109 Commits (5ec3b3d0834ce52e62e838a470ba19feffa28d49)

Author SHA1 Message Date
Barış Soner Uşaklı 7f5efc3e93 fix: #8992, set email:confirmed for first admin user 5 years ago
Julian Lam 6e2da9966e refactor: move plugin hook methods to plugin.hooks.* 5 years ago
Julian Lam 512f6de6de
feat: allow passwords with length > 73 characters (#8818)
* feat: allow passwords longer than 73 characters

Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.

https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords

* feat: add additional test for passwords > 73 chars

* fix: remove 'password-too-long' error message and all invocations

* test: added test to show that a super long password won't bring down NodeBB

* fix: remove debug log

* Revert "fix: remove 'password-too-long' error message and all invocations"

This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.

* fix: added back password length checks, but at 512 chars

As processing a large string still uses a lot of memory
5 years ago
Barış Soner Uşaklı 872bacf1c4
Admin/users (#8762)
* feat: wip admin/users

* feat: more work

* feat: more fixes

* feat: #8662, verified/unverified user groups

* feat: add filter

* feat: change user search to use filters array

* refactor: remove unused search call

* fix: tests

* fix: cant join system groups

* fix: upgrade script
5 years ago
Barış Soner Uşaklı dc29f4dca2 refactor: switch to using slugify module 5 years ago
Barış Soner Uşaklı 4be693f2e7
feat: fullname search (#8641)
* feat: fullname search

* fix: take last element

* fix: attempt to fix psql like query

* feat: upgrade sript, another fix attempt

* fix: psql test

* fix: psql scan

* feat: add debug for test

* feat: test collate

* feat: cleanup

* fix: upgrade script
5 years ago
Barış Soner Uşaklı 57135761ca fix: move check inside lock 5 years ago
Barış Soner Uşaklı bef37e27cb
fix: test lock for user create (#8415)
* fix: test lock for user create

* fix: redis hdel with undefined

* feat: add test for undefined key in deleteObjectFields
6 years ago
Barış Soner Uşaklı f0526bff9f fix: add mising timestamp 6 years ago
Barış Soner Uşaklı 18d892398f fix: add timestamp to initial username history 6 years ago
Barış Soner Uşaklı 9d074731f4 fix: login with weak password 6 years ago
Barış Soner Uşaklı 75bcb0f484 fix: remove unused data from post/topic/user hashes 6 years ago
Barış Soner Uşaklı dc8d721c46 refactor: async/await 6 years ago
Barış Soner Uşaklı 22f8011686 refactor: remove async from isPasswordValid, function is sync 6 years ago
Barış Soner Uşaklı d6e36c3166 feat: #7743, user/create, user/data, user/delete 7 years ago
Barış Soner Uşaklı 3ecd703ea3 feat: #7707, added sortedSetAddBulk 7 years ago
Barış Soner Uşaklı 7e54d7aa35 feat: use db.sortedSetsAdd 7 years ago
Barış Soner Uşaklı c6ad8fae2a fix: #7354 7 years ago
renovate[bot] 64b9dabff8 chore(deps): update dependency eslint-config-airbnb-base to v13 (#6599)
* chore(deps): update dependency eslint-config-airbnb-base to v13

* chore: #6599, linting 😬
7 years ago
Barış Soner Uşaklı 9c022afae1
Parse int (#6853)
* Store config fields as JSON in the db

Fewer parseInts

* Remove unnecessary parseInts

* remove some dupe code add tests

* remove console.log

* remove more parseInts

* WIP: read meta.configs defaults from defaults.json

remove more parseInts

* more work

* add log for failing test

* update admin pwd

* fix tests, dont require posts/cache before configs are initialized

* handle saves

* Test boolean conditions

* remove more parseInts

* Fix boolean values

* remove lots more parseInts

* removed json parsing

* renamed var to number

* categories dont have timestamp
7 years ago
Julian Lam 1e3cdc99ac fixes #6702 7 years ago
Julian Lam 99f1a5380e closes #6483 8 years ago
Julian Lam 13a3f44ed3 closes #6432 8 years ago
Julian Lam 9641ada53c fixes #6415 8 years ago
Julian Lam 0158b1aa91 Various password logic fixes on client and server-side
Fixes #6399
Fixes #6400
8 years ago
Julian Lam d2b5b53cb4 refactor for sendValidationEmail, and sending better dummy data for welcome email template 9 years ago
Barış Soner Uşaklı f6ac92111b style changes 9 years ago
Julian Lam d18cfced96 Merge remote-tracking branch 'origin/master' into develop 9 years ago
Peter Jaszkowiak 1ed571189c Make utils and translator easier to require
Move utils.walk to file.walk, backwards compatible
9 years ago
Julian Lam 7afe8a32f6 Merge branch 'master' into develop 9 years ago
husseinwalli 3876a88252 Added additional parameters to user creation method (#5496)
Treating picture, location and birthday similar to data.email as optional parameters to be passed to the create a user
9 years ago
Peter Jaszkowiak 14ed0be4f7 Remove duplicate slugify 9 years ago
Julian Lam b649eb95f8 Merge remote-tracking branch 'origin/master' into develop 9 years ago
Peter Jaszkowiak a7677063de Rename to `uniqueUsername` 9 years ago
Peter Jaszkowiak 642306e69c Fix #5543 9 years ago
Julian Lam ddea9f534e running eslint again 9 years ago
Julian Lam 72e77772db Merge branch 'master' into develop 9 years ago
Peter Jaszkowiak 896c8c7343 ESlint object-curly-spacing 9 years ago
Peter Jaszkowiak 3b0dd2d1ef ESlint padded-blocks 9 years ago
Peter Jaszkowiak 604358ecc4 ESlint keyword-spacing, no-multi-spaces 9 years ago
Peter Jaszkowiak b1b486f729 ESlint quote-props 9 years ago
Peter Jaszkowiak bc1d70c126 ESlint comma-dangle 9 years ago
barisusakli 3fb7f9fce5 closes #5398 9 years ago
barisusakli 9e52d5ec04 new hook, action:user.delete 9 years ago
HeeL 4a3c31b2dc Fix space-before-function-paren linter rule 9 years ago
Julian Lam 4f159acf56 fixes #5104 9 years ago
barisusakli 4b3b123cd0 closes #5042 9 years ago
barisusakli 07fe5057e1 make sure validator.escape() receives strings only 9 years ago
barisusakli b9961bcffa if email is undefined use empty string 9 years ago
Julian Lam a14263349b updated termsOfUse to use registration interstitial instead of being integrated into register template 10 years ago