Commit Graph

684 Commits

Author SHA1 Message Date
Ilan Biala
dc6f74dec5 Update connect-mongo to support Mongoose 4.0.0 2015-03-28 19:35:54 -04:00
Ilan Biala
1fa147e372 Update dependencies 2015-03-27 22:26:03 -04:00
Liran Tal
77535bdf2d Merge pull request #458 from ilanbiala/0.4.0
Reset password script
2015-03-27 09:57:02 +03:00
Ilan Biala
e1496dc01c Reset password script 2015-03-26 22:32:56 -04:00
Ilan Biala
a0495eabbd Merge pull request #463 from adamwalz/0.4.0
Update glob to 5.0.0
2015-03-11 18:51:12 -04:00
Adam Walz
dd0cdfcc40 Bump glob to version 5.0 2015-03-09 15:46:35 -07:00
Ilan Biala
cabb4c4c6a Merge pull request #453 from reblace/#450
Fix hanging gulp because mongoose connections are left open. Fixes #450.
2015-03-09 12:50:14 -04:00
Liran Tal
61f1a22c91 Merge pull request #376 from rmuch/fix-salt-encoding-merge-0.4.0
Correctly encode and decode password salt (0.4.0)
2015-03-08 14:17:33 +02:00
Rupert Muchembled
08f1750d94 Correctly encode and decode password salt
The user password salt should be encoded with Base64 before being saved
to the database.

The current code adds an unecessary step of converting the result of
crypto.randomBytes() (which already returns a SlowBuffer) to a Base64
string and back again to a Buffer, and misses the final step of
converting the Buffer's bytes back to a Base64 string.

Because of this, the salt stored in the database is garbled. This is
inconvenient when manipulating the data in a terminal or text editor.

When generating the password hash, the crypto.pbkdf2Sync() method
creates a new Buffer directly from the data supplied. Due to the
incorrect encoding of the salt, entropy is lost at this step,
weakening the security of stored passwords against brute force attacks.
2015-03-07 22:10:38 +00:00
reblace
6d0363fe70 Merge branch '0.4.0' of https://github.com/meanjs/mean into #450 2015-03-07 12:04:32 -05:00
reblace
9f45e63a20 #450 minor formatting fixes. 2015-03-07 11:21:47 -05:00
reblace
b61d6a7c8b #450 Fixing unrelated jshint warnings 2015-03-07 11:14:53 -05:00
Ilan Biala
69b0588531 Merge pull request #456 from dotch/0.4.0
removed unused gulp-watch dependency
2015-03-06 19:36:06 -05:00
dotch
7876fad50e removed unused gulp-watch dependency 2015-03-07 01:26:49 +01:00
reblace
ffde5e8067 #450 Use the error reported by mocha. Added some comments explaining
what's going on in the mocha task.
2015-03-06 15:17:58 -05:00
reblace
5f57f9d6f2 #450 Now the mocha task synchronously calls mongoose connect and
disconnect.
2015-03-06 14:18:33 -05:00
Ilan Biala
6f09033617 Fix Gulp throwing errors 2015-03-05 22:57:42 -05:00
Ilan Biala
71c4d4b555 Cleanly track mongoose connection in test task sequence 2015-03-05 22:32:00 -05:00
Ilan Biala
81c2847571 Properly track DB disconnect 2015-03-05 22:30:35 -05:00
Ilan Biala
6cce3d0952 Gulp now closes the mongoose connection
Fixes #450.
2015-03-05 22:04:43 -05:00
Ilan Biala
e954a20e2f Disconnect method to close DB connection 2015-03-05 22:01:36 -05:00
Ilan Biala
9e1a6aab66 Merge pull request #445 from dotch/0.4.0
update gulp-sass to ensure Node 0.12 compatibility
2015-03-03 18:01:21 -05:00
dotch
75bb6f2c2c update gulp-sass to ensure node-0.12 compatibility 2015-03-03 23:21:47 +01:00
Ilan Biala
709c27f975 Merge pull request #421 from vepasto/0.4.0
Wait for async savings and removing in mocha tests
2015-02-23 06:28:24 -05:00
Veikko Karsikko
1897ef985b Wait for async saving and removing 2015-02-23 09:33:26 +02:00
Ilan Biala
d1b4bde41c Merge pull request #425 from vepasto/fix-file-ignore
Fix issue #424
2015-02-20 15:44:54 -05:00
Veikko Karsikko
659c8de801 Change file ignore pattern to match word 'core' instead of chars 2015-02-19 16:14:56 +02:00
Ilan Biala
6e1085e6f8 Merge pull request #413 from berendt/add_newline
Add missing newline at the end of text files
2015-02-17 14:13:10 -05:00
Christian Berendt
e027f4025b Add missing newline at the end of text files
On Unix it is common to have a newline at the end of text files.
2015-02-16 21:39:55 +01:00
Liran Tal
c3dea3edeb Merge pull request #411 from berendt/executable_bit
Remove executable bit when not necessary
2015-02-16 22:13:49 +02:00
Christian Berendt
4879a8ea2a Remove executable bit when not necessary
The executable bit is set for a lot of files where it is not necessary
to have the executable bit set. This PR removes the executable bit from
those files.
2015-02-16 14:19:56 +01:00
Ilan Biala
8f4ded8777 Merge pull request #396 from sylvainlap/0.4.0
Remove dist files because users will have to grunt build anyway after making modifications
2015-02-08 12:21:54 -05:00
sylvainlap
eced93ff6f Remove dist files 0.4.0 2015-02-07 18:40:09 +01:00
Ilan Biala
dd9a3af2df Merge pull request #382 from igorauad/providerImages
Use larger profile images for Facebook and Twitter
2015-02-06 17:00:14 -05:00
Igor Freire
12766c1f3e Adjust profile image URLs on Fb and Twitter strategies
For Fb, use the Graph API. For twitter, use the 'bigger' profile image. Larger profile images (like the one provided by Google) could provide more flexibility.
2015-02-06 14:20:58 -03:00
Ilan Biala
1d1812711e Merge pull request #386 from sylvainlap/0.4.0
0.4.0
2015-02-04 15:09:09 -05:00
sylvainlap
07e8b41f22 Merge remote-tracking branch 'upstream/0.4.0' into 0.4.0 2015-02-02 16:58:45 +01:00
sylvainlap
9c501dbf9f Auth service 2015-02-02 16:54:09 +01:00
Ilan Biala
1e450b45c6 Merge pull request #384 from igorauad/facebook2.0
Remove username from facebook strategy
2015-02-01 10:03:19 -05:00
Igor Freire
9929f1b5f1 Remove username from facebook strategy
Username is now deprecated on Facebook API 2.0
2015-01-30 10:33:11 -03:00
Alex Suttmiller
90c9ddb163 Merge pull request #323 from AndreasHassing/0.4.0
Fix #283 & #321 path issues [+1 for Windows]
2015-01-07 09:37:15 -06:00
Andreas Bjørn Hassing Nielsen
ab18e14aa5 Fix #321 image paths in social meta tags [v0.4] 2014-12-23 13:32:27 +01:00
Andreas Bjørn Hassing Nielsen
acccc03814 Fix #283 glob path issue for Windows
This fixes https://groups.google.com/forum/#!msg/meanjs/qOPHzMtWrPY/da9puKbyI5UJ as suggested by Silla Tan - also mentioned in #283 which was closed without a fix.
2014-12-23 12:56:29 +01:00
Amos Haviv
f8916604ca Merge branch 'pr/278' into 0.4.0 2014-11-26 15:03:47 +02:00
Matt Raby
87217da9d2 Because html5Mode is enabled, the links the social buttons point to will not work, the request to /api/auth/{provider} will be captured by ui-router and directed back to /. Adding target="_self" to each link will fix this issue. Maybe creating a new directive for links to hit server side endpoints would be more appropriate but this should do for now. 2014-11-24 14:10:22 -07:00
Amos Haviv
c94c870a30 Remove Image Uploads 2014-11-10 23:29:19 +02:00
Amos Haviv
9ef18123b0 Remove Image Uploads 2014-11-10 23:28:39 +02:00
Amos Haviv
ab81d61bd3 New 0.4 version 2014-11-10 23:12:33 +02:00
Liran Tal
ad870299c6 Merge pull request #254 from lirantal/enhancement-logger-config
Enhancing application logger configuration
2014-11-07 09:54:22 +02:00
Roie Cohen
24d449c801 Update README.md 2014-11-06 12:24:11 -08:00