2016-04-20 06:28:03 +03:00
|
|
|
|
2016-07-28 04:08:44 +03:00
|
|
|
v0.66.0
|
|
|
|
|
* feat(server): Remove account lockout
|
|
|
|
|
* feat(server): Remove `badLoginLockout` config and EmailRecord.lf (loginFailure) related code.
|
|
|
|
|
* fix(tests): add coveralls and enforce coverage
|
|
|
|
|
|
2016-06-22 04:15:10 +03:00
|
|
|
v0.64.0
|
|
|
|
|
* chore(travis): drop node 0.12
|
|
|
|
|
|
2016-05-09 01:25:32 +03:00
|
|
|
v0.61.0
|
|
|
|
|
* feat(email): Add config option to avoid blocking certain email domains
|
|
|
|
|
* feat(scripts): added admin scripts: block-ip and customs-info
|
|
|
|
|
|
2016-04-20 06:28:03 +03:00
|
|
|
v0.60.1
|
|
|
|
|
* feat(ip): Count IP rate limits based on unique emails only.
|
|
|
|
|
|
|
|
|
|
v0.60.0
|
|
|
|
|
* some *sharp* tools for updating the configs in memcache
|
|
|
|
|
* feat(config): Allow config to be udpated via memcached
|
|
|
|
|
* chore(deps): updated deps
|
|
|
|
|
* fix(ip): Pass updated config params to ip_record in the ban-handling script.
|
|
|
|
|
* fix(ip): Be less aggressive about extending IP rate-limit duration.
|
|
|
|
|
* feat(login): Allow different bad-login errnos to have different weights.
|
|
|
|
|
* fix(ip): Don't rate-limit email sending based on IP address alone.
|
|
|
|
|
* fix(ips): Add ALLOWED_IPS environment variable for config.
|
|
|
|
|
* feat(ip): Add config option for list of allowed ips.
|
|
|
|
|
* feat(iprecord): record errno and ratelimit when errno is 102
|
|
|
|
|
* fix(blocking): Send block for all requests if memcache is down
|
|
|
|
|
* fix(lifetime): ensure memcache lifetime is set in more places
|
|
|
|
|
* fix(lifetime): Ensure records are written with sufficient ttls in memcache.
|
|
|
|
|
* fix(logins): combine limiting for bad logins and rate
|
|
|
|
|
* feat(logins): Count rate-limited login attempts as failed logins.
|
|
|
|
|
* fix(check): Include more action names in various checks.
|
|
|
|
|
* fix(config): add more config to ip rate limits
|
|
|
|
|
* fix(lock): add ip lock test
|
|
|
|
|
* block bad logins per ip
|
|
|
|
|
* fix(style): Fix some typos
|
|
|
|
|
|
2016-03-01 08:16:07 +03:00
|
|
|
0.57.0
|
|
|
|
|
* feat(api): Add check account status # 99
|
|
|
|
|
* fix(config): restore top-level "config" dir for $(NODE_ENV).json files. #100
|
|
|
|
|
* refactor(lib): Put all the code inside a "lib" subdirectory. #98
|
|
|
|
|
|
2016-01-31 04:33:24 +03:00
|
|
|
0.55.0
|
|
|
|
|
* chore(docs): remove misleading reference to awsbox #95
|
|
|
|
|
* fix(travis): build and test on 0.10, 0.12 and 4.x #94
|
|
|
|
|
* fix(build): add grunt-nsp #93
|
|
|
|
|
* fix(travis): remove broken validate-shrinkwrap #92
|
|
|
|
|
|
2015-09-13 05:02:24 +03:00
|
|
|
0.45.0
|
|
|
|
|
* chore(version): generate legacy-format output for ./config/version.json - #90
|
|
|
|
|
* chore(travis): Tell Travis to use #fxa-bots - #88
|
|
|
|
|
* chore(build): Replace JSHint with ESLint - #87
|
|
|
|
|
|
2015-06-11 01:53:23 +03:00
|
|
|
0.39.0
|
|
|
|
|
* chore(config): Update convict and switch on strict validation - #85
|
|
|
|
|
* chore(license): Update license to be SPDX compliant - #82
|
|
|
|
|
* chore(shrinkwrap): update ass to what other modules use; update shrinkwrap - #86
|
2016-01-31 04:33:24 +03:00
|
|
|
|
2015-04-28 05:46:04 +03:00
|
|
|
0.36.0
|
|
|
|
|
* chore(travis): build/test on 0.10, 0.12, and iojs
|
|
|
|
|
* chore(travis): quiet validate-shrinkwrap failure on security warning on module - #81
|
|
|
|
|
|
2015-04-02 22:35:27 +03:00
|
|
|
0.34.0
|
|
|
|
|
* fix(release): add tasks "grunt version" and "grunt version:patch" to create release tags
|
|
|
|
|
* fix(tests): files were not being linted; so now, make jshint happy
|
|
|
|
|
* chore(shrinkwrap): update shrinkwrap
|
2016-01-31 04:33:24 +03:00
|
|
|
|
2015-03-17 05:54:44 +03:00
|
|
|
0.33.0
|
|
|
|
|
* Add separate timer and config for badLoginLockoutInterval - #75
|
|
|
|
|
* Various code-structure and documentation cleanups - #71, #74, #78
|
|
|
|
|
|
|
|
|
|
0.6.0
|
|
|
|
|
* Add more logging when handling sqs ban events - #73
|
|
|
|
|
|
2014-10-21 23:01:34 +04:00
|
|
|
0.5.0
|
|
|
|
|
* Block all actions for emails that are explicitly banned - #70
|
|
|
|
|
|
2014-10-07 03:59:26 +04:00
|
|
|
0.4.0
|
|
|
|
|
* Validation errors should return 400 errors, not 500 - #68
|
|
|
|
|
* Document the current blocking and rate-limiting policies - #63
|
|
|
|
|
|
2014-09-23 19:56:20 +04:00
|
|
|
0.3.0
|
|
|
|
|
* Add support for account lockout on excessive login attempts - #58, #60
|
|
|
|
|
* normalize email addresses (compare the lower case values) - #59, #62
|
|
|
|
|
|
2014-08-12 02:10:40 +04:00
|
|
|
0.2.0
|
|
|
|
|
* update request and restify for new qs module
|
|
|
|
|
* update ass version
|
|
|
|
|
* use npm shrinkwrap
|
|
|
|
|
|
2014-08-03 08:24:40 +04:00
|
|
|
0.1.1
|
|
|
|
|
* Remove redundant memcache.host and memcache.port settings
|
|
|
|
|
* expose all configuration settings to the environment; add option memcache.address to work with previous puppet settings
|
|
|
|
|
* removing npm spinner from travis logs
|
|
|
|
|
|
2014-08-01 01:54:25 +04:00
|
|
|
0.1.0
|
|
|
|
|
* init
|
