discourse/app/jobs
Dan Ungureanu fa8cd629f1
DEV: Hash tokens stored from email_tokens (#14493)
This commit adds token_hash and scopes columns to email_tokens table.
token_hash is a replacement for the token column to avoid storing email
tokens in plaintext as it can pose a security risk. The new scope column
ensures that email tokens cannot be used to perform a different action
than the one intended.

To sum up, this commit:

* Adds token_hash and scope to email_tokens

* Reuses code that schedules critical_user_email

* Refactors EmailToken.confirm and EmailToken.atomic_confirm methods

* Periodically cleans old, unconfirmed or expired email tokens
2021-11-25 09:34:39 +02:00
..
concerns DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
onceoff FEATURE: Add email normalization rules setting (#14593) 2021-11-24 11:30:06 +02:00
regular FIX: Drop malformed CC addresses in GroupSmtpEmail job (#14934) 2021-11-16 08:15:11 +10:00
scheduled DEV: Hash tokens stored from email_tokens (#14493) 2021-11-25 09:34:39 +02:00
base.rb Revert "DEV: add routes_lazy_route to boost boot-up time (#14545)" (#14581) 2021-10-12 17:30:38 +03:00