Chocolate Pieandtamaina
c96bc36fed
Merge pull request from GHSA-7pxq-6xx9-xpgm
* fix: fix improper authorization when accessing with third-party application
* refactor: refactor type definitions
* fix: get rid of unnecessary access limitation
* enhance: サードパーティアプリケーションがWebsocket APIを使えるように
* fix: add missing parentheses
* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"
This reverts commit 5150053275.
* frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする
* enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加
* enhance(test): Websocket APIに対するテストも追加
* enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合
* fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正
* enhance(backend): Websocketの接続に最低限必要な権限を変更
* fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように
* fix(backend): エンドポイントにアクセスするために必要な権限を変更
* fix(frontend/locale): Add missing type declaration
* chore: update `misskey-js/src/autogen`
---------
Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-12-27 15:08:59 +09:00
..
2023-12-26 14:19:35 +09:00
2023-12-25 18:03:06 +09:00
2023-12-26 14:19:35 +09:00
2023-12-15 15:37:19 +09:00
2023-12-24 16:16:58 +09:00
2023-12-07 14:42:09 +09:00
2023-12-24 16:16:58 +09:00
2023-09-19 16:37:43 +09:00
2023-12-24 16:16:58 +09:00
2023-09-19 16:37:43 +09:00
2023-12-24 16:16:58 +09:00
2023-12-26 14:19:35 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-12-13 18:14:43 +09:00
2023-08-13 20:12:29 +09:00
2023-09-19 16:37:43 +09:00
2023-07-27 14:31:52 +09:00
2023-12-25 18:03:06 +09:00
2023-12-24 16:16:58 +09:00
2023-12-18 14:59:55 +09:00
2023-12-24 16:16:58 +09:00
2023-09-19 16:37:43 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-07-27 14:31:52 +09:00
2023-12-26 14:19:35 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-12-22 20:41:42 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-09-19 16:37:43 +09:00
2023-12-11 20:31:23 +09:00
2023-12-16 12:34:35 +09:00
2023-12-16 13:18:12 +09:00
2023-12-21 11:36:45 +09:00
2023-09-19 16:37:43 +09:00
2023-12-24 16:16:58 +09:00
2023-12-07 14:42:09 +09:00
2023-12-19 18:30:31 +09:00
2023-12-24 16:16:58 +09:00
2023-12-07 14:42:09 +09:00
2023-07-27 14:31:52 +09:00
2023-07-27 14:31:52 +09:00
2023-12-22 20:16:31 +09:00
2023-11-03 08:01:22 +09:00
2023-12-13 16:56:19 +09:00
2023-09-19 16:37:43 +09:00
2023-12-12 10:26:37 +09:00
2023-07-27 14:31:52 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-12-10 02:11:17 +09:00
2023-12-14 14:11:20 +09:00
2023-12-14 14:11:20 +09:00
2023-07-27 14:31:52 +09:00
2023-12-02 21:00:05 +09:00
2023-12-07 14:42:09 +09:00
2023-12-26 21:40:27 +09:00
2023-09-19 16:37:43 +09:00
2023-10-29 16:09:20 +09:00
2023-12-07 14:42:09 +09:00
2023-12-11 20:31:23 +09:00
2023-12-07 14:42:09 +09:00
2023-12-14 13:11:23 +09:00
2023-12-24 16:16:58 +09:00
2023-09-19 16:37:43 +09:00
2023-12-08 19:46:25 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-11-03 15:35:07 +09:00
2023-12-14 13:11:23 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-24 16:16:58 +09:00
2023-12-02 21:00:05 +09:00
2023-09-19 16:37:43 +09:00
2023-12-07 14:42:09 +09:00
2023-12-26 14:19:35 +09:00
2023-12-26 14:19:35 +09:00
2023-12-21 11:36:45 +09:00
2023-12-07 14:42:09 +09:00
2023-12-24 16:16:58 +09:00
2023-12-03 10:58:42 +09:00
2023-10-21 13:31:16 +09:00
2023-09-23 20:34:45 +09:00
2023-12-24 16:16:58 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-26 14:19:35 +09:00
2023-12-26 21:40:27 +09:00
2023-11-03 15:35:07 +09:00
2023-11-30 13:49:31 +09:00
2023-11-23 18:56:20 +09:00
2023-12-21 11:36:45 +09:00
2023-12-21 11:36:45 +09:00
2023-12-26 11:40:31 +09:00
2023-12-21 11:36:45 +09:00
2023-12-07 14:42:09 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-11-19 11:43:04 +09:00
2023-12-24 16:16:58 +09:00
2023-12-24 16:16:58 +09:00
2023-12-26 14:19:35 +09:00
2023-12-07 14:42:09 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-12-12 10:26:37 +09:00
2023-12-26 14:19:35 +09:00
2023-11-03 15:35:07 +09:00
2023-12-09 13:14:51 +09:00
2023-12-21 11:36:45 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-07-27 14:31:52 +09:00
2023-10-22 13:02:24 +09:00
2023-12-07 14:42:09 +09:00
2023-11-02 19:59:18 +09:00
2023-11-11 16:07:07 +09:00
2023-12-14 16:17:01 +09:00
2023-12-07 14:42:09 +09:00
2023-07-27 14:31:52 +09:00
2023-09-19 16:37:43 +09:00
2023-12-07 14:42:09 +09:00
2023-09-19 16:37:43 +09:00
2023-09-19 16:37:43 +09:00
2023-12-26 14:19:35 +09:00
2023-12-26 14:19:35 +09:00
2023-12-26 14:19:35 +09:00
2023-12-07 14:42:09 +09:00
2023-12-26 14:19:35 +09:00
2023-09-19 16:37:43 +09:00
2023-12-22 20:16:31 +09:00
2023-12-21 11:36:45 +09:00
2023-12-26 14:19:35 +09:00
2023-12-21 11:36:45 +09:00
2023-07-27 14:31:52 +09:00
2023-09-19 16:37:43 +09:00
2023-12-10 17:53:38 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-12-15 17:57:31 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-27 15:08:59 +09:00
2023-09-19 16:37:43 +09:00
2023-11-03 15:35:07 +09:00
2023-11-04 20:21:42 +09:00
2023-11-04 20:21:42 +09:00
2023-12-22 20:16:31 +09:00
2023-12-22 20:16:31 +09:00
2023-12-22 20:16:31 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-26 14:19:35 +09:00
2023-12-07 14:42:09 +09:00
2023-12-18 20:59:20 +09:00
2023-09-19 16:37:43 +09:00
2023-12-07 14:42:09 +09:00
2023-12-18 20:59:20 +09:00
2023-12-07 14:42:09 +09:00
2023-12-24 16:16:58 +09:00
2023-12-26 21:40:27 +09:00
2023-07-27 14:31:52 +09:00
2023-12-21 11:36:45 +09:00
2023-07-27 14:31:52 +09:00
2023-12-21 11:36:45 +09:00
2023-12-24 16:16:58 +09:00
2023-12-24 16:16:58 +09:00
2023-12-21 11:36:45 +09:00
2023-11-03 15:35:07 +09:00
2023-07-27 14:31:52 +09:00
2023-12-07 14:42:09 +09:00
2023-12-07 14:42:09 +09:00
2023-12-22 20:16:31 +09:00
2023-07-27 14:31:52 +09:00
2023-12-26 14:19:35 +09:00
2023-12-13 16:56:19 +09:00
2023-12-07 14:42:09 +09:00