20985 Commits (5bb5ec46188420b942240b897ebe86c75e84d5a3)
 

Author SHA1 Message Date
Barış Soner Uşaklı 0b30efba31 Merge branch 'master' of https://github.com/NodeBB/NodeBB 4 years ago
Barış Soner Uşaklı 16d03975a0 fix: winston error message 4 years ago
Julian Lam d263192271 feat: group exists API call in write api 4 years ago
Julian Lam 1446cec77f feat: user exist route in write api 4 years ago
Julian Lam 6b196a207f fix: permanent redirect on user api redirect shorthand 4 years ago
Julian Lam f2bb42c076 fix: user exist route needs no authentication 4 years ago
Julian Lam 60e1e99b4f feat: new shorthand route /api/v3/users/bySlug/:userslug
closes #8844
4 years ago
renovate[bot] 7e273e7710
fix(deps): update dependency mongodb to v3.6.3 (#8841)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
4 years ago
Renovate Bot 90bcfa6d16 chore(deps): update commitlint monorepo to v11 4 years ago
Julian Lam 512f6de6de
feat: allow passwords with length > 73 characters (#8818)
* feat: allow passwords longer than 73 characters

Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.

https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords

* feat: add additional test for passwords > 73 chars

* fix: remove 'password-too-long' error message and all invocations

* test: added test to show that a super long password won't bring down NodeBB

* fix: remove debug log

* Revert "fix: remove 'password-too-long' error message and all invocations"

This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.

* fix: added back password length checks, but at 512 chars

As processing a large string still uses a lot of memory
4 years ago
Misty (Bot) 113d3324fb Latest translations and fallbacks 4 years ago
Barış Soner Uşaklı c61dee4b62 fix: #8840, don't crash if /compose route is called with no query params 4 years ago
Barış Soner Uşaklı 9e3eb5d41a feat: #8821, allow guest topic views 4 years ago
Julian Lam f68bce86a9 fix: XSS in event:banned messaging modal 4 years ago
renovate[bot] 00f90cd98c
fix(deps): update dependency nodebb-theme-persona to v10.2.66 (#8839)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
4 years ago
Barış Soner Uşaklı 78ee83324c fix: #8838, fix chat dropdown timestamps
use shorthand like notification dropdown
4 years ago
Barış Soner Uşaklı 76cd5b0fc1 fix: #8836, truncate fullname 4 years ago
renovate[bot] 064c99cd9f
fix(deps): update dependency nodebb-plugin-mentions to v2.13.2 (#8835)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
4 years ago
Renovate Bot e0cf9740d1 fix(deps): update dependency postcss to v8.1.6 4 years ago
Peter Jaszkowiak de5a21f19b
fix(#8828): web install templates now compiled (#8832) 4 years ago
renovate[bot] 40eb658bc1
fix(deps): update dependency @nodebb/socket.io-adapter-mongo to v3.1.1 (#8831)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
4 years ago
psychobunny eec630f1ef fix(acp): max-height for plugin menu list 4 years ago
renovate[bot] 7b8a5567c7
fix(deps): update dependency @nodebb/mubsub to v1.7.1 (#8830)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
4 years ago
Renovate Bot 9f5ef9d0cb fix(deps): update dependency postcss to v8.1.5 4 years ago
Julian Lam 891a1ea2af fix: #8827, do not require admin:users privilege to ban users 4 years ago
Julian Lam 540a32cfdd chore: changing log to remove pre-release changelogs from changelog
... changelog
4 years ago
Misty (Bot) a30aa5629c chore: incrementing version number - v1.15.0
(cherry picked from commit 71cdbbce0d1118c9631e77d1adeb5af519a2c3fa)
Signed-off-by: Misty (Bot) <deploy@nodebb.org>
4 years ago
Misty (Bot) 155f74e45e chore: update changelog for v1.15.0 4 years ago
Julian Lam 1afd215050 feat: add back error handling for a number of api calls 4 years ago
Renovate Bot b44c7e9658 fix(deps): update dependency nodebb-plugin-composer-default to v6.4.6 4 years ago
Renovate Bot f06d4878c0 fix(deps): update dependency nodebb-plugin-spam-be-gone to v0.7.3 4 years ago
Barış Soner Uşaklı 4b63f9937c fix: check is banned in buildHeader
remove unused banReason
remove generateHeader function
4 years ago
Misty (Bot) 69f4d5ac7d chore: update changelog for v1.15.0-rc.5 4 years ago
Misty (Bot) 4bd2788ba3 chore: incrementing version number - v1.15.0-rc.5 4 years ago
Barış Soner Uşaklı a338f52780 feat: #8823, remove hardcoded write concern 4 years ago
Barış Soner Uşaklı 518d4fa170 fix: undefined call 4 years ago
Renovate Bot 0d80190f79 fix(deps): update dependency nodebb-theme-vanilla to v11.3.0 4 years ago
Barış Soner Uşaklı 08ff4041aa fix: missing await 4 years ago
Barış Soner Uşaklı 5a2b14b751 fix: client side crash when creating groups 4 years ago
psychobunny d40779a4ba feat(acp): autocomplete user search for welcome notifications 4 years ago
Barış Soner Uşaklı f6623622be Merge branch 'master' of https://github.com/NodeBB/NodeBB 4 years ago
Barış Soner Uşaklı 715775a707 feat: #8817, add login clientside hooks
same as logout
4 years ago
Julian Lam c0f699e655 fix: disallow registration attempts with password length > 4096
This is a stopgap measure for v1.15.0
4 years ago
Renovate Bot 35e725d17c chore(deps): update dependency mocha to v8.2.1 4 years ago
Julian Lam e66c1f4017 Revert "fix(deps): update dependency textcomplete to ^0.18.0"
This reverts commit 8fe954997c08f25304d3d2688058a56895e2d792.
4 years ago
Renovate Bot df5d66e5fe fix(deps): update dependency textcomplete to ^0.18.0 4 years ago
Renovate Bot 2fa78e4384 chore(deps): update dependency lint-staged to v10.5.1 4 years ago
Barış Soner Uşaklı b6d8687837 chore: add info log into tests 4 years ago
Barış Soner Uşaklı 4818ec377e fix: missing await 4 years ago
Julian Lam 1c8b8ce14a chore: update renovate config to automatically merge non-major version bumps #yolo 4 years ago