Commit Graph

126 Commits

Author SHA1 Message Date
OldHawk
6526d88042 change config file MEAN.js -> meanTorrent 2017-03-23 13:48:43 +08:00
Laurence Tennant
2b6cf53d30 fix(users): Better MIME-type checking, remove image cropping library (#1589)
* Cropping remove, nicer UI

* Fix MIME-type checking, add image upload tests

* Change image config settings to uploads.profile.image to build a more
rational structure for configuring other types of uploads
2016-11-15 15:59:47 -08:00
Michael Leanos
502143b212 fix(config): Default env config lint error (#1604)
Fixes linting errors thrown from incorrect spacing in the default
environment config. Incorrect spacing at the `illegalUsernames` config
setting.
2016-10-29 13:24:11 -07:00
Sujeeth
fb9d9d912c feat(user): add strict validations for username (#1574)
Idea proposed by @sparshy #1204
Suggestions, rules and tests from Trustroots @simison
Added validations on user server model
Added client side validations
Added relevant tests on user server tests
Added relevant tests on user e2e tests

Fixes #1204
2016-10-19 20:40:26 -07:00
Pedro Rodrigues
59c11c622e fix(core): fix twitter meta tags (#1581)
I believe the Twitter meta tags are outdated and this PR fixes them.
Taking into account the current MEAN.js tags and the Twitter docs, the most similar feature I found
is the Twitter Summary Card (https://dev.twitter.com/cards/types/summary).
2016-10-19 11:49:02 +03:00
Michael Leanos
ef3b361c09 fix(config): Default config dangling comma (#1570)
Removes the dangling comma from the default configuration db.promise
setting.
2016-10-15 14:07:30 -07:00
Cody B. Daig
517dc32b69 promise(core): Add Promise Option to Mongoose (#1560)
Fixes #1559
2016-10-15 07:11:05 -07:00
walter
0588eaba48 Moved owasp config into default and reverted other config files.
Modified config to be "shared". This will allow future configurations to be easily passed to the client.
2016-09-12 11:53:22 -07:00
walter
4ddb059346 switched to handlebar template for passing the server's owasp config down to the client.
reverted some of the other changes (regarding the http request).
2016-09-08 11:17:41 -07:00
walter
d896d07d8b Added configuration for owasp. Synchronize client owap configs with the server configs.
Also added a time indicator on failed login attempts to give the user feedback on subsequent failed login attempts.
2016-09-07 19:16:11 -07:00
Cody B. Daig
dd809510cc chore(core): Remove Bluemix (#1476) 2016-09-05 20:42:53 +03:00
hyperreality
70a3e4cac3 fix(tests): Reorganized coverage tests (#1480)
* Added coverage to Gulp

* Moved karma coverage task to Gulpfile, moved LCOV posting to coveralls to .travis.yml config
2016-09-05 20:42:37 +03:00
hyperreality
7be1910420 feat(tests): add client and server test coverage to Gulp (#1466)
* Added coverage to Gulp

* Integrated coveralls tests with gulp

* spurious changes to kick off coveralls
2016-09-04 01:30:32 +03:00
Liran Tal
c0f6cb3e4d feat(mongodb): support for mongodb secure connections with ssl certificates (#1472)
Fixes #1349
2016-09-04 01:29:28 +03:00
Liran Tal
cf246babd1 feat(config): adds a generic DOMAIN configuration environment (#1469)
Generic DOMAI configuration environment variable, useful for setting links to an app
in reset email templates, and other cases.

Fixes #871 and #847
2016-09-01 22:37:43 +03:00
hyperreality
14136450ab feat(core): update project dependencies, fix express config (#1463) 2016-08-30 01:10:14 +03:00
Liran Tal
f6e579765f feat(express): introducing handlebars nodejs template system (#1461)
This commit introduces handlebars template system and completely replacing Swig and the Consolidate project to handle multiple template systems.
Fixes #1286
2016-08-29 08:32:21 +03:00
Liran Tal
64392b1eed fix(config): updating environment variable name for mongodb with the new one for Heroku (#1413) 2016-07-31 13:34:04 +03:00
Liran Tal
37183e0359 * fix(express): updating express session name variable due to deprecation
* fix(express): updating express session name variable from key (the old deprecated one) to the new variable: name

* fix(express): re-wording confusing comment on the session cookie name
2016-07-27 11:39:13 +05:45
Liran Tal
c364922f67 feat(ssl): supporting a certificate authority bundle file for the secured SSL configuration (#1342) 2016-06-07 09:58:02 +03:00
Liran Tal
c8cbcd326f feat(logs): replacing unmaintained and vulnerable file-stream-rotator package with winston log facility (#1334)
* replacing file-stream-rotator with a better logging mechanism using winston which can be extended later for other use cases and integrations

* refactoring logger mechanism, accomodating for tests and environment variable configurations

* only enabling morgan logger if config.log.format option was defined, and disabling the app.log file transport option for the test environment

* disabling all kind of logging when in test enviroment
2016-05-22 01:03:18 +03:00
Liran Tal
c9169e41a1 fix(hsts): removing hsts configuration set on lusca's csrf settings but is already configured and provided using helmet 2016-04-13 13:42:21 +03:00
Marek Grzybek
d14d5130af feat(config): Deprecate JSHint in favor of ESLint
Add basic ESLint setup extending well-known Airbnb code style.

Fixes #1072, #1097
2016-03-15 19:11:12 +01:00
Yilen
b2db312e14 feat(csrf): Added Lusca CSRF Prevention
Added lusca for CSRF protection as per issue #828

Fixes #828
2016-02-16 10:57:11 -08:00
Faraj Farook
6e4c54f712 feat(config): Adding host configuration feature
Adding the functionality of configuring the host to bind the server. By
default this is set to 0.0.0.0.
2015-12-23 03:11:25 +05:30
mleanos
6d7447479f feat(config): Local env configurations
Adds the ability to configure multiple env configurations, for the
various NODE_ENV's. These configs can be used to override the current
configuration, using the appropriate local-NODE_ENV.js file that the
user has defined.

Updated the local.example.js comments to be clear on the usage.

Added config/env/local-*.js to gitignore.

Updated the copy:localConfig Grunt task to copy local.example as
local-development.js, since we're no longer going to use local.js.
2015-11-29 11:00:52 -08:00
Ryan J Baxter
7340e6855f Switched to using new MongoDB service in Bluemix since MongoLabs is being removed 2015-11-02 11:50:46 -05:00
mleanos
28f1f57a26 [hotfix] SeedDB missing in env config
Adds a check for the existence of the seedDB config setting, before
attempting to read config.seedDB.seed setting.

Solves the problem when the seedDB config setting is missing from a
environment config, that causes the application to throw an exception at
startup.

Also, adds the seedDB setting to the Cloud-Foundry env config.
2015-10-28 14:21:11 -07:00
mleanos
99fe98929c Logger Development config default
Reverts the default Logger setting to use the stdout by default, rather
than the stream option.
2015-10-26 23:13:24 -07:00
Ilan Biala
63d0d71cf6 Merge pull request #948 from gustavodemari/update-multer-profile-upload
Update profile upload with a new version of multer
Fixes #947
2015-10-25 22:03:23 -04:00
mleanos
8cd2291a6a Enable log options for Morgan
Adds the log options, and format to the Morgan middleware in the Express
configuration.

These options are defined in the environment configurations.

The implementation derived from https://github.com/meanjs/mean/pull/254
by @lirantal, which somehow got overlooked when merging 0.4.0 into
master.

Added tests for the Logger configuration.

Added the log settings to the Test env config.

Added environment variables for the log settings in the Test &
Production env configs.

Moved the Morgan Express middleware outside of the NODE_ENV ===
'development' check. Morgan should be used in all environments, and use
the settings set in each env config.

Changed the wording of the Stream option comments in the env configs.

Added Rotating Logs functionality, and refactored the log Stream
options. Added a new npm package, FileStreamRotator, for use with
Morgan's rotating logs functionality.

Also, refactored the log configuration tests to be more maintainable.

Added more tests, and refactored test suite to use mock-fs.
2015-10-20 21:03:07 -07:00
gustavodemari
7ecf9337ce updating profile upload with a new version of multer 2015-10-18 20:56:12 -02:00
jloveland
c2b13b9216 adding karma coverage for grunt 2015-10-17 11:51:05 -04:00
mleanos
0560062eab Seed options - logResults
Added an options object to the database seed configuration. Currently,
the only option implemented is `logResults`; set using the seedDB env
config
options (default to "true").

Modified the definition of the env config for seedDB. It's now an
object, with
options.

Setting the logResults option is set to `false` in the core
configuration server test suite.

Also, fixed an issue with how env configs were reading the seedDB
setting from the env variables. Previously, the config was getting set
by
looking for merely the existence of the env variable (MONGO_SEED).
However,
if this setting existed but was set to "false", the seedDB would be
turned on.

Added the SeedDB user details to the env config, and seedDB options.

Added tests to the core server config test suite

should have seedDB configuration set for "regular" user
should have seedDB configuration set for admin user
should seed admin, and "regular" user accounts when NODE_ENV is set to
"test" when they already exist
should ONLY seed admin user account when NODE_ENV is set to "production"
with custom admin
should seed admin, and "regular" user accounts when NODE_ENV is set to
"test" with custom options
should NOT seed admin user account if it already exists when NODE_ENV is
set to "production"
should NOT seed "regular" user account if missing email when NODE_ENV
set to "test"

Added support for environment variables to seedDB env configs; currently
only supporting username & email.

Refactored how the SeedDB rejects were being handled
2015-10-09 13:48:11 -07:00
jloveland
2eb0b0970d adding ability to configure session.secret in local env config 2015-10-04 20:45:47 -04:00
Liran Tal
80b63b5cd2 Refactoring the Session Cookie configuration and adding more configurale parameters 2015-08-25 08:15:49 +03:00
Ryan Hutchison
3527537258 local.example.js still has old fb auth callback 2015-08-22 21:06:43 -04:00
mleanos
195cbe55a5 Added missing /client/ path
Added the missing /client/ path to the favicon & log in the default env
config.
2015-08-19 19:35:43 -07:00
Liran Tal
98f3e8cff5 Merge pull request #816 from lirantal/feature/secure-mode-sslcerts-configurable
Configurable SSL mode options
2015-08-19 13:14:53 +03:00
Pedro Rodrigues
3b5e13e356 fix default session cookie maxAge 2015-08-18 16:26:01 +01:00
Liran Tal
384fb7d24c adding support for a configurable ssl-mode and and ssl cert/key files in the environment configuration 2015-08-17 09:05:35 +03:00
Liran Tal
0aa5e68643 Adding support for configurable session expiration time 2015-08-14 15:24:31 +03:00
Liran Tal
7200426e28 Merge pull request #798 from lirantal/feature/security-enhancements-session
Express sessionKey configuration option
2015-08-14 10:11:00 +03:00
Liran Tal
360c3a4d3b Adding support for sessionKey configuration parameter to allow to easily change the session key that is used to hold the session value. The default is a generic sessionId key to introduce security through obscurity. 2015-08-13 21:42:44 +03:00
Andrew Throener
ea97f2e7d8 Database seeding 2015-08-13 09:37:24 -05:00
Ryan Hutchison
cb9d7e3db6 fix indentation 2015-08-11 01:01:12 -04:00
Liran Tal
2f60b2bac9 Merge branch '0.4.0-cf' of https://github.com/ryanjbaxter/mean into ryanjbaxter-0.4.0-cf 2015-08-07 09:24:36 +03:00
Ryan Hutchison
ef3a3f9548 formatting reboot (space-2 and consistency)
JSCS fixes

update editorconfig
2015-07-31 10:04:02 -04:00
Ryan J Baxter
efd3ee4ce8 Initial support for deploying MEANJS to Cloud Foundry 2015-07-30 15:15:22 -04:00
Cody B. Daig
40878bb076 Get site title from default 2015-07-29 08:43:56 -07:00