Commit Graph

45 Commits

Author SHA1 Message Date
c23c4ef8e4 fix: negative sentiment → neutral language (#39522)
The existing terminology carries negative sentiment that can be
interpreted in a racial or sense. Updating the name to have no
potential for such a connection.

Co-authored-by: Justin Rogers <justrog@gmail.com>
2020-09-07 11:04:44 +05:30
5a80b83579 fix(api): csrf over http in development (#39114) 2020-06-22 15:57:20 +05:30
b3d5cde75e fix(api): csurf to SameSite 'strict', https only (#39077)
Lax and http are probably sufficient, but if the stricter versions work
there's no harm using them.
2020-06-16 20:48:48 +05:30
b4926052f4 chore: refactor and simplify testing (#39050) 2020-06-13 14:57:15 +05:30
4300ce44db fix: prevent 403 reporting (#38449) 2020-03-26 22:22:57 +05:30
38e7369b92 chore: remove rollbar, bump deps 2020-03-26 16:51:17 +05:30
87ae387ecb fix: put error filtering in the handler 2020-03-26 16:51:17 +05:30
f378f54ac3 feat: enhance dev error reports 2020-03-26 16:51:16 +05:30
10a6622546 feat(api): enable Sentry reporting 2020-03-26 16:51:16 +05:30
ef39ab0e20 fix(donate): allow calls to the API without auth
This is also dependent on 170e3dbf4f
2020-03-21 01:58:07 +05:30
4ee032d664 feat(api): add and update webhooks routing 2020-03-19 17:18:53 +05:30
6f90efb20c fix(api): update routes for authorization bypass (#38387) 2020-03-18 18:05:42 +01:00
933e289617 fix(api): add /auth paths to whitelist (#38383) 2020-03-18 13:19:42 +01:00
23b899f50f fix(csrf): remove all csrf bypass 2020-03-17 23:28:23 +05:30
6c6eadfbe4 feat(donate): PayPal integration 2020-03-16 18:35:51 +05:30
ac922ac04e fix: add pass thru for some subdomains (#38315)
* fix: add passthru for some subdomains

* fix: export whitelist correctly
2020-03-04 00:02:04 +09:00
004b99bf8f chore: fix typos in spelling (#38100)
* spelling: accidentally

* spelling: announce

* spelling: assembly

* spelling: avoid

* spelling: backend

* spelling: because

* spelling: claimed

* spelling: candidate

* spelling: certification

* spelling: certified

* spelling: challenge

* spelling: circular

* spelling: it isn't

* spelling: coins

* spelling: combination

* spelling: compliant

* spelling: containers

* spelling: concise

* spelling: deprecated

* spelling: development

* spelling: donor

* spelling: error

* spelling: everything

* spelling: exceed

* spelling: exist

* spelling: falsy

* spelling: faulty

* spelling: forward

* spelling: handle

* spelling: indicates

* spelling: initial

* spelling: integers

* spelling: issealed

* spelling: javascript

* spelling: length

* spelling: maximum

* spelling: minimum

* spelling: mutable

* spelling: notifier

* spelling: coordinate

* spelling: passport

* spelling: perform

* spelling: permuter

* spelling: placeholder

* spelling: progressively

* spelling: semantic

* spelling: submission

* spelling: submit

* spelling: translations

* spelling: turquoise

* spelling: visualization

* spelling: without

* spelling: registration

* spelling: representation
2020-02-08 23:59:10 +05:30
89ddd4bb7e fix(api): error reporter should have explicit env check (#38000) 2020-01-01 10:53:11 +05:30
f090730015 fix(api): send json messages for challenge routes (#37494) 2019-10-24 17:30:23 +05:30
e19e54a152 fix(api): remove the email verified middleware 2019-10-07 15:19:21 -07:00
2116997f85 fix(api): remove the privacy middleware 2019-10-07 15:19:21 -07:00
2785875941 fix: make public certs always viewable (#36723) 2019-08-30 16:18:49 +05:30
ac50216949 fix: NODE_ENV conflicts on pipelines 2019-08-19 01:37:32 +05:30
56d78a1119 fix(server,client): CORS is a real nightmare 2019-08-17 17:01:10 +05:30
657a5e2c16 cleanup: typos and remove commented out code (#36573) 2019-08-09 23:57:26 +05:30
67028025d1 fix(client): Vague Error messages (#36047)
Co-authored-by: Mrugesh Mohapatra <1884376+raisedadead@users.noreply.github.com>
2019-06-19 20:01:03 +05:30
72a0d63aa0 fix: Centralise user deserialization 2019-03-05 15:57:46 +05:30
3e8bac4590 feat: Use new (tested) accessToken utils to authoize requests 2019-02-21 21:03:06 +05:30
36c4737998 chore: Add tests for jwt authorization 2019-02-21 21:03:06 +05:30
fc8c71ad16 feat: use eslint with prettier to format code 2019-02-19 14:30:27 +05:30
b13e5fb41a feat: Use prettier-eslint to format code 2019-02-19 14:30:27 +05:30
c0104faa38 fix(ci): Fix lint errors thrown in CI 2019-02-19 14:30:27 +05:30
0ccd0a6f77 chore: Fix api linting 2019-02-19 14:30:27 +05:30
07266b7e43 chore: commit lint fixes for the api 2019-02-19 14:30:27 +05:30
354d3feaee fix: Allow un-authed loopback api calls 2019-02-16 12:27:23 +05:30
02e6e711cf fix(donate): refactor handlers for charges 2019-02-14 14:14:10 +00:00
361ce5cd8e fix: Broken regex for short news links 2019-02-14 16:54:39 +05:30
fdc2219f81 feat: remove news from platform 2019-01-16 13:48:38 +00:00
e378d566d9 fix: Use reportError in development 2018-12-04 17:42:12 +05:30
d327a5c36b Feat: News in the client app (#34392) 2018-11-29 15:12:15 +03:00
c08bb95ea8 fix(auth): Fix auth flow for the client app 2018-10-24 18:27:34 +05:30
c4a0a37238 fix(dev): Remove jade middleware (#18437) 2018-10-12 06:49:20 -06:00
b38ee544a3 fix(description): Adjust for new description format 2018-10-05 15:58:12 +01:00
2de2143457 feat(email-settings): Add email settings 2018-09-21 11:26:30 +01:00
46a217d0a5 chore(server): Move api-server in to it's own DIR 2018-09-03 17:47:48 +05:30