Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457) ...

* start work to avoid sending reset password in plaintext via email

* start checking parameters

* fix new password reset email

* render error if password reset code is missing or invalid

* implement POST route, conversion to bcrypt and messages

* add auth.local.passwordResetCode field

* add failing tests, move reset code validation func to lib, fixes, remove old tests

* fix unit tests

* fix page rendering and add integration tests

* fix password reset page

* add integration test

* fix string

* fix tests url

2017-02-14 18:08:31 +01:00

..

amazonPayments.js

[WIP] Amazon refactor to lib (#8403)

2017-01-19 08:30:30 -07:00

analyticsService.js

Add 'balanceGemAmount' to Amplitude #8057 (#8323)

2016-12-29 14:31:30 -06:00

aws.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

baseModel.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

buildManifest.js

typo, correct prod check in build manifest

2016-09-21 16:33:38 +02:00

collectionManipulators.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

cron.js

Incentives, Batch 2 (#8435)

2017-01-20 20:36:38 -06:00

csvStringify.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

email.js

Add Google Signin (#7969)

2016-09-28 12:11:10 +02:00

encryption.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

errors.js

Common reorg (#8025)

2016-09-16 17:18:07 +02:00

googlePayments.js

fix(payments): customerId query

2017-02-02 19:51:52 +00:00

i18n.js

Common reorg (#8025)

2016-09-16 17:18:07 +02:00

inAppPurchases.js

Revert "Fix Gem purchase validation" (#8471)

2017-02-03 11:08:06 +01:00

logger.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

password.js

Don't send plaintext reset passwords via email (#8457)

2017-02-14 18:08:31 +01:00

payments.js

Support subscription payment through Google Play Store (#8437)

2017-02-01 18:39:37 -06:00

paypalPayments.js

Paypal refactor lib (#8420)

2017-01-22 09:59:47 -07:00

preening.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

pusher.js

Format files to adhere to editorconfig (#7977)

2016-09-07 12:58:26 -05:00

pushNotifications.js

fix: Update notifications lib to make it testable

2016-09-12 16:59:52 -05:00

routes.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

setupMongoose.js

Format files to adhere to editorconfig (#7977)

2016-09-07 12:58:26 -05:00

setupNconf.js

Deprecate API v2 (was Revert "Revert "Deprecate API v2"") (#7802)

2016-08-01 22:36:10 +02:00

setupPassport.js

Add Google Signin (#7969)

2016-09-28 12:11:10 +02:00

slack.js

chore(promo): end gift subs promo

2017-01-07 15:42:03 +00:00

stripePayments.js

Stripe refactor to lib (#8417)

2017-01-20 16:08:52 -07:00

taskManager.js

Group plans reorder tasks (#8358)

2017-01-11 19:16:20 +01:00

webhook.js

Webhook improvements (#7879)

2016-10-02 09:16:22 -05:00