Commit Graph

90 Commits

Author SHA1 Message Date
Alice Gaudon 3af1f4a4e5 Parse json bodies for application/*+json too 2020-08-28 17:40:04 +02:00
Alice Gaudon 25b1e71784 CSRFProtectionComponent: give more room for excluding requests 2020-08-28 16:52:49 +02:00
Alice Gaudon 84f2f7118a Csrf protection test: migrate to supertest 2020-08-05 12:06:21 +02:00
Alice Gaudon 31f974c0a6 Serve static files extra early to avoid useless middlewares execution 2020-07-28 12:11:41 +02:00
Alice Gaudon 3a4755ce98 Give the redirectBack function its own Component back 2020-07-28 10:03:25 +02:00
Alice Gaudon b179afdaf5 nunjucks: override default dump filter to allow circular dependencies 2020-07-26 11:37:36 +02:00
Alice Gaudon 6618e874e0 mail: switch from deprecated TLS usage to STARTTLS 2020-07-20 11:29:10 +02:00
Alice Gaudon fe772c4e14 WebSocketListener: make cookies+session optional 2020-07-19 17:37:10 +02:00
Alice Gaudon 197b963e4c Add cache interface 2020-07-19 12:01:22 +02:00
Alice Gaudon e9a20c82ed Fix chmod check and relax mail 2020-07-15 15:39:08 +02:00
Alice Gaudon 9ce345d99d Don't start in production if important security fields are misconfigured 2020-07-15 15:06:29 +02:00
Alice Gaudon 74dac9b314 Trust loopback proxy 2020-07-15 12:35:14 +02:00
Alice Gaudon eb935bf52a Fix auth redirect_uri chain 2020-07-15 12:31:07 +02:00
Alice Gaudon 634edda704 RedirectBackComponent: fix it and integrate it into NunjucksComponent 2020-07-15 10:24:01 +02:00
Alice Gaudon 6885f3da1c Add configurable maxAge for session cookie, defaults to 30 days 2020-07-14 15:06:46 +02:00
Alice Gaudon 3561614f96 Promote some views to wms-core 2020-07-12 11:47:47 +02:00
Alice Gaudon 172b977fcf Improve reliability of RedirectBackComponent 2020-07-11 12:09:05 +02:00
Alice Gaudon 0e96a285ac Properly split routing in 2 steps: init, handle 2020-07-11 11:46:16 +02:00
Alice Gaudon 4b8a3b307d Integrate file upload form middleware into controllers 2020-07-11 11:08:57 +02:00
Alice Gaudon 6cf153c36b Use gzip compression 2020-07-09 14:18:05 +02:00
Alice Gaudon 6bdfc9b4b7 Add CSRF route excluders 2020-07-08 13:28:22 +02:00
Alice Gaudon 724d59daba Fix core version grabbing 2020-07-08 11:09:27 +02:00
Alice Gaudon afdfadd34e Add CsrfProtectionComponent tests and fix missing promise await 2020-07-08 10:58:57 +02:00
Alice Gaudon e72bb08a66 Add frontend support for custom flashed data keys 2020-07-06 10:42:46 +02:00
Alice Gaudon ca39c3e538 Fix mail settings and add mail from 2020-06-27 18:15:02 +02:00
Alice Gaudon b043513fe8 Bug fixes and app settings 2020-06-27 17:12:50 +02:00
Alice Gaudon 94286dc833 auto update: add git fetch command 2020-06-15 12:58:27 +02:00
Alice Gaudon a15d496c53 Use formidable instead of multer 2020-06-14 21:47:18 +02:00
Alice Gaudon adf380c19d Add request parsing middlewares to controllers 2020-06-14 17:33:37 +02:00
Alice Gaudon a2ef0f6a42 Fix http requests logging 2020-06-14 16:04:50 +02:00
Alice Gaudon 98566811c3 Provide extended option to urlencoded middleware 2020-06-14 15:08:56 +02:00
Alice Gaudon e965303777 Add logging full http requests cli arg 2020-06-14 11:43:00 +02:00
Alice Gaudon b85fbe6c21 Log accept header for every request 2020-06-04 10:15:24 +02:00
Alice Gaudon 924104f700 Add auto update component 2020-05-05 15:19:23 +02:00
Alice Gaudon fc5344c629 Fix bad place of use for redis pass 2020-04-25 18:32:00 +02:00
Alice Gaudon 6868411aa7 Add configurable redis pass 2020-04-25 18:26:46 +02:00
Alice Gaudon 9b7ec1e516 Nunjucks: distinguish application version from core version 2020-04-25 09:35:25 +02:00
Alice Gaudon de777bc844 Make redis prefix configurable 2020-04-25 09:32:59 +02:00
Alice Gaudon 6469de499f Add NunjucksComponent 2020-04-23 11:18:23 +02:00
Alice Gaudon 662d12df68 Add sources 2020-04-22 17:49:58 +02:00