June Kelly
3288f87dbe
[web] Password set/reset: reject current password (redux) ( #8956 )
...
* [web] set-password: reject same as current password
* [web] Add 'peek' operation on tokens
This allows us to improve the UX of the reset-password form,
by not invalidating the token in the case where the new
password will be rejected by validation logic.
We give up to three attempts before invalidating the token.
* [web] Add hide-on-error feature to async forms
This allows us to hide the form elements when certain
named error conditions occur.
* [web] reset-password: handle same-password rejection
We also change the implementation to use the new
peekValueFromToken API, and to expire the token explicitely
after it has been used to set the new password.
* [web] Validate OneTimeToken when loading password reset form
* [web] Rate limit GET: /user/password/set
Now that we are peeking at OneTimeToken when accessing this page,
we add rate to the GET request, matching that of the POST request.
* [web] Tidy up pug layout and mongo query for token peeking
Co-authored-by: Mathias Jakobsen <mathias.jakobsen@overleaf.com>
GitOrigin-RevId: 835205cc7c7ebe1209ee8e5b693efeb939a3056a
2022-09-28 08:06:54 +00:00
June Kelly
c72ec548bb
Merge pull request #5976 from overleaf/jk-login-audit-log-type
...
[web] Add 'method' info to login audit log
GitOrigin-RevId: 093fe885bc1b688aebd640d6762f031c752191d4
2022-01-14 09:02:28 +00:00
Alf Eaton
50df230846
[web] Upgrade Prettier to match version in monorepo root ( #6231 )
...
GitOrigin-RevId: 02f97af1b9704782eee77a0b7dfc477ada23e34d
2022-01-11 09:03:23 +00:00
Hugh O'Brien
3b95ac6d88
Merge pull request #5688 from overleaf/jpa-invalid-password-message
...
[web] password reset: validate user password ahead of invalidating token
GitOrigin-RevId: ba3e6549f53675a2216e2fc24293276c1968d416
2021-11-10 09:02:38 +00:00
Jakob Ackermann
891947770c
Merge pull request #5124 from overleaf/jk-de-ng-set-password-page
...
[web] de-ng set password form
GitOrigin-RevId: d8ebf9f794454d5772e13ab783892d2bba6eed87
2021-09-24 08:03:23 +00:00
June Kelly
0ae8f37629
Merge pull request #5107 from overleaf/jk-de-ng-reconfirm-and-pw-reset
...
[web] de-ng password reset and must-reconfirm forms
GitOrigin-RevId: 2101493ff017ba56214c6f981129f94eb9db46aa
2021-09-17 08:03:02 +00:00
Jakob Ackermann
9d00c351a8
Merge pull request #4327 from overleaf/jpa-pw-reset-captcha
...
[misc] add captcha on password reset requests
GitOrigin-RevId: 9a23b9c9dee2c56345e9c1846861c05c25126802
2021-07-28 02:06:02 +00:00
Jakob Ackermann
5e773ce950
Merge pull request #4101 from overleaf/ae-settings-module
...
Migrate from `settings-sharelatex` to `@overleaf/settings`
GitOrigin-RevId: 9a298ba26382180c1351683c5fddc9004418c1e6
2021-07-08 02:08:28 +00:00
Alf Eaton
1be43911b4
Merge pull request #3942 from overleaf/prettier-trailing-comma
...
Set Prettier's "trailingComma" setting to "es5"
GitOrigin-RevId: 9f14150511929a855b27467ad17be6ab262fe5d5
2021-04-28 02:10:01 +00:00
Alf Eaton
1ebc8a79cb
Merge pull request #3495 from overleaf/ae-prettier-2
...
Upgrade Prettier to v2
GitOrigin-RevId: 85aa3fa1acb6332c4f58c46165a43d1a51471f33
2021-04-15 02:05:22 +00:00
Eric Mc Sween
9ddaa8c9f6
Merge pull request #3830 from overleaf/em-upgrade-node-12
...
Upgrade to Node 12
GitOrigin-RevId: 19870922884b7c98e7e5f2c94df21829672d2db5
2021-04-01 02:05:52 +00:00
Miguel Serrano
d65db1acf0
Merge pull request #3824 from overleaf/jpa-password-reset-email-forwarding
...
[misc] fix passing around of users email as part of password reset
GitOrigin-RevId: 54e8cde9867a2ce735bc7ebe281ead19ef49e6cd
2021-04-01 02:05:04 +00:00
Shane Kilkelly
e9f7a17093
Merge pull request #3234 from overleaf/sk-fix-password-validation-email
...
Overhaul password validation
GitOrigin-RevId: a591c4e192e30a0ac053eab6f80627543a8a92fe
2020-10-23 02:04:39 +00:00
Simon Detheridge
fdcf327ae7
Merge pull request #3231 from overleaf/jpa-hide-internal-error-messages
...
[misc] PasswordResetController: do not expose internal error messages
GitOrigin-RevId: 9eca5e7f5367559d5340363ef859589e218e817f
2020-09-29 02:05:30 +00:00
Jessica Lawshe
552fb56b74
Merge pull request #3078 from overleaf/jel-log-password-reset-by-token
...
Update audit log when password reset by token
GitOrigin-RevId: 2ae7f59c5cdf2723e541a99c58c36564cc82adbf
2020-08-13 15:46:10 +00:00
Miguel Serrano
0583f7a667
Merge pull request #2746 from overleaf/ew-jpa-fix-deprecated-express-methods
...
[misc] fix express deprecations
GitOrigin-RevId: 78c730578c6a671f142837c98f98d5fd260332a5
2020-05-07 03:27:56 +00:00
Eric Mc Sween
1dc325d1c7
Merge pull request #2750 from overleaf/ta-activate-finish-login
...
Don't Bypass FinishLogin on Password Reset
GitOrigin-RevId: 92567c893afb4aa64fa045151678d33c877d8f71
2020-04-24 03:30:45 +00:00
Eric Mc Sween
93fe30a451
Merge pull request #2412 from overleaf/em-password-trim
...
Preserve spaces in password in password reset flow
GitOrigin-RevId: 9a2dfb2988ae99be73934b722e635056b5ab1a18
2019-12-02 14:09:57 +00:00
Eric Mc Sween
2603597150
Merge pull request #2221 from overleaf/em-ownership-transfer-emails
...
Project ownership transfer emails
GitOrigin-RevId: 3d33147c18e2d652976b3dac7453c0407c81314e
2019-10-15 13:30:10 +00:00
Simon Detheridge
7588393580
Merge pull request #2047 from overleaf/spd-eslint-mocha-arrows
...
Enforce consistent callback style in mocha tests
GitOrigin-RevId: a64c293dae6926ef5831abe97eaf2044942a5c85
2019-08-07 15:29:25 +00:00
Ersun Warncke
d624c29b6f
remove v1 deps for password change/reset
...
GitOrigin-RevId: be25f19ae589c50bfde0b170860127fa8d6f63b7
2019-07-17 15:09:24 +00:00
Shane Kilkelly
238e2b2565
Merge pull request #1937 from overleaf/spd-sandboxedmodule-global-console
...
Add 'console' to SandboxedModule globals
GitOrigin-RevId: fad442ca128561a4fa193b929f217cf31ad0f043
2019-07-15 10:44:47 +00:00
Simon Detheridge
757ae39487
Merge pull request #1899 from overleaf/spd-implicit-return-tests
...
Decaf cleanup: Remove implicit return from 'it' and 'describe' in tests
GitOrigin-RevId: f297820e6212dddc0d60697a2fe1612ef27403b6
2019-06-21 13:58:57 +00:00
Alasdair Smith
0ca81de78c
Merge pull request #1717 from overleaf/as-decaffeinate-backend
...
Decaffeinate backend
GitOrigin-RevId: 4ca9f94fc809cab6f47cec8254cacaf1bb3806fa
2019-05-29 09:32:21 +00:00
