Commit Graph

69 Commits

Author SHA1 Message Date
OldHawk
674209ebf9 feat(users): populate invited_by user info when login 2017-09-13 18:29:15 +08:00
OldHawk
ac5e453f05 fix(users): login error 2017-09-13 18:15:39 +08:00
OldHawk
201d54d18a feat(users): show invited_by user info in account status center and admin manage page 2017-09-13 15:05:28 +08:00
OldHawk
09f1fbbb3b feat(users): add invited_by filed to model user 2017-09-13 14:54:58 +08:00
OldHawk
7fcc8479e8 feat(debug): add app configure item of debug mode to show debug console log message 2017-09-13 10:51:52 +08:00
OldHawk
2b2bdc1dd4 feat(admin): add fields uptotal of users to count the uploaded torrent file numbers and get uptotal method 2017-09-12 10:53:42 +08:00
OldHawk
bcba926df2 feat(admin): admin can list user`s seeding/leeching/warning torrents 2017-09-11 18:15:46 +08:00
OldHawk
91bec12382 feat(users): show user h&r warning numbers in header menu and user info page 2017-09-11 15:12:21 +08:00
OldHawk
f052ea853e Merge commit 'b43c80e2c097b11114f4e4f01b9718321721a89b'
* commit 'b43c80e2c097b11114f4e4f01b9718321721a89b':
  feat(build): Update dependencies (#1847)
  fix(travis): Fix Travis failing on webdriver issues (#1845)
  fix(eslint): Inconsistent spacing before function parentheses (#1844)
  fix(mongodb): update ssl connection settings (#1809)
  Remove deprecated crypto package (#1843)
  feat(config): Mongo Seed 2.0 (#1808)
  fix(users): don't fail on missing old image on image upload (#1839)
  feat(build): Turn on mangling for uglify (#1841)
  fix(gulp): fix broken test:server:watch task (#1842)
  feat(core): Enhancement page title directive (#1686)
  feat(user): Add email support to forgot password (#1834)
  fix(mocha): update mochajs version to reduce vulnerabilities (#1830)
  refactor(menus): Refactor to the Menus client service to use functional loops/filters (#1575)
  feat(config): Mongoose 4.11 upgrade (#1818)

# Conflicts:
#	config/env/development.js
#	config/lib/app.js
#	modules/articles/server/models/article.server.model.js
#	modules/chat/client/config/chat.client.routes.js
#	modules/core/client/directives/page-title.client.directive.js
#	modules/core/client/services/menu.client.service.js
#	modules/users/client/config/users-admin.client.routes.js
#	modules/users/client/views/password/forgot-password.client.view.html
#	modules/users/server/models/user.server.model.js
#	package.json
2017-08-22 13:35:29 +08:00
Mikael Korpela
f44c9bce71 fix(eslint): Inconsistent spacing before function parentheses (#1844)
Defines `space-before-function-paren` eslint rule and changes files accordingly.
2017-08-14 23:50:33 +03:00
Mikael Korpela
be88a2ca1f fix(users): don't fail on missing old image on image upload (#1839)
Fixes scenarios where previously when old image file would be missing, uploading new image file over it would fail because unlinking previous file fails.
2017-08-13 21:52:38 +03:00
Mikael Korpela
f65d4b90ca feat(user): Add email support to forgot password (#1834)
Adds support for recovering users account using email and username.

Previously only username worked.
2017-08-07 16:38:48 +03:00
OldHawk
0fbed06b1a Merge commit '11777465cf77e2a0bbd0d576a1dadd76a8c2f55d'
* commit '11777465cf77e2a0bbd0d576a1dadd76a8c2f55d':
  Update templateCache root path
  feat(packages): updating packages (#1819)
  feat(Karma): Add mocha style progress to Karma tests
  feat(Travis): Don't allow Node.js 8 testing fail (#1815)
  feat(dependencies): replace PhantomJS in favor of chrome (#1776)
  fix(security): updated compression lib in package.json to reduce vulnerabilities (#1812)
  fix(build): ESLint error in Express config (#1807)
  fix(security): updating vulnerable packages (#1802)
  fix(build): E2E coverage broken on Travis CI (#1805)
  fix(users): Domain config setting (#1803)

# Conflicts:
#	package.json
2017-07-21 18:09:46 +08:00
Michael Leanos
0cbdbdafb7 fix(users): Domain config setting (#1803)
Fixes an incorrect reference to the application's Domain configuration
setting.
2017-06-28 15:12:15 -07:00
OldHawk
d809b6262f feat(traces): load traces data 2017-06-24 13:53:32 +08:00
OldHawk
025d40e7f5 feat(traces): trace log many admin and user action 2017-06-24 12:36:28 +08:00
OldHawk
418f7fa5cc fix(core): upgrade conflict 2017-06-19 13:06:59 +08:00
OldHawk
4596c91d8c Merge commit '8f50eecc7c1ec7dda3363093b3b3e7f17ca9a692'
# Conflicts:
#	modules/users/server/controllers/users/users.authentication.server.controller.js
#	package.json
2017-06-19 12:43:44 +08:00
OldHawk
a50da22141 feat(invitation): show user info by invite mail on detail page 2017-06-15 16:57:14 +08:00
OldHawk
30bd5169d7 feat(invitation): user can sign up by invitation mail now!!!!! 2017-06-15 16:18:07 +08:00
Michael Leanos
e4a3d38b23 fix(users): Duplicate Provider Accounts (#1767)
Fixes an issue where a provider account could be added to the logged in
user's additionalProviderData, when another user has already connected
that same account.

Refactors the saveOAuthUserProfile method to consider the results of the
provider search query, whether or not the current user is logged in.
2017-06-11 00:21:26 -07:00
OldHawk
b93e160260 feat(users): admin can change user uploaded and downloaded(+/-) 2017-06-07 16:34:22 +08:00
OldHawk
8c848433b7 feat(users): admin can change user score(+/-) 2017-06-07 15:54:16 +08:00
OldHawk
68392d7db5 feat(users): admin can change user account status banned/unbanned 2017-06-06 17:29:23 +08:00
OldHawk
9a9ce1de45 feat(users): admin can change user`s role now 2017-06-06 16:33:59 +08:00
OldHawk
52a31c164d user can reset their passkey now 2017-05-09 13:40:16 +08:00
OldHawk
1eda960103 save passkey when user used social accounts 2017-05-09 12:22:16 +08:00
OldHawk
9d74664f26 make passkey when user signup 2017-04-16 17:46:15 +08:00
Laurence Tennant
2b6cf53d30 fix(users): Better MIME-type checking, remove image cropping library (#1589)
* Cropping remove, nicer UI

* Fix MIME-type checking, add image upload tests

* Change image config settings to uploads.profile.image to build a more
rational structure for configuring other types of uploads
2016-11-15 15:59:47 -08:00
itelo
0e2ea65918 fix(users): fix redirect when signup or add provider (#1573)
Fixes the issue of the redirect after Social login authentication, on signup or user profile add provider.
2016-10-19 17:12:47 -07:00
Michael Leanos
0ea8cec120 fix(express): Incorrest uses of 400 error codes (#1553)
Fixes incorrest usage of 400 HTTP responses being returned from the
server, in favor of using 422.

Also, changed a few return codes to 401 where it was more appropriate.

See this article for reasoning behind moving to 422, and why 400 isn't
appropriate for these cases.

For ref:
6be12f8a06

Related:
https://github.com/meanjs/mean/pull/1547
https://github.com/meanjs/mean/pull/1510
2016-10-10 16:00:24 -07:00
itelo
4aa5d77251 feat(core): change console in angular to (#1551)
logs with $log in client idea proposed by @simison
also removed unnecessary consoles in users.password.server.controller.js

Fixes #1541
2016-10-08 21:43:27 -07:00
Michael Leanos
6be12f8a06 fix(core): Add custom 400 and 404 error messages (#1547)
* Added 400 and 404 custom error messages

* nicer error message views

* Sign Up & Sign In error responses

Changed the error responses returned from the Sign Up & Sign In API
calls to use 422 rather than 400.

For insight into why this change was made:
https://github.com/meanjs/mean/pull/1510#issuecomment-247435378

For reference on why to use 422 over 400:
https://www.bennadel.com/blog/2434-http-status-codes-for-invalid-data-400-vs-422.htm
2016-10-07 22:03:31 -07:00
Daron Jones
e3eafa6131 fix(users) Handle missing email - OAuth (#1501)
* fix(users) patch OAuth default email issue

- Intentionally omits setting email in constructor to trigger defaults when
creating user. Handles cases where email is not authorized/given by provider.

Related to issue #1250
2016-09-20 21:24:16 -07:00
Daron Jones
67d1a5a1f6 fix(authentication) Stops error on signin/signup (#1495)
Uses the passport info object to simplify login and remove the need to
temporarily cache the redirect within the session.
2016-09-11 12:29:05 -07:00
Liran Tal
cf246babd1 feat(config): adds a generic DOMAIN configuration environment (#1469)
Generic DOMAI configuration environment variable, useful for setting links to an app
in reset email templates, and other cases.

Fixes #871 and #847
2016-09-01 22:37:43 +03:00
Daron Jones
54ae7dc564 feat(users): prevent route leaking access token (#1417)
The test for authentication use a route /api/users/me. This should probably be upgraded to use
a proper passport mock.

In the meanwhile this should make the returned user object safer - using code from core.

Fixes n/a
2016-08-31 22:50:23 +03:00
shanavas
730cca76af fix(users): don't update secure profile fields (#1421)
* Fix(users): Don't update secure profile fields

Avoid updating secure fields as password, salt ..etc through
user profile update.

Fixes #1420

* Refactor variable name
2016-08-27 09:45:06 +03:00
aanev
234f0c6850 fix(user): fix changeProfilePicture to overwrite existing files
* fix(user): fix changeProfilePicture

* use promises to simplify callbacks

* use fs.unlink to delete old picture once the profile is updated

Fixes #1415

* fix(user): fix changeProfilePicture

* use promises to simplify callbacks

* use fs.unlink to delete old picture once the profile is updated

* log file errors to console

Fixes #1415

* fix(user): fix changeProfilePicture

* use promises to simplify callbacks

* use fs.unlink to delete old picture once the profile is updated

* log file errors to console

* update error handler module to handle file upload errors

Fixes #1415

* fix(user): fix changeProfilePicture

* use promises to simplify callbacks

* use fs.unlink to delete old picture once the profile is updated

* log file errors to console

* update error handler module to handle file upload errors

Fixes #1415
2016-08-26 10:10:02 +03:00
Liran Tal
c95bd7d1cb fix(core): fix ESLint console warnings, Twitter redirect, and and scope usage (#1388)
* Use validator.js instead of regexp for validations in User Schema.

* Disables "Unexpected console statement  no-console" warnings

* Fixes redirection to wrong URL after login with social networks.

* Use ViewModel vm instead of $scope in manage social accounts controller.

* preserving the option to redirect to a specific URL as done in saveOAuthUserProfile() (thanks to @OneOfTheWorld for pointing out)
2016-07-07 01:24:23 +03:00
Jonathan Trowbridge
2ad422ca9b fix(users): fix for users.profile.server.controller.js security (#1338)
* Fix for users.profile.server.controller.js security (#1338)

Fixes an issue where if req.body._id was not set to the current user it
could potentially log the current user in as another user.

Don't use req.body._id when editing user

Prevents a user from being logged in as another if edit user form _id is
not their own.

Fixes #1338
2016-06-18 18:12:08 +03:00
Marek Grzybek
d14d5130af feat(config): Deprecate JSHint in favor of ESLint
Add basic ESLint setup extending well-known Airbnb code style.

Fixes #1072, #1097
2016-03-15 19:11:12 +01:00
Liran Tal
0ebbdd4935 Merge pull request #1236 from lirantal/bugfix/ignored_errors_on_controller
fix(users) error objects were not handled
2016-02-28 09:58:20 +02:00
Liran Tal
03043dcc90 fix(users): removing unused variable from code 2016-02-27 12:58:46 +02:00
Liran Tal
8e249548d4 fix(users): error objects were not handled 2016-02-27 12:54:54 +02:00
Sébastien Combéfis
d2b2dfd606 fix(docs): Fix comments content and style
Changed some bad comments referencing the Articles module in other modules.
Typo fixed in xxx.client.modules.js files ("Application" => "Applicaion")
Full stop character removed at the end of line comments
2016-01-17 11:46:11 +01:00
Faraj Farook
f9c7403825 fix(users): Removing redundant variables
Removing redundant variables defined and not used
2016-01-16 16:17:07 +05:30
gustavodemari
7ecf9337ce updating profile upload with a new version of multer 2015-10-18 20:56:12 -02:00
Liran Tal
b824ebce97 fixed bug #923 - making password reset links work for both http and https configuration 2015-09-19 11:00:47 +03:00
almegdad
aafa5e69cf Force Lowercase & Remove Sensitive Data
* add directive to force username & email lowercase
* remove sensitive data in password reset
* 2 space indentation  in reset & forgot password views
2015-09-01 21:09:20 +03:00