Commit Graph

313 Commits

Author SHA1 Message Date
Oliver Eyton-Williams
274680dbdb refactor: separate public and private plugins (#56359) 2024-10-02 13:52:02 +02:00
Oliver Eyton-Williams
3654a297fd refactor: use fastify/rate-limit, drop express (#56328) 2024-09-30 16:13:17 +02:00
Lars Kappert
d32e57813e chore: update Knip to v5 (#56244) 2024-09-26 13:12:00 +02:00
Oliver Eyton-Williams
5c4fd56e60 test(api): flaky rate-limit test (#56120) 2024-09-17 15:56:51 +05:30
Oliver Eyton-Williams
838f30e2be feat(api): update mobile-login to match api-server (#55863) 2024-09-03 20:38:50 -05:00
Oliver Eyton-Williams
7345989917 refactor(api): import add-donation schema (#55876) 2024-08-19 13:30:02 +02:00
Oliver Eyton-Williams
eba0f1ef9b fix(api): send captured errors to Sentry. (#55877) 2024-08-19 08:55:22 +02:00
Oliver Eyton-Williams
609cdb0c4a feat(api): redirect auth requests if already signed in (#55829) 2024-08-14 18:53:20 +05:30
Oliver Eyton-Williams
e9ac6c5e72 fix(api): modularize auth handlers (#55671) 2024-08-08 23:05:25 +05:30
Oliver Eyton-Williams
7d84da184a fix(api): UserRateLimit schema (#55663) 2024-08-08 23:03:49 +05:30
Ahmad Abdolsaheb
a1c12847e4 feat(api): add update-stripe-card endpoint (#55548)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-08-05 18:52:03 -05:00
Krzysztof G.
564aeed3d9 test(api/client): empty string in about settings (#55700)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-31 07:20:00 -07:00
Gagan Bhullar
9090c0803f fix: Settings page picture url fix (#55673) 2024-07-30 09:22:38 +02:00
Oliver Eyton-Williams
02b1077abe test(api): don't sign in before testing signin (#55661) 2024-07-25 13:36:12 -04:00
Oliver Eyton-Williams
ee37d563f7 fix(api): reject social urls with invalid domains (#55595) 2024-07-25 10:49:34 -05:00
Oliver Eyton-Williams
e94080add5 feat(api): implement authorization code flow in the new api (#55413) 2024-07-24 20:08:10 +03:00
Ahmad Abdolsaheb
b2518cc347 feat(api): add charge-stripe and create-stripe-payment-intent endpoints (#54545)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-15 15:23:51 +02:00
Oliver Eyton-Williams
5a00c13de4 refactor(api): use decorator to clear our cookies (#55470) 2024-07-15 10:17:40 +02:00
Oliver Eyton-Williams
0a99796dd3 refactor: simplified and documented test helpers (#55493) 2024-07-12 16:23:37 -07:00
Oliver Eyton-Williams
b45a88d6db refactor(api): use reject user-agents early (#55491) 2024-07-12 18:03:30 +02:00
Niraj Nandish
ca60b5e81d feat(api): block useragents in /get-public-profile (#55487) 2024-07-12 09:33:00 +02:00
Oliver Eyton-Williams
33eed5bb31 refactor(api): encapsulate auth/csrf hooks (#55481) 2024-07-12 09:22:58 +02:00
Oliver Eyton-Williams
4547b8d1f9 fix(api): return examResults in user's challenges (#55451) 2024-07-11 22:09:49 +05:30
Oliver Eyton-Williams
bb95e2ff54 feat(api): add plugin allowing server to update cookies (#55395) 2024-07-09 07:33:04 +00:00
Oliver Eyton-Williams
bc87a56970 chore(deps): bump fastify/cookie (#55425) 2024-07-08 20:49:11 +05:30
Oliver Eyton-Williams
5fcdfe0ec2 fix(api): control host with env var (#55439) 2024-07-08 18:09:18 +05:30
Oliver Eyton-Williams
e8b15a255b feat(api): handle missing endpoints (#55429) 2024-07-08 13:07:16 +02:00
Oliver Eyton-Williams
fbf28bbb4c fix(api): remove / handler (#55428) 2024-07-05 20:50:53 -07:00
Oliver Eyton-Williams
669b4908b1 fix(api): CSRF-token should not be httpOnly (#55365) 2024-07-01 21:54:01 +02:00
Shaun Hamilton
1de602814f feat(api): add updateCount field to user (#55349)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-01 08:13:10 -07:00
Oliver Eyton-Williams
766e982040 fix(api): relax cookie settings in development (#55351)
Co-authored-by: Naomi the Technomancer <accounts+github@nhcarrigan.com>
2024-07-01 08:09:39 -07:00
Shaun Hamilton
253272f35c fix(api): use HOME_LOCATION var in tests (#55386) 2024-07-01 08:06:00 -07:00
Oliver Eyton-Williams
197becc52a fix(api): handle concurrent challenge submissions (#55336)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2024-06-27 12:08:53 +00:00
Oliver Eyton-Williams
a22e90c10d fix(api): use generic error message if CSRF error (#55264) 2024-06-27 10:47:23 +02:00
Oliver Eyton-Williams
512547e76c refactor(api): sensible default cookie config (#55227) 2024-06-27 08:44:47 +00:00
Oliver Eyton-Williams
22e74e6406 feat(api): port /confirm-email to new api (#54975)
Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>
2024-06-27 10:07:53 +02:00
Oliver Eyton-Williams
fd1bf0dd5a test: minor fix to how cookies are passed around (#55259) 2024-06-21 08:36:46 -07:00
Oliver Eyton-Williams
dda9c929b0 fix(api): clear cookies on account/delete (#55260) 2024-06-21 16:39:31 +02:00
Oliver Eyton-Williams
589e891c26 fix(api): narrow serializers for update-my-email (#55178) 2024-06-20 20:20:08 +02:00
Oliver Eyton-Williams
4c412bff9a chore(api): remove unused session handling (#55240) 2024-06-20 20:18:16 +02:00
Oliver Eyton-Williams
19b5134732 fix(api): use challenge helper to update completed challenges (#55046) 2024-06-20 10:44:55 +02:00
Oliver Eyton-Williams
517a351a28 feat(api): send errors to Sentry (#55208)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2024-06-19 17:36:41 +05:30
Oliver Eyton-Williams
0916d1bb49 test: check reporting user sends an email (#55166) 2024-06-15 11:34:20 +05:30
Oliver Eyton-Williams
14df93bcef fix(api): use generic error handler with Sentry (#55176) 2024-06-13 22:48:16 +05:30
Oliver Eyton-Williams
b54edc7e1c feat(api): send message to Sentry if duplicate accounts (#55171) 2024-06-13 19:45:11 +05:30
Oliver Eyton-Williams
8bcf080ad2 feat(api): GET /api/users/exists (#54875) 2024-06-12 12:01:17 -05:00
Shaun Hamilton
63a3b8ac05 fix(api): unsubscribe all subscribed emails (#54953) 2024-06-11 16:14:00 +02:00
Oliver Eyton-Williams
a8f7e15dc2 feat(api): api/users/get-public-profile (#54729)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2024-06-10 12:46:55 -05:00
Oliver Eyton-Williams
84a41a4da8 feat(api): finish update-my-email endpoint (#54921)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2024-06-03 09:08:42 +02:00
Oliver Eyton-Williams
dae7701b1a fix(api): reset all claimed certs during reset (#54883) 2024-05-28 09:03:43 -07:00