Mrugesh Mohapatra
6848da8320
Merge commit from fork
...
httpOnly (invisible to JS) and secure (https only) are now used. In
order to update existing users without requiring them to
re-authenticate, each request sets those properties on the cookie.
Finally, the maxAge is now 30 days and is also updated on each request.
i.e. it's a rolling 30 days.
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com >
2025-06-25 19:43:44 +05:30
Oliver Eyton-Williams
87c274a9ef
feat(api): allow HOME_LOCATION origin in development ( #61003 )
2025-06-25 12:00:24 +05:30
Oliver Eyton-Williams
a9dc3bdeef
chore(api): add user's id to errors sent to Sentry ( #60725 )
2025-06-09 22:21:02 +02:00
Oliver Eyton-Williams
89402caa9d
chore(api): migrate to fastify v5 ( #57576 )
2025-06-02 08:07:57 +05:30
Oliver Eyton-Williams
85bda9c63d
fix: handle when userinfo has no email address ( #60557 )
2025-05-30 22:32:55 +05:30
Oliver Eyton-Williams
22724d5dda
test: inform devs when db connection not established ( #60539 )
2025-05-28 10:52:11 -05:00
Oliver Eyton-Williams
50c0194ee4
test(api): stop reporting request logs during testing ( #60546 )
2025-05-27 21:35:25 +05:30
Oliver Eyton-Williams
0b1db2b9c6
fix(api): handle expected Auth0 errors ( #60499 )
2025-05-27 09:51:03 +05:30
Oliver Eyton-Williams
27b1a21384
fix(api): log error correctly and differentiate logs ( #60404 )
2025-05-16 10:15:52 -05:00
Shaun Hamilton
3a146ec946
chore(api): add more auth0 plugin logs ( #60398 )
...
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com >
2025-05-16 12:47:47 +02:00
Oliver Eyton-Williams
7d420d9214
fix(api): change csrf logLevel ( #60371 )
2025-05-15 09:12:29 -05:00
Tom
f908548246
feat(api): add endpoint for submitting daily coding challenges ( #59465 )
...
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com >
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com >
2025-05-12 17:26:32 +02:00
Mrugesh Mohapatra
008e35d851
fix(api): update logging ( #60187 )
2025-05-06 20:46:36 +05:30
Mrugesh Mohapatra
a905083bf8
chore(api): improve log statements ( #59992 )
2025-04-25 10:34:03 +00:00
Mrugesh Mohapatra
fada6f08f8
fix(api): add req to the child logger ( #59961 )
2025-04-24 19:35:57 +00:00
Mrugesh Mohapatra
ff38233f96
fix(api): adjust levels for cookie related logs ( #59946 )
2025-04-24 19:20:07 +00:00
Mrugesh Mohapatra
27689faf41
fix(api): adjust logging in bouncer, downgrade to trace ( #59945 )
2025-04-24 09:36:28 -05:00
Mrugesh Mohapatra
3c822da243
fix(api): catch GB init errors on prod only ( #59912 )
...
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com >
2025-04-24 10:26:33 +05:30
Oliver Eyton-Williams
db07c718b9
fix: only log if the request has an Origin header ( #59920 )
2025-04-23 22:50:12 +02:00
Oliver Eyton-Williams
37028f2bb8
chore(api): log growthbook initialization failures ( #59889 )
...
Co-authored-by: Mrugesh Mohapatra <1884376+raisedadead@users.noreply.github.com >
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com >
2025-04-22 18:36:27 +02:00
Oliver Eyton-Williams
fdbca0bd1f
fix(api): skip cors logging for /status/* routes ( #59881 )
...
Co-authored-by: Mrugesh Mohapatra <1884376+raisedadead@users.noreply.github.com >
2025-04-22 14:05:49 +00:00
Mrugesh Mohapatra
1cab0991b5
fix(api): adjust logs ( #59887 )
2025-04-22 15:58:26 +02:00
Sem Bauke
f206ba2487
feat(api): add logging to Auth0 endpoint ( #59160 )
...
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com >
Co-authored-by: Naomi Carrigan <commits@nhcarrigan.com >
2025-04-01 15:46:57 -05:00
Oliver Eyton-Williams
f6b57883e1
feat(api): set log level for csrf errors ( #59228 )
2025-03-13 22:24:41 +00:00
Sem Bauke
8bb352b67e
chore(api): add logging for 404 not found requests ( #59068 )
...
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com >
2025-03-11 11:19:18 -05:00
Sem Bauke
d78ae931d3
feat(api) add logging for cookie clearing ( #59058 )
2025-03-11 10:43:28 -05:00
Sem Bauke
b9b94c3187
feat(api): add logging to bouncer ( #59056 )
2025-03-10 13:21:03 -05:00
Sem Bauke
d071676ae7
feat(api): add debug logging for security headers in response ( #59070 )
...
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com >
2025-03-10 12:57:23 -05:00
Oliver Eyton-Williams
e74bc4dfed
fix(api): use req, not _req when logging ( #59181 )
2025-03-08 08:53:54 -06:00
Sem Bauke
9b0a63234d
feat(api): add logging to cookie update ( #59057 )
2025-03-04 16:13:11 +02:00
Sem Bauke
9cb6677e9f
feat(api): log disallowed origins ( #59059 )
2025-03-03 15:44:37 +02:00
Sem Bauke
17838276b8
feat(api): add logging for CSRF addition ( #59062 )
2025-03-03 15:42:38 +02:00
Sem Bauke
99ec728c05
feat(api): log mailer when sending email ( #59065 )
2025-03-01 12:05:32 +01:00
Oliver Eyton-Williams
a943366ac0
feat(api): replace sentry plugin with sdk ( #58912 )
...
Co-authored-by: Naomi <accounts+github@nhcarrigan.com >
2025-02-25 12:35:34 -08:00
Oliver Eyton-Williams
6e9513a933
chore: upgrade eslint ( #58575 )
2025-02-07 22:48:43 +02:00
Oliver Eyton-Williams
478ac3b3c5
fix(api): auth error logging ( #58614 )
2025-02-06 11:37:30 -08:00
Shaun Hamilton
9adc0a621d
feat(api): add growthbook ( #57950 )
2025-01-08 15:35:58 -08:00
Mrugesh Mohapatra
4d4e617b7d
fix(sentry): use environments
2025-01-02 18:21:54 +05:30
Huyen Nguyen
ba70f5d253
feat(api): add /submit-quiz-attempt endpoint ( #57201 )
2024-12-06 12:45:12 -06:00
Oliver Eyton-Williams
fcedb7e98d
chore(curriculum): remove upcoming python superblock ( #57247 )
2024-11-20 09:14:36 -08:00
Oliver Eyton-Williams
2f4e6ae8f5
refactor(api): sync dev and auth0 plugins ( #57136 )
2024-11-12 15:06:54 -08:00
Oliver Eyton-Williams
9c73159f10
fix(api): increase max message size for sentry ( #57080 )
2024-11-07 12:51:02 +01:00
Shaun Hamilton
7f1a6e553f
chore(api): add request/response shadow dev tool ( #56628 )
2024-10-11 09:32:20 -07:00
Shaun Hamilton
916e22fd6b
fix(api): allow coderoad and exam env headers ( #56619 )
2024-10-09 10:06:53 -07:00
Shaun Hamilton
ea44135808
feat(api): add exam-environment endpoints ( #55662 )
...
Co-authored-by: moT01 <20648924+moT01@users.noreply.github.com >
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com >
2024-10-04 09:20:18 -05:00
Oliver Eyton-Williams
ced457fed5
refactor: move CSRF code into plugin ( #56447 )
2024-10-04 12:56:04 +00:00
Oliver Eyton-Williams
cb4061c250
feat(api): redirect on error if request ACCEPTs html ( #56445 )
2024-10-03 16:10:25 -07:00
Oliver Eyton-Williams
609cdb0c4a
feat(api): redirect auth requests if already signed in ( #55829 )
2024-08-14 18:53:20 +05:30
Oliver Eyton-Williams
e9ac6c5e72
fix(api): modularize auth handlers ( #55671 )
2024-08-08 23:05:25 +05:30
Oliver Eyton-Williams
e94080add5
feat(api): implement authorization code flow in the new api ( #55413 )
2024-07-24 20:08:10 +03:00
