984 Commits (bcbc0854972888597f36d68b3bf781510894bae7)

Author SHA1 Message Date
Julian Lam 512f6de6de
feat: allow passwords with length > 73 characters (#8818)
* feat: allow passwords longer than 73 characters

Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.

https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords

* feat: add additional test for passwords > 73 chars

* fix: remove 'password-too-long' error message and all invocations

* test: added test to show that a super long password won't bring down NodeBB

* fix: remove debug log

* Revert "fix: remove 'password-too-long' error message and all invocations"

This reverts commit 1e312bf7ef7e119fa0f1bd3517d756ca013d5e79.

* fix: added back password length checks, but at 512 chars

As processing a large string still uses a lot of memory
4 years ago
Barış Soner Uşaklı b6d8687837 chore: add info log into tests 4 years ago
Julian Lam cc1c722092 fix: breaking test from 0db0231cff
Also lowered export timeout to 5s
4 years ago
Julian Lam 04185d94c1 fix: indentation 4 years ago
Julian Lam 8e7914ff72 fix: add back derpy 20 second sleep 4 years ago
Julian Lam 14e5c24ec5 fix(openapi): final fixes to schemas 4 years ago
Julian Lam 3ebb3a3479 fix: missing method in test error output 4 years ago
Julian Lam b092f65d95 fix(writeapi): tests 4 years ago
Julian Lam 843aff582d refactor: api test suite to accept methods other than GET 4 years ago
Julian Lam b156b8b573 feat: wip, write api tests framework
re-using read api tests if possible
4 years ago
Barış Soner Uşaklı a05905f196
performance improvements (#8795)
* perf: nconf/winston/render

cache nconf.get calls
modify middleware.pageView to call next earlier
don't call winston.verbose on every hook see https://github.com/winstonjs/winston/issues/1669
translate header/footer separately and cache results for guests

* fix: copy paste fail

* refactor: style and fire hook only log in dev mode

* fix: cache key, header changes based on template

* perf: change replace

* fix: add missing await

* perf: category

* perf: lodash clone

* perf: remove escapeRegexChars
4 years ago
Barış Soner Uşaklı 1f43e98f8b fix: allow admins adding users to global moderators
add new test
4 years ago
Barış Soner Uşaklı 75024c3580 refactor: remove console.log, extra require 4 years ago
Barış Soner Uşaklı b26e9b5993 fix: #8595, dont save escaped data when renaming groups 4 years ago
Barış Soner Uşaklı 8fd3c04480 fix: test 4 years ago
Barış Soner Uşaklı bf480ee58b refactor: setupApiRoute signature 4 years ago
Barış Soner Uşaklı b2ff1594b8 fix: redis hget
'node_redis: The HGET command contains a invalid argument type.\n' +
'Only strings, dates and buffers are accepted. Please update your code to use valid argument types.'
4 years ago
Julian Lam e98285dbbb fix: reimplementing isPrivilegedOrSelfAndPasswordMatch 4 years ago
Barış Soner Uşaklı 84a179f48c Merge branch 'master' of https://github.com/NodeBB/NodeBB 4 years ago
Julian Lam 222b4c9533 fix: broken tests from api change 4 years ago
Barış Soner Uşaklı 7d86be2bc2 fix: tests 4 years ago
Barış Soner Uşaklı e367c5403e refactor: move groups.leave, fix some tests 4 years ago
Barış Soner Uşaklı 8ae1f81cf4 feat: refactor groups.delete 4 years ago
Barış Soner Uşaklı d69e503d21 feat: move groups.join to api 4 years ago
Barış Soner Uşaklı 872bacf1c4
Admin/users (#8762)
* feat: wip admin/users

* feat: more work

* feat: more fixes

* feat: #8662, verified/unverified user groups

* feat: add filter

* feat: change user search to use filters array

* refactor: remove unused search call

* fix: tests

* fix: cant join system groups

* fix: upgrade script
4 years ago
psychobunny 7b2301ff9c fix: enable tests 4 years ago
Barış Soner Uşaklı 1ee9384875 fix: #8757, allow all slashes in category route 4 years ago
Barış Soner Uşaklı d76229c061 feat: add checkbox tests 4 years ago
Barış Soner Uşaklı e92d4719cc feat: add test for serialize/deserialize form 4 years ago
Barış Soner Uşaklı 7db224f689 fix: timeago test for dev/prod 4 years ago
Barış Soner Uşaklı cecdd2915e fix: timeago test 4 years ago
Barış Soner Uşaklı ae5fb103ca feat: disable write api tests until fixed 4 years ago
Barış Soner Uşaklı dc29f4dca2 refactor: switch to using slugify module 4 years ago
Barış Soner Uşaklı 3b231360d3 feat: load jquery-form before using 4 years ago
Julian Lam 87e3f26fe4 feat(openapi): schema validation for write api definitions file 4 years ago
Julian Lam ebcb664b41 fix(writeapi): tests 4 years ago
Julian Lam 229eb2c2d8 fix(writeapi): tests 4 years ago
Julian Lam 41f55b7a5a fix(writeapi): tests 4 years ago
psychobunny bf3c1c0878 fix: manifest test + remove duplicate test 4 years ago
psychobunny 5b427a0c3b feat: option in ACP to configure notification/email delay for chats 4 years ago
Timothy Fike 5078a8df25
ttl/pttl (#8689) 4 years ago
Barış Soner Uşaklı ac43cd8b6f fix: #8665, trim email before checking validity 4 years ago
Barış Soner Uşaklı ccddbb15c9 feat: edit test 4 years ago
Barış Soner Uşaklı fe2dc3101e fix: auth tests 4 years ago
Barış Soner Uşaklı 5e8c376115 fix: remove old test 4 years ago
Barış Soner Uşaklı 38d3982bf1 fix: #8418
allow updating other profile fields when username isnt being changed
4 years ago
Barış Soner Uşaklı 4be693f2e7
feat: fullname search (#8641)
* feat: fullname search

* fix: take last element

* fix: attempt to fix psql like query

* feat: upgrade sript, another fix attempt

* fix: psql test

* fix: psql scan

* feat: add debug for test

* feat: test collate

* feat: cleanup

* fix: upgrade script
4 years ago
Barış Soner Uşaklı 9389749b79 feat: sorted set lex test 4 years ago
Julian Lam 885e0ebfde Revert "fix: bypass nbbpm for now"
This reverts commit 33c1bd5f01.
4 years ago
Barış Soner Uşaklı 5f10d67db5
Remove sounds (#8617)
* feat: remove sounds

* feat: remove more sounds

* feat: disable sounds plugin

* fix: openapi
4 years ago