Julian Lam
fecdab8b6f
refactor: helpers.loginUser to be fully async
2023-01-04 16:25:47 -05:00
Julian Lam
a344e6ec0c
Fix for #11119 , restore password reset rate limiting ( #11120 )
...
* chore: incrementing version number - v2.8.1
* chore: update changelog for v2.8.1
* fix: accidental clearing of reset rate limiting on reset send
* test: move user reset tests to its own file, add failing test for user reset locks
* fix : #11119 , counter attempted flooding of user reset route
* test: fix password reset socket test to check for error now
* test: same user sending multiple reset emails
should work after waiting the correct amount of time
* lint: fixes
* chore: rename outdated `cleanTokensAndUids` method
* test: no need to create user for new test
Co-authored-by: Misty Release Bot <deploy@nodebb.org >
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com >
2023-01-04 11:24:46 -05:00
Barış Soner Uşaklı
1ea9481af6
fix: lock post/reply similar to user.create
2022-12-25 15:05:15 -05:00
Barış Soner Uşaklı
abcfb63126
fix : #11044 , allow banned users to post
...
if given privileges
2022-11-15 17:53:15 -05:00
Julian Lam
2f9d8c350e
fix: pass csrf_token into calls to /register/abort, #11017
2022-11-09 13:20:28 -05:00
Julian Lam
9c576a0758
Email confirmation QOL updates ( #10987 )
...
* breaking: remove `SocketUser.emailConfirm`, re: #10954
* chore: move email confirmation related configs to own section in Settings > Email
* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.
* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)
* fix: update getValidationExpiry to return ms
* test: use emailConfirmInterval for tests, for now
* fix: throw friendly error when attempting an email change within email confirmation window
* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for
* test: additional tests for user email methods
* fix: add back missing handling of option
* test: fix tests
2022-10-18 15:12:13 -04:00
gasoved
b424ba4637
test: User.hidePrivateData
2022-08-22 13:47:33 -04:00
Julian Lam
06f089afda
test: fix user email tests
2022-08-04 16:02:16 -04:00
Julian Lam
f93a0b83bb
test: fix tests so that when user.create is called, email is set prior to confirmation
2022-08-04 14:24:30 -04:00
Julian Lam
aa8914a153
feat: v3 user email tests
2022-02-04 10:20:46 -05:00
Julian Lam
d1b1f50bb2
test: stricter isValidationPending check
2022-02-04 10:20:46 -05:00
Julian Lam
e747998cba
test: fix user tests calling deprecated socket methods
2021-12-22 10:59:36 -05:00
Barış Soner Uşaklı
1f063058f0
breaking: remove socket.emit('user.exists')
...
remove socket.emit('user.deleteAccount')
remove socket.emit('user.follow')
remove socket.emit('user.unfollow')
remove socket.emit('user.saveSettings')
2021-12-14 12:05:12 -05:00
Barış Soner Uşaklı
6b45dee9c5
breaking: remove socket.emit('user.changeUsernameEmail')
...
remove socket.emit('user.changePassword')
remove socket.emit('user.updateProfile')
2021-12-13 20:10:45 -05:00
Barış Soner Uşaklı
6d95684bc8
breaking: remove socket.emit('user.changePicture')
2021-12-12 11:53:00 -05:00
Barış Soner Uşaklı
0d694c781c
breaking: remove socket.emit('user.search')
2021-12-12 11:38:15 -05:00
Barış Soner Uşaklı
a8afdc6019
fix : #10069 , don't modify fields array
...
use a single setObjectFields for the profile update
2021-12-08 18:38:02 -05:00
Barış Soner Uşaklı
830166d120
fix : #10067 , count posts instead of incr/decr
2021-12-07 18:40:23 -05:00
Barış Soner Uşaklı
6dcdf1d342
breaking: remove setTopicSort/setCategorySort
2021-11-23 18:45:30 -05:00
Barış Soner Uşaklı
f11bc33ac5
test: digest
2021-11-22 21:22:44 -05:00
Barış Soner Uşaklı
c5f08fdc81
breaking: remove socket.io/flags.js
...
refactor: helpers.loginUser returns a single object {jar, csrf_token}
2021-11-22 19:23:51 -05:00
Barış Soner Uşaklı
fb363957d1
refactor: tab rules
2021-11-18 16:42:18 -05:00
Julian Lam
b912a564e3
fix: accidentally not clearing email when said email is confirmed for a different uid
2021-11-08 15:16:48 -05:00
Julian Lam
8cbad61e8a
test: added test for external image via new change picture API
2021-09-03 16:59:42 -04:00
Julian Lam
caf8968791
fix: accidental early return in confirmByCode, tests, race condition
...
A race condition caused mongo/psql tests to fail.
2021-07-30 13:29:13 -04:00
gasoved
a917210c5b
feat: invites no longer require email
2021-07-30 13:29:13 -04:00
Julian Lam
81611ae1c4
fix(emails): broken test for api/user/email/:email
...
+ fixed broken tests due to unexpected behaviour for email confirmation
2021-07-30 13:29:13 -04:00
Julian Lam
087e6020e4
refactor(email): validation checking methods, +tests fix
2021-07-30 13:29:13 -04:00
Julian Lam
a3a3b10fb3
test(emails): fixing broken tests introduced by e5ff68acd
2021-07-30 13:29:13 -04:00
Julian Lam
12b2a979a0
feat: removal of emailExists socket listener
2021-07-30 13:29:13 -04:00
Julian Lam
0960a81468
fix: tests
2021-07-09 12:24:32 -04:00
gasoved
97c8569a79
fix: hide private user data in api/v3/users/[uid]
2021-06-30 17:02:38 -04:00
gasoved
8168c6c407
fix: purge uploaded images accordingly #9606 ( #9611 )
...
* fix: purge uploaded images accordingly
* fix: tests
* fix: relative paths
2021-06-18 09:21:23 -04:00
Julian Lam
5c42b3eab0
test: fixed broken tests from #9605 , removed token clean on token usage as it is superceded by token clean on generation (+ associated test)
2021-06-11 15:43:03 -04:00
Barış Soner Uşaklı
308252f566
fix : #9503 , dont error in markUnread if room doesnt exist
...
this prevents deleting the user if they are the only person in the chat room
2021-04-23 14:46:54 -04:00
Barış Soner Uşaklı
8ef38cb252
test: add missing test
2021-03-11 10:39:36 -05:00
Barış Soner Uşaklı
0af9d26fe5
feat: change uploadCroppedPicture to use updateProfile as well
2021-03-03 17:14:55 -05:00
Barış Soner Uşaklı
a598abcd8e
feat: use updateProfile for picture change
...
so it triggers action:user:updateProfile
2021-03-03 17:11:13 -05:00
Julian Lam
d3a9e76ae2
test(user): added additional tests for icon background colour
2021-02-19 11:38:48 -05:00
Peter Jaszkowiak
dab3b23575
chore: eslint no-var, vars-on-top
2021-02-08 18:06:44 -05:00
Peter Jaszkowiak
b56d9e12b5
chore: eslint prefer-arrow-callback
2021-02-08 18:06:44 -05:00
Peter Jaszkowiak
707b55b6a5
chore: eslint prefer-template
2021-02-08 18:06:44 -05:00
gasoved
53e0d4d2e0
feat: banned-users group
2021-02-03 15:22:44 -05:00
Barış Soner Uşaklı
647d3ba810
fix: removed methods
2021-01-27 17:36:58 -05:00
Julian Lam
f2a5cd0b67
fix: tests for #9217
2021-01-24 14:05:11 -05:00
Peter Jaszkowiak
2be396ff6e
fix: email testing and settings change from ACP
...
- changing email SMTP settings wouldn't apply the first time
- "Send Test Email" now will report emailer errors in most cases
2020-12-18 16:39:09 -05:00
Barış Soner Uşaklı
80de572aa1
feat: add user.email.confirmByUid for sso plugins
2020-12-10 20:25:48 -05:00
Barış Soner Uşaklı
557f0f5631
feat: use correct code
2020-11-29 22:41:19 -05:00
Barış Soner Uşaklı
f25000cb60
fix: pwd reset test
2020-11-29 22:30:40 -05:00
Barış Soner Uşaklı
5080f35752
fix : #8991 , logout on password reset, dont verify email if password expired
...
dont allow same password on reset
2020-11-29 21:55:07 -05:00
