Robert Schäfer
145a8d8bf6
Check invalid email
...
Sending a mail with further instructions even if the email is invalid
seems to be a good practice: A potential attacker will not now if a user
has an account under that email address. If a user does not remember the
email address, but has control over the other mail account, she will get
feedback that this mail account is incorrect.
2019-06-15 23:01:34 +02:00
Robert Schäfer
c7ee0c8121
Implement tests for requestPasswordReset
2019-06-15 16:22:28 +02:00
Robert Schäfer
e44ed7d281
Start writing a resolver for requestPasswordReset
2019-06-15 15:42:17 +02:00
mattwr18
dd627535e4
Merge pull request #795 from Human-Connection/781-language-of-contribution
...
Create Posts with a specified language, or fallback
2019-06-14 13:53:22 -03:00
Matt Rider
1c10e0863f
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution
2019-06-14 13:31:39 -03:00
Matt Rider
664a8b327f
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data
2019-06-14 11:37:45 -03:00
794bb08f14
removed reference for fixImageUrls middleware
2019-06-14 14:04:15 +02:00
89d630b1eb
removed fixImageUrlsMiddleware
2019-06-14 14:03:37 +02:00
Robert Schäfer
aee0403cc7
Merge pull request #823 from Human-Connection/343_whitelist_all_queries_and_mutations
...
Whitelist queries/mutations, fix tests
2019-06-14 13:22:00 +02:00
Robert Schäfer
0fc7061333
Disable broken cucumber tests for now
...
@Mastercuber the justification for simply disabling the tests is that
the entire implemntation for the follow activities is wrong. It's still
using the `AddUserFollowedBy` auto-generated mutation. The mutation that
is actually used when you do a follow or unfollow are called `follow`
and `unfollow` - these are custom mutations implemented by ourselves.
So the proper fix for these tests would be to refactor the entire
ActivityPub implementation. Since there is a pending PR already I
decided not to go down the rabbit hole and simply tag the failing
sceario as "work-in-progress" (@wip).
2019-06-14 11:33:32 +02:00
Robert Schäfer
eb4b05e431
Add relevant permissions to let cypress tests pass
2019-06-14 10:14:48 +02:00
dependabot-preview[bot]
2bab4d5563
Bump date-fns from 2.0.0-alpha.31 to 2.0.0-alpha.33 in /backend
...
Bumps [date-fns](https://github.com/date-fns/date-fns ) from 2.0.0-alpha.31 to 2.0.0-alpha.33.
- [Release notes](https://github.com/date-fns/date-fns/releases )
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md )
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.31...v2.0.0-alpha.33 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-14 08:04:36 +00:00
Robert Schäfer
354d8787b0
Merge remote-tracking branch 'origin/master' into 343_whitelist_all_queries_and_mutations
2019-06-14 09:45:54 +02:00
mattwr18
920234ec2a
Merge pull request #819 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-server-testing-2.6.3
...
Bump apollo-server-testing from 2.6.2 to 2.6.3 in /backend
2019-06-13 21:18:27 -03:00
mattwr18
3f87b42987
Merge pull request #818 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-server-2.6.3
...
Bump apollo-server from 2.6.2 to 2.6.3 in /backend
2019-06-13 21:17:58 -03:00
Robert Schäfer
fc4e9f40b3
Whitelist queries/mutations, fix backend tests
2019-06-13 23:29:29 +02:00
Matt Rider
8a214a4007
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution
2019-06-13 17:30:24 -03:00
ALau2088
3cc05c0916
add backend managecomments tests
2019-06-13 13:00:20 -07:00
Matt Rider
589fb16c51
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data
2019-06-13 14:59:23 -03:00
ALau2088
d91221fe7e
Merge branch 'master' of https://github.com/Human-Connection/Human-Connection into 552-update_comment
2019-06-13 10:22:25 -07:00
dependabot-preview[bot]
bbe6d63512
Bump apollo-server-testing from 2.6.2 to 2.6.3 in /backend
...
Bumps [apollo-server-testing](https://github.com/apollographql/apollo-server ) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/apollographql/apollo-server/releases )
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md )
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server-testing@2.6.2...apollo-server-testing@2.6.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:04:29 +00:00
dependabot-preview[bot]
f77aa4ec4e
Bump apollo-server from 2.6.2 to 2.6.3 in /backend
...
Bumps [apollo-server](https://github.com/apollographql/apollo-server ) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/apollographql/apollo-server/releases )
- [Changelog](https://github.com/apollographql/apollo-server/blob/master/CHANGELOG.md )
- [Commits](https://github.com/apollographql/apollo-server/compare/apollo-server@2.6.2...apollo-server@2.6.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:04:05 +00:00
dependabot-preview[bot]
6507b97fdf
Bump date-fns from 2.0.0-alpha.31 to 2.0.0-alpha.32 in /backend
...
Bumps [date-fns](https://github.com/date-fns/date-fns ) from 2.0.0-alpha.31 to 2.0.0-alpha.32.
- [Release notes](https://github.com/date-fns/date-fns/releases )
- [Changelog](https://github.com/date-fns/date-fns/blob/master/CHANGELOG.md )
- [Commits](https://github.com/date-fns/date-fns/compare/v2.0.0-alpha.31...v2.0.0-alpha.32 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-13 05:03:26 +00:00
mattwr18
d0fd4de079
Merge pull request #809 from Human-Connection/800_fix_broken_image_urls
...
Fix #800
2019-06-12 19:53:18 -03:00
Robert Schäfer
113cf04c60
Fix build
2019-06-13 00:26:20 +02:00
Robert Schäfer
1ffa3cd046
Fix #799
...
For target `production` the badges were simply not copied. It also
explains why we never saw that error in development. For development we
use docker build target `build-and-test`.
FYI: @ulfgebhardt @Tirokk @ogerly
2019-06-12 23:55:42 +02:00
Robert Schäfer
4166936e5f
Fix #800
...
Ok, so apparently all we have to do is to remove the `/api` prefix from
fixImageUrlMiddleware. I guess that's just a leftover.
2019-06-12 23:27:43 +02:00
Matt Rider
6e6407b265
Upgrade apollo-cache-inmemory
2019-06-12 17:06:37 -03:00
Matt Rider
40aaa151dd
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution
2019-06-12 16:42:40 -03:00
Matt Rider
70567857e8
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data
2019-06-12 15:51:38 -03:00
Matt Rider
d15857d240
Set user's posts/comments' delete attribute to true
...
- favor over actually deleting the node so that the comments will appear as anonymous and not lose the context of the conversation
- the post will not appear, but for admin it will be accessible
- follow @roschaefer `PR` review
2019-06-12 15:27:57 -03:00
Robert Schäfer
45fc604c25
Merge pull request #797 from Human-Connection/dependabot/npm_and_yarn/backend/graphql-shield-5.3.8
...
Bump graphql-shield from 5.3.7 to 5.3.8 in /backend
2019-06-12 10:27:45 +02:00
Robert Schäfer
c2bcc9f595
Merge pull request #754 from Human-Connection/402-userprofil-tab-click-function
...
402 userprofil tab click function
2019-06-12 10:24:41 +02:00
dependabot-preview[bot]
78607dfd0e
Bump graphql-shield from 5.3.7 to 5.3.8 in /backend
...
Bumps [graphql-shield](https://github.com/maticzav/graphql-shield ) from 5.3.7 to 5.3.8.
- [Release notes](https://github.com/maticzav/graphql-shield/releases )
- [Commits](https://github.com/maticzav/graphql-shield/compare/v5.3.7...v5.3.8 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-12 04:56:09 +00:00
Robert Schäfer
90107cfb18
Merge pull request #789 from Human-Connection/dependabot/npm_and_yarn/backend/prettier-1.18.2
...
Bump prettier from 1.17.1 to 1.18.2 in /backend
2019-06-11 23:44:00 +02:00
Robert Schäfer
54c7c204c2
Run yarn run lint --fix
2019-06-11 23:10:26 +02:00
Matt Rider
fc8792e7af
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data
2019-06-11 15:48:43 -03:00
Matt Rider
f80173697c
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 781-language-of-contribution
2019-06-11 15:48:00 -03:00
Matt Rider
4407d6648a
Add component tests, translations
2019-06-11 15:47:10 -03:00
Robert Schäfer
d1364e4aed
Merge remote-tracking branch 'origin/master' into 402-userprofil-tab-click-function
2019-06-11 17:41:17 +02:00
dependabot-preview[bot]
db37d085f8
Bump graphql-shield from 5.3.6 to 5.3.7 in /backend
...
Bumps [graphql-shield](https://github.com/maticzav/graphql-shield ) from 5.3.6 to 5.3.7.
- [Release notes](https://github.com/maticzav/graphql-shield/releases )
- [Commits](https://github.com/maticzav/graphql-shield/compare/v5.3.6...v5.3.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-11 04:51:32 +00:00
Matt Rider
5986ab2070
Create Posts with a specified language, or fallback
2019-06-10 17:12:00 -03:00
dependabot-preview[bot]
f18ae14741
Bump prettier from 1.17.1 to 1.18.2 in /backend
...
Bumps [prettier](https://github.com/prettier/prettier ) from 1.17.1 to 1.18.2.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/master/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/1.17.1...1.18.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-10 11:12:27 +00:00
ALau2088
22f166adac
merge upstream/552-update_comment
2019-06-08 15:55:51 -07:00
mattwr18
0259eeee66
Merge pull request #771 from Human-Connection/dependabot/npm_and_yarn/backend/apollo-cache-inmemory-1.6.2
...
Bump apollo-cache-inmemory from 1.6.1 to 1.6.2 in /backend
2019-06-08 11:48:23 -03:00
Matt Rider
409b626425
Merge branch 'master' of github.com:Human-Connection/Human-Connection into 404-delete-user-account-and-data
2019-06-07 19:11:21 -03:00
dependabot-preview[bot]
f0a4149b9e
Bump apollo-cache-inmemory from 1.6.1 to 1.6.2 in /backend
...
Bumps [apollo-cache-inmemory](https://github.com/apollographql/apollo-client ) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/apollographql/apollo-client/releases )
- [Changelog](https://github.com/apollographql/apollo-client/blob/master/CHANGELOG.md )
- [Commits](https://github.com/apollographql/apollo-client/compare/apollo-cache-inmemory@1.6.1...apollo-cache-inmemory@1.6.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-07 22:07:23 +00:00
mattwr18
a0f9e90ce2
Merge pull request #783 from Human-Connection/remove_unnecessary_dependency_ms
...
Replace dependency `ms` completely
2019-06-07 19:06:11 -03:00
Matt Rider
7bbf870d8d
Clean up of backend tests
...
- changed variable name, remove unneeded beforeEach
2019-06-07 16:03:02 -03:00
Matt Rider
f7b2d52a7e
Refactor resolver to use Promise and map
...
- forEach cannot be used with async/await
2019-06-07 15:58:51 -03:00