Karol Sójko
794cd8734a
feat: should be able to access shared item revisions as third party user ( #807 )
2023-09-06 15:36:23 +02:00
Karol Sójko
fe273a9107
feat(revisions): add procedure for transitioning data from primary to secondary database ( #787 )
...
* feat(revisions): add procedure for transitioning data from primary to secondary database
* fix: transition status updating for both items and revisions
* fix: dependabot
2023-08-30 11:20:01 +02:00
Karol Sójko
62d231ae41
feat: choose primary or secondary revisions database based on transition role ( #716 )
...
* feat: choose primary or secondary revisions database based on transition role
* fix: remove redundant types
* fix: binding
* fix: specs
2023-08-30 08:40:39 +02:00
Karol Sójko
bbb35d16fc
fix(auth): account enumeration with pseudo u2f and mfa ( #709 )
2023-08-25 12:05:16 +02:00
Karol Sójko
05bb12c978
feat: add trigerring items transition and checking status of it ( #707 )
2023-08-24 14:39:33 +02:00
Karol Sójko
205a1ed637
feat: add handling file moving and updating storage quota ( #705 )
...
* feat: add handling file moving and updating storage quota
* fix: getting file metada when moving files
* fix: missing event handler binding
2023-08-23 08:09:34 +02:00
Karol Sójko
34085ac6fb
feat: consider shared vault owner quota when uploading files to shared vault ( #704 )
...
* fix(auth): updating storage quota on shared subscriptions
* fix(syncing-server): turn shared vault and key associations into value objects
* feat: consider shared vault owner quota when uploading files to shared vault
* fix: add passing x-shared-vault-owner-context value
* fix: refactor creating cross service token to not throw errors
* fix: caching cross service token
* fix: missing header in http service proxy
2023-08-22 10:49:58 +02:00
Karol Sójko
302b624504
feat: add mechanism for determining if a user should use the primary or secondary items database ( #700 )
...
* feat(domain-core): introduce new role for users transitioning to new mechanisms
* feat: add mechanism for determining if a user should use the primary or secondary items database
* fix: add transition mode enabled switch in docker entrypoint
* fix(syncing-server): mapping roles from middleware
* fix: mongodb item repository binding
* fix: item backups service binding
* fix: passing transition mode enabled variable to docker setup
2023-08-18 16:45:10 +02:00
Karol Sójko
5311e74266
feat: update storage quota used for user based on shared vault files ( #689 )
...
* feat: update storage quota used for user based on shared vault files
* fix: use case binding
* fix: increase file upload bytes limit for shared vaults
2023-08-08 13:36:35 +02:00
Karol Sójko
bd5f492a73
fix(auth): update user agent upon refreshing session token ( #685 )
2023-08-07 13:21:21 +02:00
Karol Sójko
f39d3aca5b
feat(auth): invalidate other sessions for user if the email or password are changed ( #684 )
...
* feat(auth): invalidate other sessions for user if the email or password are changed
* fix(auth): handling credentials change in a legacy protocol scenario
* fix(auth): leave only the newly created session when changing credentials
2023-08-07 10:02:47 +02:00
Karol Sójko and Karol Sójko
8e35dfa4b7
feat(auth): add handling payments account deleted events STA-1769 ( #682 )
...
* feat(auth): add handling payments account deleted events
* fix(auth): result type for accounts already deleted
---------
Co-authored-by: Karol Sójko <[email protected]
2023-08-03 12:01:42 +02:00
Karol Sójko
0d5dcdd8ec
feat: refactor deleting account ( #676 )
...
* fix(api-gateway): TYPES aliases
* feat: refactor account deleting
2023-07-31 13:23:39 +02:00
Karol Sójko
f7190c0c9c
fix(home-server): allow custom atributtes for activating premium features
2023-07-14 09:59:20 +02:00
Karol Sójko
9be3517093
fix(files): handling unlimited storage quota on home server
2023-07-13 14:16:05 +02:00
Karol Sójko
0b82794e9c
feat(auth): add overriding subscription settings on home server ( #656 )
2023-07-13 13:53:33 +02:00
Karol Sójko
a0af8f0025
feat: domain items ( #655 )
...
* feat: content type as a value object
* feat: turn items into domain entities
* fix: update @standardnotes/api
* fix(syncing-server): bindings order
2023-07-12 10:19:22 +02:00
Mo
0bc0909386
chore: types lint ( #630 )
2023-06-30 05:07:47 -05:00
Karol Sójko and Mo
fa7fbe26e7
feat: shared vaults functionality in api-gateway,auth,files,common,security,domain-events. ( #629 )
...
Co-authored-by: Mo <[email protected]
2023-06-30 11:31:25 +02:00
Karol Sójko
d5a8409bb5
fix: add debug logs for invalid-auth responses
2023-06-28 14:30:39 +02:00
Karol Sójko
72ce190996
feat(home-server): add activating premium features ( #624 )
2023-06-09 07:59:07 +02:00
Karol Sójko
1e4c7d0f31
feat: refactor auth middleware to handle required and optional cross service token scenarios ( #612 )
...
* wip: fix variable name
* wip: remove redundant middleware in auth
* fix: auth middleware refactor
* fix(auth): fetching user for key params
* fix(auth): specs
* fix(auth): registering session controller endpoints
2023-05-25 09:43:00 +02:00
Karol Sójko
cc612296d0
fix(auth): changing user credentials to work both on http proxy and direct code call
2023-05-18 12:42:20 +02:00
Karol Sójko
dc71e6777f
feat: home-server package initial setup with Api Gateway and Auth services ( #605 )
...
* fix(api-gateway): reduce exports
* wip controllers
* fix: imports of controllers
* fix(api-gateway): rename http service interface to proxy interface
* wip: self-registering services and controllers
* wip: add registering controller method bindings and services in container
* feat: merge two services together
* wip: resolving endpoints to direct code calls
* wip: bind controller container to a singleton
* fix: controller binding to instantiate and self-register on controller container
* fix: move signout endpoint to auth controller
* wip: define inversify controllers in the controller container
* fix(auth): bind inversify controllers to controller container
* fix(auth): linter issues
* fix(auth): specs
* fix(auth): inversify controllers bindings
* wip: endpoint resolving
* wip: add endpoint for more auth controllers
* wip: add sessions controller endpoint resolvings
* wip: add subscription invites endpoint resolvings
* wip: add subscription tokens endpoint resolvings
* wip: add all binding for auth server controllers
* wip: fix migrations path
* fix: configure default env vars and ci setup
2023-05-16 11:38:56 +02:00
Karol Sójko
8fbb94d15a
feat: upgrade to node 20.1.0 ( #590 )
...
* feat: upgrade node to 20.0.0
* fix(auth): webauthn usage
* fix: remove better-sqlite3 driver and unplug newrelic
* fix: add sqlite3 lib to packages
* chore: upgrade aws-sdk and localstack
* fix: specs and node types
* tmp: check if installing yarn helps linter and test cancellation issues
* Revert "tmp: check if installing yarn helps linter and test cancellation issues"
This reverts commit eacb4e28d1a277454dbe5755f2caf9
2023-05-08 12:16:18 +02:00
Mo
f5ac8ac5e9
feat: change payment method endpoint
2023-05-05 08:27:06 -05:00
Karol Sójko
3aef5998df
feat: sqlite driver for auth service ( #572 )
...
* wip: initial sqlite bootstrap
* wip: switch to sqlite3 as default db type
* wip: boilerplate data
* fix(auth): case sensitive register and login
* fix(auth): refactor username validations
* fix(auth): allow changing username to both username and email:
* fix(auth): lock middleware for recovery log in
* fix(domain-core): specs for invalid types
* fix(auth): lock middleware specs
* fix(auth): typeorm code arrangements
* fix: running e2e on both mysql and sqlite in ci
2023-04-27 11:17:01 +02:00
Karol Sójko
3417407cbe
fix(auth): change status code for updating a subscription setting without a subscription
2023-04-04 09:08:27 +02:00
Karol Sójko
51b264ca13
feat(auth): feature entitlement check for u2f endpoints
2023-04-03 15:43:32 +02:00
Karol Sójko
f69073ba02
fix(auth): chage attestation type to none
2023-03-10 14:59:14 +01:00
Karol Sójko
a3fc0d9120
fix(auth): attestation params and authenticator transports
2023-03-10 14:25:23 +01:00
Karol Sójko
74e35a2d65
Revert "fix(auth): change supported algorithms on authenticator registration options"
...
This reverts commit 7db9ba03f3
2023-03-10 08:56:56 +01:00
Karol Sójko
7db9ba03f3
fix(auth): change supported algorithms on authenticator registration options
2023-03-10 07:07:48 +01:00
Karol Sójko
e1c533a15e
fix(auth): change response from verifying authenticator registration
2023-03-09 07:09:43 +01:00
Karol Sójko
c45653a50a
fix(auth): remove authenticator names from server
2023-03-09 06:46:35 +01:00
Karol Sójko
1d11c5a186
fix(auth): authentication options
2023-03-08 14:08:40 +01:00
Karol Sójko and Karol Sójko
27cf093f85
feat: sign in setting refactor ( #472 )
...
* fix(auth): refactor setting names into domain core value objects
* fix(auth): refactor specs with setting name value objects
* feat(auth): move mute sign in emails to a subscription kind of setting
* feat(auth): add migration script to change sign in email settings to subscription settings
* chore: fix setting name usage
* fix(auth): upper casing setting names
---------
Co-authored-by: Karol Sójko <[email protected]
2023-03-08 10:22:27 +01:00
Karol Sójko
2fad6b62cb
feat(auth): add cleanup of expired sessions
2023-03-06 10:43:53 +01:00
Karol Sójko
79ccbdf100
fix(auth): function naming for more clarity
2023-03-02 12:07:17 +01:00
Mo
9de09c55f8
chore: upgrade api and responses dependencies ( #459 )
2023-03-01 13:51:26 -06:00
Karol Sójko
a9cc00a478
fix(auth): updating counter post authenticator verification
2023-03-01 12:48:10 +01:00
Karol Sójko
5446f3cae4
chore: upgrade @simplewebauthn lib
2023-02-27 11:46:00 +01:00
Karol Sójko
edc4a20859
fix(auth): add cross-platform authenticator selection option
2023-02-24 11:45:33 +01:00
Karol Sójko
17bd50c263
fix(auth): add safety buffer for session access token age ttl
2023-02-23 12:27:19 +01:00
Karol Sójko
5b98924561
feat(auth): add publishing session created and session refreshed events
2023-02-23 11:18:10 +01:00
Karol Sójko
f13944badc
fix(auth): mark sessions that are longer than configured as expired
2023-02-23 11:18:10 +01:00
Karol Sójko
bf55bbccd9
Revert "fix(auth): disallow adding u2f devices if a user does not have 2fa enabled"
...
This reverts commit 11bcd318ab
2023-02-02 14:50:41 +01:00
Karol Sójko
11bcd318ab
fix(auth): disallow adding u2f devices if a user does not have 2fa enabled
2023-02-02 13:57:27 +01:00
Karol Sójko
989e1ce175
fix(auth): verification rpid options
2023-02-02 11:31:31 +01:00
Karol Sójko
b7967b34d1
fix(auth): allow defining multiple expected origins upon u2f registration and verification
2023-02-02 09:21:11 +01:00
Karol Sójko