Commit Graph

27 Commits

Author SHA1 Message Date
BAm Wang
58a2ee32fa Validate username password type when logging in, and validate email when reseting password (#2679)
* Validate username password type when logging in, and validate email when reset password

* Add test for validation
2016-09-09 11:24:33 -04:00
Diwakar Cherukumilli
28bd37884d Adds ability to set an account lockout policy (#2601)
* Adds ability to set account lockout policy

* change fit to it in tests
2016-09-02 20:00:47 -04:00
Florent Vilmart
23e47f2e28 Makes sure routes don't overlap and yield a header set error (#2559) 2016-08-21 13:57:12 -04:00
Diwakar Cherukumilli
6f292059ba Adds ability to expire email verify token (#2216) 2016-07-18 23:10:36 -07:00
Florent Vilmart
2498a954ce Exposes clientSDK into RestQuery, RestWrite and rest 2016-07-12 10:06:13 -04:00
Tyler Brock
2f2ff377eb Better e-mail adapter testing (#2208) 2016-07-05 12:08:46 -07:00
Diwakar Cherukumilli
08c63f324a Adds ability to prevent login with unverified emails (#2175) 2016-07-04 13:56:35 -04:00
Tyler Brock
799e59618c Stop requiring verifyUserEmails for password reset functionality (#2166) 2016-06-28 22:25:44 -04:00
Drew
0850c184d3 Fixes #1649 (#1650)
* Regression test #1649

* Address comments

* Comment

* Change emails to help debug flaky test failures

* More logging info to debug flaky tests
2016-05-25 19:48:18 -04:00
Drew
392102eb97 Cache users by objectID, and clear cache when updated via master key (fixes #1836) (#1844)
* Cache users by objectID, and clear cache when updated via master key

* Go back to caching by session token. Clear out cache by querying _Session when user is modified with Master Key (ew, hopefully that can be improved later)

* Fix issue with user updates from different sessions causing stale reads

* Tests aren't transpiled...

* Still not transpiled
2016-05-22 09:59:36 -07:00
Drew Gross
ee8a3c94d5 No need to transform post-transform keys in mongo adapter 2016-04-25 20:42:19 -07:00
Jeremy May
f99b5588ab Added session length option for session tokens to server configuration 2016-04-02 11:36:47 -04:00
Florent Vilmart
3603b82eac Properly sets installationId on creating session with 3rd party auth 2016-03-20 15:58:16 -04:00
Florent Vilmart
1ed868b99c Fixes #935, cleans up authData null keys on login for android crash 2016-03-11 11:14:58 -05:00
Florent Vilmart
3ecaa0aa4b Sends verification email upon set and update email
- nits
2016-02-29 18:58:34 -05:00
Florent Vilmart
91d9724182 Adds reset password logic 2016-02-29 18:55:15 -05:00
Florent Vilmart
f3bb2c99e0 Refactor and advancements
- Drops mailController, centralized in UserController
- Adds views folder for change_password
- Improves PromiseRouter to support text results
- Improves PromiseRouter to support empty responses for redirects
- Adds options to AdaptableController
- UsersController gracefully fails when no adapter is set
- Refactors GlobalConfig into same style for Routers
2016-02-29 18:55:14 -05:00
Florent Vilmart
7dd765256c Refactors verify_email, adds public html 2016-02-29 18:52:11 -05:00
Florent Vilmart
0b307bc22f Improves AdapterLoader, enforces configuraiton on Adapters 2016-02-29 18:52:10 -05:00
Drew Gross
8dc37b9d30 Exploring the interface of a mail adapter
Add some tests and demonstrate the adapter loading interface
2016-02-29 18:52:10 -05:00
Nikita Lutsenko
daa5f11122 Remove 'database' field from request and make all database requests go through config. 2016-02-26 22:48:53 -08:00
Nikita Lutsenko
bc90effd32 Send a sessionToken back on /users/me. 2016-02-24 12:54:04 -08:00
Florent Vilmart
3c4d5159b4 Refactors routers 2016-02-20 00:08:54 -05:00
Florent Vilmart
86c502c702 Removes installationId from _User 2016-02-16 12:38:45 -05:00
Florent Vilmart
ea07eb506d Clears session on password change
- Fixes error type when passing an invalid session token
2016-02-15 10:15:47 -05:00
Dmitry Chestnykh
62cbc451aa Generate tokens and ids with cryptoUtils module.
Move object ID, token, and random string generation into their own
module, cryptoUtils.

Remove hat dependency, which was used to generate session and some other
tokens, because it  used non-cryptographic random number generator.
Replace it with the cryptographically secure one. The result has the
same format (32-character hex string, 128 bits of entropy).

Remove randomstring dependency, as we already have this functionality.

Add tests.
2016-02-12 21:16:50 +01:00
Nikita Lutsenko
ab841b5ab4 Refactor and deduplicate logic in UsersRouter. 2016-02-11 23:17:38 -08:00