d826fce497
Pass 'log' and 'config' as options to the scrypt module.
2014-09-30 16:13:24 +10:00
70c3cc9a20
basket api notifier
2014-09-28 18:51:53 -07:00
123ff8a4b7
Remove the unimplemented agent when talking to the customs server
2014-09-19 09:12:14 +12:00
fdc402d8f5
Merge pull request #798 from mozilla/rfk/clear-customs-on-password-reset
...
Call customs-server /passwordReset endpoint on password reset.
2014-09-08 16:53:04 +10:00
878451632a
Call customs-server /passwordReset endpoint on password reset.
2014-09-08 11:32:04 +10:00
696b43ffc3
added 'resume' optional parameter for email sending endpoints
2014-09-04 14:17:52 -07:00
53e3591105
Merge pull request #784 from dannycoates/pvt
...
Support for preVerifiedTokens in /account/create to allow trusted reliers who have already verified the the user's email to more easily transition users to FxA. A valid preVerified token allows the user to skip the email verification step, i.e., the user's account is verified after /account/create completes.
fixes #780
r=rfk,ckarlof
2014-09-03 14:15:32 -07:00
6e4de59092
JWK 'use' should be 'sig' not 'sign'
2014-09-03 13:57:18 -07:00
6c1f26596f
added 'use' to JWK
2014-09-03 13:51:55 -07:00
c4f5e0b75a
Removed some bonus trailing commas and dupe vars
2014-09-03 13:20:06 -07:00
b0137efe22
more input validation of preVerifyToken with regex
2014-09-02 15:02:30 -07:00
bd82f8d84e
stub docs fro preVerifyToken
2014-08-28 14:40:45 -07:00
74145117d8
config cleanup
2014-08-28 11:26:23 -07:00
d18e786700
use b64url encoding for JWKs as in the spec
2014-08-28 11:19:08 -07:00
674ed5de72
WIP on public-key preVerifyTokens
2014-08-22 18:06:34 -07:00
73a0432d31
added a test for invalid preverifytoken, default config to no secret
2014-08-22 11:15:21 -07:00
0e66115b9e
initial sketch of preVerifiedTokens
2014-08-22 11:15:21 -07:00
e6ea9c0f14
resolved all custom git dependencies and removed mysql and heap db.
...
the new fxa-auth-db-mem dev dep hosts a memory db over the httpdb
api.
2014-07-23 12:49:59 -07:00
a00f30aab1
allow /account/status to be authenticated with a sessionToken
2014-07-13 13:55:39 -07:00
3ca7277630
added locale to account
2014-07-08 14:54:25 -07:00
cb659fe5a7
default routes should get the basePath
2014-06-11 11:35:59 -07:00
7454a9f357
don't move .well-known when there is a basePath in publicUrl
2014-06-11 10:48:28 -07:00
2528676f66
append the base path from config.publicUrl to all routes
2014-06-10 13:47:23 -07:00
261815a782
updated hapi to 5.1
2014-06-04 13:05:21 -07:00
e1ab62b4af
always return a 503 on __heartbeat__ failure
2014-05-22 12:58:45 -07:00
a1e97a2a51
changed sign error log to comply with heka parsing
2014-05-18 16:57:06 -07:00
212ec77d9c
fix no method 'wrap' in sign route #716
2014-05-15 17:48:28 -07:00
1a80575e11
added 'accountRecreated' flag to the request summary log line
2014-04-23 16:04:18 -07:00
515678ca13
broke out customs server into a seperate process/repo
2014-04-18 19:05:47 -07:00
8c1704508f
Fix email validation errors caused by typo.
2014-04-16 01:33:03 +10:00
541e23c12b
simple implementation of email rate limiting
2014-03-31 17:07:05 -07:00
579c941bf0
implemented /account/status fixes #656
2014-03-30 12:24:05 -07:00
c8b3217762
resend blackout period
2014-03-24 19:10:14 -07:00
1a9c987c30
Merge pull request #637 from dannycoates/i610
...
added /session/status endpoint
2014-03-20 15:25:23 -07:00
a4403fd014
Merge pull request #636 from dannycoates/i635
...
added /password/forgot/status endpoint
2014-03-20 15:25:01 -07:00
4c398826b4
added /password/forgot/status endpoint
2014-03-20 15:24:06 -07:00
0b4f42720f
added /session/status endpoint
2014-03-20 15:21:56 -07:00
ba748d1f26
rename redirectTo validator for better clarity
2014-03-20 12:11:31 -07:00
1e98286ac7
improved redirectTo domain validation
2014-03-19 15:19:25 -07:00
03aee85b08
Merge pull request #629 from dannycoates/sns-notifier
...
SNS account delete notifier
2014-03-18 15:47:01 -07:00
679dd6affd
added fxa-verifiedEmail to the signed certificate. fixes #630
2014-03-18 14:28:10 -07:00
49e344feeb
sns notifier as a downstream process
2014-03-18 12:12:39 -07:00
85c62912f5
Add (temporary) SNS notifications of account delete events.
2014-03-18 11:24:22 -07:00
d44f1e9091
fixed uid length validation on /verify_email https://bugzilla.mozilla.org/show_bug.cgi?id=982846
2014-03-12 15:19:00 -07:00
34103ae507
don't resend_code if email already verified. fixes #609
2014-03-09 21:07:21 -07:00
278cc596ae
step 1 in fixing i18n
2014-03-09 17:33:52 -07:00
3e9fa74260
added cache-control to .well-known/browserid. fixes #597
2014-02-28 15:37:53 -08:00
de6e64dc72
allow repeat signup against unverified emails
2014-02-27 11:35:51 -08:00
2fef3126e3
update verifierVersion on account reset and password change
2014-02-19 18:19:39 -08:00
7ef3dcbac3
More comprehensive validation of email addresses.
2014-02-18 21:54:52 +11:00
Ryan Kelly
Danny Coates
Andrew Chilton
Ryan Kelly
ckarlof
Peter deHaan