Commit Graph

1954 Commits

Author SHA1 Message Date
Liran Tal
b92f232d3a Merge remote-tracking branch 'upstream/master' 2014-11-16 21:52:17 +02:00
Wesley Smith
959d7e7423 Fixed two tiny typos. 2014-11-15 18:39:27 -07:00
Liran Tal
e46100dc7e Merge pull request #260 from lirantal/lirantal-enhancements-express-cookie-parameters
Enhancements express cookie parameters
2014-11-15 11:08:06 +02:00
Ilan Biala
fd98f266db Update .travis.yml 2014-11-11 16:39:10 -05:00
Amos Haviv
c94c870a30 Remove Image Uploads 2014-11-10 23:29:19 +02:00
Amos Haviv
9ef18123b0 Remove Image Uploads 2014-11-10 23:28:39 +02:00
Amos Haviv
ab81d61bd3 New 0.4 version 2014-11-10 23:12:33 +02:00
Liran Tal
1852c64afe Merge branch 'lirantal-enhancements-express-cookie-parameters' 2014-11-10 20:56:52 +02:00
Liran Tal
3217aa0e6b Merge branch 'enhancements-express-cookie-parameters' of https://github.com/lirantal/meanjs into lirantal-enhancements-express-cookie-parameters
Conflicts:
	config/env/all.js
2014-11-10 20:56:18 +02:00
Lawrence
d5cf18a1f5 Abstract nodemailer createTransport
Currently createTransport is unnecessarily called upon every time a password request is made.
2014-11-10 17:23:45 +00:00
Ilan Biala
30fd05c5c2 Update package.json 2014-11-10 09:42:59 -05:00
Liran Tal
ad870299c6 Merge pull request #254 from lirantal/enhancement-logger-config
Enhancing application logger configuration
2014-11-07 09:54:22 +02:00
Roie Cohen
24d449c801 Update README.md 2014-11-06 12:24:11 -08:00
Roie Cohen
276c4a815e Update README.md 2014-11-06 12:24:02 -08:00
Liran Tal
5598caf070 adding error handling incase the config logging option is not defined 2014-11-06 13:33:08 +02:00
Liran Tal
d2d4e8c865 realized I forgot to add the actual logger 2014-11-06 13:17:17 +02:00
Liran Tal
bf7bcc6170 adding support for logger handling which allows for saving the requests to a logfile, useful for production systems 2014-11-06 13:07:20 +02:00
Liran Tal
0f4a5850eb making the log format configurable and enabled morgan logging on all environments, not just development 2014-11-06 11:12:38 +02:00
Rupert Muchembled
325a19e276 Correctly encode and decode password salt
The user password salt should be encoded with Base64 before being saved
to the database.

The current code adds an unecessary step of converting the result of
crypto.randomBytes() (which already returns a SlowBuffer) to a Base64
string and back again to a Buffer, and misses the final step of
converting the Buffer's bytes back to a Base64 string.

Because of this, the salt stored in the database is garbled. This is
inconvenient when manipulating the data in a terminal or text editor.

When generating the password hash, the crypto.pbkdf2Sync() method
creates a new Buffer directly from the data supplied. Due to the
incorrect encoding of the salt, entropy is lost at this step,
weakening the security of stored passwords against brute force attacks.
2014-11-05 20:33:01 +00:00
Liran Tal
42931d35c5 Merge pull request #246 from lirantal/fixes-meanjs-homepage
documentation updates to the meanjs sample application landing page
2014-11-05 21:09:53 +02:00
Amos Haviv
71604bb533 Update packages 2014-11-05 18:29:31 +02:00
Amos Haviv
26e20252f0 Fix readme 2014-11-04 19:24:40 +02:00
Amos Haviv
c93101202f Fix tests & refactor SSL support 2014-11-04 19:22:46 +02:00
Andrew McKinlay
d27baeac1f Remove unecessary comment in karma.conf.js 2014-11-03 19:10:37 -05:00
Liran Tal
7174625bc1 added domain configuration option if required to set the cookie for a specific host 2014-11-03 23:20:28 +02:00
Liran Tal
b056f6d876 documentation updates to the meanjs sample application landing page 2014-11-03 23:10:32 +02:00
Dan Bunker
86d38df702 typo
removed extra comma
2014-11-03 12:43:52 -07:00
Roie Cohen
b0d8b47841 Merge pull request #244 from lirantal/fix-typo-user-password-reset
fixed typo on angular user module stateprovider states
2014-11-03 00:19:40 -08:00
Liran Tal
6c889a30de fixed typo on angular user module stateprovider states 2014-11-03 09:56:20 +02:00
Roie Cohen
00c4f07a48 Merge pull request #212 from lirantal/bugfix-211-use-request-object-for-urls
localhost hard coded URL for livereload.js bugfix
2014-11-02 00:25:34 -07:00
Roie Schwaber-Cohen
a7243763ea Merge branch 'pr/140' 2014-10-27 18:29:48 -07:00
Roie Cohen
1aaf7ad285 Merge pull request #227 from lirantal/bugfix-188-require-extensions-deprecated
bug fix for issue #188 for removing deprecated nodejs's require.extensions
2014-10-24 23:29:18 -07:00
Roie Cohen
aab2b161a5 Merge pull request #228 from lirantal/enhancement-194-ios-view-support
adding ios rendering support for mobile browsers per bug report #194
2014-10-24 23:24:48 -07:00
Roie Cohen
73c84a0fcb Merge pull request #229 from lirantal/cleanup-218-express-guide-links
fixing up broken links on README.md
2014-10-24 23:22:56 -07:00
Roie Cohen
d4201936c8 Merge pull request #230 from lirantal/enhancement-126-using-chalk
Enhancement 126 using chalk
2014-10-24 23:22:24 -07:00
Liran Tal
1ee5bc1f46 removing un-necessary console.log() calls 2014-10-25 01:06:19 +03:00
Liran Tal
9b694dbbf3 adding chalk to package.json, locking to 0.5 version as a known and compliant API 2014-10-25 01:05:34 +03:00
Liran Tal
22e330b407 adding chalk for formatting console messages instead of ANSI escape codes 2014-10-25 01:05:08 +03:00
Liran Tal
dc4492fee9 removing un-necessary .js extension 2014-10-24 17:48:07 +03:00
Liran Tal
fc4555674c fixing up broken links with exchange for newer documentation links on expressjs.com 2014-10-24 13:15:12 +03:00
Liran Tal
faa4f23831 adding ios rendering support for mobile browsers per bug report #194 2014-10-24 12:42:20 +03:00
Liran Tal
14c5d1bbb7 replacing deprecated require.extensions nodejs call with explicit full paths for require() 2014-10-24 12:01:46 +03:00
Urs Wolfer
619c7f2642 Show error message when sending password request mail fails
It used to fail silently (client only displays error when a message is available).
2014-10-23 12:40:44 +02:00
Roie Cohen
a799a230d1 Merge pull request #189 from w-green/adding_server_route_tests
Feature: Article CRUD ops. Added supertests. closes meanjs/mean#92
2014-10-20 23:24:24 -07:00
Roie Cohen
cc1c124e0e Merge pull request #209 from lirantal/enhancements-spellings
correcting spellings and English for main README file
2014-10-20 23:08:52 -07:00
Roie Cohen
158c373d35 Merge pull request #213 from lirantal/bugfix-208-disabling-jsonp
disabling JSONP from controllers and from expressjs by default
2014-10-20 23:07:24 -07:00
Liran Tal
e29ee6fbc1 removing the comment too, it may be confusing to think it should just be enabled for JSONP to be globally enabled which isnt true 2014-10-15 12:43:38 +03:00
Liran Tal
6298e35a5b disabling JSONP from controllers and commenting out from expressjs configuration, allowing users to enable if they need to 2014-10-14 20:24:28 +03:00
Liran Tal
acc091f211 introducing the request object for the index base HTML template which can utilize information such as the requests hostname, and more. This allows to specify the actual hostname for the livereload.js module instead of hard-coding localhost 2014-10-14 20:11:40 +03:00
Liran Tal
84efda1eb0 fixing identations 2014-10-14 12:18:06 +03:00