discourse/lib
Sam ff49f72ad9 FEATURE: per client user tokens
Revamped system for managing authentication tokens.

- Every user has 1 token per client (web browser)
- Tokens are rotated every 10 minutes

New system migrates the old tokens to "legacy" tokens,
so users still remain logged on.

Also introduces weekly job to expire old auth tokens.
2017-02-07 09:22:16 -05:00
..
active_record/connection_adapters Use a different Redis key when PG failover sets site to readonly mode. 2017-01-11 16:38:49 +08:00
auth FEATURE: per client user tokens 2017-02-07 09:22:16 -05:00
autospec FEATURE: in dev use #focus to focus on failing test 2016-07-08 12:58:30 +10:00
backup_restore Fix typo. 2016-09-21 16:04:41 +08:00
common_passwords fix build & add migration to clear common passwords cache 2016-03-03 19:39:22 +01:00
demon FEATURE: prioritize sidekiq jobs 2016-04-07 12:56:43 +10:00
email FIX: mail threading wasn't working properly in Mac Mail 2017-02-01 23:02:41 +01:00
emoji add missing flags emoji 2016-09-19 19:39:46 +02:00
es6_module_transpiler FIX: properly reset all contexts after forking 2016-11-02 13:34:20 +11:00
file_store FIX: always set the 'content_type' when storing a file on S3 2016-10-17 19:16:29 +02:00
freedom_patches FIX: order by op_likes leads to broken browsing 2016-12-27 19:08:54 +11:00
guardian FEATURE: reply as new message to the same recipients 2017-01-27 12:24:31 +08:00
highlight_js Updated highlight.js 2016-03-09 08:58:44 +01:00
i18n/backend FIX: Use fallback locales when searching for translations 2016-02-22 22:48:55 +01:00
import
import_export FEATURE: Category setting to make all topics wikis 2016-12-19 06:42:18 -06:00
javascripts FIX: use 'other' instead of 'many' for Ukrainian pluralization until translations are fixed 2016-12-30 11:49:25 -05:00
middleware remove gctools (no longer used) add gctracer for debugging 2016-12-20 15:07:30 +11:00
onebox FIX: wasn't extracting links to quoted posts 2017-02-06 14:45:04 +01:00
plugin FIX: Move the middleware 2017-01-18 18:22:03 -05:00
pretty_text FIX: Don't allow formatting in titles when quoting other topics 2017-01-09 14:53:04 -05:00
rate_limiter FIX: do not raise exception if user not found while rate limiting 2016-04-13 20:08:03 +05:30
sass FEATURE: Let plugins register themes easily 2017-01-13 11:50:52 -05:00
scheduler clean up formatting reports 2016-05-31 07:57:28 +10:00
search Remove SearchObserver, aim is to remove all observers 2016-12-22 13:13:14 +11:00
sidekiq FIX: disable scheduled jobs when in readonly mode 2016-01-11 18:31:28 +01:00
site_settings fix the build 2015-09-09 15:34:53 +02:00
tasks remove warning of previously defined constant when running the specs 2017-02-05 19:07:18 +01:00
validators FIX: Escape regexp chars in SiteSetting.censored_words. 2017-01-31 10:14:51 +08:00
wizard FIX: Incorrect color scheme name in admin after using wizard 2016-09-22 11:16:01 -04:00
admin_constraint.rb FIX: Don't raise error when admin access is invalid. 2016-12-05 17:36:45 +08:00
admin_user_index_query.rb FIX: trim leading & trailing whitespaces in admin user search 2016-10-10 16:18:57 +02:00
age_words.rb reused value of Time.now in a method 2015-12-01 21:06:37 +00:00
archetype.rb
auth.rb Added Instagram login method 2016-02-25 12:13:59 +10:00
avatar_lookup.rb FIX: don't overwrite custom uploaded avatar when selecting gravatar 2015-09-11 15:10:56 +02:00
badge_queries.rb FIX: Liked posts based badges were looking at all likes 2016-04-11 12:36:43 -04:00
cache.rb
canonical_url.rb
category_badge.rb FIX: box style category badges in emails, and shrink text and some spacing in summary email 2016-12-09 16:59:54 -05:00
comment_migration.rb FEATURE: Add CommentMigration for db column comments 2015-07-28 13:14:07 -07:00
composer_messages_finder.rb FEATURE: Warn a user when they're replying to the same user too much 2017-02-03 17:00:54 -05:00
configurable_urls.rb Don't blow up if Redis switches to READONLY 2015-04-24 14:37:16 -04:00
content_buffer.rb
cooked_post_processor.rb FIX: topic links were getting dropped when post is rebaked 2017-01-30 14:55:53 +05:30
crawler_detection.rb Add YandexBot to our list of crawlers 2016-07-26 13:21:37 -04:00
current_user.rb SECURITY: don't grant same privileges to user_api and api access 2016-12-16 12:05:43 +11:00
custom_renderer.rb
custom_setting_providers.rb Plugins can register providers for global settings 2017-01-09 17:18:58 -05:00
db_helper.rb FEATURE: move migrate_to_new_scheme into a background job 2015-06-12 12:07:57 +02:00
directory_helper.rb
discourse_cookie_store.rb FIX: force secure cookies on session if force https is enabled 2016-10-27 15:15:58 +11:00
discourse_diff.rb FIX: Don't diplay character reference in HTML diffs (#4204) 2016-05-09 08:44:21 +02:00
discourse_event.rb Remove DiscourseEvent.clear. 2016-09-05 15:17:49 +08:00
discourse_hub.rb Allow for a custom hub server 2017-01-06 14:54:38 -08:00
discourse_iife.rb Allow the loader to understand when files are moved 2016-11-15 11:41:16 -05:00
discourse_plugin_registry.rb FEATURE: split JavaScript application bundle, so plugins live in own file 2016-11-15 11:43:13 +11:00
discourse_plugin.rb
discourse_redis.rb FIX: Set master to true before forcing slave connections to reconnect. 2016-11-23 14:04:43 +08:00
discourse_tagging.rb FIX: staff tags are stripped by non-staff 2016-12-09 17:24:26 +11:00
discourse_updates.rb FEATURE: Installed Version link shows GitHub Compare to branch being followed 2016-08-02 06:18:44 -04:00
discourse.rb FEATURE: Let plugins register themes easily 2017-01-13 11:50:52 -05:00
disk_space.rb FIX: Allow for large free disk space 2016-01-25 13:22:36 +11:00
distributed_cache.rb FIX: DistributedCache would fail serialization in some cases 2016-01-30 09:01:15 +11:00
distributed_memoizer.rb FIX: select appropriate period when redirecting to top 2015-09-21 20:28:20 +02:00
distributed_mutex.rb
edit_rate_limiter.rb Add better error messages for rate limits. 2015-09-24 13:52:46 -04:00
email_cook.rb Email Cooker can onebox posts too 2016-07-18 15:00:12 -04:00
email_updater.rb FIX: Don't allow invalid email to be saved. 2016-12-21 17:47:11 +08:00
email.rb FEATURE: upgrade to Rails 4.2.4 2015-09-23 15:24:30 +10:00
enum_site_setting.rb
enum.rb Enums that are used in tables need to be stable 2016-01-08 20:43:11 +05:30
excerpt_parser.rb FEATURE: remap emojis back for push notifications and desktop alerts 2016-10-11 13:03:48 +11:00
file_helper.rb FIX: increase read_timeout when downloading avatar 2016-03-24 17:40:03 +05:30
filter_best_posts.rb
flag_query.rb
gaps.rb
global_path.rb FIX: when CDN assets are not in root path source maps fail 2016-02-05 13:05:47 +11:00
guardian.rb FIX: allow existing users to be invited to topic/message when must_approve_users is enabled 2017-02-03 13:01:23 +05:30
has_errors.rb Add PostCreator#create!. 2016-07-15 11:36:06 +08:00
headless-ember.js
homepage_constraint.rb FIX: Suppress error when acccess is invalid. 2017-01-06 13:18:04 +08:00
html_prettify.rb FEATURE: remove dependency of Redcarpet 2015-09-24 13:37:53 +10:00
image_sizer.rb FIX: cropping GIF wasn't working 2016-07-27 18:48:02 +02:00
introduction_updater.rb Add new welcome message step 2016-09-22 09:52:19 -04:00
ip_addr.rb Replace certain uses of 'gsub' with 'tr' or 'chomp' for a speed 2016-06-10 22:08:37 -05:00
js_locale_helper.rb FIX: properly reset all contexts after forking 2016-11-02 13:34:20 +11:00
json_error.rb
letter_avatar.rb fix letter_avatar spec 2016-12-19 10:00:28 +01:00
locale_file_walker.rb add missing dependency 2015-11-02 20:40:50 +01:00
markdown_linker.rb
mem_info.rb
memory_diagnostics.rb compact! only returns array if changes were made 2015-10-27 12:27:37 -04:00
message_bus_diags.rb MessageBus handles readonly redis now, no need to wrap it 2015-05-04 12:21:00 +10:00
mobile_detection.rb radically simplify our mobile user agent detection 2016-03-26 02:02:23 -07:00
new_post_manager.rb added tests and enabled queue when new setting is > 0 2016-09-22 14:51:36 -04:00
new_post_result.rb Support for custom reasons for things being queued for approval 2015-04-28 15:06:47 -04:00
notification_levels.rb Server side code for Watching First Post Only 2016-07-07 11:21:50 -04:00
oneboxer.rb FIX: wasn't extracting links to quoted posts 2017-02-06 14:45:04 +01:00
onpdiff.rb
pbkdf2.rb
permalink_constraint.rb FIX: permalink normalization not applied at constraint 2015-07-22 13:40:45 +10:00
pinned_check.rb
plugin_gem.rb Plugins can register providers for global settings 2017-01-09 17:18:58 -05:00
post_action_creator.rb Add specs for post action guardian 2015-12-30 20:52:36 +01:00
post_creator.rb FEATURE: Block muted users from sending you PMs 2017-01-03 14:51:53 -05:00
post_destroyer.rb Staff action logs explain when system is deleting a post because author marked it to be deleted 2017-01-10 17:25:36 -05:00
post_enqueuer.rb FIX: When approving/rejecting a post it should delete the user action 2015-04-24 15:25:47 -04:00
post_jobs_enqueuer.rb FIX: whisper no longer experimental 2016-12-02 17:03:31 +11:00
post_merger.rb FIX: Revised post not updated correctly when merging posts. 2016-08-11 09:01:54 +08:00
post_revisor.rb FIX: Do not update user stats like counts for private messages. 2017-01-16 11:07:53 +08:00
pretty_text.rb FIX: wasn't extracting links to quoted posts 2017-02-06 14:45:04 +01:00
promotion.rb Promotion fails if the user account isn't old enough yet. 2015-04-14 12:14:59 -04:00
rate_limiter.rb FEATURE: Warn a user when they have few likes remaining 2016-03-18 11:30:29 -04:00
s3_helper.rb REFACTOR: Get bucket name from S3Helper. 2016-08-19 14:08:37 +08:00
score_calculator.rb PERF: make score calculator cheaper when site has long topics 2016-07-22 09:48:44 +10:00
screening_model.rb
search.rb Remove SearchObserver, aim is to remove all observers 2016-12-22 13:13:14 +11:00
secure_session.rb SECURITY: prevent reuse of password reset 2016-12-19 18:00:22 +11:00
single_sign_on.rb FEATURE: SSO support for adding and removing a user to groups 2016-11-11 16:57:31 +11:00
site_setting_extension.rb FEATURE: add censored_pattern setting to censor posts using regex 2016-11-08 16:39:26 -05:00
site_setting_validations.rb improve default_categories_watching_first_post copy 2016-11-10 00:15:14 +05:30
slug.rb FIX: prevent creation of tags with invalid characters 2016-10-12 15:44:36 -04:00
source_url.rb fix sourceURL so it works on ie11 and latest chrome 2015-05-28 14:43:12 +10:00
spam_handler.rb FIX: do not block registration for whitelisted IP address 2015-06-02 15:06:45 +05:30
sql_builder.rb PERF: Active Record #pluck is twice faster 2015-05-13 16:46:17 +10:00
staff_constraint.rb
suggested_topics_builder.rb PERF: cache category topic ids 2016-07-19 12:34:54 +10:00
system_message.rb FIX: error reporting from SystemMessage.create 2016-11-30 13:16:30 -05:00
text_cleaner.rb Test for existing title 2016-03-21 23:06:39 -03:00
text_sentinel.rb FIX: allow long words if they contain periods 2016-09-13 09:15:05 +05:30
timeline_lookup.rb FIX: Deleted posts were showing the wrong dates in the timeline 2016-05-31 10:51:55 -04:00
topic_creator.rb FEATURE: Allow posting a link with topics 2016-12-05 17:20:54 +01:00
topic_list_responder.rb
topic_query_sql.rb FEATURE: digests choose topics you're watching or tracking first 2016-08-18 17:16:52 -04:00
topic_query.rb FIX: whisper no longer experimental 2016-12-02 17:03:31 +11:00
topic_retriever.rb Prevent topic_retriever from retrieving more than once a minute 2016-11-16 12:04:16 -05:00
topic_subtype.rb
topic_view.rb FEATURE: group avatar flair shows on topic participants list, and participant avatars can have custom styles 2017-01-18 11:38:00 -05:00
topics_bulk_action.rb Use db schema for tags instead of plugin store and custom fields 2016-05-26 14:29:48 -04:00
trust_level.rb FIX: admin trust level user list URL should be consistent with new naming 2015-11-23 14:28:56 +05:30
twitter_api.rb FEATURE: Embed images in tweets with dimensions, if present 2016-05-11 16:11:26 -04:00
unread.rb FIX: whisper no longer experimental 2016-12-02 17:03:31 +11:00
url_helper.rb FIX: absolute URL for CDN should always be rooted with a protocol 2016-09-05 15:57:46 +10:00
user_name_suggester.rb FIX: Don't suggest invalid username 2016-02-21 23:28:57 +01:00
version.rb Version bump to v1.8.0.beta4 2017-01-26 17:38:06 -05:00
wizard.rb FEATURE: per client user tokens 2017-02-07 09:22:16 -05:00