🌎 An interplanetary microblogging platform 🚀 https://misskey-hub.net
Find a file
Chocolate Pie c96bc36fed
Merge pull request from GHSA-7pxq-6xx9-xpgm
* fix: fix improper authorization when accessing with third-party application

* refactor: refactor type definitions

* fix: get rid of unnecessary access limitation

* enhance: サードパーティアプリケーションがWebsocket APIを使えるように

* fix: add missing parentheses

* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"

This reverts commit 5150053275.

* frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする

* enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加

* enhance(test): Websocket APIに対するテストも追加

* enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合

* fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正

* enhance(backend): Websocketの接続に最低限必要な権限を変更

* fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように

* fix(backend): エンドポイントにアクセスするために必要な権限を変更

* fix(frontend/locale): Add missing type declaration

* chore: update `misskey-js/src/autogen`

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-12-27 15:08:59 +09:00
.config Fix(backend): inboxJobPerSecのデフォルト値を16から32に (#12631) 2023-12-13 08:14:34 +09:00
.devcontainer Fix(backend): inboxJobPerSecのデフォルト値を16から32に (#12631) 2023-12-13 08:14:34 +09:00
.github (dev) Issue Templateに、自分で実装してPRを出したいかの意思表明を追加 (#12799) 2023-12-26 11:40:55 +09:00
.okteto ok-to-test with okteto (#8799) 2022-06-09 00:50:23 +09:00
.vscode 設定を付けた & 設定自体をフォーマット (#12693) 2023-12-18 10:52:23 +09:00
assets cleanup: trim trailing whitespace (#11136) 2023-07-08 07:08:16 +09:00
chart chore(workflows): use postgres 15 everywhere (#12726) 2023-12-21 10:29:51 +09:00
cypress disable cypress widgets tests 2023-10-19 20:22:24 +09:00
fluent-emojis@cae981eb4c feat: introduce fluent emoji 2022-12-26 16:04:56 +09:00
locales Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-27 15:08:59 +09:00
misskey-assets@0179793ec8 enhance(client): Sync widgets (#8512) 2022-12-27 14:55:11 +09:00
packages Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-27 15:08:59 +09:00
scripts (dev-mode) devモードの改善 (#12639) 2023-12-14 20:16:02 +09:00
.dockerignore feat: Introduce Meilisearch (#10755) 2023-05-05 08:52:14 +09:00
.dockleignore fix: aptのキャッシュを削除しないようにする (#9803) 2023-02-05 14:15:59 +09:00
.editorconfig cleanup: trim trailing whitespace (#11136) 2023-07-08 07:08:16 +09:00
.gitattributes 改行コードをLFに統一 (#9926) 2023-02-14 13:13:34 +09:00
.gitignore Update .gitignore 2023-07-07 10:49:17 +09:00
.gitmodules feat: introduce fluent emoji 2022-12-26 16:04:56 +09:00
.node-version update node to 20.10.0 2023-11-24 09:20:41 +09:00
.npmrc fix: .npmrcによりpackage.json記載のnodeバージョンに満たない場合はビルドに失敗するようにする (#12755) 2023-12-23 15:32:31 +09:00
.vsls.json Add .vsls.json 2018-08-13 00:24:45 +09:00
CHANGELOG.md Merge pull request from GHSA-7pxq-6xx9-xpgm 2023-12-27 15:08:59 +09:00
CODE_OF_CONDUCT.md docs: Update Code of Conduct to version 2.1 (#12150) 2023-11-13 16:52:54 +09:00
codecov.yml Update codecov.yml 2023-02-26 14:17:29 +09:00
CONTRIBUTING.md fix CONTRIBUTING.md (#12600) 2023-12-08 09:00:23 +09:00
COPYING feat: update year in COPYING file (#9578) 2023-01-15 11:53:22 +09:00
crowdin.yml ドキュメントをmisskey-hubに移行 2021-11-05 16:18:52 +09:00
cypress.config.ts update cypress 2022-06-11 15:53:45 +09:00
docker-compose.local-db.yml chore: 開発モードでフロントエンドとバックエンドを独立して起動するようにする(再) (#12593) 2023-12-08 08:22:08 +09:00
docker-compose_example.yml rename docker-compose.yml.example to docker-compose_example.yml (#12530) 2023-12-01 11:19:33 +09:00
Dockerfile fix(docker): cannot build docker image on some environments (#12494) 2023-11-30 14:47:08 +09:00
healthcheck.sh chore: 著作権とライセンスについての情報を各ファイルに追加する (#11348) 2023-07-27 14:31:52 +09:00
LICENSE Use AGPLv3 2018-03-28 22:56:28 +09:00
package.json 2023.12.0 2023-12-22 20:59:28 +09:00
pnpm-lock.yaml enhance: Unicode 15.0で新たに追加された絵文字をリアクションに使えるように (#12683) 2023-12-18 14:51:29 +09:00
pnpm-workspace.yaml バックエンドが生成するapi.jsonからmisskey-jsの型を作成する (#12434) 2023-12-02 21:00:05 +09:00
Procfile Create Procfile 2019-04-05 18:17:30 +09:00
README.md [Hub Next] Misskey Hubのリンクを変更 (#12699) 2023-12-22 20:16:31 +09:00
ROADMAP.md Update ROADMAP.md 2023-07-27 19:34:51 +09:00
SECURITY.md Update SECURITY.md 2023-12-25 16:50:41 +09:00

Misskey logo

🌎 Misskey is an open source, decentralized social media platform that's free forever! 🚀


find an instance create an instance become a contributor join the community become a patron

codecov

Features

  • ActivityPub support
    Not on Misskey? No problem! Not only can Misskey instances talk to each other, but you can make friends with people on other networks like Mastodon and Pixelfed!
  • Reactions
    You can add emoji reactions to any post! No longer are you bound by a like button, show everyone exactly how you feel with the tap of a button.
  • Drive
    With Misskey's built in drive, you get cloud storage right in your social media, where you can upload any files, make folders, and find media from posts you've made!
  • Rich Web UI
    Misskey has a rich and easy to use Web UI! It is highly customizable, from changing the layout and adding widgets to making custom themes. Furthermore, plugins can be created using AiScript, an original programming language.
  • And much more...

Documentation

Misskey Documentation can be found at Misskey Hub, some of the links and graphics above also lead to specific portions of it.

Sponsors

RSS3

Thanks

Chromatic

Thanks to Chromatic for providing the visual testing platform that helps us review UI changes and catch visual regressions.

Codecov

Thanks to Codecov for providing the code coverage platform that helps us improve our test coverage.

Crowdin

Thanks to Crowdin for providing the localization platform that helps us translate Misskey into many languages.

Docker

Thanks to Docker for providing the container platform that helps us run Misskey in production.