Commit Graph

1934 Commits

Author SHA1 Message Date
virkt25 b27971e074 2.40.0
* fix: accessToken create default acl (virkt25)
2018-08-08 18:17:11 -04:00
virkt25 c36f9e88a3 fix: accessToken create default acl 2018-08-08 18:15:09 -04:00
Kevin Delisle 8be91b8129 2.39.2
* Babelify juggler for Karma tests (Miroslav Bajtoš)
 * Fix Karma config to babelify node_modules too (Miroslav Bajtoš)
2018-02-12 12:03:02 -05:00
Kevin Delisle 490eced414
Merge pull request #3790 from strongloop/backport/babel-es6-to-es5
Backport/babel es6 to es5
2018-02-12 12:01:32 -05:00
Miroslav Bajtoš 1575becb92 Babelify juggler for Karma tests
Fix configuration of Karma:

 - Disable ES6 modules. The ES6 module transpiler is adding
  "use strict" to all source files, this breaks e.g. chai or juggler
 - Relax "ignore" setting to exclude only strong-task-emitter,
   thus bring back Babel transpilation for chai and juggler.
2018-02-09 10:38:22 -05:00
Miroslav Bajtoš b2cf877d14 Fix Karma config to babelify node_modules too
Before this change, dependencies in node_modules (e.g. strong-remoting)
were not transformed to ES5 and thus crashed the tests in PhantomJS.

Note that loopback-datasource-juggler cannot be babelified to ES5
because it does not correctly support strict mode yet.
2018-02-08 16:58:12 -05:00
Taranveer Virk c650b0db87 2.39.1
* update juggler dep (Taranveer Virk)
 * fix(id): replace with != null (Samuel Reed)
 * fix(AccessContext): Tighten userid/appid checks (Samuel Reed)
2018-01-31 16:58:02 -05:00
Taranveer Virk 9e30e277fe
Merge pull request #3782 from strongloop/update-juggler-2
update juggler dep
2018-01-31 16:41:07 -05:00
Taranveer Virk 7ddc0b14cf update juggler dep 2018-01-31 14:40:37 -05:00
Miroslav Bajtoš 6425e8307e
Merge pull request #3719 from STRML/fix/falsy-id
fix(id): replace with != null
2017-12-08 15:25:12 +01:00
Samuel Reed 2e0f3d15f9
fix(id): replace with != null
Ref: #2356, #2374, #3130, #3693
2017-12-05 09:49:50 -06:00
Miroslav Bajtoš e22b960d4e
Merge pull request #3693 from STRML/fix/falsy-principalid-2x
fix(AccessContext): Tighten falsy userid/appid check
2017-12-05 16:20:34 +01:00
Samuel Reed 787f393c7c
fix(AccessContext): Tighten userid/appid checks
An application may have a use for a falsy ID.
2017-12-05 08:51:21 -06:00
Miroslav Bajtoš 6e0e60c2a2
2.39.0
* Drop support for Node.js versions 0.10 and 0.12 (Miroslav Bajtoš)
 * test: fix too strict test assertion (Miroslav Bajtoš)
 * Add unit test for empty password (loay)
 * Update translated strings Q2 2017 (Allen Boone)
2017-10-23 09:22:09 +02:00
Miroslav Bajtoš 01e2e61cfe Merge pull request #3660 from strongloop/drop/node-0x
Drop support for Node.js versions 0.10 and 0.12
2017-10-23 09:20:37 +02:00
Miroslav Bajtoš 538bc9a7d5
Drop support for Node.js versions 0.10 and 0.12
Some of our dependencies are no longer supporting pre-4.0 versions of
Node.js. As a result, our CI builds are failing on these platforms.

This pull request removes 0.10 and 0.12 from our Travis CI build matrix
and also adds "engines" field to package.json to tell our internal
Jenkins CI to stop testing 0.10 and 0.12 versions too.
2017-10-19 16:47:53 +02:00
Miroslav Bajtoš 566caa9bab Merge pull request #3655 from strongloop/fix/build-2x
test: fix too strict test assertion
2017-10-19 16:47:01 +02:00
Miroslav Bajtoš 4f928bf965
test: fix too strict test assertion
Rework the test verifying properties of `loopback` to ignore
new express properties added after the test was written.

Ignore "json" and "urlencoded" middleware that was added back
to Express, keep using our wrappers printing a deprecation message.
2017-10-17 14:16:20 +02:00
Loay cd8f1775bc Merge pull request #3481 from strongloop/empty_password
Add unit test for empty password
2017-07-21 16:52:39 -04:00
loay 22bd0fc81f Add unit test for empty password 2017-07-21 15:46:21 -04:00
Candy 0fdca8ee0d Merge pull request #3419 from kallenboone/piiReturn_2.x
Update translated strings [PII Return Q2 2017]
2017-05-23 14:43:14 -04:00
Allen Boone 41c31118d8 Update translated strings Q2 2017 2017-05-23 13:02:39 -04:00
Candy 2135abc1db 2.38.3
* use lower version of karma-browserify (Diana Lau)
 * update karma-browserify to 5.x (Diana Lau)
 * update translation msg (Diana Lau)
 * Fix user-literal rewrite for anonymous requests (Aaron Buchanan)
 * Forward options in prepareForTokenInvalidation (Miroslav Bajtoš)
2017-04-17 16:40:50 -04:00
Diana Lau 661d62e817 Merge pull request #3346 from strongloop/update-dependencies
[2.x] Update deprecated dependencies
2017-04-17 18:03:29 +00:00
Diana Lau f1f9aab606 use lower version of karma-browserify 2017-04-13 15:28:48 -04:00
Diana Lau 645d5c615b update karma-browserify to 5.x
update karma-browserify to 5.x
2017-04-12 10:43:22 -04:00
Diana Lau 62d6ecb9d2 Merge pull request #3354 from strongloop/update-msg
[2.x] update translation msg
2017-04-12 14:07:02 +00:00
Diana Lau 1ec7a265a7 update translation msg 2017-04-11 14:36:41 -04:00
Miroslav Bajtoš cf38c62c00 Merge pull request #3330 from strongloop/fix/unauthorized-current-user-literal-2x
Fix user-literal rewrite for anonymous requests
2017-04-04 19:26:45 +02:00
Aaron Buchanan 50e0e4808a
Fix user-literal rewrite for anonymous requests
Currently any `currentUserLiteral` routes when accessed with a bad
token throw a 500 due to a SQL error that is raised because
`Model.findById` is invoked with `id={currentUserLiteral}`
(`id=me` in our case) when the url rewrite fails.

This commit changes the token middleware to return 401 Not Authorized
when the client is requesting a currentUserLiteral route without
a valid access token.
2017-04-04 18:55:34 +02:00
Miroslav Bajtoš ac2462e11d Merge pull request #3309 from strongloop/fix/options-in-token-invalidations
Forward options in prepareForTokenInvalidation
2017-03-28 15:46:59 +02:00
Miroslav Bajtoš a5ac1506e6
Forward options in prepareForTokenInvalidation 2017-03-24 15:01:05 +01:00
Raymond Feng 78161ccd9b 2.38.2
* Fix file patch (Raymond Feng)
 * Add nyc coverage, report data to coveralls.io (Miroslav Bajtoš)
2017-03-17 08:54:26 -07:00
Raymond Feng cfb0148e53 Fix file patch 2017-03-17 08:46:35 -07:00
Miroslav Bajtoš 85c81f760c Merge pull request #3280 from strongloop/coveralls-2x
Add nyc coverage, report data to coveralls.io
2017-03-14 14:20:40 +01:00
Miroslav Bajtoš 4713e5e7ea
Add nyc coverage, report data to coveralls.io 2017-03-14 13:42:15 +01:00
Miroslav Bajtoš 45284c3bf9
2.38.1
* Fix User.verify to convert uid to string (phairow)
 * Configure Travis CI to cache phantomjs binaries (Miroslav Bajtoš)
 * Improve "filter" arg description (Raymond Camden)
 * Fix creation of verification links (Miroslav Bajtoš)
 * Include link to docs in logoutSessions warning (Miroslav Bajtoš)
 * Fix detection of logoutSessionsOnSensitiveChanges (Miroslav Bajtoš)
 * Preserve sessions on User.save() making no changes (Miroslav Bajtoš)
 * Remove unused dependencies (Miroslav Bajtoš)
 * Fix logout to handle no or missing accessToken (Ritchie Martori)
 * Use English when running Mocha tests (Miroslav Bajtoš)
 * Role model: resolves related models by name (Benjamin Kroeger)
 * Fix User methods to use correct Primary Key (Aris Kemper)
2017-03-13 16:22:17 +01:00
Miroslav Bajtoš 989c3bba1f Merge pull request #3259 from strongloop/backport/fix-verifyHref-uid
Fix User.verify to convert uid to string
2017-03-09 08:57:02 +01:00
phairow 91502db9f1
Fix User.verify to convert uid to string
Applications using MongoDB connectors typically have `user.id`
property of type ObjectID.

This commit fixes the code building the verification URL to
correctly convert the user id value into string.
2017-03-08 16:30:01 +01:00
Miroslav Bajtoš 10fddb64f7 Merge pull request #3222 from strongloop/backport/cache-phantomjs-on-travis
Configure Travis CI to cache phantomjs binaries [2.x]
2017-02-23 11:52:48 +01:00
Miroslav Bajtoš e334884fb1
Configure Travis CI to cache phantomjs binaries
This should speed up our CI builds and also save a lot of bandwidth
for people providing phantomjs-prebuilt module.

See also
https://www.npmjs.com/package/phantomjs-prebuilt#continuous-integration
2017-02-22 15:34:28 +01:00
Miroslav Bajtoš 68d55b523e Merge pull request #3219 from strongloop/backport/fix-filter-desc
Improve "filter" arg description
2017-02-21 17:28:51 +01:00
Raymond Camden a4154caf59
Improve "filter" arg description
Add an example showing how to serialize object values as JSON.
2017-02-21 15:00:57 +01:00
Miroslav Bajtoš 42780567a8 Merge pull request #3195 from strongloop/backport/fix-hash-path-in-redirect
Fix creation of verification links
2017-02-09 15:20:52 +01:00
Miroslav Bajtoš 09b1fce34b Fix creation of verification links
Fix User.prototype.verify to call `querystring.stringify` instead
of concatenating query-string components directly.

In particular, this fixes the bug where `options.redirect` containing
a hash fragment like `#/home?arg1=value1&arg2=value2` produced incorrect
URL, because the `redirect` value was not correctly encoded.
2017-02-09 13:33:57 +01:00
Miroslav Bajtoš 4e8252afad Merge pull request #3193 from strongloop/add-doc-url-for-logoutSession
Include link to docs in logoutSessions warning
2017-02-09 13:30:12 +01:00
Miroslav Bajtoš 8c76d7fc01 Include link to docs in logoutSessions warning 2017-02-08 09:02:39 +01:00
Miroslav Bajtoš 322f6c12bb Merge pull request #3167 from strongloop/backport/fix-token-invalidation-on-save
Preserve sessions on User.save() making no changes
2017-01-31 16:46:09 +01:00
Miroslav Bajtoš 0cc2b5b8db Fix detection of logoutSessionsOnSensitiveChanges
Modify the code detecting whether logoutSessionsOnSensitiveChanges
is enabled to correctly handle the case when the model is not attached
to any application, as is the case with loopback-component-passport
tests.
2017-01-31 15:53:41 +01:00
Miroslav Bajtoš 05db4337cf Preserve sessions on User.save() making no changes 2017-01-31 14:43:24 +01:00