kami-parse-server

Public Access

Files

Manuel 892040dc2f fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x ) (#8372 )

BREAKING CHANGE: The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option `trustProxy` accordingly if Parse Server runs behind a proxy server, see the express framework's [trust proxy](https://expressjs.com/en/guide/behind-proxies.html) setting (#8372)

2023-01-05 14:26:54 +01:00

cloud

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

configs

remove runtime dependency on request (#5076 )

2018-09-23 12:31:08 -04:00

dependencies

Remove S3 File Adapter (#7324 )

2021-04-09 10:12:24 -05:00

support

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

.babelrc

feat: Upgrade Node Package Manager lock file package-lock.json to version 2 (#8285 )

2022-12-22 13:26:38 +01:00

.eslintrc.json

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

AccountLockoutPolicy.spec.js

Add account unlock on password reset (#7146 )

2021-02-01 01:07:04 +01:00

AdaptableController.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

AdapterLoader.spec.js

Remove S3 File Adapter (#7324 )

2021-04-09 10:12:24 -05:00

AggregateRouter.spec.js

feat(AggregateRouter): support native mongodb syntax in aggregation pipelines (#7339 )

2021-08-12 19:14:04 +02:00

Analytics.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

AudienceRouter.spec.js

feat: upgrade to MongoDB Node.js driver 4.x for MongoDB 5.0 support (#7794 )

2022-02-06 18:30:36 +01:00

Auth.spec.js

Postgres: Properly initialize database on startup and debugger (#7255 )

2021-03-10 11:31:35 -08:00

AuthenticationAdapters.spec.js

refactor: Improve incorrect deprecation log message for auth adapter (#8347 )

2022-12-06 23:04:37 +01:00

AuthenticationAdaptersV2.spec.js

feat: Improve authentication adapter interface to support multi-factor authentication (MFA), authentication challenges, and provide a more powerful interface for writing custom authentication adapters (#8156 )

2022-11-10 17:35:39 +01:00

batch.spec.js

feat: Remove support for MongoDB 4.0 (#8292 )

2022-11-10 22:21:11 +01:00

CacheController.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

CLI.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

Client.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ClientSDK.spec.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

CloudCode.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

CloudCode.Validator.spec.js

feat: align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966 )

2022-05-29 20:48:55 +02:00

CloudCodeLogger.spec.js

feat: Add option to change the log level of the logs emitted by triggers (#8328 )

2022-12-07 22:55:45 +01:00

cryptoUtils.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

DatabaseController.spec.js

Optimize redundant logic used in queries (#7061 )

2020-12-15 23:41:14 -06:00

defaultGraphQLTypes.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

DefinedSchemas.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

Deprecator.spec.js

add runtime deprecation warning (#7451 )

2021-07-12 20:14:35 +02:00

EmailVerificationToken.spec.js

Feature: Reuse tokens if they haven't expired (#7017 )

2020-11-25 09:30:52 -08:00

EnableExpressErrorHandler.spec.js

Fix max listener warning from livequery server (#7083 )

2020-12-21 11:14:07 -06:00

EventEmitterPubSub.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

features.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

FilesController.spec.js

fix: custom database options are not passed to MongoDB GridFS (#7911 )

2022-05-01 04:21:40 +02:00

graphQLObjectsQueries.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

GridFSBucketStorageAdapter.spec.js

refactor: upgrade mongodb from 4.6.0 to 4.7.0 (#8083 )

2022-09-03 11:22:42 +02:00

helper.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

HTTPRequest.spec.js

feat: Remove deprecation DEPPS4: Remove convenience method for http request Parse.Cloud.httpRequest (#8287 )

2022-11-10 18:28:49 +01:00

Idempotency.spec.js

ci: reduce timeout after idempotency tests (#8227 )

2022-10-17 01:53:10 +02:00

index.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

InMemoryCache.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

InMemoryCacheAdapter.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

InstallationsRouter.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

JobSchedule.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

LdapAuth.spec.js

[WIP] Enable test suite to be randomized (#7265 )

2021-03-15 02:04:09 -05:00

Logger.spec.js

Allow single server instance in test suite (#7262 )

2021-03-13 09:05:22 -06:00

LoggerController.spec.js

[WIP] Enable test suite to be randomized (#7265 )

2021-03-15 02:04:09 -05:00

LogsRouter.spec.js

Improve single schema cache (#7214 )

2021-03-16 16:05:36 -05:00

Middlewares.spec.js

fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x ) (#8372 )

2023-01-05 14:26:54 +01:00

MongoSchemaCollectionAdapter.spec.js

feat: Add "count" to CLP initial value (#5841 )

2019-07-24 12:41:18 -05:00

MongoStorageAdapter.spec.js

fix: Nested objects are encoded incorrectly for MongoDB (#8209 )

2022-12-20 16:57:29 +01:00

MongoTransform.spec.js

feat: support relativeTime query constraint on Postgres (#7747 )

2022-01-02 01:10:54 +01:00

NullCacheAdapter.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

OAuth1.spec.js

changed twitter API endpoint for oauth test (#7472 )

2021-07-23 12:46:26 +02:00

PagesRouter.spec.js

Add custom routes to pages router (#7231 )

2021-03-07 13:51:35 +01:00

Parse.Push.spec.js

[WIP] Enable test suite to be randomized (#7265 )

2021-03-15 02:04:09 -05:00

ParseACL.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseAPI.spec.js

fix: updating object includes unchanged keys in client response for certain key types (#8159 )

2022-09-17 18:20:50 +02:00

ParseCloudCodePublisher.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseFile.spec.js

fix: server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests ([GHSA-h423-w6qv-2wj3](https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3 )) [skip release] (#8238 )

2022-10-15 01:06:45 +02:00

ParseGeoPoint.spec.js

feat: Remove deprecation DEPPS4: Remove convenience method for http request Parse.Cloud.httpRequest (#8287 )

2022-11-10 18:28:49 +01:00

ParseGlobalConfig.spec.js

Get ParseConfig parameters with Master Key (#5954 )

2019-08-20 22:12:36 -07:00

ParseGraphQLClassNameTransformer.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseGraphQLController.spec.js

Improve single schema cache (#7214 )

2021-03-16 16:05:36 -05:00

ParseGraphQLSchema.spec.js

refactor: replace internal GraphQL array classes to object style (#7788 )

2022-05-06 02:09:09 +02:00

ParseGraphQLServer.spec.js

feat: Upgrade Node Package Manager lock file package-lock.json to version 2 (#8285 )

2022-12-22 13:26:38 +01:00

ParseHooks.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

ParseInstallation.spec.js

refactor: code style fixes with prettier and lint (#8208 )

2022-10-03 13:55:05 +02:00

ParseLiveQuery.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

ParseLiveQueryRedis.spec.js

feat: Upgrade Redis 3 to 4 for LiveQuery (#8333 )

2022-11-26 17:45:30 +01:00

ParseLiveQueryServer.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

ParseObject.spec.js

ci: enable more tests on Postgres adapter (#7641 )

2021-10-18 16:51:56 +02:00

ParsePolygon.spec.js

ci: enable more tests on Postgres adapter (#7641 )

2021-10-18 16:51:56 +02:00

ParsePubSub.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseQuery.Aggregate.spec.js

fix: query aggregation pipeline cannot handle value of type Date when directAccess: true (#8167 )

2022-09-17 16:19:28 +02:00

ParseQuery.FullTextSearch.spec.js

fix: add support for descending sorting of full text search (#7496 )

2021-09-15 16:15:08 +02:00

ParseQuery.hint.spec.js

feat: add support for MongoDB 6 (#8242 )

2022-10-17 19:21:32 +02:00

ParseQuery.spec.js

feat: add option to change the default value of the Parse.Query.limit() constraint (#8152 )

2022-09-30 00:38:57 +02:00

ParseRelation.spec.js

fix: relation constraints in compound queries Parse.Query.or, Parse.Query.and not working (#8203 )

2022-10-24 12:45:17 +02:00

ParseRole.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

parsers.spec.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

ParseServer.spec.js

feat: Asynchronous initialization of Parse Server (#8232 )

2022-12-21 15:30:13 +01:00

ParseServerRESTController.spec.js

feat: Remove support for MongoDB 4.0 (#8292 )

2022-11-10 22:21:11 +01:00

ParseSession.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

ParseUser.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

ParseWebSocket.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseWebSocketServer.spec.js

fix: websocket connection of LiveQuery interrupts frequently (#8048 )

2022-06-17 13:20:48 +02:00

PasswordPolicy.spec.js

Feature: Reuse tokens if they haven't expired (#7017 )

2020-11-25 09:30:52 -08:00

PointerPermissions.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

PostgresConfigParser.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

PostgresInitOptions.spec.js

build: release

2022-03-18 15:17:12 +01:00

PostgresStorageAdapter.spec.js

build: release

2022-03-18 15:17:12 +01:00

PromiseRouter.spec.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

ProtectedFields.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

PublicAPI.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

PurchaseValidation.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

PushController.spec.js

test: improve PushController tests (#7760 )

2022-01-02 15:51:49 +01:00

PushQueue.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

PushRouter.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

PushWorker.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

QueryTools.spec.js

fix: liveQuery with containedIn not working when object field is an array (#8128 )

2022-09-17 13:59:45 +02:00

ReadPreferenceOption.spec.js

feat: upgrade to MongoDB Node.js driver 4.x for MongoDB 5.0 support (#7794 )

2022-02-06 18:30:36 +01:00

RedisCacheAdapter.spec.js

feat: Upgrade Redis 3 to 4 (#8293 )

2022-11-11 01:16:50 +01:00

RedisPubSub.spec.js

feat: Upgrade Redis 3 to 4 for LiveQuery (#8333 )

2022-11-26 17:45:30 +01:00

RegexVulnerabilities.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

rest.spec.js

Allow single server instance in test suite (#7262 )

2021-03-13 09:05:22 -06:00

RestQuery.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

RevocableSessionsUpgrade.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Schema.spec.js

refactor: remove restricted session field (#7543 )

2021-09-04 03:03:46 +02:00

SchemaPerformance.spec.js

ci: enable more tests on Postgres adapter (#7641 )

2021-10-18 16:51:56 +02:00

schemas.spec.js

fix: schema cache not cleared in some cases (#7771 )

2022-01-13 03:04:49 +01:00

SecurityCheck.spec.js

Add support for master key clients to create user sessions (#7406 )

2021-06-04 18:55:00 -05:00

SecurityCheckGroups.spec.js

Add security check (#7247 )

2021-03-10 13:19:28 -06:00

SessionTokenCache.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Subscription.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

TwitterAuth.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Uniqueness.spec.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

UserController.spec.js

[WIP] Enable test suite to be randomized (#7265 )

2021-03-15 02:04:09 -05:00

UserPII.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

ValidationAndPasswordsReset.spec.js

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283 )

2022-11-16 22:59:44 +01:00

VerifyUserPassword.spec.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

vulnerabilities.spec.js

refactor: Prototype pollution via Cloud Code Webhooks; fixes security vulnerability [GHSA-93vw-8fm5-p2jf](https://github.com/parse-community/parse-server/security/advisories/GHSA-93vw-8fm5-p2jf ) (#8308 )

2022-11-10 00:24:42 +01:00

WinstonLoggerAdapter.spec.js

Improve single schema cache (#7214 )

2021-03-16 16:05:36 -05:00