summaryrefslogtreecommitdiff
path: root/lib/models/user.js (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-06-11fix: upgrade sequelize to latest version to fix CVEBoHong Li1-104/+103
Signed-off-by: BoHong Li <a60814billy@gmail.com>
2019-05-26Fix missing pictures for OpenIDSheogorath1-0/+3
Currently a problem appears when using OpenID for authentication as there is no method to add a profile picture right now. This patch makes sure that all undefined login methods get a profile picture. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-13polyfilling scrypt for node 8.5+Claudius1-4/+13
Signed-off-by: Claudius <opensource@amenthes.de>
2019-05-13asyncified setting and verifying the passwordClaudius1-9/+7
Signed-off-by: Claudius <opensource@amenthes.de>
2019-05-13getting password hashing into a hook where it could be asyncClaudius1-6/+14
Signed-off-by: Claudius <opensource@amenthes.de>
2018-11-21Switch scrypt library to a successorSheogorath1-1/+1
Since our previous scrypt library is unmaintained since 3 years, it's time to look for an alternative. A refactoring towards another password algorithm was worked on and this is probably still the way to go. But for now the successor of our previous library should already be enough. https://www.npmjs.com/package/scrypt (old library) https://github.com/ml1nk/node-scrypt (new library) Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-11-14switching to eslint for code checkingClaudius Coenen1-1/+1
most rules degraded to WARN, so we don't go insane. This will change over time. The aim is to conform to a common style Signed-off-by: Claudius Coenen <opensource@amenthes.de>
2018-06-23Allow to disable gravatarSheogorath1-25/+5
Since Gravatar is an external image source and not perfect from a privacy perspective, forbidding it allows to improve privacy. This commit also simplifies and optimizes the avatar code. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-05-25Add token based security featureSheogorath1-0/+4
In the current setup users could be tricked into deleting their data by providing a malicious link like `[click me](/me/delete)`. This commit prevents such an easy attack and need the user's deleteToken to get his data deleted. In case someone requests his deletion by email you can also ask him for this token. We can add a GUI that shows it later on. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-05-25Fix requests for deleted usersSheogorath1-0/+3
When users are requested from the authorship which no longer exist, they shouldn't cause a 500. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-04-17Move letter-avatars into own requestSheogorath1-5/+5
To prevent further weakening of our CSP policies, moving the Avatars into a non-inline version is the way to go. This implementation probably needs some beautification. But already fixes the bug. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-26Use TEXT instead of STRING for tokensPedro Ferreira1-2/+2
Signed-off-by: Pedro Ferreira <pedro.ferreira@cern.ch>
2017-11-28Initial support for SAML authenticationNorihito Nakae1-0/+9
2017-10-31Add mattermost authenticationChristoph Witzany1-0/+9
2017-09-22Fix broken profile imagesSheogorath1-2/+6
2017-05-08refactor: Remove `require` extension filenameBoHong Li1-2/+2
2017-03-14Use strict mode in all backend filesBoHong Li1-0/+1
add ‘use strict’ in all backend file
2017-03-08Use JavaScript Standard StyleBoHong Li1-140/+138
Introduce JavaScript Standard Style as project style rule, and fixed all fail on backend code.
2017-02-18Fix user profile photo might not replace to proper sizeWu Cheng-Han1-4/+4
2017-02-03Update to add biggerphoto on parsing user profileWu Cheng-Han1-10/+26
2017-01-06Profile pictures for LDAP usersalecdwm1-0/+11
2016-12-02Update to support optional email register and signinWu Cheng-Han1-0/+33
2016-05-21Update to use bigger size of profile imageCheng-Han, Wu1-3/+3
2016-05-21Add support of google signinCheng-Han, Wu1-0/+3
2016-05-20Update to use bigger avatar image and twitter now use screen_name based ↵Cheng-Han, Wu1-2/+2
profile image url
2016-05-15Add db migrations for PR #121Cheng-Han, Wu1-0/+3
2016-05-12Retrieve GitLab avatar.Jason Croft1-0/+3
2016-05-12Retrieve GitLab avatar.Jason Croft1-0/+3
2016-05-11Add accessToken columnJason Croft1-1/+4
2016-04-20Refactor server with Sequelize ORM, refactor server configs, now will show ↵Cheng-Han, Wu1-0/+77
note status (created or updated) and support docs (note alias)
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-03 18:03:06 +0000