99 Commits

Author SHA1 Message Date
Robert Schäfer
2e7e0579e4 Fix bug with id middleware
Ids are queried only for well known queries and mutations
2019-02-22 16:11:07 +01:00
Robert Schäfer
eda2ea34fc Incorporate @appinteractive's feedback
@appinteractive can we merge this soon?
2019-02-21 20:03:22 +01:00
Robert Schäfer
132dba04dd Refactor tests with the new factory API 2019-02-21 16:06:13 +01:00
Robert Schäfer
aa07a2a616 Refactor Id Middleware
I found a way to cleanly request additional attributes in our
middleware. We can use this pattern if we e.g. require the author of
posts and comments to check if the user is the author and therefore
authorized to update or delete the post.

CC @mattwr18 @appinteractive @tirokk
2019-02-21 10:50:41 +01:00
Robert Schäfer
4a1e06402a Fix lint 2019-02-20 15:26:49 +01:00
Robert Schäfer
7abc1583dc Implement + test unique slugs for user
I put the relevant line on categories and organizations too, but I
didn't test it separately. I could have tested it but found it
unnecessary repeating
2019-02-20 14:03:36 +01:00
Robert Schäfer
bfc5603fa8 All tests are passing! 2019-02-20 12:56:57 +01:00
Robert Schäfer
a61362b269 Fix slugify unit test with async mock functions 2019-02-20 11:48:06 +01:00
Robert Schäfer
ba26c0e188 Seed reported comments, posts and users 2019-02-20 11:36:50 +01:00
Robert Schäfer
3532b473ee Choose another slug is green 2019-02-20 01:30:32 +01:00
Robert Schäfer
7a70b9ece4 Implement authorization on Post mutations 2019-02-20 01:01:41 +01:00
Robert Schäfer
f1dd52f579 Expose yet another bug in the authorization
Cannot read property id of null

CC @appinteractive
2019-02-20 01:01:41 +01:00
Robert Schäfer
9c4e599ff1 Separate middleware for ids 2019-02-19 23:39:39 +01:00
Robert Schäfer
30bb54c6fa Fix slugify test 2019-02-19 23:00:59 +01:00
Robert Schäfer
e6a996e0dd Harden permissions spec
If we expect an error to be thrown, the test should fail if no error was
raised.
2019-02-19 22:55:23 +01:00
Robert Schäfer
f703164f1d Expose cannot read property id of null error
CC @appinteractive
2019-02-19 13:36:02 +01:00
Robert Schäfer
924a57a7ca Seed badges and tags 2019-02-18 22:48:22 +01:00
Robert Schäfer
1734554a88 Fix seeds without the use of neode
@appinteractive ping
2019-02-18 15:35:45 +01:00
Robert Schäfer
f17242b824 Transfer relevant changes from branch neode 2019-02-18 12:57:07 +01:00
Grzegorz Leoniec
2f2bc5e507
Improved link cleaning 2019-02-07 08:46:34 +01:00
Grzegorz Leoniec
ad2bba586e
Fixed link target 2019-02-06 17:20:38 +01:00
Grzegorz Leoniec
cc5701a193
Do not catch issues on user assign at post create 2019-02-04 17:20:04 +01:00
Grzegorz Leoniec
ca076bbcb9
Assign post to current user on creation 2019-02-04 17:19:26 +01:00
Grzegorz Leoniec
3583259aa6
Merge branch 'master' into editor 2019-02-04 10:56:32 +01:00
Grzegorz Leoniec
aba356395b
allow h3, h4 nad hr tags 2019-01-28 12:19:48 +01:00
Grzegorz Leoniec
827687b3bc
Add content excerpt also on update 2019-01-28 12:19:35 +01:00
Grzegorz Leoniec
8c36d9a740
Updated XSS 2019-01-28 11:06:54 +01:00
Grzegorz Leoniec
31d44fe395
Improved xss cleaning 2019-01-28 10:06:30 +01:00
Grzegorz Leoniec
fa6e5b69ed
Merge branch 'master' into 100_2_download_uploads_and_more 2019-01-26 09:39:31 +01:00
Robert Schäfer
f273240fd8
Merge branch 'master' into report-content 2019-01-22 13:33:57 +01:00
Robert Schäfer
e46c8d18e5 Implement public folder 2019-01-22 12:48:06 +01:00
Robert Schäfer
f5611a6316
Merge branch 'master' into 100_import_mongodb_to_neo4j 2019-01-21 22:17:32 +01:00
Robert Schäfer
55b1541829 Merge remote-tracking branch 'origin/master' into report-content 2019-01-21 15:18:40 +01:00
Robert Schäfer
d0fa8b7e21 Run yarn run lint --fix 2019-01-19 01:04:42 +01:00
Robert Schäfer
5701185d34 Fix urls for staging-alpha 2019-01-19 00:36:55 +01:00
Robert Schäfer
4a21e5b885 Implement test for image middleware 2019-01-19 00:34:45 +01:00
Robert Schäfer
c1395f7ec1 Fix leakage of subprocesses
@mattwr18 and I could not find any other way how to prevent leftover
processes than using a complex list of npm scripts.

Watch: http://youtu.be/byovuFwNXiw
and see how we despearately try to fix this stupid problem.
2019-01-18 02:09:19 +01:00
Robert Schäfer
47e9e52a84 Refactor test to be less confusing 2019-01-17 18:31:39 +01:00
Robert Schäfer
918bd863ed Fix typo
Replace password with Asterix and Obelix
See: http://www.topkool.com/fr/wp-content/uploads/2012/10/asterix-et-obelix-017.jpg

@appinteractive 😆
2019-01-17 18:06:53 +01:00
Robert Schäfer
6340efbfc5 Fix #106
Thank you @appinteractive ! 💝

FYI: @kachulio1 @mattwr18
2019-01-17 18:03:28 +01:00
Robert Schäfer
cd3f0955f9 Properly test 106
I had the wrong test setup for the "expected-to-be-green" side tests
(for debugging).
2019-01-17 15:42:09 +01:00
Robert Schäfer
9e4edca35b Use node spawn to spin off several servers 2019-01-17 15:17:18 +01:00
Grzegorz Leoniec
a1a0d21f23
Merge remote-tracking branch 'origin/master' into report-content 2019-01-16 19:01:25 +01:00
Robert Schäfer
a07f48826b Merge remote-tracking branch 'origin/master' into 106_authorization 2019-01-15 19:59:52 +01:00
Robert Schäfer
5e77e7eaa7
Merge branch 'master' into locations 2019-01-15 13:18:31 +01:00
Robert Schäfer
9d541d8f27 Clean up helper.js 2019-01-14 23:31:00 +01:00
Robert Schäfer
70b20302fe Probably exposed #106 2019-01-14 23:00:21 +01:00
Robert Schäfer
d0b975e782 Getting strange non-deterministic errors 2019-01-14 20:54:11 +01:00
Grzegorz Leoniec
8635cd162f
Merge branch 'master' into report-content 2019-01-14 17:16:19 +01:00
Grzegorz Leoniec
79749e6570
Fixed isOwner permission 2019-01-14 17:07:20 +01:00