Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457) ...

* start work to avoid sending reset password in plaintext via email

* start checking parameters

* fix new password reset email

* render error if password reset code is missing or invalid

* implement POST route, conversion to bcrypt and messages

* add auth.local.passwordResetCode field

* add failing tests, move reset code validation func to lib, fixes, remove old tests

* fix unit tests

* fix page rendering and add integration tests

* fix password reset page

* add integration test

* fix string

* fix tests url

2017-02-14 18:08:31 +01:00

..

challenges

revert commits accidentally added from "Added support for grouping tasks by challenge"

2017-02-12 12:17:23 +10:00

chat

fix: prevents blank messages from being posted to chat (#8257)

2017-01-03 07:15:31 -07:00

content

Common reorg (#8025)

2016-09-16 17:18:07 +02:00

coupons

Documentation - coupon

2016-10-19 21:31:07 -05:00

dataexport

fix(test): disable unreliable XML test

2016-11-23 23:16:16 +00:00

debug

change user quest.progress.collect to quest.progress.collectedItems (#7612)

2016-06-05 20:47:45 -05:00

emails

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

groups

revert commits accidentally added from "Added support for grouping tasks by challenge"

2017-02-12 12:17:23 +10:00

hall

Mods blocking (#8364)

2017-02-05 22:32:10 -07:00

members

revert commits accidentally added from "Added support for grouping tasks by challenge"

2017-02-12 12:17:23 +10:00

models

apiDoc: meta (#8167)

2017-01-13 14:06:46 -07:00

notifications

Login Incentives (#8230)

2016-11-23 19:34:09 -06:00

payments

fix(tests): correctly append query string

2017-02-13 12:54:45 +01:00

qrcodes

add route for QR codes (#7902)

2016-08-18 19:37:14 +02:00

quests

fix tests failures (#8422)

2017-01-18 20:17:56 +01:00

shops

fix(test): accommodate changing seasons

2016-11-04 20:38:29 +00:00

status

API v3 [WIP] (#6144)

2016-05-23 13:58:31 +02:00

tags

fix: correct api tag tests to not rely on default tags

2016-09-07 12:55:07 -05:00

tasks

spells: searing brightness should not affect challenge tasks (#8427)

2017-01-24 11:14:25 +01:00

user

Don't send plaintext reset passwords via email (#8457)

2017-02-14 18:08:31 +01:00

webhook

fix(api): Prevent webhooks from having duplicate ids

2016-10-03 08:13:33 -05:00

notFound.test.js

API v3 [WIP] (#6144)

2016-05-23 13:58:31 +02:00