Commit Graph

194 Commits

Author SHA1 Message Date
Shaun Hamilton
51802492b1 chore(api): add ExamEnvironmentAuthorizationToken -> user relation (#56627)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-10-25 10:10:26 +02:00
Shaun Hamilton
08bc090636 feat(api): add prerequisites to env exam (#56731)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-10-23 19:49:58 -05:00
Oliver Eyton-Williams
5c37562728 fix(api): specify openapi version (#56781) 2024-10-22 11:15:19 +02:00
Sem Bauke
27e8bf9da0 feat(api): get exams endpoint (#56727) 2024-10-18 18:43:28 +00:00
Oliver Eyton-Williams
f2ec6d6dd5 feat(api): env var to control exam environment (#56701) 2024-10-16 21:48:04 +02:00
Shaun Hamilton
7f1a6e553f chore(api): add request/response shadow dev tool (#56628) 2024-10-11 09:32:20 -07:00
Shaun Hamilton
916e22fd6b fix(api): allow coderoad and exam env headers (#56619) 2024-10-09 10:06:53 -07:00
Oliver Eyton-Williams
a7296c7983 fix(api): cookie values for swagger ui (#56620) 2024-10-09 10:05:54 -07:00
Shaun Hamilton
ea44135808 feat(api): add exam-environment endpoints (#55662)
Co-authored-by: moT01 <20648924+moT01@users.noreply.github.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-10-04 09:20:18 -05:00
Oliver Eyton-Williams
ced457fed5 refactor: move CSRF code into plugin (#56447) 2024-10-04 12:56:04 +00:00
Oliver Eyton-Williams
cb4061c250 feat(api): redirect on error if request ACCEPTs html (#56445) 2024-10-03 16:10:25 -07:00
Huyen Nguyen
0ba9eeff43 refactor(api, curriculum): use the shared shuffleArray util (#56444)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-10-02 08:55:38 -05:00
Oliver Eyton-Williams
274680dbdb refactor: separate public and private plugins (#56359) 2024-10-02 13:52:02 +02:00
Oliver Eyton-Williams
3654a297fd refactor: use fastify/rate-limit, drop express (#56328) 2024-09-30 16:13:17 +02:00
Lars Kappert
d32e57813e chore: update Knip to v5 (#56244) 2024-09-26 13:12:00 +02:00
Oliver Eyton-Williams
5c4fd56e60 test(api): flaky rate-limit test (#56120) 2024-09-17 15:56:51 +05:30
Oliver Eyton-Williams
838f30e2be feat(api): update mobile-login to match api-server (#55863) 2024-09-03 20:38:50 -05:00
Oliver Eyton-Williams
7345989917 refactor(api): import add-donation schema (#55876) 2024-08-19 13:30:02 +02:00
Oliver Eyton-Williams
eba0f1ef9b fix(api): send captured errors to Sentry. (#55877) 2024-08-19 08:55:22 +02:00
Oliver Eyton-Williams
609cdb0c4a feat(api): redirect auth requests if already signed in (#55829) 2024-08-14 18:53:20 +05:30
Oliver Eyton-Williams
e9ac6c5e72 fix(api): modularize auth handlers (#55671) 2024-08-08 23:05:25 +05:30
Oliver Eyton-Williams
7d84da184a fix(api): UserRateLimit schema (#55663) 2024-08-08 23:03:49 +05:30
Ahmad Abdolsaheb
a1c12847e4 feat(api): add update-stripe-card endpoint (#55548)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-08-05 18:52:03 -05:00
Krzysztof G.
564aeed3d9 test(api/client): empty string in about settings (#55700)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-31 07:20:00 -07:00
Gagan Bhullar
9090c0803f fix: Settings page picture url fix (#55673) 2024-07-30 09:22:38 +02:00
Oliver Eyton-Williams
02b1077abe test(api): don't sign in before testing signin (#55661) 2024-07-25 13:36:12 -04:00
Oliver Eyton-Williams
ee37d563f7 fix(api): reject social urls with invalid domains (#55595) 2024-07-25 10:49:34 -05:00
Oliver Eyton-Williams
e94080add5 feat(api): implement authorization code flow in the new api (#55413) 2024-07-24 20:08:10 +03:00
Ahmad Abdolsaheb
b2518cc347 feat(api): add charge-stripe and create-stripe-payment-intent endpoints (#54545)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-15 15:23:51 +02:00
Oliver Eyton-Williams
5a00c13de4 refactor(api): use decorator to clear our cookies (#55470) 2024-07-15 10:17:40 +02:00
Oliver Eyton-Williams
0a99796dd3 refactor: simplified and documented test helpers (#55493) 2024-07-12 16:23:37 -07:00
Oliver Eyton-Williams
b45a88d6db refactor(api): use reject user-agents early (#55491) 2024-07-12 18:03:30 +02:00
Niraj Nandish
ca60b5e81d feat(api): block useragents in /get-public-profile (#55487) 2024-07-12 09:33:00 +02:00
Oliver Eyton-Williams
33eed5bb31 refactor(api): encapsulate auth/csrf hooks (#55481) 2024-07-12 09:22:58 +02:00
Oliver Eyton-Williams
4547b8d1f9 fix(api): return examResults in user's challenges (#55451) 2024-07-11 22:09:49 +05:30
Oliver Eyton-Williams
bb95e2ff54 feat(api): add plugin allowing server to update cookies (#55395) 2024-07-09 07:33:04 +00:00
Oliver Eyton-Williams
bc87a56970 chore(deps): bump fastify/cookie (#55425) 2024-07-08 20:49:11 +05:30
Oliver Eyton-Williams
5fcdfe0ec2 fix(api): control host with env var (#55439) 2024-07-08 18:09:18 +05:30
Oliver Eyton-Williams
e8b15a255b feat(api): handle missing endpoints (#55429) 2024-07-08 13:07:16 +02:00
Oliver Eyton-Williams
fbf28bbb4c fix(api): remove / handler (#55428) 2024-07-05 20:50:53 -07:00
Oliver Eyton-Williams
669b4908b1 fix(api): CSRF-token should not be httpOnly (#55365) 2024-07-01 21:54:01 +02:00
Shaun Hamilton
1de602814f feat(api): add updateCount field to user (#55349)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2024-07-01 08:13:10 -07:00
Oliver Eyton-Williams
766e982040 fix(api): relax cookie settings in development (#55351)
Co-authored-by: Naomi the Technomancer <accounts+github@nhcarrigan.com>
2024-07-01 08:09:39 -07:00
Shaun Hamilton
253272f35c fix(api): use HOME_LOCATION var in tests (#55386) 2024-07-01 08:06:00 -07:00
Oliver Eyton-Williams
197becc52a fix(api): handle concurrent challenge submissions (#55336)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2024-06-27 12:08:53 +00:00
Oliver Eyton-Williams
a22e90c10d fix(api): use generic error message if CSRF error (#55264) 2024-06-27 10:47:23 +02:00
Oliver Eyton-Williams
512547e76c refactor(api): sensible default cookie config (#55227) 2024-06-27 08:44:47 +00:00
Oliver Eyton-Williams
22e74e6406 feat(api): port /confirm-email to new api (#54975)
Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>
2024-06-27 10:07:53 +02:00
Oliver Eyton-Williams
dda9c929b0 fix(api): clear cookies on account/delete (#55260) 2024-06-21 16:39:31 +02:00
Oliver Eyton-Williams
589e891c26 fix(api): narrow serializers for update-my-email (#55178) 2024-06-20 20:20:08 +02:00