62 Commits

Author SHA1 Message Date
Alexander Friedland
76388d4c4b
Merge pull request #908 from Human-Connection/785-reporting-a-user-post-or-comment
the one-time reporting of a user, post or comment
2019-07-03 08:44:19 +02:00
Matt Rider
677f657b2e Update schemas, fix typo
Co-authored-by: Robert Schäfer <git@roschaefer.de>
2019-07-02 10:40:32 -03:00
Robert Schäfer
0bc1444336 Explicitly define all comment mutations in schema
Remove `postId` as part of the to-be-saved comment type.
2019-07-02 15:11:21 +02:00
Matt Rider
b034d22732 Fix failing cypress test 2019-07-01 18:50:24 -03:00
Matt Rider
f302961376 Get categories working with UpdatePost, refactor 2019-07-01 18:00:55 -03:00
Matt Rider
b8ea32cfc1 Merge branch 'master' of github.com:Human-Connection/Human-Connection into 778-categories-for-posts 2019-07-01 15:06:52 -03:00
mattwr18
730c18faec
Merge pull request #935 from Human-Connection/fix_cypher_injection
Patch cypher injection vulnerability
2019-07-01 12:30:31 -03:00
Robert Schäfer
4e687a06ea Patch cypher injection vulnerability
@mattwr18 this patches the vulnerability. However we should never do
string interpolation with user input.
2019-06-29 13:48:40 +02:00
Matt Rider
865e2c0ec3 Refactor resolver, rename params
- Use one cypher statement

Co-authored-by: Tirokk <wolle.huss@pjannto.com>
2019-06-28 10:17:22 -03:00
Matt Rider
351f258fab Refactor resolver, write component tests
- use UNWIND instead of iterating over categories(cypher magic)
- do not return nested categories on post creation as it's expensive and we don't use
- refactor backend test
- component tests for CategoriesSelect
2019-06-27 16:57:55 -03:00
Matt Rider
07576d084c Get categories working with CreatePost 2019-06-26 15:59:57 -03:00
Matt Rider
46b83c540d Add contentExcerpt to CreatePost Mutation 2019-06-26 13:53:11 -03:00
Matt Rider
d714927315 Set up backend for Post creation with categories 2019-06-26 11:26:44 -03:00
senderfm
6c7ee1ef42 das einmalige melden eines User, Beitrags oder Kommentars
ist jetzt möglich
2019-06-25 17:51:14 +02:00
Matt Rider
9f8720df81 Remove need for third party url upload
- we can save the file to a variable, it requires a "url" returned
- we can get by returning an empty string
2019-06-25 12:09:48 -03:00
Matt Rider
145f488556 Merge branch 'master' of github.com:Human-Connection/Human-Connection into 759-teaser-image-create-posts 2019-06-25 09:41:40 -03:00
Matt Rider
c6203ad8eb Refactor CreateComments functionality
- update apollo cache on successful mutation
- remove global event listener
- avoid refetch Post to update CommentsList
- return comment with its author from resolver
2019-06-24 18:21:52 -03:00
Matt Rider
bbeb61e1eb Merge branch 'master' of github.com:Human-Connection/Human-Connection into 759-teaser-image-create-posts 2019-06-21 18:51:34 -03:00
Matt Rider
be70088dd7 Get imageUpload working for Posts 2019-06-20 17:05:47 -03:00
Robert Schäfer
da30001ba8 Testing mail delivery with a remote SMTP server 2019-06-20 15:54:56 +02:00
Robert Schäfer
1ed338542c Another suggestion by @Tirokk 2019-06-20 15:33:48 +02:00
Robert Schäfer
9ec9034ea5 Fix translatios as suggested by @Tirokk 2019-06-20 15:25:59 +02:00
Robert Schäfer
9dd340c69b Template emails based on postmark-templates
Credit: https://github.com/wildbit/postmark-templates/

Also we distinguish now if a user has been found and if not. The
password reset link brings us directly to the last step in the flow.
2019-06-20 01:29:50 +02:00
Robert Schäfer
61ad100bfb Get rid of unnecessary .env var - document it 2019-06-20 00:09:26 +02:00
Robert Schäfer
3f5e9a21cc Disable SEND_MAILS for local development and test
.. but enable it by default for `docker-compose.override.yml`. If the developer
uses `docker-compose` we can safely assume that a local smtp server for
development is running.
2019-06-19 15:03:38 +02:00
Robert Schäfer
29b910cfb7 Really basic passwordReset flow works 2019-06-18 23:28:06 +02:00
Robert Schäfer
ba185bcb65 Refactor backend 2019-06-18 19:03:59 +02:00
Robert Schäfer
5a806ca99e Remove duplicate test case 2019-06-17 12:24:14 +02:00
Robert Schäfer
c9ea956f85 Test+Implement resetPassword 2019-06-16 23:32:16 +02:00
Robert Schäfer
145a8d8bf6 Check invalid email
Sending a mail with further instructions even if the email is invalid
seems to be a good practice: A potential attacker will not now if a user
has an account under that email address. If a user does not remember the
email address, but has control over the other mail account, she will get
feedback that this mail account is incorrect.
2019-06-15 23:01:34 +02:00
Robert Schäfer
c7ee0c8121 Implement tests for requestPasswordReset 2019-06-15 16:22:28 +02:00
Robert Schäfer
e44ed7d281 Start writing a resolver for requestPasswordReset 2019-06-15 15:42:17 +02:00
mattwr18
dd627535e4
Merge pull request #795 from Human-Connection/781-language-of-contribution
Create Posts with a specified language, or fallback
2019-06-14 13:53:22 -03:00
Matt Rider
1c10e0863f Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution 2019-06-14 13:31:39 -03:00
Matt Rider
664a8b327f Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data 2019-06-14 11:37:45 -03:00
Robert Schäfer
fc4e9f40b3 Whitelist queries/mutations, fix backend tests 2019-06-13 23:29:29 +02:00
Matt Rider
40aaa151dd Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution 2019-06-12 16:42:40 -03:00
Matt Rider
70567857e8 Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data 2019-06-12 15:51:38 -03:00
Matt Rider
d15857d240 Set user's posts/comments' delete attribute to true
- favor over actually deleting the node so that the comments will appear as anonymous and not lose the context of the conversation
- the post will not appear, but for admin it will be accessible
- follow @roschaefer `PR` review
2019-06-12 15:27:57 -03:00
Matt Rider
4407d6648a Add component tests, translations 2019-06-11 15:47:10 -03:00
Matt Rider
5986ab2070 Create Posts with a specified language, or fallback 2019-06-10 17:12:00 -03:00
Matt Rider
7bbf870d8d Clean up of backend tests
- changed variable name, remove unneeded beforeEach
2019-06-07 16:03:02 -03:00
Matt Rider
f7b2d52a7e Refactor resolver to use Promise and map
- forEach cannot be used with async/await
2019-06-07 15:58:51 -03:00
Matt Rider
ef1f5ea51c Nested beforeEach
- flaky test, leaky info
2019-06-07 14:47:57 -03:00
Matt Rider
687e121658 Remove unneccesary second database clean, reset variables
- in high level describe block, to avoid leaky info
2019-06-07 14:21:03 -03:00
Matt Rider
cc1be62bbd Add afterEach block to DeleteUser block
- not able to reliably get reproduce build failure locally
2019-06-07 13:58:53 -03:00
Matt Rider
6b0c1312f1 Refactor tests to dry out, search for by comment id 2019-06-07 13:38:31 -03:00
Matt Rider
fcb5ab8f1e Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data 2019-06-07 12:14:12 -03:00
Matt Rider
ed5f14d052 Dry out resolver 2019-06-07 10:17:58 -03:00
Robert Schäfer
a978591843 Fix bug introduced in 6f0447515
@ulfgebhardt For the `deleted` and `disabled` flags I would be glad if we could
take only one value, that is `true`, in case the post is considered disabled or
deleted respectively.

There might be more bugs like this now. Please keep in mind that these
counts are also used as total limits for pagination and you break the
pagination if you change the cypher statement.
2019-06-07 01:39:09 +02:00