Tom Fox
19264ba9ff
Further improve issue template ( #6816 )
...
* Update ---report-an-issue.md
* mtrezza's suggestions
* remove support from readme
* Rename ---report-an-issue.md to ---1-report-an-issue.md
* Update ---feature-request.md
* Rename ---feature-request.md to ---2-feature-request.md
* Delete ---getting-help.md
* Delete ---push-notifications.md
* Delete ---parse-server-3-0-0.md
* Create config.yml
* change support link to org wide doc
2020-07-29 21:26:09 +01:00
Snyk bot
d4beda14af
fix: upgrade pg-promise from 10.5.7 to 10.5.8 ( #6838 )
...
Snyk has created this PR to upgrade pg-promise from 10.5.7 to 10.5.8.
See this package in npm:
https://www.npmjs.com/package/pg-promise
See this project in Snyk:
https://app.snyk.io/org/dplewis/project/704d127e-7a24-4789-a0cd-807b7b972c86?utm_source=github&utm_medium=upgrade-pr
2020-07-29 15:13:53 +00:00
Arjun Vedak
42f75d6d94
fix(auth): Properly handle google token issuer ( #6836 )
...
* Updated TOKEN_ISSUER to 'accounts.google.com'
Hi, I was getting this issue from today morning parse-server/Adapters/Auth/google.js was expecting the TOKEN_ISSUER to be prefixed with https:// but on debugging the original value was not having the prefix, removing https:// from TOKEN_ISSUER solved this bug. This issue is introduced in 4.3.0 as in 4.2.0 it is working fine currently I have downgraded the version to 4.2.0 for it to work properly and suggesting the changes please merge this PR.
* Update google.js
* Update AuthenticationAdapters.spec.js
* Update google.js
* Update google.js
2020-07-29 09:55:59 -05:00
Snyk bot
92afcca4ee
fix: upgrade graphql from 15.2.0 to 15.3.0 ( #6832 )
...
Snyk has created this PR to upgrade graphql from 15.2.0 to 15.3.0.
See this package in npm:
https://www.npmjs.com/package/graphql
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-27 03:37:30 +00:00
Manuel
5b71993175
improve field deletion in collection ( #6823 )
...
* added filter to updateMany when deleting field
* added test cases
* added changelog entry
2020-07-27 02:22:04 +02:00
Snyk bot
9ba9620bdf
fix: upgrade ws from 7.3.0 to 7.3.1 ( #6831 )
...
Snyk has created this PR to upgrade ws from 7.3.0 to 7.3.1.
See this package in npm:
https://www.npmjs.com/package/ws
See this project in Snyk:
https://app.snyk.io/org/dplewis/project/704d127e-7a24-4789-a0cd-807b7b972c86?utm_source=github&utm_medium=upgrade-pr
2020-07-26 15:22:06 -07:00
Manuel
114d78e80a
enabled MongoDB transaction test for MongoDB >= 4.0.4 ( #6827 )
2020-07-25 10:11:10 -07:00
Snyk bot
6f1210c325
fix: upgrade @graphql-tools/stitch from 6.0.11 to 6.0.12 ( #6824 )
...
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.11 to 6.0.12.
See this package in npm:
https://www.npmjs.com/package/@graphql-tools/stitch
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Antonio Davi Macedo Coelho de Castro <adavimacedo@gmail.com >
2020-07-24 18:05:27 +00:00
Snyk bot
dd41bf1739
fix: upgrade @graphql-tools/utils from 6.0.11 to 6.0.12 ( #6825 )
...
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.11 to 6.0.12.
See this package in npm:
https://www.npmjs.com/package/@graphql-tools/utils
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-24 14:42:13 +00:00
Tom Fox
97f2456a28
add details of security fix ( #6822 )
2020-07-23 08:58:56 -07:00
Antonio Davi Macedo Coelho de Castro
a6597ac669
Fix NPM publish process ( #6821 )
2020-07-22 23:46:17 +02:00
Snyk bot
0236efd113
fix: upgrade apollo-server-express from 2.15.0 to 2.15.1 ( #6819 )
...
Snyk has created this PR to upgrade apollo-server-express from 2.15.0 to 2.15.1.
See this package in npm:
https://www.npmjs.com/package/apollo-server-express
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-22 03:36:14 +00:00
Snyk bot
d652517bbe
fix: upgrade graphql from 15.1.0 to 15.2.0 ( #6818 )
...
Snyk has created this PR to upgrade graphql from 15.1.0 to 15.2.0.
See this package in npm:
https://www.npmjs.com/package/graphql
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-21 03:34:31 +00:00
Antonio Davi Macedo Coelho de Castro
3654f0280b
Fix message on 4.3.0 release ( #6813 )
2020-07-19 23:23:15 +01:00
Antonio Davi Macedo Coelho de Castro
6f060e0909
Release 4.3.0 ( #6811 )
...
* Release version 4.3.0
* Update CHANGELOG.md
Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com >
* Update CHANGELOG.md
Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com >
* Update CHANGELOG.md
Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com >
* Update CHANGELOG.md
Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com >
Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com >
2020-07-19 10:37:36 -07:00
mess-lelouch
d69833332c
Optimizing pointer CLP query decoration done by DatabaseController#addPointerPermissions ( #6747 )
...
* Optimize CLP pointer query
* remove console log
* Update changelog
* Fix flow type checker issues
* Remove unused properties
* Fix typo, add one more test case for coverage
* Add support for CLP entry of type Object
Co-authored-by: Musa Yassin-Fort <musa.yassin@bureapr.com >
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
2020-07-17 13:14:43 -05:00
Antoine Cormouls
78239ac907
Merge pull request from GHSA-236h-rqv8-8q73
...
* Fix graphql viewer breach
* fix
* remove comment
2020-07-17 09:50:41 -07:00
Diamond Lewis
f6ed5067b0
Remove wontfix label from stalebot ( #6810 )
...
Replacing the `wontfix` label with `stale` label. `wontfix` looks like we would never fix them.
2020-07-17 10:15:29 -05:00
Tom Fox
ea1ec9b325
Update bug report template ( #6805 )
...
* Update bug report template
* fixes
* nit
* address Manuel's review
* Delete old issue template
* Delete old unused migration image
* Improve SO prompt
2020-07-17 10:47:07 +01:00
Snyk bot
5e67e7da43
fix: upgrade @graphql-tools/stitch from 6.0.10 to 6.0.11 ( #6808 )
...
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.10 to 6.0.11.
See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/stitch
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
2020-07-17 05:02:34 +00:00
Omair Vaiyani
85ec22ce3b
fix(direct-access): save context not present if direct access enabled ( #6764 )
...
* fix(direct-access): save context not present if direct access enabled
[Open discussion](https://github.com/parse-community/parse-server/issues/6459 ) for feature with other issues
* only send context when present
* use object spread
* revert and add test
* rename test
Co-authored-by: dplewis <findlewis@gmail.com >
2020-07-16 22:56:47 -05:00
Snyk bot
2e708cc77c
fix: upgrade @graphql-tools/utils from 6.0.10 to 6.0.11 ( #6809 )
...
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.10 to 6.0.11.
See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/utils
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-17 03:46:27 +00:00
dependabot[bot]
4f7fd1732b
chore(deps): bump lodash from 4.17.16 to 4.17.19 ( #6807 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.16 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.16...4.17.19 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-16 22:10:35 -05:00
dblythy
44015c3e35
Before Connect + Before Subscribe help required ( #6793 )
...
* Before Connect + Before Subscribe #1
* Cleanup and Documentation
* Add E2E tests
* Bump parse to 2.15.0
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
2020-07-16 20:36:38 -05:00
Antoine Cormouls
93a88c5cde
Add version to fix CDN ( #6804 )
2020-07-16 13:13:29 -07:00
Manuel
3bd5684f67
Add idempotency ( #6748 )
...
* added idempotency router and middleware
* added idempotency rules for routes classes, functions, jobs, installaions, users
* fixed typo
* ignore requests without header
* removed unused var
* enabled feature only for MongoDB
* changed code comment
* fixed inconsistend storage adapter specification
* Trigger notification
* Travis CI trigger
* Travis CI trigger
* Travis CI trigger
* rebuilt option definitions
* fixed incorrect import path
* added new request ID header to allowed headers
* fixed typescript typos
* add new system class to spec helper
* fixed typescript typos
* re-added postgres conn parameter
* removed postgres conn parameter
* fixed incorrect schema for index creation
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* temporarily disabling index creation to fix postgres issue
* trying to fix postgres issue
* fixed incorrect auth when writing to _Idempotency
* trying to fix postgres issue
* Travis CI trigger
* added test cases
* removed number grouping
* fixed test description
* trying to fix postgres issue
* added Github readme docs
* added change log
* refactored tests; fixed some typos
* fixed test case
* fixed default TTL value
* Travis CI Trigger
* Travis CI Trigger
* Travis CI Trigger
* added test case to increase coverage
* Trigger Travis CI
* changed configuration syntax to use regex; added test cases
* removed unused vars
* removed IdempotencyRouter
* Trigger Travis CI
* updated docs
* updated docs
* updated docs
* updated docs
* update docs
* Trigger Travis CI
* fixed coverage
* removed code comments
2020-07-15 13:10:33 -05:00
SebC
cbf9da517b
Add production Google Auth Adapter instead of using the development url ( #6734 )
...
* Add the production Google Auth Adapter instead of using the development url
* Update tests to the new google auth
* lint
2020-07-15 09:56:08 -07:00
Snyk bot
36bee12c24
fix: upgrade uuid from 8.1.0 to 8.2.0 ( #6800 )
...
Snyk has created this PR to upgrade uuid from 8.1.0 to 8.2.0.
See this package in NPM:
https://www.npmjs.com/package/uuid
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-15 08:13:14 -07:00
Snyk bot
1cc3211256
fix: upgrade @graphql-tools/stitch from 6.0.1 to 6.0.10 ( #6798 )
...
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.1 to 6.0.10.
See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/stitch
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Antonio Davi Macedo Coelho de Castro <adavimacedo@gmail.com >
2020-07-13 23:12:07 -07:00
Snyk bot
fc8a6687d7
fix: upgrade @graphql-tools/utils from 6.0.1 to 6.0.10 ( #6797 )
...
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.1 to 6.0.10.
See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/utils
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 22:25:54 -07:00
Diamond Lewis
142eaa71bd
Run Prettier JS #2 ( #6796 )
2020-07-13 15:13:08 -07:00
Diamond Lewis
e6a6354b29
Run Prettier JS ( #6795 )
2020-07-13 13:06:52 -05:00
LongYinan
ebb0727793
chore: replace bcrypt with @node-rs/bcrypt ( #6794 )
2020-07-13 10:08:01 -05:00
Jerome De Leon
0abe9bb42d
Make clear description of anonymous user ( #6655 )
...
* Make clear description of anonymous user
* Properly generate definitions
Co-authored-by: dplewis <findlewis@gmail.com >
2020-07-13 10:00:55 -05:00
Snyk bot
01b49b61ea
fix: upgrade follow-redirects from 1.11.0 to 1.12.1 ( #6788 )
...
Snyk has created this PR to upgrade follow-redirects from 1.11.0 to 1.12.1.
See this package in NPM:
https://www.npmjs.com/package/follow-redirects
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 09:20:58 -05:00
Snyk bot
d5fbd50fa8
fix: upgrade pg-promise from 10.5.6 to 10.5.7 ( #6792 )
...
Snyk has created this PR to upgrade pg-promise from 10.5.6 to 10.5.7.
See this package in NPM:
https://www.npmjs.com/package/pg-promise
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 09:20:30 -05:00
Snyk bot
33c1cdcd4e
fix: upgrade apollo-server-express from 2.14.1 to 2.15.0 ( #6787 )
...
Snyk has created this PR to upgrade apollo-server-express from 2.14.1 to 2.15.0.
See this package in NPM:
https://www.npmjs.com/package/apollo-server-express
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 07:00:22 -05:00
Snyk bot
f8df89a499
fix: upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0 ( #6789 )
...
Snyk has created this PR to upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0.
See this package in NPM:
https://www.npmjs.com/package/winston-daily-rotate-file
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 07:00:04 -05:00
Snyk bot
80d518f91d
fix: upgrade jwks-rsa from 1.8.0 to 1.8.1 ( #6790 )
...
Snyk has created this PR to upgrade jwks-rsa from 1.8.0 to 1.8.1.
See this package in NPM:
https://www.npmjs.com/package/jwks-rsa
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 06:59:45 -05:00
Antoine Cormouls
c85501718e
Change merge system to avoid ref bugs ( #6791 )
2020-07-13 10:13:47 +02:00
yog27ray
34614e0f78
Pass context in beforeDelete, afterDelete, beforeFind and Parse.Cloud.run. ( #6666 )
...
* add context for following hooks.
1. beforeDelete
2. afterDelete
3. beforeFind
4. Cloud Function
* revert un-necessary code change.
* fix: failing test cases.
* fix: failing test cases.
* fix: failing test cases.
* fix: failing test cases.
* fix: failing test cases.
* fix: failing test cases.
* fix: failing test cases.
* review changes
* revert changes
* revert changes
* review changes
* lint changes
* review changes
2020-07-10 22:47:27 +02:00
Luca
4437ea73ba
Allow passing custom gql schema function to ParseServer#start options ( #6762 )
2020-07-10 14:52:39 -05:00
Snyk bot
e848b541bd
fix: upgrade mongodb from 3.5.8 to 3.5.9 ( #6775 )
...
Snyk has created this PR to upgrade mongodb from 3.5.8 to 3.5.9.
See this package in NPM:
https://www.npmjs.com/package/mongodb
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-10 14:11:01 -05:00
Snyk bot
06bdec8219
fix: package.json & package-lock.json to reduce vulnerabilities ( #6784 )
...
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
2020-07-10 14:04:57 -05:00
Kevin Yao
d03ec18bcc
feat: allow custom cors origin header ( #6772 )
2020-07-10 13:48:57 -05:00
Snyk bot
6fc42a526f
fix: upgrade @apollographql/graphql-playground-html from 1.6.25 to 1.6.26 ( #6774 )
...
Snyk has created this PR to upgrade @apollographql/graphql-playground-html from 1.6.25 to 1.6.26.
See this package in NPM:
https://www.npmjs.com/package/@apollographql/graphql-playground-html
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-10 13:44:28 -05:00
Manuel
f095dffcc3
fix context for cascade-saving and saving existing object ( #6735 )
...
* added test cases
* fixed unparsed context when updating object
* fixed context inheritance for cascade-saved objects
* upgraded parse dependecy to 2.14.0
* rebuild
* removed superfluous comments
* undo lint changes
2020-07-02 14:37:41 -05:00
Snyk bot
41fc7c1f21
fix: upgrade @apollographql/graphql-playground-html from 1.6.24 to 1.6.25 ( #6767 )
...
Snyk has created this PR to upgrade @apollographql/graphql-playground-html from 1.6.24 to 1.6.25.
See this package in NPM:
https://www.npmjs.com/package/@apollographql/graphql-playground-html
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-02 11:40:26 -05:00
Snyk bot
d8d2a8da51
fix: upgrade graphql from 15.0.0 to 15.1.0 ( #6761 )
...
Snyk has created this PR to upgrade graphql from 15.0.0 to 15.1.0.
See this package in NPM:
https://www.npmjs.com/package/graphql
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-02 11:38:28 -05:00
Corey
5426f5a4f7
Add file bucket encryption using fileKey ( #6765 )
...
* add fileKey encryption to GridFSBucketStorageAdapter
* remove fileAdapter options from test spec
* ensure promise doesn't fall through in getFileData
* switch secretKey to fileKey
2020-07-01 18:43:26 -05:00