6 Commits

Author	SHA1	Message	Date
Matteo Pagliazzi	d30e7b9251	Don't send plaintext reset passwords via email (#8457) ... * start work to avoid sending reset password in plaintext via email * start checking parameters * fix new password reset email * render error if password reset code is missing or invalid * implement POST route, conversion to bcrypt and messages * add auth.local.passwordResetCode field * add failing tests, move reset code validation func to lib, fixes, remove old tests * fix unit tests * fix page rendering and add integration tests * fix password reset page * add integration test * fix string * fix tests url	2017-02-14 18:08:31 +01:00
Matteo Pagliazzi	acad3b8873	Migrate to bcrypt (#8446) ... * start migrating to bcrypt * added method to convert the password to bcrypt when logging in, added method to compare password without knowing the hashing algorhytm, remove default * travis: try to upgrade to container based infrastructure * travis: add deps to build bcrypt.js * travis: add deps to build bcrypt.js * travis: add deps to build bcrypt.js * travis: add deps to build bcrypt.js * use bcryptjs until bcrypt can be installed on travis, see https://github.com/kelektiv/node.bcrypt.js/issues/476 * correct sha1 unit tests * try different mongodb repo * try without mognodb services * try again with bcrypt * disable request logging in travis * migrate missing routes * simplify code * remove bcryptjs * fix typo * fix typo * fix typo in comment * add unit tests for new passwords utility emthods * travis: back to old infrastructure, containers often have timeouts * add integration test for passwordHashMethod * update shrinkwrap * clarify code and add comments * add integration tests * fix linting * fix integration tests	2017-01-24 12:28:42 +01:00
Blade Barringer	ee409174f1	Format files to adhere to editorconfig (#7977)	2016-09-07 12:58:26 -05:00
Matteo Pagliazzi	60f34dafb0	Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802) ... * Revert "Revert "Deprecate API v2"" * fix path in shops controller	2016-08-01 22:36:10 +02:00
Matteo Pagliazzi	590adb3438	Revert "Deprecate API v2" (#7801)	2016-07-17 18:15:25 +02:00
Matteo Pagliazzi	45c31a2bcf	Deprecate API v2 (#7761) ... * deprecate api-v2 * remove v2 test helpers * remove unused string	2016-07-16 19:56:18 +02:00