Daniel
d21dd97336
fix: Remove username from email verification and password reset process ( #8488 )
...
BREAKING CHANGE: This removes the username from the email verification and password reset process to prevent storing personally identifiable information (PII) in server and infrastructure logs. Customized HTML pages or emails related to email verification and password reset may need to be adapted accordingly. See the new templates that come bundled with Parse Server and the [migration guide](https://github.com/parse-community/parse-server/blob/alpha/8.0.0.md ) for more details.
2025-03-02 02:32:43 +01:00
Manuel
9552a4cbee
ci: Fix test exclusion list in combination with other exclusions ( #9277 )
2024-08-13 22:13:19 +02:00
Manuel
901cff5edd
test: Add test IDs ( #9205 )
2024-07-18 15:41:04 +02:00
Diamond Lewis
5fa58fe774
ci: Fix CI not testing with Postgres 16 and flaky test ( #9210 )
2024-07-17 17:51:13 +02:00
Diamond Lewis
e355f36ed4
ci: Find duplicate and slow tests ( #9188 )
2024-07-16 10:34:10 +02:00
Diamond Lewis
a6e0a1d4a6
test: Remove unnecessary setTimeout and reconfigureServer calls ( #9183 )
2024-07-08 23:05:43 +02:00
Rahul Lanjewar
11d3e484df
fix: Live query throws error when constraint notEqualTo is set to null ( #8835 )
2024-06-11 21:31:10 +02:00
Daniel
967700bdbc
fix: LiveQuery server is not shut down properly when handleShutdown is called ( #8491 )
2023-06-08 11:04:49 +02:00
Diamond Lewis
afd0515e20
fix: Cloud Code Trigger afterSave executes even if not set ( #8520 )
2023-05-12 02:39:54 +02:00
Daniel
9092874a9a
feat: Upgrade to Parse JavaScript SDK 4 ( #8332 )
2023-01-26 10:49:03 +01:00
Daniel
fc92faac75
feat: Add ParseQuery.watch to trigger LiveQuery only on update of specific fields ( #8028 )
2023-01-16 12:32:22 +01:00
Daniel
f3bcc9365c
feat: Access the internal scope of Parse Server using the new maintenanceKey; the internal scope contains unofficial and undocumented fields (prefixed with underscore _) which are used internally by Parse Server; you may want to manipulate these fields for out-of-band changes such as data migration or correction tasks; changes within the internal scope of Parse Server may happen at any time without notice or changelog entry, it is therefore recommended to look at the source code of Parse Server to understand the effects of manipulating internal fields before using the key; it is discouraged to use the maintenanceKey for routine operations in a production environment; see [access scopes]( https://github.com/parse-community/parse-server#access-scopes ) ( #8212 )
...
BREAKING CHANGE: Fields in the internal scope of Parse Server (prefixed with underscore `_`) are only returned using the new `maintenanceKey`; previously the `masterKey` allowed reading of internal fields; see [access scopes](https://github.com/parse-community/parse-server#access-scopes ) for a comparison of the keys' access permissions (#8212 )
2023-01-08 22:02:12 +01:00
dblythy
ed499e32a2
feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true ( #8283 )
...
BREAKING CHANGE: The Parse Server option `enforcePrivateUsers` is set to `true` by default; in previous releases this option defaults to `false`; this change improves the default security configuration of Parse Server (#8283 )
2022-11-16 22:59:44 +01:00
Diamond Lewis
0f763da17d
feat: liveQuery support for unsorted distance queries ( #8221 )
2022-10-12 00:27:29 +02:00
Manuel
9fd4516cde
fix: protected fields exposed via LiveQuery (GHSA-crrq-vr9j-fxxh) [skip release] ( #8076 )
2022-06-30 13:01:40 +02:00
dblythy
199dfc1722
fix: live query role cache does not clear when a user is added to a role ( #8026 )
2022-06-11 10:21:55 +02:00
dblythy
443a509905
feat: improved LiveQuery error logging with additional information ( #7837 )
2022-03-23 02:11:39 +01:00
Frans Bouwmeester
28fa7167e8
test: port test changes from 4.x LTS branch; upgrade spec reporter from 6.0.0 to 7.0.0 ( #7667 )
2021-10-30 19:21:24 +02:00
dblythy
68a3a87501
fix: set objects in afterFind triggers ( #7311 )
2021-10-09 02:34:09 +02:00
dblythy
caee281bc5
fix: allow LiveQuery on Parse.Session ( #7554 )
2021-10-08 17:24:33 +02:00
dblythy
d90c1591ad
test: fix failing tests after removal of session token ( #7599 )
2021-09-30 13:41:04 +02:00
dblythy
834ae366f9
Merge pull request from GHSA-7pr3-p5fm-8r9x
...
* fix: strip sessionToken on _User LiveQuery
* delete authData
* add changelog
* Update package.json
* Update CHANGELOG.md
* add changes
* Update ParseLiveQuery.spec.js
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com >
2021-09-30 04:52:12 +02:00
dblythy
51e08009f8
Fix: properly pass req.user to liveQuery triggers ( #7296 )
2021-05-02 11:23:46 +02:00
Diamond Lewis
9563793303
Allow single server instance in test suite ( #7262 )
...
* initial pass
* reconfigureServer when needed
* finish postgres tests
* mongo tests
* more tests
* clean up
* re-add skipped test
* Fix transaction tests
* handle batch
* AuthenticationAdapter fix
* More reconfiguration
* clean up
* properly terminate cli servers
* handle Parse.Push
* Flaky PushController
* ensure reconfigureServer when changed
* fix postgres tests
* remove console.log
* LiveQuery spec remove duplicates and listeners
2021-03-13 09:05:22 -06:00
Nikita
e592212b97
Supporting patterns in classNames for Live Queries ( #7131 )
...
* Parse LiveQuery Server. Supporting patterns in classNames.
* Parse LiveQuery Server. Supporting patterns in classNames. Small optimisation.
* Parse LiveQuery Server. Supporting patterns in classNames. Adding info to changelog.
* Parse LiveQuery Server. Supporting patterns in classNames. Test case.
2021-01-19 17:19:11 -05:00
dblythy
b13a6a4ed2
feat: include sessionToken in onLiveQueryEvent ( #7043 )
...
* feat: include user in onLiveQueryEvent
* Update ParseLiveQuery.spec.js
* increase coverage
* add space
* Update ParseLiveQuery.spec.js
* remove user from runLiveQueryEventHandlers
2020-12-03 18:36:41 -06:00
dblythy
0bf2e84f81
fix: consistent casing for afterLiveQueryEvent ( #7023 )
2020-11-24 13:58:35 -08:00
Diamond Lewis
e6ac3b6932
fix(prettier): Properly handle lint-stage files ( #6970 )
...
Now handles top level files and recursive files in folders.
Set max line length to be 100
2020-10-25 15:06:58 -05:00
dblythy
c2f2281e6d
Validation Handler Update ( #6968 )
...
* Initial Commit
* Update FunctionsRouter.js
* Update FunctionsRouter.js
* Change params to fields
* Changes requested
* Fix failing tests
* More tests
* More tests
* Remove existing functionality
* Remove legacy tests
* fix array typo
* Update triggers.js
* Docs
* Allow requireUserKeys to be object
* validateMasterKey
* Improve documentation
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
2020-10-25 12:36:54 -05:00
Antonio Davi Macedo Coelho de Castro
78b59fb26b
Merge pull request from GHSA-2xm2-xj2q-qgpj
...
* Test case and fixes
* Change requestTimeout default to 5s
* Document new function argument
2020-10-21 16:32:07 -07:00
dblythy
ef2e54c39d
LiveQueryEvent Error Logging Improvements ( #6951 )
...
* LiveQueryEvent Improvements
* Update ParseLiveQueryServer.js
* Update ParseLiveQueryServer.js
* More Tests
* Update ParseLiveQueryServer.js
* Pass thrown errors to subscription
* Update ParseLiveQueryServer.js
* Update ParseLiveQueryServer.js
* Remove ACL error
2020-10-21 16:50:21 -05:00
dblythy
bf39cd68ef
Create Cloud function afterLiveQueryEvent ( #6859 )
...
* Before Connect + Before Subscribe #1
* Cleanup and Documentation
* Add E2E tests
* Bump parse to 2.15.0
* Create afterLiveQueryEvent
* Revert "Create afterLiveQueryEvent"
This reverts commit 828c678a6995216b843a75f5b3c864aec063ba43.
* afterLiveQueryEvent
* Add delete event
* Fix failing tests
* Fix lint
* Update ParseLiveQueryServer.js
* Remove Facebook AccountKit auth (#6870 )
* Remove Facebook AccountKit auth
Account Kit services are no longer available.
https://developers.facebook.com/blog/post/2019/09/09/account-kit-services-no-longer-available-starting-march/
https://www.sinch.com/blog/facebook-account-kit-is-closing-down-are-your-apps-covered/
* remove flaky test
* fix: upgrade uuid from 8.2.0 to 8.3.0 (#6865 )
Snyk has created this PR to upgrade uuid from 8.2.0 to 8.3.0.
See this package in npm:
https://www.npmjs.com/package/uuid
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* fix: package.json & package-lock.json to reduce vulnerabilities (#6864 )
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-590103
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* fix: upgrade ldapjs from 2.0.0 to 2.1.0 (#6857 )
Snyk has created this PR to upgrade ldapjs from 2.0.0 to 2.1.0.
See this package in npm:
https://www.npmjs.com/package/ldapjs
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* fix: upgrade apollo-server-express from 2.15.1 to 2.16.0 (#6851 )
Snyk has created this PR to upgrade apollo-server-express from 2.15.1 to 2.16.0.
See this package in npm:
https://www.npmjs.com/package/apollo-server-express
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* fix: upgrade @graphql-tools/stitch from 6.0.12 to 6.0.13 (#6845 )
Snyk has created this PR to upgrade @graphql-tools/stitch from 6.0.12 to 6.0.13.
See this package in npm:
https://www.npmjs.com/package/@graphql-tools/stitch
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* fix: upgrade @graphql-tools/utils from 6.0.12 to 6.0.13 (#6846 )
Snyk has created this PR to upgrade @graphql-tools/utils from 6.0.12 to 6.0.13.
See this package in npm:
https://www.npmjs.com/package/@graphql-tools/utils
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* [Snyk] Upgrade winston from 3.2.1 to 3.3.2 (#6799 )
* fix: upgrade winston from 3.2.1 to 3.3.2
Snyk has created this PR to upgrade winston from 3.2.1 to 3.3.2.
See this package in NPM:
https://www.npmjs.com/package/winston
See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
* fix tests
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
* afterLiveQueryEvent
* Add delete event
* Fix failing tests
* Before Connect + Before Subscribe #1
* Cleanup and Documentation
* Create afterLiveQueryEvent
* Revert "Create afterLiveQueryEvent"
This reverts commit 828c678a6995216b843a75f5b3c864aec063ba43.
* Update ParseLiveQueryServer.js
* Rebase
* Remove return value / deduplicate tests
* Add docs
* Add additional data to trigger
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
Co-authored-by: Snyk bot <snyk-bot@snyk.io >
2020-10-19 10:38:55 -05:00
Danaru
84896dbeec
Set objectId into query for Email Validation ( #6930 )
...
* Retrieve user concerned by email verification and ser objectId into query
* Linter ok
* Testing live query fired when email validation done
* Setting objectId into query if user exists
* Setting objectId into query if user exists
2020-10-09 08:21:34 -07:00
dblythy
5743d752f7
Fix mutating beforeSubscribe Query ( #6868 )
...
* Fix beforeSubscribe
* Remove return value
2020-08-25 09:35:48 -05:00
dblythy
44015c3e35
Before Connect + Before Subscribe help required ( #6793 )
...
* Before Connect + Before Subscribe #1
* Cleanup and Documentation
* Add E2E tests
* Bump parse to 2.15.0
Co-authored-by: Diamond Lewis <findlewis@gmail.com >
2020-07-16 20:36:38 -05:00
Diamond Lewis
ca1ae336c9
Websocket: unhandle rejection ( #6418 )
...
* Websocket: unhandle rejection
Closes: https://github.com/parse-community/parse-server/issues/6413 , https://github.com/parse-community/parse-server/issues/6173
Prevent crashing on websocket error.
Bonus points to anybody who can post a specific payload that the client sends that returns an error.
* log the socket
* fix tests
* fix payload reference link
2020-02-19 01:30:23 -08:00
Diamond Lewis
5bf87d86bb
Improve WebSocketServer Error Handling ( #6230 )
...
* Improve WebSocketServer Error Handling
Closes: https://github.com/parse-community/parse-server/issues/6173
Prevents an unhandled server rejection.
Includes an example for LiveQuery test and closing the proper connections.
Improve live query monitoring
* fix tests
2019-11-22 15:23:04 -06:00