Граф коммитов

3100 Коммитов

Автор SHA1 Сообщение Дата
Phil Booth 4fc70a0b2b
fix(metrics): remove old flow signature fallback code
Added in 445cf30609, this code was a
fallback to handle a change in how the content server generates the
flow id. Now that the content server change has stuck in prod, we can
remove the fallback.

https://github.com/mozilla/fxa-auth-server/pull/2420
r=shane-tomlinson
2018-05-04 12:31:16 +01:00
Shane Tomlinson 7a5e80a4d5 Release v1.111.0 2018-05-02 10:28:05 +01:00
Phil Booth 7aedef2fde
feat(sms): query the available budget in /sms/status
https://github.com/mozilla/fxa-auth-server/pull/2401
r=vbudhram,jbuck
2018-04-30 13:56:56 +01:00
Ryan Kelly 56b00e374a
fix(scripts): Remove obsolete `bufferize` call from must-reset script. (#2414); r=philbooth,stomlinson 2018-04-28 09:58:36 +10:00
Ryan Kelly 0cf1bc402d
feat(notifications): Add SNS msg attributes for service notification filtering (#2412); r=philbooth 2018-04-27 19:46:38 +10:00
Omkar Yadav 0204096257 fix(docs): add missing closing code-quote
https://github.com/mozilla/fxa-auth-server/pull/2413
r=philbooth
2018-04-27 05:34:55 +01:00
Vijay Budhram 7793de3cde
fix(totp): check totp before account deletion (#2405), r=@philbooth 2018-04-24 10:19:57 -04:00
Vijay Budhram 4ce2726fdc chore(config): update redirect domain for dev.json (#2403) r=@vladikoff 2018-04-23 21:16:16 -04:00
Vlad Filippov b43fd2813b
feat(node): update to node 8 (#2404) r=@jrgm 2018-04-23 20:39:02 -04:00
Ryan Kelly 9ed5a33441 chore(deps): Update web-push to latest release. (#2407) r=@vladikoff 2018-04-23 20:24:38 -04:00
Vijay Budhram 308d7ffd58
feat(emails): add email to all manage account email links (#2392), r=@philbooth, @shane-tomlinson 2018-04-23 11:25:50 -04:00
vladikoff 6e2726a1e6 Release v1.110.1 2018-04-19 12:37:38 -04:00
Deepti 4a021c6844 refactor(email): remove email parameter from config (#2400) r=@vladikoff,@rfk
Removes email extra parameter from config
2018-04-18 23:02:55 -04:00
Shane Tomlinson 81b3a7b42d Release v1.110.0 2018-04-18 13:35:22 +01:00
Phil Booth 25f2404561
chore(tests): remove duplicate mocking code
The code in test/local/ip_profiling.js was pretty confusing. There was a
bunch of mocking code at the top level, which duplicated the mocking
code inside makeRoutes. Then some of the test bodies were mocking things
a third time.

This changeset attempts to tidy all that up a bit. In doing so, it also
replaces the home-baked mock log object that was being used with a prefab
from test/mocks.js. This fixes #2383.

https://github.com/mozilla/fxa-auth-server/pull/2398
r=vbudhram
2018-04-17 15:58:25 +01:00
Vijay Budhram ed3d99edcf
fix(recovery): update to latest recovery code requirements (#2397), r=@philbooth 2018-04-17 09:52:44 -04:00
Ryan Kelly 766fb160f6
feat(docs): Add documentation for "attached service" notification events. (#2362); r=vladikoff 2018-04-17 14:11:25 +10:00
Shane Tomlinson 5128fd8cdb fix(totp): Change 2FA removed email title to `Two-step authentication disabled` (#2396) r=@vladikoff
Fixes mozilla/fxa-content-server#6073
2018-04-16 13:01:33 -04:00
Phil Booth 778fc33944
chore(logging): use a less confusing op on flow event errors
https://github.com/mozilla/fxa-auth-server/pull/2393
r=vbudhram
2018-04-12 18:41:10 +01:00
Phil Booth 445cf30609
fix(metrics): stop using user-agent string in flow id check
https://github.com/mozilla/fxa-auth-server/pull/2391
r=vbudhram,shane-tomlinson
2018-04-12 17:32:41 +01:00
Ryan Kelly 19162ff6ed
feat(profile): Send "profileDataChanged" event when modifying 2FA status. (#2390); r=vbudhram 2018-04-12 14:06:26 +10:00
Vijay Budhram 4a892017e4
feat(totp): rate limit totp verify actions (#2386), r=@rfk 2018-04-11 12:19:03 -04:00
Edouard Oger 9462e349d7
fix(devices): Rename pushbox capability to messages in tests (#2389) r=@rfk 2018-04-10 18:31:22 -04:00
Phil Booth a6069e0880
refactor(metrics): use boiler-plate amplitude code from fxa-shared
https://github.com/mozilla/fxa-auth-server/pull/2384
r=vbudhram
2018-04-09 18:12:40 +01:00
Vijay Budhram b830707e32
fix(recovery): set assuranceLevel when verifying with recovery code (#2388), r=@rfk 2018-04-09 14:54:41 +00:00
Vijay Budhram 35da0bdf49
fix(email): only send new sign-in emails for sync when verifying with totp (#2381), r=@philbooth 2018-04-09 13:51:05 +00:00
Phil Booth 098f99037b fix(docs): remove old/misleading information about the locale property (#2382) r=@vladikoff 2018-04-04 08:25:21 -04:00
Ryan Kelly ffbcf2607c Release v1.109.0 2018-04-04 11:28:55 +10:00
Phil Booth d3eeab178a
chore(emails): use popular email domain list from fxa-shared
https://github.com/mozilla/fxa-auth-server/pull/2380
r=vbudhram
2018-04-03 17:55:16 +01:00
Phil Booth 35544c731b
fix(metrics): emit route flow events from more endpoints
https://github.com/mozilla/fxa-auth-server/pull/2373
r=vbudhram
2018-03-29 22:33:58 +01:00
Phil Booth e327e4f62f
fix(metrics): count 28 days per metric month
https://github.com/mozilla/fxa-auth-server/pull/2378
r=rfk
2018-03-29 22:07:23 +01:00
Vijay Budhram 110190d12d
fix(totp): add totp code window validation config (#2371), r=@vladikoff 2018-03-29 18:20:34 +00:00
Jon Buckley 632dc35356 fix(node): Use Node.js v6.14.0 (#2374) 2018-03-29 15:08:05 +00:00
Deepti 306b6ebb6d goaws : test fake sqs/sns server (#2369) r=@vladikoff
Use the fake goaws test sqs/sns server in dev
2018-03-29 10:17:28 -04:00
Phil Booth a23eeaad09
feat(metrics): add user properties for active device counts
Fixes mozilla/fxa-amplitude-send#60.

Amplitude's view of devices is skewed by the randomly-generated
device_id that we're using until cross-project device_ids are
implemented. And the sync_device_count property is skewed to a
lesser degree by apparent session-related problems that seem to
force some users to sign in repeatedly on a single device.

To mitigate those problems, this change adds three new properties
that indicate the number of devices that were active in a given
time period: sync_active_devices_day, sync_active_devices_week and
sync_active_devices_month. In this case, a "month" is 30 days.

https://github.com/mozilla/fxa-auth-server/pull/2372
r=vbudhram
2018-03-28 17:10:43 +01:00
Ryan Kelly 10e934f5fe
fix(validation): Reject URLs with unexpected characters. (#2370); r=pb
Previously we could accept URLs with unescaped special characters
such as newlines or unicode, which means we were depending on other
layers of the code to handle them correctly.  This change makes the
requestor responsible for properly escaping any special characters
in their URLs before passing them in to us.
2018-03-28 19:34:25 +11:00
Phil Booth fd26a4abb2
chore(db): prevent the possibility of future url-injection bugs
https://github.com/mozilla/fxa-auth-server/pull/2368
r=vbudhram
2018-03-27 19:02:28 +01:00
Phil Booth be6cc0089e fix(sessions): only return major rev for browser version (#2363) r=@vladikoff 2018-03-27 11:33:43 -04:00
Vijay Budhram 6e0b56ce3e fix(metrics): pass metricsContext to consumeRecoveryCode (#2367) r=@vladikoff 2018-03-26 18:07:08 -04:00
Vijay Budhram 0b1d075b50
fix(totp): ensure correct session verification state before deleting totp (#2365), r=@rfk 2018-03-26 20:51:04 +00:00
Vijay Budhram 575b899cda
fix(totp): throw unverified session in promise chain (#2364), r=@rfk 2018-03-26 13:54:53 +00:00
Phil Booth b18173883e
fix(server): validate ip addresses before setting them on request object
https://github.com/mozilla/fxa-auth-server/pull/2359
r=vbudhram
2018-03-23 13:26:17 +00:00
Phil Booth 85da7f2271
fix(metrics): include full version information in event data (#2356)
Fixes mozilla/fxa-amplitude-send#58.

The user-agent parser was originally written with synthesized device
names in mind, so it didn't always return the full version string for
browsers and operating systems. Since then, we started using the same
code for our event data, meaning that we're getting an incomplete
picture of the browser/os that our users are on.

This change tweaks the user-agent code so that it returns full version
info, and tweaks the code for synthesizing device names so that it
remains consistent with its old behaviour.
2018-03-22 16:49:05 +00:00
Vijay Budhram 81700dae04
feat(totp): initial recovery codes (#2349), r=@philbooth 2018-03-22 15:46:10 +00:00
Edouard Oger 50400600f6 chore(deps): upgrade joi to 12.0.0 (#2358) 2018-03-22 11:45:21 +00:00
Ryan Kelly 50a5180ea7 Merge branch 'train-107' into train-108 2018-03-22 07:03:29 +11:00
Ryan Kelly 06d2d4cef4 Release v1.107.4 2018-03-21 21:30:40 +11:00
Ryan Kelly d275d7a892
fix(emails): Make all DB request paths containing an email use hex encoding (#72); r=philbooth 2018-03-21 21:29:25 +11:00
Ryan Kelly 903a08c8fe Release v1.108.0 2018-03-21 13:35:11 +11:00
Edouard Oger 2067dba0de
feat(devices): Devices capabilities (#2350) r=@philbooth 2018-03-20 10:31:36 -04:00