Phillip Thelen
12773d539e
Add interface to block ip-addresses or clients due to abuse ( #15484 )
...
* Read IP blocks from database
* begin building general blocking solution
* add new frontend files
* Add UI for managing blockers
* correctly reset local data after creating blocker
* Tweak wording
* Add UI for managing blockers
* restructure admin pages
* improve test coverage
* Improve blocker UI
* add blocker to block emails from registration
* lint fix
* fix
* lint fixes
* fix import
* add new permission for managing blockers
* improve permission check
* fix managing permissions from admin
* improve navbar display for non fullAccess admin
* update block error strings
* lint fix
* add option to errorHandler to skip logging
* validate blocker value during input
* improve blocker form display
* chore(subproj): reconcile habitica-images
* fix(scripts): use same Mongo version for dev/test
* fix(whitespace): eof
* documentation improvements
* remove nconf import
* remove old test
---------
Co-authored-by: Kalista Payne <kalista@habitica.com >
Co-authored-by: Kalista Payne <sabrecat@gmail.com >
2025-08-06 15:08:07 -05:00
Fiz
f26d2a59ae
add InvalidCredentialsError with language-agnostic code ( #15472 )
...
* add InvalidCredentialsError with language-agnostic code and update backend & web logout logic
* error.code in API error responses
Updated the error handler to serialize responseErr.code as the JSON error field, falling back to responseErr.name when no code is set.
* fix(lint): whitespace and missing def
* fix(lint): missed one
* add InvalidCredentialsError case for bad token
Add test verifying that auth middleware throws InvalidCredentialsError with code "invalid_credentials" and correct translated message when the API token is invalid.
* fix(test): user fields implicitly required
---------
Co-authored-by: Kalista Payne <sabrecat@gmail.com >
2025-07-15 09:49:11 -05:00
Phillip Thelen
15f104ddd0
Add a timeout to mongoldb connections ( #15258 )
...
* Add option to set a socket timeout for mongodb requests
* Handle mongodb timeouts better
* add default to config
2024-08-01 10:28:54 -05:00
Matteo Pagliazzi
9364cdc2b4
fix(apple auth): do not try to parse name if it is missing, add query parameters to logs
2020-04-18 16:02:18 +02:00
Yo
04a9c97393
Fix Typos ( #11644 )
...
* Fix Typos
* Fix More Typos
2019-12-23 17:52:55 +01:00
Matteo Pagliazzi
621787915c
start upgrading eslint
2019-10-08 16:57:10 +02:00
Matteo Pagliazzi
45f7cf04ab
remove old module.exports from server aswell
2019-10-02 19:45:27 +02:00
Matteo Pagliazzi
8a4c4e10f1
remove sensitive info from logs
2018-07-08 10:43:28 +02:00
Matteo Pagliazzi
1fbdb7dbd0
Mongoose 4.x ( #9928 )
...
* update mongoose to ^4.x
* another fix
2018-02-02 16:37:36 +01:00
Matteo Pagliazzi
95285cd85a
do not send password to loggly ( #8887 )
2017-07-20 15:07:38 +02:00
Matteo Pagliazzi
60f34dafb0
Deprecate API v2 (was Revert "Revert "Deprecate API v2"") ( #7802 )
...
* Revert "Revert "Deprecate API v2""
* fix path in shops controller
2016-08-01 22:36:10 +02:00
Matteo Pagliazzi
590adb3438
Revert "Deprecate API v2" ( #7801 )
2016-07-17 18:15:25 +02:00
Matteo Pagliazzi
45c31a2bcf
Deprecate API v2 ( #7761 )
...
* deprecate api-v2
* remove v2 test helpers
* remove unused string
2016-07-16 19:56:18 +02:00
