fxa-customs-server/CHANGELOG

120 строки
4.5 KiB
Plaintext

v0.72.0
* fix(blocklist): Convert date to milliseconds for file comparison (#143); r=rfk
* feat(blocklist): Add latest firehol sample list (#144); r=rfk
* fix(logging): Don't attempt to log a 'msg' field.
* chore(config): Don't set allow ALLOWED_IPS by default. (#138); r=jrgm
* chore(lint): Fix up some linty issues noticed in PR review.
* feat(requestChecks): Backport "requestChecks" framework from private repo.
* fix(unblock): Return `unblock` value for IPs on a blocklist
v0.71.0
* feat(unblock): add unblock rate limits (#131)
* fix(dependencies): update restify to 4.1.1 (#135)
* feat(verify-code): Add rate-limiting of code verification attempts. (#132)
* fix(settings): Fix reloading of nested settings from mecmached (#133)
* feat(blocklist): Add IP blocklist module (#117)
v0.68.0
* feature(newrelic): add optional newrelic integration
v0.66.0
* feat(server): Remove account lockout
* feat(server): Remove `badLoginLockout` config and EmailRecord.lf (loginFailure) related code.
* fix(tests): add coveralls and enforce coverage
v0.64.0
* chore(travis): drop node 0.12
v0.61.0
* feat(email): Add config option to avoid blocking certain email domains
* feat(scripts): added admin scripts: block-ip and customs-info
v0.60.1
* feat(ip): Count IP rate limits based on unique emails only.
v0.60.0
* some *sharp* tools for updating the configs in memcache
* feat(config): Allow config to be udpated via memcached
* chore(deps): updated deps
* fix(ip): Pass updated config params to ip_record in the ban-handling script.
* fix(ip): Be less aggressive about extending IP rate-limit duration.
* feat(login): Allow different bad-login errnos to have different weights.
* fix(ip): Don't rate-limit email sending based on IP address alone.
* fix(ips): Add ALLOWED_IPS environment variable for config.
* feat(ip): Add config option for list of allowed ips.
* feat(iprecord): record errno and ratelimit when errno is 102
* fix(blocking): Send block for all requests if memcache is down
* fix(lifetime): ensure memcache lifetime is set in more places
* fix(lifetime): Ensure records are written with sufficient ttls in memcache.
* fix(logins): combine limiting for bad logins and rate
* feat(logins): Count rate-limited login attempts as failed logins.
* fix(check): Include more action names in various checks.
* fix(config): add more config to ip rate limits
* fix(lock): add ip lock test
* block bad logins per ip
* fix(style): Fix some typos
0.57.0
* feat(api): Add check account status # 99
* fix(config): restore top-level "config" dir for $(NODE_ENV).json files. #100
* refactor(lib): Put all the code inside a "lib" subdirectory. #98
0.55.0
* chore(docs): remove misleading reference to awsbox #95
* fix(travis): build and test on 0.10, 0.12 and 4.x #94
* fix(build): add grunt-nsp #93
* fix(travis): remove broken validate-shrinkwrap #92
0.45.0
* chore(version): generate legacy-format output for ./config/version.json - #90
* chore(travis): Tell Travis to use #fxa-bots - #88
* chore(build): Replace JSHint with ESLint - #87
0.39.0
* chore(config): Update convict and switch on strict validation - #85
* chore(license): Update license to be SPDX compliant - #82
* chore(shrinkwrap): update ass to what other modules use; update shrinkwrap - #86
0.36.0
* chore(travis): build/test on 0.10, 0.12, and iojs
* chore(travis): quiet validate-shrinkwrap failure on security warning on module - #81
0.34.0
* fix(release): add tasks "grunt version" and "grunt version:patch" to create release tags
* fix(tests): files were not being linted; so now, make jshint happy
* chore(shrinkwrap): update shrinkwrap
0.33.0
* Add separate timer and config for badLoginLockoutInterval - #75
* Various code-structure and documentation cleanups - #71, #74, #78
0.6.0
* Add more logging when handling sqs ban events - #73
0.5.0
* Block all actions for emails that are explicitly banned - #70
0.4.0
* Validation errors should return 400 errors, not 500 - #68
* Document the current blocking and rate-limiting policies - #63
0.3.0
* Add support for account lockout on excessive login attempts - #58, #60
* normalize email addresses (compare the lower case values) - #59, #62
0.2.0
* update request and restify for new qs module
* update ass version
* use npm shrinkwrap
0.1.1
* Remove redundant memcache.host and memcache.port settings
* expose all configuration settings to the environment; add option memcache.address to work with previous puppet settings
* removing npm spinner from travis logs
0.1.0
* init