github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-28 15:10:55 -05:00
Code Issues Projects Releases Packages Wiki Activity
942 commits 39 branches 47 tags 112 MiB
Commit graph

942 commits

This branch
This branch
All branches
Author SHA1 Message Date
Erik Michelson
0f731016eb
Update security.md to match state in master branch 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2021-09-21 15:19:46 +02:00
renovate[bot]
1cc081f670
chore(deps): update dependency @types/node to v14.17.18 (#1665) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-21 21:54:36 +00:00
renovate[bot]
1fd5febf33
fix(deps): update dependency node-fetch to v2.6.4 (#1662) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-21 15:25:35 +00:00
David Mehren
cda0abfceb
Add missing title property to issue templates 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-09-21 15:04:21 +02:00
Erik Michelson
053614e3c8
Use GitHub issue forms 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2021-09-16 23:40:35 +02:00
renovate[bot]
cda17d9d1f
chore(deps): update dependency @types/jest to v27.0.2 (#1661) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-21 04:04:44 +00:00
renovate[bot]
b988a565c7
fix(deps): update dependency node-fetch to v2.6.3 (#1660) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 23:33:07 +00:00
renovate[bot]
80463cd463
chore(deps): update dependency ts-loader to v9.2.6 (#1659) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 21:58:44 +00:00
renovate[bot]
d97e5d7194
chore(deps): update linters to v4.31.2 (#1658) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 19:16:34 +00:00
renovate[bot]
9b6c977a25
chore(deps): update dependency jest to v27.2.1 (#1624) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 15:21:31 +00:00
renovate[bot]
135d80d359
chore(deps): update dependency mkdocs-material to v7.2.8 (#1657) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 13:02:26 +00:00
renovate[bot]
bb6499b5e5
chore(deps): lock file maintenance (#1655) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-20 02:00:07 +00:00
renovate[bot]
6a1acd69de
chore(deps): update dependency mkdocs-material to v7.2.7 (#1653) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-19 16:24:07 +00:00
renovate[bot]
259ca4937a
fix(deps): update dependency eslint-plugin-jest to v24.4.2 (#1648) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-17 10:18:05 +00:00
renovate[bot]
3d863290e2
chore(deps): update dependency @types/node to v14.17.17 (#1647) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-17 02:37:16 +00:00
renovate[bot]
e9863c3c8a
chore(deps): pin dependencies (#1646) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-17 00:45:34 +00:00
Philip Molares
5bc1513bd8
feat: add auth e2e tests 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-02 23:41:32 +02:00
Philip Molares
366057fb8b
feat: add auth controller with internal login, registration, password change and logout 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 22:00:14 +02:00
Philip Molares
cd4ee84ec3
feat: add LoginEnabledGuard and RegistrationEnabledGuard 
These guards check if the login or registration are enabled in the config. If so the guarded method is executed, if not the client will get the HTTP Error 400 Forbidden as an answer

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-04 18:31:01 +02:00
Philip Molares
46d03571c1
fix: update seed.ts 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-31 13:39:51 +02:00
Philip Molares
5a91662865
feat: add session handling 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-31 13:36:13 +02:00
Philip Molares
1c52ad69a6
feat: add identity module 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:59:23 +02:00
Philip Molares
df10ed92e3
feat: add local auth strategy 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:59:12 +02:00
Philip Molares
b9cec8aeca
feat: add identity service 
This service handles all the authentication of the private api.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:58:54 +02:00
Philip Molares
3cc321f353
feat: add getFirstIdentityFromUser helper function 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:57:46 +02:00
Philip Molares
e7eb6694a6
feat: change email auth config to local 
This was done to use the same term. Also email was the old term from HedgeDoc 1 and wildly inaccurate. As we never checked any mail addresses, in fact it was more of a username than anything else.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-04 19:24:32 +02:00
Philip Molares
43242cccc9
feat: add session to AuthConfig 
this handles the settings for the cookie session. The secret and the lifeTime of the cookie can be configured.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-04 17:46:58 +02:00
Philip Molares
0ef0d1e111
feat: add local auth dtos 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:54:05 +02:00
Philip Molares
5e4eb574c5
chore: add user relation enum 
this enum is used to specify which relation of the user object should be populated.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-31 13:39:36 +02:00
Philip Molares
337854c86a
feat: lazy load identities of user object 
This makes it possible that we can get identities from any user object even if we didn't specify that while getting them from the orm

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-04 22:13:16 +02:00
Philip Molares
23e26fb830
chore: move identity entity in its own folder 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:53:20 +02:00
Philip Molares
547f2239cc
chore: move password related functions from AuthService to utils file 
As these methods will be used in both the AuthService and the IdentityService, it makes sense to extract them and use them in this manner. Especially if one considers that they are quite standalone functions.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:47:13 +02:00
Philip Molares
cf8f3b39ec
feat: add ProviderType enum 
This is used to give identities a type and to easily get the identity any auth method would need.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:57:22 +02:00
Philip Molares
d5ff09349d
chore: add passport-local dependency 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 21:44:54 +02:00
renovate[bot]
d833f35c1a
chore(deps): update dependency prettier to v2.4.1 (#1638) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-16 12:05:49 +00:00
renovate[bot]
250bd0266b
chore(deps): update dependency @types/node to v14.17.16 (#1634) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-15 00:18:47 +00:00
Renovate Bot
8c813abddc
chore(deps): update dependency typescript to v4.4.3 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 18:02:18 +00:00
Renovate Bot
6a017cbca5
fix(deps): update dependency @azure/storage-blob to v12.8.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 18:02:31 +00:00
Renovate Bot
bf0e69c081
chore(deps): update dependency prettier to v2.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 17:49:41 +00:00
renovate[bot]
f6e0e2ed99
chore(deps): update dependency @typescript-eslint/parser to v4.31.1 (#1630) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 17:59:24 +00:00
Philip Molares
d6be1cc6bb
docs: add documentation on private api authentication 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-08-08 20:21:16 +02:00
Renovate Bot
faacfc067f
chore(deps): update dependency jest to v27.2.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 08:47:08 +00:00
Renovate Bot
50aae8d344
chore(deps): update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 17:19:57 +00:00
Abhilasha Sinha
f63a2b79b7
Add new API to purge note history #1064 
Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>

Combine the describe block

Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>

Fix naming

Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>

Rename purgeRevision to purgeRevisions

Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>

Fix notes e2e test description

Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>

Add yarn.lock

Fix lint and format

Signed-off-by: Abhilasha Sinha <abhisinha662000@gmail.com>
 2021-08-30 05:37:35 +05:30
renovate[bot]
170f4f6759
chore(deps): update dependency @types/node to v14.17.15 (#1623) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-07 10:22:27 +00:00
renovate[bot]
74dbdd464d
fix(deps): update dependency node-fetch to v2.6.2 (#1621) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-06 14:32:50 +00:00
Philip Molares
216baa42a1
refactor: move TokenAuthGuard in the same file as TokenStrategy 
This should help to make clear why code is executed when the TokenAuthGuard is encountered by a request. Currently, one has to connect both files via the string 'token', which is a bit cryptic

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-09-04 18:03:41 +02:00
David Mehren
5ecb0c0694
RevisionsService: Refactor getFirst/LastRevision 
The functions now expect a `Note` object instead of a noteId to
make it more consistent with other functions.

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-08-29 22:45:56 +02:00
David Mehren
fe26f1689c
MediaService: Refactor saveFile 
The function now expects a `Note` object instead of a noteId
and a `User` instead of a username to
make it more consistent with other functions.

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-08-29 22:28:21 +02:00
David Mehren
341e3a3e5a
HistoryService: Remove getEntryByNoteIdOrAlias 
As we now have a GetNotePipe, we can easily get rid of this function.
All clients can directly provide a `Note` instance
and use `getEntryByNote`.

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-08-29 21:57:35 +02:00