06f089afda
test: fix user email tests
2 years ago
f93a0b83bb
test: fix tests so that when user.create is called, email is set prior to confirmation
2 years ago
aa8914a153
feat: v3 user email tests
3 years ago
d1b1f50bb2
test: stricter isValidationPending check
3 years ago
e747998cba
test: fix user tests calling deprecated socket methods
3 years ago
1f063058f0
breaking: remove socket.emit('user.exists')
...
remove socket.emit('user.deleteAccount')
remove socket.emit('user.follow')
remove socket.emit('user.unfollow')
remove socket.emit('user.saveSettings')
3 years ago
6b45dee9c5
breaking: remove socket.emit('user.changeUsernameEmail')
...
remove socket.emit('user.changePassword')
remove socket.emit('user.updateProfile')
3 years ago
6d95684bc8
breaking: remove socket.emit('user.changePicture')
3 years ago
0d694c781c
breaking: remove socket.emit('user.search')
3 years ago
a8afdc6019
fix : #10069 , don't modify fields array
...
use a single setObjectFields for the profile update
3 years ago
830166d120
fix : #10067 , count posts instead of incr/decr
3 years ago
6dcdf1d342
breaking: remove setTopicSort/setCategorySort
3 years ago
f11bc33ac5
test: digest
3 years ago
c5f08fdc81
breaking: remove socket.io/flags.js
...
refactor: helpers.loginUser returns a single object {jar, csrf_token}
3 years ago
fb363957d1
refactor: tab rules
3 years ago
b912a564e3
fix: accidentally not clearing email when said email is confirmed for a different uid
3 years ago
8cbad61e8a
test: added test for external image via new change picture API
3 years ago
caf8968791
fix: accidental early return in confirmByCode, tests, race condition
...
A race condition caused mongo/psql tests to fail.
4 years ago
a917210c5b
feat: invites no longer require email
4 years ago
81611ae1c4
fix(emails): broken test for api/user/email/:email
...
+ fixed broken tests due to unexpected behaviour for email confirmation
4 years ago
087e6020e4
refactor(email): validation checking methods, +tests fix
4 years ago
a3a3b10fb3
test(emails): fixing broken tests introduced by e5ff68acd
4 years ago
12b2a979a0
feat: removal of emailExists socket listener
4 years ago
0960a81468
fix: tests
4 years ago
97c8569a79
fix: hide private user data in api/v3/users/[uid]
4 years ago
8168c6c407
fix: purge uploaded images accordingly #9606 ( #9611 )
...
* fix: purge uploaded images accordingly
* fix: tests
* fix: relative paths
4 years ago
5c42b3eab0
test: fixed broken tests from #9605 , removed token clean on token usage as it is superceded by token clean on generation (+ associated test)
4 years ago
308252f566
fix : #9503 , dont error in markUnread if room doesnt exist
...
this prevents deleting the user if they are the only person in the chat room
4 years ago
8ef38cb252
test: add missing test
4 years ago
0af9d26fe5
feat: change uploadCroppedPicture to use updateProfile as well
4 years ago
a598abcd8e
feat: use updateProfile for picture change
...
so it triggers action:user:updateProfile
4 years ago
d3a9e76ae2
test(user): added additional tests for icon background colour
4 years ago
dab3b23575
chore: eslint no-var, vars-on-top
4 years ago
b56d9e12b5
chore: eslint prefer-arrow-callback
4 years ago
707b55b6a5
chore: eslint prefer-template
4 years ago
53e0d4d2e0
feat: banned-users group
4 years ago
647d3ba810
fix: removed methods
4 years ago
f2a5cd0b67
fix: tests for #9217
4 years ago
2be396ff6e
fix: email testing and settings change from ACP
...
- changing email SMTP settings wouldn't apply the first time
- "Send Test Email" now will report emailer errors in most cases
4 years ago
80de572aa1
feat: add user.email.confirmByUid for sso plugins
4 years ago
557f0f5631
feat: use correct code
4 years ago
f25000cb60
fix: pwd reset test
4 years ago
5080f35752
fix : #8991 , logout on password reset, dont verify email if password expired
...
dont allow same password on reset
4 years ago
e32cd31ec6
fix : #8918
4 years ago
3ccebf112e
feat: invites regardless of registration type, invite privilege, groups to join on acceptance ( #8786 )
...
* feat: allow invites in normal registration mode + invite privilege
* feat: select groups to join from an invite
* test: check if groups from invitations have been joined
* fix: remove unused variable
* feat: write API versions of socket calls
* docs: openapi specs for the new routes
* test: iron out mongo redis difference
* refactor: move inviteGroups endpoint into write API
* refactor: use GET /api/v3/users/:uid/invites/groups
Instead of GET /api/v3/users/:uid/inviteGroups
* fix: no need for /api/v3 prefix when using api module
* fix: tests
* refactor: change POST /api/v3/users/invite
To POST /api/v3/users/:uid/invites
* refactor: make helpers.invite awaitable
* fix: restrict invite API to self-use only
* fix: move invite groups controller to write api, +tests
* fix: tests
Co-authored-by: Julian Lam <[email protected] >
4 years ago
512f6de6de
feat: allow passwords with length > 73 characters ( #8818 )
...
* feat: allow passwords longer than 73 characters
Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.
https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords
* feat: add additional test for passwords > 73 chars
* fix: remove 'password-too-long' error message and all invocations
* test: added test to show that a super long password won't bring down NodeBB
* fix: remove debug log
* Revert "fix: remove 'password-too-long' error message and all invocations"
This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.
* fix: added back password length checks, but at 512 chars
As processing a large string still uses a lot of memory
4 years ago
a05905f196
performance improvements ( #8795 )
...
* perf: nconf/winston/render
cache nconf.get calls
modify middleware.pageView to call next earlier
don't call winston.verbose on every hook see https://github.com/winstonjs/winston/issues/1669
translate header/footer separately and cache results for guests
* fix: copy paste fail
* refactor: style and fire hook only log in dev mode
* fix: cache key, header changes based on template
* perf: change replace
* fix: add missing await
* perf: category
* perf: lodash clone
* perf: remove escapeRegexChars
4 years ago
e98285dbbb
fix: reimplementing isPrivilegedOrSelfAndPasswordMatch
4 years ago
84a179f48c
Merge branch 'master' of https://github.com/NodeBB/NodeBB
4 years ago
222b4c9533
fix: broken tests from api change
4 years ago
Julian Lam
Barış Soner Uşaklı
gasoved
Peter Jaszkowiak
Barış Soner Uşaklı