.5 to 5.3.6 in /backend
2019-06-05 10:43:33 +02:00
Robert Schäfer
04ab624963
Merge pull request #745 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-client-2.6.1
Bump apollo-client from 2.5.1 to 2.6.1 in /backend
2019-06-05 10:42:32 +02:00
dependabot-preview[bot]
569216b8bf
Bump node from 12.3.1-alpine to 12.4-alpine in /backend
Bumps node from 12.3.1-alpine to 12.4-alpine.
2019-06-05 05:01:44 +00:00