Manuel 892040dc2f fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x) (#8372) ...

BREAKING CHANGE: The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option `trustProxy` accordingly if Parse Server runs behind a proxy server, see the express framework's [trust proxy](https://expressjs.com/en/guide/behind-proxies.html) setting (#8372)

2023-01-05 14:26:54 +01:00

..

Adapters

fix: Nested objects are encoded incorrectly for MongoDB (#8209)

2022-12-20 16:57:29 +01:00

cli

feat: Asynchronous initialization of Parse Server (#8232)

2022-12-21 15:30:13 +01:00

cloud-code

fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x) (#8372)

2023-01-05 14:26:54 +01:00

Controllers

feat: Add option to change the log level of the logs emitted by triggers (#8328)

2022-12-07 22:55:45 +01:00

Deprecator

feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283)

2022-11-16 22:59:44 +01:00

GraphQL

feat: Improve authentication adapter interface to support multi-factor authentication (MFA), authentication challenges, and provide a more powerful interface for writing custom authentication adapters (#8156)

2022-11-10 17:35:39 +01:00

LiveQuery

feat: Upgrade Redis 3 to 4 for LiveQuery (#8333)

2022-11-26 17:45:30 +01:00

Options

fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x) (#8372)

2023-01-05 14:26:54 +01:00

Push

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

Routers

fix: Throwing error in Cloud Code Triggers afterLogin, afterLogout crashes server (#8280)

2022-11-10 22:00:40 +01:00

SchemaMigrations

feat: Asynchronous initialization of Parse Server (#8232)

2022-12-21 15:30:13 +01:00

Security

feat: Add option to change the log level of the logs emitted by triggers (#8328)

2022-12-07 22:55:45 +01:00

vendor

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

AccountLockout.js

refactor: replace hardcoded error codes with references (#7546)

2021-10-18 20:19:47 +02:00

Auth.js

refactor: Improve incorrect deprecation log message for auth adapter (#8347)

2022-12-06 23:04:37 +01:00

batch.js

build: release

2022-03-18 15:17:12 +01:00

cache.js

Use Prettier JS (#5017)

2018-09-01 13:58:06 -04:00

ClientSDK.js

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

Config.js

feat: Add option to change the log level of the logs emitted by triggers (#8328)

2022-12-07 22:55:45 +01:00

cryptoUtils.js

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

defaults.js

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

deprecated.js

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

index.js

feat: Asynchronous initialization of Parse Server (#8232)

2022-12-21 15:30:13 +01:00

KeyPromiseQueue.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267)

2021-03-15 18:51:46 -05:00

logger.js

Fix #6179 Initializing default logger (#6186)

2019-11-07 17:41:34 -06:00

middlewares.js

fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x) (#8372)

2023-01-05 14:26:54 +01:00

Page.js

Add page localization (#7128)

2021-02-09 14:03:57 +01:00

ParseMessageQueue.js

fix(prettier): Properly handle lint-stage files (#6970)

2020-10-25 15:06:58 -05:00

ParseServer.js

fix: The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see [GHSA-vm5r-c87r-pf6x](https://github.com/parse-community/parse-server/security/advisories/GHSA-vm5r-c87r-pf6x) (#8372)

2023-01-05 14:26:54 +01:00

ParseServerRESTController.js

refactor: remove deprecated url.parse() method (#7751)

2022-01-06 15:26:00 +01:00

password.js

chore: replace bcrypt with @node-rs/bcrypt (#6794)

2020-07-13 10:08:01 -05:00

PromiseRouter.js

Improve single schema cache (#7214)

2021-03-16 16:05:36 -05:00

request.js

feat: Remove deprecation DEPPS4: Remove convenience method for http request Parse.Cloud.httpRequest (#8287)

2022-11-10 18:28:49 +01:00

requiredParameter.js

Use Prettier JS (#5017)

2018-09-01 13:58:06 -04:00

rest.js

Fix: context for afterFind (#7078)

2020-12-18 14:54:48 +01:00

RestQuery.js

feat: Improve authentication adapter interface to support multi-factor authentication (MFA), authentication challenges, and provide a more powerful interface for writing custom authentication adapters (#8156)

2022-11-10 17:35:39 +01:00

RestWrite.js

fix: Cloud Code trigger beforeSave does not work with Parse.Role (#8320)

2022-11-19 03:27:51 +01:00

StatusHandler.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267)

2021-03-15 18:51:46 -05:00

TestUtils.js

Use Prettier JS (#5017)

2018-09-01 13:58:06 -04:00

triggers.js

feat: Add option to change the log level of the logs emitted by triggers (#8328)

2022-12-07 22:55:45 +01:00

Utils.js

fix: sensitive keyword detection may produce false positives (#7881)

2022-03-24 02:54:07 +01:00