Commit Graph

3236 Commits

Author SHA1 Message Date
Diamond Lewis
a0ac8e0686 Remove Facebook AccountKit auth (#6870)
* Remove Facebook AccountKit auth

Account Kit services are no longer available.

https://developers.facebook.com/blog/post/2019/09/09/account-kit-services-no-longer-available-starting-march/

https://www.sinch.com/blog/facebook-account-kit-is-closing-down-are-your-apps-covered/

* remove flaky test
2020-08-20 10:09:54 -07:00
Snyk bot
4cec333cf9 fix: upgrade subscriptions-transport-ws from 0.9.16 to 0.9.17 (#6841)
Snyk has created this PR to upgrade subscriptions-transport-ws from 0.9.16 to 0.9.17.

See this package in npm:
https://www.npmjs.com/package/subscriptions-transport-ws

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-08-02 03:34:58 +00:00
Tom Fox
b4c8542a7e Small issue template change (#6839) 2020-07-29 22:06:13 +01:00
Tom Fox
19264ba9ff Further improve issue template (#6816)
* Update ---report-an-issue.md

* mtrezza's suggestions

* remove support from readme

* Rename ---report-an-issue.md to ---1-report-an-issue.md

* Update ---feature-request.md

* Rename ---feature-request.md to ---2-feature-request.md

* Delete ---getting-help.md

* Delete ---push-notifications.md

* Delete ---parse-server-3-0-0.md

* Create config.yml

* change support link to org wide doc
2020-07-29 21:26:09 +01:00
Snyk bot
d4beda14af fix: upgrade pg-promise from 10.5.7 to 10.5.8 (#6838)
Snyk has created this PR to upgrade pg-promise from 10.5.7 to 10.5.8.

See this package in npm:
https://www.npmjs.com/package/pg-promise

See this project in Snyk:
https://app.snyk.io/org/dplewis/project/704d127e-7a24-4789-a0cd-807b7b972c86?utm_source=github&utm_medium=upgrade-pr
2020-07-29 15:13:53 +00:00
Arjun Vedak
42f75d6d94 fix(auth): Properly handle google token issuer (#6836)
* Updated TOKEN_ISSUER to 'accounts.google.com'

Hi, I was getting this issue from today morning parse-server/Adapters/Auth/google.js was expecting the TOKEN_ISSUER to be prefixed with https:// but on debugging the original value was not having the prefix, removing https:// from TOKEN_ISSUER solved this bug. This issue is introduced in 4.3.0 as in 4.2.0 it is working fine currently I have downgraded the version to 4.2.0 for it to work properly and suggesting the changes please merge this PR.

* Update google.js

* Update AuthenticationAdapters.spec.js

* Update google.js

* Update google.js
2020-07-29 09:55:59 -05:00
Snyk bot
92afcca4ee fix: upgrade graphql from 15.2.0 to 15.3.0 (#6832)
Snyk has created this PR to upgrade graphql from 15.2.0 to 15.3.0.

See this package in npm:
https://www.npmjs.com/package/graphql

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-27 03:37:30 +00:00
Manuel
5b71993175 improve field deletion in collection (#6823)
* added filter to updateMany when deleting field

* added test cases

* added changelog entry
2020-07-27 02:22:04 +02:00
Snyk bot
9ba9620bdf fix: upgrade ws from 7.3.0 to 7.3.1 (#6831)
Snyk has created this PR to upgrade ws from 7.3.0 to 7.3.1.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/dplewis/project/704d127e-7a24-4789-a0cd-807b7b972c86?utm_source=github&utm_medium=upgrade-pr
2020-07-26 15:22:06 -07:00
Manuel
114d78e80a enabled MongoDB transaction test for MongoDB >= 4.0.4 (#6827) 2020-07-25 10:11:10 -07:00
Snyk bot
6f1210c325 fix: upgrade @graphql-tools/stitch from 6.0.11 to 6.0.12 (#6824)
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.11 to 6.0.12.

See this package in npm:
https://www.npmjs.com/package/@graphql-tools/stitch

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr

Co-authored-by: Antonio Davi Macedo Coelho de Castro <adavimacedo@gmail.com>
2020-07-24 18:05:27 +00:00
Snyk bot
dd41bf1739 fix: upgrade @graphql-tools/utils from 6.0.11 to 6.0.12 (#6825)
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.11 to 6.0.12.

See this package in npm:
https://www.npmjs.com/package/@graphql-tools/utils

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-24 14:42:13 +00:00
Tom Fox
97f2456a28 add details of security fix (#6822) 2020-07-23 08:58:56 -07:00
Antonio Davi Macedo Coelho de Castro
a6597ac669 Fix NPM publish process (#6821) 2020-07-22 23:46:17 +02:00
Snyk bot
0236efd113 fix: upgrade apollo-server-express from 2.15.0 to 2.15.1 (#6819)
Snyk has created this PR to upgrade apollo-server-express from 2.15.0 to 2.15.1.

See this package in npm:
https://www.npmjs.com/package/apollo-server-express

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-22 03:36:14 +00:00
Snyk bot
d652517bbe fix: upgrade graphql from 15.1.0 to 15.2.0 (#6818)
Snyk has created this PR to upgrade graphql from 15.1.0 to 15.2.0.

See this package in npm:
https://www.npmjs.com/package/graphql

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-21 03:34:31 +00:00
Antonio Davi Macedo Coelho de Castro
3654f0280b Fix message on 4.3.0 release (#6813) 2020-07-19 23:23:15 +01:00
Antonio Davi Macedo Coelho de Castro
6f060e0909 Release 4.3.0 (#6811)
* Release version 4.3.0

* Update CHANGELOG.md

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>
2020-07-19 10:37:36 -07:00
mess-lelouch
d69833332c Optimizing pointer CLP query decoration done by DatabaseController#addPointerPermissions (#6747)
* Optimize CLP pointer query

* remove console log

* Update changelog

* Fix flow type checker issues

* Remove unused properties

* Fix typo, add one more test case for coverage

* Add support for CLP entry of type Object

Co-authored-by: Musa Yassin-Fort <musa.yassin@bureapr.com>
Co-authored-by: Diamond Lewis <findlewis@gmail.com>
2020-07-17 13:14:43 -05:00
Antoine Cormouls
78239ac907 Merge pull request from GHSA-236h-rqv8-8q73
* Fix graphql viewer breach

* fix

* remove comment
2020-07-17 09:50:41 -07:00
Diamond Lewis
f6ed5067b0 Remove wontfix label from stalebot (#6810)
Replacing the `wontfix` label with `stale` label. `wontfix` looks like we would never fix them.
2020-07-17 10:15:29 -05:00
Tom Fox
ea1ec9b325 Update bug report template (#6805)
* Update bug report template

* fixes

* nit

* address Manuel's review

* Delete old issue template

* Delete old unused migration image

* Improve SO prompt
2020-07-17 10:47:07 +01:00
Snyk bot
5e67e7da43 fix: upgrade @graphql-tools/stitch from 6.0.10 to 6.0.11 (#6808)
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.10 to 6.0.11.

See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/stitch

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr

Co-authored-by: Diamond Lewis <findlewis@gmail.com>
2020-07-17 05:02:34 +00:00
Omair Vaiyani
85ec22ce3b fix(direct-access): save context not present if direct access enabled (#6764)
* fix(direct-access): save context not present if direct access enabled

[Open discussion](https://github.com/parse-community/parse-server/issues/6459) for feature with other issues

* only send context when present

* use object spread

* revert and add test

* rename test

Co-authored-by: dplewis <findlewis@gmail.com>
2020-07-16 22:56:47 -05:00
Snyk bot
2e708cc77c fix: upgrade @graphql-tools/utils from 6.0.10 to 6.0.11 (#6809)
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.10 to 6.0.11.

See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/utils

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-17 03:46:27 +00:00
dependabot[bot]
4f7fd1732b chore(deps): bump lodash from 4.17.16 to 4.17.19 (#6807)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.16 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.16...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-16 22:10:35 -05:00
dblythy
44015c3e35 Before Connect + Before Subscribe help required (#6793)
* Before Connect + Before Subscribe #1

* Cleanup and Documentation

* Add E2E tests

* Bump parse to 2.15.0

Co-authored-by: Diamond Lewis <findlewis@gmail.com>
2020-07-16 20:36:38 -05:00
Antoine Cormouls
93a88c5cde Add version to fix CDN (#6804) 2020-07-16 13:13:29 -07:00
Manuel
3bd5684f67 Add idempotency (#6748)
* added idempotency router and middleware

* added idempotency rules for routes classes, functions, jobs, installaions, users

* fixed typo

* ignore requests without header

* removed unused var

* enabled feature only for MongoDB

* changed code comment

* fixed inconsistend storage adapter specification

* Trigger notification

* Travis CI trigger

* Travis CI trigger

* Travis CI trigger

* rebuilt option definitions

* fixed incorrect import path

* added new request ID header to allowed headers

* fixed typescript typos

* add new system class to spec helper

* fixed typescript typos

* re-added postgres conn parameter

* removed postgres conn parameter

* fixed incorrect schema for index creation

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* temporarily disabling index creation to fix postgres issue

* trying to fix postgres issue

* fixed incorrect auth when writing to _Idempotency

* trying to fix postgres issue

* Travis CI trigger

* added test cases

* removed number grouping

* fixed test description

* trying to fix postgres issue

* added Github readme docs

* added change log

* refactored tests; fixed some typos

* fixed test case

* fixed default TTL value

* Travis CI Trigger

* Travis CI Trigger

* Travis CI Trigger

* added test case to increase coverage

* Trigger Travis CI

* changed configuration syntax to use regex; added test cases

* removed unused vars

* removed IdempotencyRouter

* Trigger Travis CI

* updated docs

* updated docs

* updated docs

* updated docs

* update docs

* Trigger Travis CI

* fixed coverage

* removed code comments
2020-07-15 13:10:33 -05:00
SebC
cbf9da517b Add production Google Auth Adapter instead of using the development url (#6734)
* Add the production Google Auth Adapter instead of using the development url

* Update tests to the new google auth

* lint
2020-07-15 09:56:08 -07:00
Snyk bot
36bee12c24 fix: upgrade uuid from 8.1.0 to 8.2.0 (#6800)
Snyk has created this PR to upgrade uuid from 8.1.0 to 8.2.0.

See this package in NPM:
https://www.npmjs.com/package/uuid

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-15 08:13:14 -07:00
Snyk bot
1cc3211256 fix: upgrade @graphql-tools/stitch from 6.0.1 to 6.0.10 (#6798)
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.1 to 6.0.10.

See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/stitch

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr

Co-authored-by: Antonio Davi Macedo Coelho de Castro <adavimacedo@gmail.com>
2020-07-13 23:12:07 -07:00
Snyk bot
fc8a6687d7 fix: upgrade @graphql-tools/utils from 6.0.1 to 6.0.10 (#6797)
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.1 to 6.0.10.

See this package in NPM:
https://www.npmjs.com/package/@graphql-tools/utils

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 22:25:54 -07:00
Diamond Lewis
142eaa71bd Run Prettier JS #2 (#6796) 2020-07-13 15:13:08 -07:00
Diamond Lewis
e6a6354b29 Run Prettier JS (#6795) 2020-07-13 13:06:52 -05:00
LongYinan
ebb0727793 chore: replace bcrypt with @node-rs/bcrypt (#6794) 2020-07-13 10:08:01 -05:00
Jerome De Leon
0abe9bb42d Make clear description of anonymous user (#6655)
* Make clear description of anonymous user

* Properly generate definitions

Co-authored-by: dplewis <findlewis@gmail.com>
2020-07-13 10:00:55 -05:00
Snyk bot
01b49b61ea fix: upgrade follow-redirects from 1.11.0 to 1.12.1 (#6788)
Snyk has created this PR to upgrade follow-redirects from 1.11.0 to 1.12.1.

See this package in NPM:
https://www.npmjs.com/package/follow-redirects

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 09:20:58 -05:00
Snyk bot
d5fbd50fa8 fix: upgrade pg-promise from 10.5.6 to 10.5.7 (#6792)
Snyk has created this PR to upgrade pg-promise from 10.5.6 to 10.5.7.

See this package in NPM:
https://www.npmjs.com/package/pg-promise

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 09:20:30 -05:00
Snyk bot
33c1cdcd4e fix: upgrade apollo-server-express from 2.14.1 to 2.15.0 (#6787)
Snyk has created this PR to upgrade apollo-server-express from 2.14.1 to 2.15.0.

See this package in NPM:
https://www.npmjs.com/package/apollo-server-express

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 07:00:22 -05:00
Snyk bot
f8df89a499 fix: upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0 (#6789)
Snyk has created this PR to upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0.

See this package in NPM:
https://www.npmjs.com/package/winston-daily-rotate-file

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 07:00:04 -05:00
Snyk bot
80d518f91d fix: upgrade jwks-rsa from 1.8.0 to 1.8.1 (#6790)
Snyk has created this PR to upgrade jwks-rsa from 1.8.0 to 1.8.1.

See this package in NPM:
https://www.npmjs.com/package/jwks-rsa

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-13 06:59:45 -05:00
Antoine Cormouls
c85501718e Change merge system to avoid ref bugs (#6791) 2020-07-13 10:13:47 +02:00
yog27ray
34614e0f78 Pass context in beforeDelete, afterDelete, beforeFind and Parse.Cloud.run. (#6666)
* add context for following hooks.
1. beforeDelete
2. afterDelete
3. beforeFind
4. Cloud Function

* revert un-necessary code change.

* fix: failing test cases.

* fix: failing test cases.

* fix: failing test cases.

* fix: failing test cases.

* fix: failing test cases.

* fix: failing test cases.

* fix: failing test cases.

* review changes

* revert changes

* revert changes

* review changes

* lint changes

* review changes
2020-07-10 22:47:27 +02:00
Luca
4437ea73ba Allow passing custom gql schema function to ParseServer#start options (#6762) 2020-07-10 14:52:39 -05:00
Snyk bot
e848b541bd fix: upgrade mongodb from 3.5.8 to 3.5.9 (#6775)
Snyk has created this PR to upgrade mongodb from 3.5.8 to 3.5.9.

See this package in NPM:
https://www.npmjs.com/package/mongodb

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-10 14:11:01 -05:00
Snyk bot
06bdec8219 fix: package.json & package-lock.json to reduce vulnerabilities (#6784)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
2020-07-10 14:04:57 -05:00
Kevin Yao
d03ec18bcc feat: allow custom cors origin header (#6772) 2020-07-10 13:48:57 -05:00
Snyk bot
6fc42a526f fix: upgrade @apollographql/graphql-playground-html from 1.6.25 to 1.6.26 (#6774)
Snyk has created this PR to upgrade @apollographql/graphql-playground-html from 1.6.25 to 1.6.26.

See this package in NPM:
https://www.npmjs.com/package/@apollographql/graphql-playground-html

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2020-07-10 13:44:28 -05:00
Manuel
f095dffcc3 fix context for cascade-saving and saving existing object (#6735)
* added test cases

* fixed unparsed context when updating object

* fixed context inheritance for cascade-saved objects

* upgraded parse dependecy to 2.14.0

* rebuild

* removed superfluous comments

* undo lint changes
2020-07-02 14:37:41 -05:00