Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #784 from pferreir/add-oauth2-support | Christoph (Sheogorath) Kern | 2018-06-04 | 2 | -0/+107 |
|\ | | | | | Add "generic" OAuth2 support | ||||
| * | Add support for generic OAuth2 providers | Pedro Ferreira | 2018-03-26 | 2 | -0/+107 |
| | | | | | | | | Signed-off-by: Pedro Ferreira <pedro.ferreira@cern.ch> | ||||
* | | Fix callback validation | Adam Hoka | 2018-06-01 | 4 | -4/+7 |
| | | | | | | | | Signed-off-by: Adam Hoka <hoka.adam@nexogen.hu> | ||||
* | | Add Azure Blob Storage support | Ádám Hóka | 2018-06-01 | 1 | -0/+35 |
| | | | | | | | | Signed-off-by: Adam Hoka <hoka.adam@nexogen.hu> | ||||
* | | Fix typo of "grouptAttribute" in saml auth module | Max Wu | 2018-04-27 | 1 | -2/+2 |
| | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com> | ||||
* | | Move letter-avatars into own request | Sheogorath | 2018-04-17 | 1 | -0/+7 |
|/ | | | | | | | | | | To prevent further weakening of our CSP policies, moving the Avatars into a non-inline version is the way to go. This implementation probably needs some beautification. But already fixes the bug. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Change config to camel case with backwards compatibility | Sheogorath | 2018-03-25 | 15 | -43/+43 |
| | | | | | | | | This refactors the configs a bit to now use camel case everywhere. This change should help to clean up the config interface and make it better understandable. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Merge pull request #771 from SISheogorath/refactor/imageRouter | Christoph (Sheogorath) Kern | 2018-03-21 | 6 | -132/+183 |
|\ | | | | | Refactoring imageRouter to modularity | ||||
| * | Refactoring imageRouter to modularity | Sheogorath | 2018-03-20 | 6 | -132/+183 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should make the imageRouter more modular and easier to extent. Also a lot of code duplication was removed which should simplify maintenance in future. In the new setup we only need to provide a new module file which exports a function called `uploadImage` and takes a filePath and a callback as argument. The callback itself takes an error and an url as parameter. This eliminates the need of a try-catch-block around the statement and re-enabled the optimization in NodeJS. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | | Add check for undefined UUID | Sheogorath | 2018-03-18 | 1 | -1/+8 |
|/ | | | | | | | | | | | | This check is needed at there are tons of LDAP implementations out there and none has at least one guaranteed unique field. As we currently check three fields and added an option to select one yourself, it's still not said that any of these fields is set. This will now create an error and fail the authentication instead of letting people may get access to other people's notes which are stored under a this way deterministic wrong userid named `LDAP-undefined`. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Multiple emails from LDAP are already an Array | Felix Schäfer | 2018-03-09 | 1 | -1/+1 |
| | | | | Signed-off-by: Felix Schäfer <felix@thegcat.net> | ||||
* | Introduce ldap.useridField | Dustin Frisch | 2018-03-01 | 1 | -1/+4 |
| | | | | Signed-off-by: Dustin Frisch <fooker@lab.sh> | ||||
* | Fix uncaught exception for non-existent user | Sheogorath | 2018-01-30 | 1 | -0/+5 |
| | | | | | | | Since we added user management it's possible to get non-existent users which can cause a crash of the Backend server. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Remove camel case from `imageuploadtype` in config | Sheogorath | 2018-01-27 | 1 | -2/+2 |
| | | | | | | | | | | | | | This removes the only camel cased option of the config options **we** added to the config.json. In auth provider's config parts are a lot of camel cased options provided. We shouldn't touch them to keep them as similar as possible to the examples. Fixes #315 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Merge pull request #506 from erasys/minio | Christoph (Sheogorath) Kern | 2018-01-23 | 1 | -0/+34 |
|\ | | | | | Add support for minio | ||||
| * | Add support for minio | Marc Deop | 2017-08-30 | 1 | -0/+34 |
| | | |||||
* | | Allow posting new note with content | Dustin Frisch | 2018-01-18 | 2 | -0/+11 |
| | | | | | | | | Signed-off-by: Dustin Frisch <fooker@lab.sh> | ||||
* | | Add setting `ldap.usernameField` | Lukas Kalbertodt | 2017-12-09 | 1 | -1/+7 |
| | | | | | | | | | | | | | | | | This determines which ldap field is used as the username on HackMD. By default, the "id" is used as username, too. The id is taken from the fields `uidNumber`, `uid` or `sAMAccountName`. To give the user more flexibility, they can now choose the field used for the username instead. | ||||
* | | added guide for SAML settings | Norihito Nakae | 2017-12-04 | 1 | -1/+0 |
| | | |||||
* | | fixed the SAML callback URL to unconfigurable. | Norihito Nakae | 2017-11-29 | 1 | -1/+1 |
| | | |||||
* | | Initial support for SAML authentication | Norihito Nakae | 2017-11-28 | 2 | -0/+97 |
| | | |||||
* | | Add mattermost authentication | Christoph Witzany | 2017-10-31 | 2 | -0/+50 |
| | | |||||
* | | Merge pull request #562 from SISheogorath/fix/LDAP | Sheogorath | 2017-10-27 | 1 | -2/+3 |
|\ \ | | | | | | | Fix LDAP problem about missing uidNumber | ||||
| * | | Fix LDAP problem about missing uidNumber | Sheogorath | 2017-10-12 | 1 | -2/+3 |
| |/ | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* / | Give google the correct name. | Kaiyu Shi | 2017-09-04 | 1 | -3/+3 |
|/ | |||||
* | fix s3 us-east-1 region endpoint | Kotaro Yamamoto | 2017-06-14 | 1 | -1/+4 |
| | |||||
* | fix: export to gist occurred 404 not found | Max Wu | 2017-05-17 | 1 | -0/+4 |
| | |||||
* | Rename checkURiValid.js to checkURIValid.js | Max Wu | 2017-05-08 | 1 | -0/+0 |
| | |||||
* | fix(imageRouter): import missing dependency: getImageMimeType | Raccoon Li | 2017-05-08 | 1 | -1/+1 |
| | |||||
* | refactor(config.js): Extract config file | BoHong Li | 2017-05-08 | 1 | -8/+8 |
| | | | | | * Separate different config source to each files * Freeze config object | ||||
* | refactor: Remove `require` extension filename | BoHong Li | 2017-05-08 | 1 | -2/+1 |
| | |||||
* | refactor(baseRouter.js): Adjust style fit standard | BoHong Li | 2017-05-08 | 1 | -1/+0 |
| | |||||
* | refactor(auth.js): Remove base path | BoHong Li | 2017-05-08 | 1 | -8/+8 |
| | |||||
* | refactor(app.js): Move passport serialize and deserialize to auth module | BoHong Li | 2017-05-08 | 1 | -0/+22 |
| | |||||
* | refactor(app.js): Extract tooBusy | BoHong Li | 2017-05-08 | 1 | -0/+13 |
| | |||||
* | refactor(app.js): Extract upload image | BoHong Li | 2017-05-08 | 1 | -0/+95 |
| | |||||
* | refactor(app.js): Extract note action | BoHong Li | 2017-05-08 | 1 | -0/+24 |
| | |||||
* | refactor(app.js): Extract /me page | BoHong Li | 2017-05-08 | 1 | -0/+36 |
| | |||||
* | refactor(app.js): Extract history api | BoHong Li | 2017-05-08 | 1 | -0/+19 |
| | |||||
* | refactor(app.js, auth.js): Extract all auth method to individual modules | BoHong Li | 2017-05-08 | 10 | -0/+405 |
| | |||||
* | refactor(app.js): Extract status pages | BoHong Li | 2017-05-08 | 1 | -0/+92 |
| | |||||
* | refactor(app.js): Extract index, 403, 404, 500 pages | BoHong Li | 2017-05-08 | 1 | -0/+23 |
| | |||||
* | refactor(app.js): Extract urlencodedParser to utils module | BoHong Li | 2017-05-08 | 1 | -0/+9 |
| | |||||
* | refactor(app.js): Extract middleware to module | BoHong Li | 2017-05-08 | 2 | -0/+31 |
extract check URi is valid, redirect without trailing slashes |