mahmed2000
a7e5f20337
Implement admin password hashing with bcrypt ( #3754 )
...
* Add bcrypt hashing helpers
* SetAdminPassword now hashes the password before saving it
* BasicAuth now compares the bcrypt hash for the password
* Modify migration2 to avoid a double password hash when upgrading
* Add migration for bcrypt hashed password
* Do not show admin password hash as initial value
* Update api tests to compare the bcrypt hash of the admin password instead
* Remove old admin password api tests
---------
Co-authored-by: Gabe Kangas <gabek@real-ity.com>
2024-06-26 21:20:22 -07:00
dependabot[bot]
7b867af8c8
Bump braces and jest in /test/automated/api ( #3781 )
...
* Bump braces and jest in /test/automated/api
Bumps [braces](https://github.com/micromatch/braces ) to 3.0.3 and updates ancestor dependency [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ). These dependencies need to be updated together.
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
Updates `jest` from 26.6.3 to 29.7.0
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
- dependency-name: jest
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
* Add previous testRunner jasmine2, add ws dependency explicitly (#3784 )
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mahmed2000 <mahmad2000@protonmail.com>
2024-06-14 11:20:50 -07:00
Gabe Kangas
9b569f3293
chore(tests): attempt to clean up test flakiness ( #3710 )
2024-04-18 15:11:06 -07:00
dependabot[bot]
162da792e4
Bump es5-ext from 0.10.53 to 0.10.63 in /test/automated/api ( #3603 )
...
Bumps [es5-ext](https://github.com/medikoo/es5-ext ) from 0.10.53 to 0.10.63.
- [Release notes](https://github.com/medikoo/es5-ext/releases )
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md )
- [Commits](https://github.com/medikoo/es5-ext/compare/v0.10.53...v0.10.63 )
---
updated-dependencies:
- dependency-name: es5-ext
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-26 22:33:19 -08:00
dependabot[bot]
5f974806f3
Bump @babel/traverse from 7.12.5 to 7.23.2 in /test/automated/api ( #3366 )
...
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse ) from 7.12.5 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse )
---
updated-dependencies:
- dependency-name: "@babel/traverse"
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 12:15:32 -07:00
dependabot[bot]
b293a93217
Bump word-wrap from 1.2.3 to 1.2.4 in /test/automated/api ( #3186 )
...
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases )
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4 )
---
updated-dependencies:
- dependency-name: word-wrap
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-22 21:32:48 -07:00
dependabot[bot]
faaf4583ed
Bump semver from 5.7.1 to 5.7.2 in /test/automated/api ( #3163 )
...
Bumps [semver](https://github.com/npm/node-semver ) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 16:38:05 -07:00
dependabot[bot]
e38a4a1576
Bump tough-cookie from 4.0.0 to 4.1.3 in /test/automated/api ( #3152 )
...
Bumps [tough-cookie](https://github.com/salesforce/tough-cookie ) from 4.0.0 to 4.1.3.
- [Release notes](https://github.com/salesforce/tough-cookie/releases )
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md )
- [Commits](https://github.com/salesforce/tough-cookie/compare/v4.0.0...v4.1.3 )
---
updated-dependencies:
- dependency-name: tough-cookie
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-09 13:15:07 -07:00
Gabe Kangas
3a7f452854
Merge remote-tracking branch 'origin/develop' into webv2
2023-01-24 23:19:02 -08:00
dependabot[bot]
f75aecdd7d
Bump cookiejar from 2.1.2 to 2.1.4 in /test/automated/api ( #2618 )
...
Bumps [cookiejar](https://github.com/bmeck/node-cookiejar ) from 2.1.2 to 2.1.4.
- [Release notes](https://github.com/bmeck/node-cookiejar/releases )
- [Commits](https://github.com/bmeck/node-cookiejar/commits )
---
updated-dependencies:
- dependency-name: cookiejar
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-24 22:36:51 -08:00
Gabe Kangas
a9cf9d08f7
Merge remote-tracking branch 'origin/develop' into webv2
2023-01-09 13:07:45 -08:00
dependabot[bot]
0870b71b62
Bump json5 from 2.1.3 to 2.2.2 in /test/automated/api ( #2536 )
...
Bumps [json5](https://github.com/json5/json5 ) from 2.1.3 to 2.2.2.
- [Release notes](https://github.com/json5/json5/releases )
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md )
- [Commits](https://github.com/json5/json5/compare/v2.1.3...v2.2.2 )
---
updated-dependencies:
- dependency-name: json5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-04 14:08:42 -08:00
Gabe Kangas
0d1684c1e0
Merge remote-tracking branch 'origin/develop' into webv2
2022-12-15 12:07:09 -08:00
Meisam
a7080a1fc1
validate response of federation APIs ( #2408 )
...
* validate json responses
* update deps
* tmp disable header check
* log all the webfinger fails
refactor and filter more malformed requests
* don't set incorrect serverURL strings
* test failing through admin api
* fix server url in fedi tests
* check response.text
* validate json/xml response of all apis
test Content-Type of api response and cleanup
* improve logs
* fix rebase
* cleanup json parser in api tests
* mark the api tests performed by admin
* Separate check for reading and format of serverURL
* test /federation/user/ with wrong username in ci
2022-12-10 21:10:10 -08:00
dependabot[bot]
0608a1d59f
Bump qs from 6.9.4 to 6.11.0 in /test/automated/api ( #2417 )
...
Bumps [qs](https://github.com/ljharb/qs ) from 6.9.4 to 6.11.0.
- [Release notes](https://github.com/ljharb/qs/releases )
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.9.4...v6.11.0 )
---
updated-dependencies:
- dependency-name: qs
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-07 16:23:02 -08:00
dependabot[bot]
cadaab6c24
Bump decode-uri-component from 0.2.0 to 0.2.2 in /test/automated/api ( #2405 )
...
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component ) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases )
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2 )
---
updated-dependencies:
- dependency-name: decode-uri-component
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-07 16:16:43 -08:00
Gabe Kangas
c0dc2eb707
Run API tests inside Eartlhly
2022-09-04 17:14:44 -07:00
dependabot[bot]
0d42d4b85e
Bump jsdom from 16.4.0 to 16.7.0 in /test/automated/api ( #1975 )
...
Bumps [jsdom](https://github.com/jsdom/jsdom ) from 16.4.0 to 16.7.0.
- [Release notes](https://github.com/jsdom/jsdom/releases )
- [Changelog](https://github.com/jsdom/jsdom/blob/master/Changelog.md )
- [Commits](https://github.com/jsdom/jsdom/compare/16.4.0...16.7.0 )
---
updated-dependencies:
- dependency-name: jsdom
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-25 21:16:18 -07:00
dependabot[bot]
e2c968dd9f
Bump minimist from 1.2.5 to 1.2.6 in /test/automated/api ( #1795 )
...
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases )
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-27 16:46:57 -07:00
dependabot[bot]
c19f73de51
Bump ansi-regex from 5.0.0 to 5.0.1 in /test/automated/api ( #1796 )
...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v5.0.0...v5.0.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-27 16:43:33 -07:00
Gabe Kangas
e0a75d5d54
Add support for established chat user mode. #1587 ( #1681 )
...
* Add support for established user mode. #1587
* Tweak tests
* Tweak tests
* Update test
* Fix test.
2022-03-06 23:26:24 -08:00
dependabot[bot]
123d559ba4
Bump ansi-regex from 5.0.0 to 5.0.1 in /test/automated/api ( #1764 )
...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v5.0.0...v5.0.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-06 21:29:25 -08:00
Gabe Kangas
19b9a8bdf6
Add support for IP-based bans ( #1703 )
...
* Add support for IP-based bans. Closes #1534
* Linter cleanup
2022-03-06 20:34:49 -08:00
dependabot[bot]
a42f54c708
Bump ansi-regex from 5.0.0 to 5.0.1 in /test/automated/api ( #1717 )
...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v5.0.0...v5.0.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-01 09:53:21 -08:00
Gabe Kangas
cc6b257470
Automated browser testing ( #1415 )
...
* Move automated api tests to api directory
* First pass at automated browser testing
2021-09-17 14:04:09 -07:00
