4604d5c209
Merge pull request #1735 from eoger/profile-server-push
...
feat(profile): send push notifications after a profile update
2017-03-27 11:49:56 -07:00
7949706010
fix(sms): add config to disable geo-ip lookup in /sms/status
...
https://github.com/mozilla/fxa-auth-server/pull/1756
r=shane-tomlinson
2017-03-22 12:00:31 +00:00
2e8342093c
feat(profile): send push notifications after a profile update
2017-03-21 18:56:26 -04:00
d45cdb3caa
Merge branch 'train-82-private' into public-master
...
Conflicts:
lib/email/utils/helpers.js
test/local/email/bounce.js
test/local/email/delivery.js
test/local/lib/senders/email.js
2017-03-21 16:40:28 +11:00
33041e972c
chore(config): change SMS region config from regex to array ( #1743 ) r=vladikoff
2017-03-20 19:30:29 -04:00
e440d8f220
refactor(routes): remove preVerifyToken support ( #1690 ) r=rfk
...
Fixes #1599
2017-03-20 19:27:14 -04:00
37d656975a
refactor(logging): Log email domain if popular otherwise log `other` ( #1666 ), r=@rfk, @vladikoff ( #59 )
2017-03-17 13:19:55 -04:00
357d2f7ce3
refactor(logging): Log email domain if popular otherwise log `other` ( #1666 ), r=@rfk, @vladikoff
2017-03-17 12:51:10 -04:00
ac1e208f25
fix(config): sync up both auth and mailer configs ( #58 ) r=jrgm
2017-03-16 17:00:19 -04:00
8ea58bfce6
Merge pull request #1684 from mozilla/hard-bounce-error
...
feat(mailer): check for hard bounced or complaints before sending emails
2017-03-14 12:40:45 -07:00
4cd6f9e17e
fix(sms): ditch the silly ad-hoc config file for sender ids
...
https://github.com/mozilla/fxa-auth-server/pull/1722
r=vbudhram
2017-03-14 15:07:51 +00:00
51f85ced9a
feat(mailer): check for hard bounced or complaints before sending emails
2017-03-09 10:17:49 -08:00
3099acce41
fix(config): Use a more generic server url pattern for push registrations.
...
https://github.com/mozilla/fxa-auth-server/pull/1699
r=philbooth
2017-03-07 06:55:42 +00:00
9fd2ca334c
fix(push): add extra validation to pushCallback payload param ( #1698 ) r=rfk
2017-03-06 17:42:11 -05:00
388fd504e1
refactor(sms): swap out ad hoc error structures for lib/error ( #1696 ) r=vladikoff
2017-03-06 14:04:56 -05:00
34f439024f
feat(server): implement GET /sms/status
...
https://github.com/mozilla/fxa-auth-server/pull/1681
r=shane-tomlinson
2017-03-01 11:54:18 +00:00
0c52a7cf06
feat(logs): disable statsd reporting in config ( #1673 ), r=@vbudhram
2017-02-23 12:28:58 -05:00
d35d4420ce
feat(api): add an endpoint for sending SMS messages
...
https://github.com/mozilla/fxa-auth-server/pull/1648
r=vbudhram
2017-02-16 08:21:22 +00:00
5f07f22dfa
refactor(unblock): Graduate sign-in unblock
2017-02-14 11:12:52 -05:00
bb5f5d0e87
fix(style): adjust config code style issue
...
:{
2017-02-07 14:18:54 -05:00
2e84e07e02
feat(email): Add flow events for email delivery notifications ( #1626 ), r=@philbooth
...
Adds support for handling and processing `flowEvents` for email delivery.
2017-01-26 13:52:05 -05:00
ca4419ae4a
feat(ip-profiling): make IP Profiling allowed recency use config ( #1615 ), r=@vbudhram
...
Set default config to allow 3 days.
Closes #1614
2017-01-18 22:39:42 -05:00
9105f87e77
fix(email): turn on SES Event Publishing metrics
2017-01-12 17:24:21 -08:00
5e99cf3970
fix(emails): remove /v1/ api prefix ( #1605 ); r=rfk
...
Fixes #1059
2017-01-03 06:38:43 +11:00
1d1fa41984
refactor(signin): Skip sign-in confirmation depending on account age ( #1591 ), r=@seanmonstar, @rfk
...
This PR adds the ability to skip sign-in confirmation depending on an account's age.
2016-12-13 23:01:06 -05:00
764c96ab85
fix(unblock): Remove 'context' check from unblock feature-flag.
...
The front-end is no longer sending this data to the server
so we can't use it in our decision-making; plus we intend for
it to be rolled out to all clients anyway.
2016-12-05 07:58:29 +11:00
5f0f3ba550
feat(signin): Remove feature flag from sign-in confirmation. ( #1530 ); r=vbudhram
...
It's now always enabled for all users, and we no longer have
any backwards-compatibility paths that might fall back to it
being disabled.
2016-11-24 07:27:09 +11:00
1fa95a94b5
fix(bypass): Don't bypass sign-in confirmation for forced emails ( #1554 ), r=@seanmonstar
...
Fixes issue where users that are forced through sign-in confirmation get bypassed. Renames `enabledEmailAddresses` to `forcedEmailAddresses`.
2016-11-18 10:13:51 -05:00
21723e8911
feat(profiling): IP Profiling ( #1525 ), r=@seanmonstar
...
This PR adds support for bypassing sign-in confirmation if the user has had a successful login within the past day.
2016-11-11 13:29:21 -05:00
f82db02c40
feat(unblock): change unblock codes to base32 ( #1529 ) r=vladikoff
...
Closes #1497
2016-10-27 14:33:26 -04:00
2f03ce5f37
feat(metrics): set metricsContext expiry to 2 hours
...
#1519
Fixes #1513
r=philbooth
2016-10-23 14:10:40 +01:00
9b77446c86
feat(hpkp): Add hpkp support ( #1499 ), r=@philbooth
...
* feat(hpkp): Add hpkp support
This adds support for sending HPKP headers in all requests. Feature is disabled by default and should be put in report only to avoid any footguns.
2016-10-14 11:34:11 -04:00
c3a66c217f
feat(unblock): add Signin Unblock feature
...
Adds a `unblockCode` parameter to the `/account/login` route, which can
be used to bypass select rate-limits.
Also addes `/account/login/send_unblock_code` and
`/account/login/reject_unblock_code` routes, to facilitate receiving an
unblock code through email, or to reject and report one if someone tried
attacking your account.
Closes #1398
2016-10-11 17:26:37 -07:00
6e6b28c7a1
feat(push): Add VAPID identification to push messages. ( #1468 ); r=philbooth
2016-10-10 12:40:45 +11:00
798ef835f8
fix(config): increase flowId expiration to 2 hours ( #1487 ); r=jrgm,rfk
2016-10-05 14:27:37 +11:00
020235fe40
fix(config): return parsed RegExp instances from config
2016-10-03 14:20:34 +01:00
51d7cdd081
fix(server): hide session token lastAccessTime updates behind a flag
2016-09-27 16:02:43 +01:00
05485b46fe
feat(security): record event names and ip addresses for important events
2016-09-20 15:25:53 -07:00
8de1230387
fix(config): Remove unused URL opions from mailer config.
2016-09-08 07:26:31 +10:00
b70caedeeb
refactor(l10n): use fxa-shared locale list ( #1411 )
2016-08-16 10:55:34 -04:00
d44cb56636
fix(config): Added new url configs for mailer ( #1397 ) r=vladikoff
2016-08-05 12:49:44 -04:00
8132d55725
feat(geolocation): add geolocation data to emails ( #1334 )
2016-07-29 15:41:08 -04:00
699caa1bcf
feat(account): devices push notify endpoint
...
Fixes #1357
2016-07-26 17:34:42 -07:00
8cb651ec8d
refactor(openid): remove openid login support
...
Fixes #1336
2016-07-12 14:48:45 -04:00
10ee3224f2
feat(signin): Add support for keyFetchToken verification ( #1320 ), r=@rfk
...
This allows sign-in confirmation to work correctly on Fennec
and iOS devices.
2016-07-12 10:08:17 -04:00
3bb1e0a1d7
Merge pull request #1318 from mozilla/drop-invalid-flow-ids
...
feat(metrics): Drop invalid flowids so they dont confuse our metrics.
2016-07-01 15:36:51 +10:00
bc9d79d7a7
docs(config): clarify sample rate for sign in confirmation ( #1315 ) r=vladikoff
2016-06-30 13:38:32 -04:00
8827b91c85
feat(metrics): Drop invalid flowids so they dont confuse our metrics.
2016-06-30 15:30:40 +10:00
ace64e7071
feat(server): emit new activity events for kpi dashboards
...
r=rfk
2016-06-27 11:02:10 +01:00
33301c5b8f
fix(config): improve sign-in confirmation email regex
2016-06-20 12:06:28 +01:00
Sean McArthur
Phil Booth
Edouard Oger
Ryan Kelly
Vlad Filippov
Vijay Budhram
Ryan Kelly
Vijay Budhram
John Morrison
Sai Prashanth Chandramouli