Xy Ziemba
29fec01a42
Resend Verification Email Endpoint ( #3543 )
...
* Endpoint to Handle Verification Email Request
* Adds tests for verificationEmailRequest endpoint
* Better error responses for `/verificationEmailRequest`
2017-03-04 13:30:52 -08:00
Arthur Cinader
ca286b7108
Enable prefer-const lint rule ( #3202 )
2016-12-07 18:17:05 -05:00
Florent Vilmart
8c2c76dd26
Adds liniting into the workflow ( #3082 )
...
* initial linting of src
* fix indent to 2 spaces
* Removes unnecessary rules
* ignore spec folder for now
* Spec linting
* Fix spec indent
* nits
* nits
* no no-empty rule
2016-11-24 15:47:41 -05:00
Bhaskar Reddy Yasa
edb7b70ced
Adds password expiry support to password policy ( #3068 )
...
* Adding support for password expiry policy
* Renamed daysBeforeExpiry -> maxPasswordAge
2016-11-21 07:46:38 -08:00
Florent Vilmart
ac348f5c4f
Reverts calling next() after handling response ( #2634 )
...
* Revert "Makes sure routes don't overlap and yield a header set error"
* removes next() calls in PromiseRouter
* Reverts calling next() after response
* Adds fail calls when next() calls traverse tests
2016-09-09 17:28:41 -04:00
BAm Wang
58a2ee32fa
Validate username password type when logging in, and validate email when reseting password ( #2679 )
...
* Validate username password type when logging in, and validate email when reset password
* Add test for validation
2016-09-09 11:24:33 -04:00
Diwakar Cherukumilli
28bd37884d
Adds ability to set an account lockout policy ( #2601 )
...
* Adds ability to set account lockout policy
* change fit to it in tests
2016-09-02 20:00:47 -04:00
Florent Vilmart
23e47f2e28
Makes sure routes don't overlap and yield a header set error ( #2559 )
2016-08-21 13:57:12 -04:00
Diwakar Cherukumilli
6f292059ba
Adds ability to expire email verify token ( #2216 )
2016-07-18 23:10:36 -07:00
Florent Vilmart
2498a954ce
Exposes clientSDK into RestQuery, RestWrite and rest
2016-07-12 10:06:13 -04:00
Tyler Brock
2f2ff377eb
Better e-mail adapter testing ( #2208 )
2016-07-05 12:08:46 -07:00
Diwakar Cherukumilli
08c63f324a
Adds ability to prevent login with unverified emails ( #2175 )
2016-07-04 13:56:35 -04:00
Tyler Brock
799e59618c
Stop requiring verifyUserEmails for password reset functionality ( #2166 )
2016-06-28 22:25:44 -04:00
Drew
0850c184d3
Fixes #1649 ( #1650 )
...
* Regression test #1649
* Address comments
* Comment
* Change emails to help debug flaky test failures
* More logging info to debug flaky tests
2016-05-25 19:48:18 -04:00
Drew
392102eb97
Cache users by objectID, and clear cache when updated via master key ( fixes #1836 ) ( #1844 )
...
* Cache users by objectID, and clear cache when updated via master key
* Go back to caching by session token. Clear out cache by querying _Session when user is modified with Master Key (ew, hopefully that can be improved later)
* Fix issue with user updates from different sessions causing stale reads
* Tests aren't transpiled...
* Still not transpiled
2016-05-22 09:59:36 -07:00
Drew Gross
ee8a3c94d5
No need to transform post-transform keys in mongo adapter
2016-04-25 20:42:19 -07:00
Jeremy May
f99b5588ab
Added session length option for session tokens to server configuration
2016-04-02 11:36:47 -04:00
Florent Vilmart
3603b82eac
Properly sets installationId on creating session with 3rd party auth
2016-03-20 15:58:16 -04:00
Florent Vilmart
1ed868b99c
Fixes #935 , cleans up authData null keys on login for android crash
2016-03-11 11:14:58 -05:00
Florent Vilmart
3ecaa0aa4b
Sends verification email upon set and update email
...
- nits
2016-02-29 18:58:34 -05:00
Florent Vilmart
91d9724182
Adds reset password logic
2016-02-29 18:55:15 -05:00
Florent Vilmart
f3bb2c99e0
Refactor and advancements
...
- Drops mailController, centralized in UserController
- Adds views folder for change_password
- Improves PromiseRouter to support text results
- Improves PromiseRouter to support empty responses for redirects
- Adds options to AdaptableController
- UsersController gracefully fails when no adapter is set
- Refactors GlobalConfig into same style for Routers
2016-02-29 18:55:14 -05:00
Florent Vilmart
7dd765256c
Refactors verify_email, adds public html
2016-02-29 18:52:11 -05:00
Florent Vilmart
0b307bc22f
Improves AdapterLoader, enforces configuraiton on Adapters
2016-02-29 18:52:10 -05:00
Drew Gross
8dc37b9d30
Exploring the interface of a mail adapter
...
Add some tests and demonstrate the adapter loading interface
2016-02-29 18:52:10 -05:00
Nikita Lutsenko
daa5f11122
Remove 'database' field from request and make all database requests go through config.
2016-02-26 22:48:53 -08:00
Nikita Lutsenko
bc90effd32
Send a sessionToken back on /users/me.
2016-02-24 12:54:04 -08:00
Florent Vilmart
3c4d5159b4
Refactors routers
2016-02-20 00:08:54 -05:00
Florent Vilmart
86c502c702
Removes installationId from _User
2016-02-16 12:38:45 -05:00
Florent Vilmart
ea07eb506d
Clears session on password change
...
- Fixes error type when passing an invalid session token
2016-02-15 10:15:47 -05:00
Dmitry Chestnykh
62cbc451aa
Generate tokens and ids with cryptoUtils module.
...
Move object ID, token, and random string generation into their own
module, cryptoUtils.
Remove hat dependency, which was used to generate session and some other
tokens, because it used non-cryptographic random number generator.
Replace it with the cryptographically secure one. The result has the
same format (32-character hex string, 128 bits of entropy).
Remove randomstring dependency, as we already have this functionality.
Add tests.
2016-02-12 21:16:50 +01:00
Nikita Lutsenko
ab841b5ab4
Refactor and deduplicate logic in UsersRouter.
2016-02-11 23:17:38 -08:00