schleuder-web issueshttps://0xacab.org/schleuder/schleuder-web/-/issues2018-06-12T22:35:18Zhttps://0xacab.org/schleuder/schleuder-web/-/issues/45Require old password when user changes password2018-06-12T22:35:18ZNinaRequire old password when user changes passwordAs a user I want to provide my old password when I change my password, so that a malicious user cannot change it when having access to my current session.
Currently I can change my password when I am logged in without providing the old...As a user I want to provide my old password when I change my password, so that a malicious user cannot change it when having access to my current session.
Currently I can change my password when I am logged in without providing the old one.0.1https://0xacab.org/schleuder/schleuder-web/-/issues/72i18n2017-07-24T13:55:26ZKéfirhola@kefir.redi18nwe can provide spanish translations, but we're also seeing there's lots of hardcoded english strings in views. would a merge request providing spanish translations and i18n for all strings be welcome? :)we can provide spanish translations, but we're also seeing there's lots of hardcoded english strings in views. would a merge request providing spanish translations and i18n for all strings be welcome? :)https://0xacab.org/schleuder/schleuder-web/-/issues/78remove precompiled assets from git2018-06-25T19:20:08Zngremove precompiled assets from gitWe should not ship them as part of our repository.We should not ship them as part of our repository.https://0xacab.org/schleuder/schleuder-web/-/issues/43Allow users to set locale2017-07-24T19:18:14ZpazAllow users to set localeWe could give accounts a language to be set, or we could provide classical locale-switching-buttons.
I'm in favour of the former. People tend to prefer one language over a long time, and might be annoyed to have to switch languages each...We could give accounts a language to be set, or we could provide classical locale-switching-buttons.
I'm in favour of the former. People tend to prefer one language over a long time, and might be annoyed to have to switch languages each time they log in.
Opinions?https://0xacab.org/schleuder/schleuder-web/-/issues/82Don't display sensitive data to users when not being able to connect to the API2018-02-14T16:41:53ZngDon't display sensitive data to users when not being able to connect to the APIWhen the API Damon is not available, schleuder-web displays currently the following to users
```
Cannot connect to the Schleuder API.
Please check if it's running at https://some-host:4443/ or
change the settings in /var/www/schleuder-...When the API Damon is not available, schleuder-web displays currently the following to users
```
Cannot connect to the Schleuder API.
Please check if it's running at https://some-host:4443/ or
change the settings in /var/www/schleuder-web/config/schleuder-web.yml.
```
Imho this is too much data that is only relevant to admins and should not be displayed to users.
Users should get a nice message explaining that the service is temporarily not available (and they should contact their administrators?) and log the upper info only in the logs.https://0xacab.org/schleuder/schleuder-web/-/issues/81Downcase email on signup2018-03-01T21:29:33ZngDowncase email on signupSometimes people signup with a capital letter for an account, while their actual emailadress is all downcased. Leading to not finding the list they are admin of in the webinterface.
While email would be case-sensitive (afair) most email...Sometimes people signup with a capital letter for an account, while their actual emailadress is all downcased. Leading to not finding the list they are admin of in the webinterface.
While email would be case-sensitive (afair) most email providers actually treat emailadresses as case-insensitive. So I would suggest to downcase the email on signup. Actually we should do the same on schleuder side, not?
I would suggest to downcase subscriptions in schleuder and hence also the email field of an account with the possibility of breaking email providers that are case-sensitive. But honestly, I think they will be in way more sever problems than schleuder not respecting their casing.NinaNinahttps://0xacab.org/schleuder/schleuder-web/-/issues/66Rake task to purge expired AccountRequests2017-06-02T20:51:39ZngRake task to purge expired AccountRequestsIt would be nice to have a rake task that purges expired AccountRequests, so the database can be cleaned up once in a while.It would be nice to have a rake task that purges expired AccountRequests, so the database can be cleaned up once in a while.https://0xacab.org/schleuder/schleuder-web/-/issues/65Password recovery / reset2018-04-14T15:53:58ZngPassword recovery / resetIt should be possible to reset / recover a password for an existing account.It should be possible to reset / recover a password for an existing account.https://0xacab.org/schleuder/schleuder-web/-/issues/44Make logfile configurable2017-05-05T14:59:37ZrevoMake logfile configurableI would love to have my logs at a configurable location (such as `/var/log/schleuder/schleuder-web.log`).
Could you please make this configurable, so that the destination for the schleuder-web log can be chosen freely?
Thanks a lot in ...I would love to have my logs at a configurable location (such as `/var/log/schleuder/schleuder-web.log`).
Could you please make this configurable, so that the destination for the schleuder-web log can be chosen freely?
Thanks a lot in advance!https://0xacab.org/schleuder/schleuder-web/-/issues/39Add subscriber page should include add key text area2017-03-27T11:25:40ZmaxigasAdd subscriber page should include add key text areaPerhaps the most common use case for the schleuder web interface is to add a new subscriber to a mailing list. At the moment this is at least two steps: adding the relevant key to the list keyring and adding the email address. These two ...Perhaps the most common use case for the schleuder web interface is to add a new subscriber to a mailing list. At the moment this is at least two steps: adding the relevant key to the list keyring and adding the email address. These two steps are located in different pages of the web interface. I would like to do the whole operation from a single page. I guess the most easy way to do this is to include the text area for adding a new key on the page where I can add the email address of the subscriber.https://0xacab.org/schleuder/schleuder-web/-/issues/38Validate email-address for account-creation2018-05-23T18:47:24ZpazValidate email-address for account-creationWe should show a sensible error if the given input doesn't qualify as a
valid email-address.
Let's not be very specific in what to require, only check for basic
syntax like Schleuder does:
```
EMAIL_REGEXP = /\A.+@[[:alnum:]_.-]+\z/i
```We should show a sensible error if the given input doesn't qualify as a
valid email-address.
Let's not be very specific in what to require, only check for basic
syntax like Schleuder does:
```
EMAIL_REGEXP = /\A.+@[[:alnum:]_.-]+\z/i
```0.1NinaNinahttps://0xacab.org/schleuder/schleuder-web/-/issues/35Provide button to send list-key to all subscribers2018-03-28T08:25:24ZpazProvide button to send list-key to all subscribersSchleuder doesn't provide it yet, but it's planned: schleuder/schleuder#99
To use that feature schleuder-web should provide a carefully labelled
button to admins, that triggers the sending.Schleuder doesn't provide it yet, but it's planned: schleuder/schleuder#99
To use that feature schleuder-web should provide a carefully labelled
button to admins, that triggers the sending.https://0xacab.org/schleuder/schleuder-web/-/issues/32Make being superadmin configurable2018-06-12T22:35:18ZpazMake being superadmin configurable- The "superadmin"-access should not be tied to one hard-coded account,
but should be configurable.
- We probably need a new attribute for the account.
- And we must check that no one can "remove" the last superadmin-enabled
acco...- The "superadmin"-access should not be tied to one hard-coded account,
but should be configurable.
- We probably need a new attribute for the account.
- And we must check that no one can "remove" the last superadmin-enabled
account.https://0xacab.org/schleuder/schleuder-web/-/issues/18Add 'forgot password'-functionality2018-06-12T22:35:18ZpazAdd 'forgot password'-functionalityThis feature should reuse the token generation and storage logic that exists for creating an account.
This feature should reuse the token generation and storage logic that exists for creating an account.
https://0xacab.org/schleuder/schleuder-web/-/issues/26Provide key-upload-option in subscription form2018-02-19T21:36:07ZpazProvide key-upload-option in subscription formOften one would start to subscribe an address by entering it into the new-subscription-form and then realise that to assign the fingerprint one needs to upload the key first. We should help with that.
* Either provide a key-upload-fie...Often one would start to subscribe an address by entering it into the new-subscription-form and then realise that to assign the fingerprint one needs to upload the key first. We should help with that.
* Either provide a key-upload-field and try to use the result of the import to assign the fingerprint, or
* provide a link to the key-upload-form without leaving the new-subscription-form (popup?) and after successful upload refresh the list of keys in the new-subscription-form.https://0xacab.org/schleuder/schleuder-web/-/issues/128Show key summary after import2023-11-14T08:54:01ZpazShow key summary after importAfter key(s) have been uploaded, the flash message should show the key summary (which includes a possible expiration) about each imported key.
Those details will be provided by the API daemon after schleuder!425 has been merged.After key(s) have been uploaded, the flash message should show the key summary (which includes a possible expiration) about each imported key.
Those details will be provided by the API daemon after schleuder!425 has been merged.5.0.0pazpazhttps://0xacab.org/schleuder/schleuder-web/-/issues/127Upgrade to rails 72022-09-13T14:51:17ZNinaUpgrade to rails 75.0.0NinaNinahttps://0xacab.org/schleuder/schleuder-web/-/issues/126Run test suite with Ruby 3.12022-09-13T14:51:30ZpazRun test suite with Ruby 3.15.0.0pazpazhttps://0xacab.org/schleuder/schleuder-web/-/issues/125Drop support for Ruby 2.5+2.62022-09-11T18:24:00ZpazDrop support for Ruby 2.5+2.6Should be noted in the README, too.Should be noted in the README, too.5.0.0pazpazhttps://0xacab.org/schleuder/schleuder-web/-/issues/124Proper product version tags of schleuder-web2022-03-21T16:43:32ZAndreas SchleiferProper product version tags of schleuder-webCan we get proper version tags of schleuder-web?
In the end I want to package this for archlinux and while I can pin it hard to a commit hash, I think it would be more "clean" if there were proper version tags of schleuder-web like `3.6...Can we get proper version tags of schleuder-web?
In the end I want to package this for archlinux and while I can pin it hard to a commit hash, I think it would be more "clean" if there were proper version tags of schleuder-web like `3.6.0`.