Julian Lam a344e6ec0c Fix for #11119, restore password reset rate limiting (#11120) ...

* chore: incrementing version number - v2.8.1

* chore: update changelog for v2.8.1

* fix: accidental clearing of reset rate limiting on reset send

* test: move user reset tests to its own file, add failing test for user reset locks

* fix: #11119, counter attempted flooding of user reset route

* test: fix password reset socket test to check for error now

* test: same user sending multiple reset emails

should work after waiting the correct amount of time

* lint: fixes

* chore: rename outdated `cleanTokensAndUids` method

* test: no need to create user for new test

Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>

2023-01-04 11:24:46 -05:00

..

jobs

chore: eslint max-len

2021-02-08 18:06:44 -05:00

admin.js

perf: make single db call

2022-08-04 15:51:24 -04:00

approval.js

Revert "fix: update usage of emailer.send to not catch (as errors are no longer thrown), email error throttler"

2022-01-28 15:41:27 -05:00

auth.js

refactor: tab rules

2021-11-18 16:42:18 -05:00

bans.js

Revert "fix: update usage of emailer.send to not catch (as errors are no longer thrown), email error throttler"

2022-01-28 15:41:27 -05:00

blocks.js

TTL Cache (#10816)

2022-08-10 15:26:07 -04:00

categories.js

feat: add filter:user.getWatchedCategories

2021-05-17 12:12:16 -04:00

create.js

test: fix user email tests

2022-08-04 16:02:16 -04:00

data.js

fix: improper handling of single vs. multiple inputs for hidePrivateData

2022-06-29 16:19:52 -04:00

delete.js

fix: #10631, fix user digest setting display acp

2022-05-19 12:32:52 -04:00

digest.js

fix: #10631, fix user digest setting display acp

2022-05-19 12:32:52 -04:00

email.js

Email confirmation QOL updates (#10987)

2022-10-18 15:12:13 -04:00

follow.js

chore: eslint no-var, vars-on-top

2021-02-08 18:06:44 -05:00

index.js

fix: observe user-specific and ACP-specific hiding rules for fullname

2022-06-29 16:12:32 -04:00

info.js

feat: add mute history, closes #10596

2022-05-15 22:26:35 -04:00

interstitials.js

Email confirmation QOL updates (#10987)

2022-10-18 15:12:13 -04:00

invite.js

feat: add hook for user invite

2022-05-05 12:43:48 -04:00

jobs.js

refactor: remove unused var

2021-10-19 12:38:40 -04:00

notifications.js

Fullname in notifications (#10157)

2022-01-19 10:19:11 -05:00

online.js

chore: eslint no-var, vars-on-top

2021-02-08 18:06:44 -05:00

password.js

fix: do not throw if password passed into isPasswordCorrect is invalid, just return false

2022-08-05 14:39:36 -04:00

picture.js

feat: allow gif profile images, sharp 0.30.0 supports gifs

2022-02-02 21:27:33 -05:00

posts.js

fix: #11044, allow banned users to post

2022-11-15 17:53:15 -05:00

profile.js

fix: expire email validation tokens on password change

2022-07-20 17:02:39 -04:00

reset.js

Fix for #11119, restore password reset rate limiting (#11120)

2023-01-04 11:24:46 -05:00

search.js

chore: eslint prefer-arrow-callback

2021-02-08 18:06:44 -05:00

settings.js

feat: #8053, biweekly digest option

2021-10-18 20:10:14 -04:00

topics.js

chore: eslint prefer-template

2021-02-08 18:06:44 -05:00

uploads.js

feat: deleting a user upload dissociates from posts, and vice versa

2022-02-14 15:02:07 -05:00