mozilla
/
fxa
зеркало из https://github.com/mozilla/fxa.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
fxa/packages/fxa-customs-server/CHANGELOG.md

57 KiB
Исходник Ответственный История

Deprecation notice

Changes are now documented at https://github.com/mozilla/fxa/releases

1.236.1

No changes.

1.236.0

No changes.

1.235.2

No changes.

1.235.1

No changes.

1.235.0

No changes.

1.234.2

No changes.

1.234.1

No changes.

1.234.0

Other changes

1.233.1

No changes.

1.233.0

Other changes

  • deps-dev: bump tap from 16.0.1 to 16.2.0 (aed87d3e46)
  • deps: bump grunt from 1.5.2 to 1.5.3 (5c0afda1da)
  • deps: bump @hapi/hoek from 9.3.0 to 10.0.0 (23ec046a7b)

1.232.5

No changes.

1.232.4

No changes.

1.232.3

No changes.

1.232.2

No changes.

1.232.1

No changes.

1.232.0

No changes.

1.231.4

No changes.

1.231.3

No changes.

1.231.2

No changes.

1.231.1

No changes.

1.231.0

Other changes

  • deps-dev: bump tap from 16.0.0 to 16.0.1 (759ee6a82)
  • deps: bump grunt from 1.4.1 to 1.5.2 (37611e619)
  • deps: bump convict from 6.2.1 to 6.2.2 (f8237797a)
  • deps: bump @google-cloud/pubsub from 2.18.4 to 2.19.0" (f8293253d)

1.230.5

No changes.

1.230.4

No changes.

1.230.3

No changes.

1.230.2

No changes.

1.230.1

Other changes

  • deps: bump @google-cloud/pubsub from 2.18.4 to 2.19.0" (f3b198b17)

1.230.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.18.4 to 2.19.0 (5e37ff89b4)
  • all: Change default sentry trace sample rate to 0 (8b4079c665)

1.229.2

Other changes

  • all: Change default sentry trace sample rate to 0 (34cc815199)

1.229.1

No changes.

1.229.0

Other changes

1.228.7

No changes.

1.228.6

No changes.

1.228.5

No changes.

1.228.4

No changes.

1.228.3

No changes.

1.228.2

No changes.

1.228.1

No changes.

1.228.0

Other changes

  • deps-dev: bump chai from 4.3.4 to 4.3.6 (#12091) (df319de11)
  • deps-dev: bump tap from 15.0.10 to 16.0.0 (#12116) (cdefad6b4)

1.227.1

No changes.

1.227.0

No changes.

1.226.4

No changes.

1.226.3

No changes.

1.226.2

No changes.

1.226.1

No changes.

1.226.0

No changes.

1.225.3

No changes.

1.225.2

No changes.

1.225.1

No changes.

1.225.0

No changes.

1.224.4

No changes.

1.224.3

No changes.

1.224.2

No changes.

1.224.1

No changes.

1.224.0

No changes.

1.223.2

Other changes

  • deps: switch from git to https for deps (#11587) (2611a980d)

1.223.1

No changes.

1.223.0

No changes.

1.222.0

New features

  • fxa-shared: Allows sentry events for critical endpoints to be 'tagged' as such. Because: (6abd9bd3e)

Other changes

  • deps: bump @sentry/node from 6.15.0 to 6.16.1 (d6e82ae9c)
  • customs: skip flaky customs test (#11321) (b898e147d)
  • deps: bump @google-cloud/pubsub from 2.18.3 to 2.18.4 (be1c262aa)

1.221.3

No changes.

1.221.2

No changes.

1.221.1

No changes.

1.221.0

No changes.

1.220.5

No changes.

1.220.4

No changes.

1.220.3

No changes.

1.220.2

No changes.

1.220.1

No changes.

1.220.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.18.2 to 2.18.3 (#11124) (90d5db79e)
  • ci: slow down pm2 startup (#11084) (a62532cc5)
  • deps: Update yarn to 3.1.0 and dedupe deps. fix resolve conflicts (#11072) (c72a1a003)
  • deps: bump @sentry/node from 6.14.3 to 6.15.0 (#11036) (cb0f09d41)
  • deps: bump @sentry/node from 6.14.1 to 6.14.3 (#11020) (507aef4b4)
  • deps: bump @google-cloud/pubsub from 2.18.1 to 2.18.2 (#10975) (7823787d7)

1.219.5

No changes.

1.219.4

No changes.

1.219.3

No changes.

1.219.2

No changes.

1.219.1

No changes.

1.219.0

Other changes

  • deps: bump @sentry/node from 6.13.3 to 6.14.1 (#10943) (bff4cedc9)

1.218.9

No changes.

1.218.8

No changes.

1.218.7

No changes.

1.218.6

No changes.

1.218.5

No changes.

1.218.4

No changes.

1.218.3

No changes.

1.218.2

No changes.

1.218.1

Bug fixes

  • customs: limit totp verification by email (c5912899c)

1.218.0

Other changes

  • deps-dev: bump grunt-eslint from 23.0.0 to 24.0.0 (574aa2f24)
  • deps: bump convict from 6.2.0 to 6.2.1 (ef7842bc0)
  • node: upgrade to node 16 (#10799) (17e06a38d)

1.217.2

No changes.

1.217.1

No changes.

1.217.0

Other changes

  • deps: bump @hapi/hapi from 20.2.0 to 20.2.1 (#10689) (2455f998b)
  • deps: updated dependencies (#10638) (f57031d15)
  • deps: bump @hapi/hapi from 20.1.5 to 20.2.0 (#10579) (4d02a92e8)
  • deps: bump @sentry/node from 6.12.0 to 6.13.2 (#10583) (cb19efb3c)

1.216.3

No changes.

1.216.2

No changes.

1.216.1

No changes.

1.216.0

Other changes

  • deps: update pm2; dedupe (#10557) (89e549a74)
  • deps: bump @google-cloud/pubsub from 2.17.0 to 2.18.1 (#10539) (525a929bc)
  • deps-dev: bump walk from 2.3.14 to 2.3.15 (1383850dd)

1.215.2

No changes.

1.215.1

No changes.

1.215.0

Other changes

  • deps: bump @sentry/node from 6.11.0 to 6.12.0 (4809fc2cc)

1.214.1

No changes.

1.214.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.16.6 to 2.17.0 (41e5f714c)
  • deps: bump ip-reputation-js-client from 6.0.3 to 6.0.4 (1f111f5eb)
  • deps: bump @google-cloud/pubsub from 2.16.4 to 2.16.6 (8a9aa2ac9)

1.213.11

No changes.

1.213.10

No changes.

1.213.9

No changes.

1.213.8

No changes.

1.213.7

No changes.

1.213.6

No changes.

1.213.5

No changes.

1.213.4

No changes.

1.213.3

No changes.

1.213.2

No changes.

1.213.1

No changes.

1.213.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.16.3 to 2.16.4 (15fa76f77)
  • deps: bump @google-cloud/pubsub from 2.16.2 to 2.16.3 (f90942d76)
  • deps: bump @sentry/node from 6.10.0 to 6.11.0 (25f24a897)
  • deps: bump @google-cloud/pubsub from 2.16.1 to 2.16.2 (0b8a9c4fe)

1.212.2

No changes.

1.212.1

No changes.

1.212.0

Other changes

  • deps: bump convict from 6.1.0 to 6.2.0 (99be156b7)
  • deps: bump convict-format-with-moment from 6.0.1 to 6.2.0 (27490228a)

1.211.2

No changes.

1.211.1

No changes.

1.211.0

Other changes

  • deps: bump convict-format-with-validator from 6.0.1 to 6.2.0 (a43649dcb)
  • deps: bump @google-cloud/pubsub from 2.15.1 to 2.16.1 (a2fec2f2f)
  • deps: bump @sentry/node from 6.7.2 to 6.9.0 (10020fb87)
  • deps: bump @hapi/hapi from 20.1.4 to 20.1.5 (554160c54)

1.210.3

No changes.

1.210.2

No changes.

1.210.1

No changes.

1.210.0

No changes.

1.209.1

No changes.

1.209.0

Other changes

  • deps: update some deps (b89dc6079)
  • deps: bump @google-cloud/pubsub from 2.14.0 to 2.15.1 (e9e34f07f)
  • deps: bump bl from 4.1.0 to 5.0.0 (889edebac)
  • deps: update deps and start ignoring @types/* in dependabot (694ff5f6a)
  • deps: bump @google-cloud/pubsub from 2.12.0 to 2.14.0 (ed3fa172c)
  • deps: bump @hapi/hapi from 20.1.3 to 20.1.4 (8ed013055)
  • deps: bump @sentry/node from 6.7.0 to 6.7.1 (b78095131)
  • deps: bump @sentry/node from 6.5.1 to 6.7.0 (b6119a2c7)
  • deps: update pm2 / dedupe (5d7653fa6)

1.208.4

No changes.

1.208.3

No changes.

1.208.2

No changes.

1.208.1

No changes.

1.208.0

Other changes

1.207.1

No changes.

1.207.0

Other changes

  • deps: update some deps (6fce48032)
  • deps: added "yarn outdated" plugin + updated some deps (952e4f388)
  • deps: bump @hapi/hapi from 20.1.0 to 20.1.3 (a43fc63f4)
  • deps: bump @google-cloud/pubsub from 2.11.0 to 2.12.0 (dd9f7de46)

1.206.1

No changes.

1.206.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.10.0 to 2.11.0 (8a73e2218)
  • deps: updated pm2 (0847e2545)

1.205.0

No changes.

1.204.7

No changes.

1.204.6

No changes.

1.204.5

No changes.

1.204.4

No changes.

1.204.3

No changes.

1.204.2

No changes.

1.204.1

Bug fixes

  • release: Add changelog notes and bump version for 204 (5b8356e11)

1.204.0

No changes.

1.203.5

No changes.

1.203.4

No changes.

1.203.3

No changes.

1.203.2

No changes.

1.203.1

No changes.

1.203.0

Other changes

1.202.3

No changes.

1.202.2

No changes.

1.202.1

No changes.

1.202.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.9.0 to 2.10.0 (0a9c85b0e)

1.201.1

No changes.

1.201.0

Other changes

  • deps: bump bl from 4.0.3 to 4.1.0 (db3a3acd5)
  • deps: bump @google-cloud/pubsub from 2.8.0 to 2.9.0 (fa9bd267d)
  • deps: bump deep-equal from 2.0.4 to 2.0.5 (b0b665e6b)

1.200.0

Other changes

  • deps: bump @hapi/hapi from 20.0.1 to 20.1.0 (d3423d960f)
  • deps-dev: bump restify-clients from 2.6.9 to 3.1.0 (961ab2f2bd)

1.199.0

Other changes

  • deps: bump @sentry/node from 6.0.0 to 6.0.1 (3b6838b18)
  • deps: bump @sentry/node from 5.29.1 to 6.0.0 (147825a5b)

1.198.2

No changes.

1.198.1

Other changes

1.198.0

Other changes

  • deps: bump @google-cloud/pubsub from 2.6.0 to 2.8.0 (f9b6008f1)
  • deps: update eslint to v7 (7cf502be2)

1.197.3

No changes.

1.197.2

No changes.

1.197.1

No changes.

1.197.0

Other changes

  • deps-dev: bump tap from 14.10.8 to 14.11.0 (bdf63c835)

1.196.0

Other changes

  • deps: bump @sentry/node from 5.23.0 to 5.29.1 (0bc414ad2)

1.195.4

No changes.

1.195.3

No changes.

1.195.2

No changes.

1.195.1

No changes.

1.195.0

No changes.

1.194.0

Other changes

  • deps: bump @hapi/hapi from 19.2.0 to 20.0.1 (8e26a5845)
  • deps: bump deep-equal from 1.0.1 to 2.0.4 (2d991aac3)

1.193.1

No changes.

1.193.0

Other changes

  • deps: bump grunt from 1.1.0 to 1.3.0 (562cb5f75)
  • deps: update node version to 14 (6c2b253c1)
  • deps: bump @google-cloud/pubsub from 2.5.0 to 2.6.0 (a388488c0)

1.192.0

Other changes

  • deps-dev: bump grunt-cli from 1.2.0 to 1.3.2 (352f6e2d1)
  • deps: Remove unused npmshrink dev dep (38485f907)
  • deps-dev: bump npmshrink from 1.0.1 to 2.0.0 (67c4025d0)

1.191.1

No changes.

1.191.0

Other changes

  • deps: bump @google-cloud/pubsub from 1.7.3 to 2.5.0 (4a7f10cfe)

1.190.1

No changes.

1.190.0

No changes.

1.189.1

No changes.

1.189.0

Other changes

  • deps-dev: bump tap from 14.10.7 to 14.10.8 (6cc6c7d89)
  • monorepo: move deps to correct sub-packages (a8cc232b9)

1.188.1

No changes.

1.188.0

Other changes

  • deps: bump ip-reputation-js-client from 6.0.0 to 6.0.1 (f5b6c0eeb)

1.187.3

No changes.

1.187.2

No changes.

1.187.1

No changes.

1.187.0

New features

  • docker: publish fxa-mono docker image (2742c1d07)

1.186.2

No changes.

1.186.1

No changes.

1.186.0

Other changes

  • deps: update yarn version and root level deps (da2e99729)

1.185.1

No changes.

1.185.0

Other changes

1.184.1

No changes.

1.184.0

No changes.

1.183.1

No changes.

1.183.0

No changes.

1.182.2

No changes.

1.182.1

No changes.

1.182.0

No changes.

1.181.2

No changes.

1.181.1

No changes.

1.181.0

No changes.

1.180.1

No changes.

1.180.0

Other changes

1.179.4

No changes.

1.179.3

No changes.

1.179.2

No changes.

1.179.1

No changes.

1.179.0

No changes.

1.178.1

No changes.

1.178.0

Other changes

1.177.1

No changes.

1.177.0

Other changes

  • deps: updated dependencies (3fa952919)
  • pm2: Add ISO timestamp to pm2 log lines (2c5630adb)

1.176.0

No changes.

1.175.0

Bug fixes

  • customs: Update customs to better handle email records (b1499dd37)

Refactorings

  • customs: Update vars to checkAllowlist (bf0133e1a)

Other changes

  • README files: Fix dead links in READMEs (38624143e)

1.174.2

Bug fixes

  • customs: Update customs rules for session verify code (c5eb726cb)

1.174.1

Bug fixes

  • customs: Update customs to better handle email records (b1499dd37)

1.174.0

Bug fixes

  • local-dev: added fxa-shared and fxa-react to pm2 (c3780546b)
  • scripts: Fix the borked block-ip custom server script (f1d645bb1)

1.173.0

Bug fixes

Refactorings

  • packages: use workspace references (81575019a)

Other changes

  • deps: update some dependencies (fec460f6d)
  • format: mass reformat with prettier 2 and single config (cc595fc2b)

1.172.2

No changes.

1.172.1

No changes.

1.172.0

No changes.

1.171.1

No changes.

1.171.0

New features

  • customs: ip-reputation-js-client 6.0.0 (8aa9abc28)

Bug fixes

  • deps: Add exception for yargs-parser nsp advisory 1500 (b54877911)

1.170.3

No changes.

1.170.2

No changes.

1.170.1

Bug fixes

  • sms: Enable sms for only US/CAD at 10%, reduce default max sms to 3 (5f750ee08)

1.170.0

Bug fixes

  • docker: added Dockerfile for fxa-customs-server (fb0eb9404)

1.169.3

No changes.

1.169.2

Bug fixes

  • sms: Enable sms for only US/CAD at 10%, reduce default max sms to 3 (5f750ee08)

1.169.1

Bug fixes

  • customs: Update the route timeout level for customs server (c273cb6c6)

1.169.0

New features

  • build: add a default dockerfile template to build.sh (4dd0b0007)

Bug fixes

  • sentry: Fix sentry reporting in customs server (6352a99e6)

1.168.3

No changes.

1.168.2

No changes.

1.168.1

No changes.

1.168.0

New features

  • docker: created fxa-builder docker image (d4da8a360)

1.167.1

No changes.

1.167.0

Refactorings

  • config: replace 127.0.0.1 with localhost (1dd1b038d)
  • pm2: restructure our pm2 configs (3a054dfc3)

Other changes

  • deps: Upgrade customs server to hapi 19 (1c0fd9d6e)

1.166.2

No changes.

1.166.1

No changes.

1.166.0

Bug fixes

1.165.1

No changes.

1.165.0

New features

  • stats: Add statsd block rate reporting (b0cc46132)

1.164.1

No changes.

1.164.0

No changes.

1.163.2

No changes.

1.163.1

No changes.

1.163.0

Other changes

  • deps: Updates to address nsp advisory 1179 (a5649db18)

1.162.3

No changes.

1.162.2

No changes.

1.162.1

No changes.

1.162.0

Bug fixes

  • customs: dump out config at startup (2fff586d5)
  • tests: fix customs server test runner script and tests (f88ac8098)
  • monorepo: update default node version across packages (0f2d54071)

Refactorings

  • ci: major refactor of CircleCI workflow (7e77b0a29)

Other changes

  • cleanup: remove obsolete docker files (863e56163)
  • deps: Updates to address nsp advisory 1488 (e47bc55ba)

1.161.2

No changes.

1.161.1

No changes.

1.161.0

Bug fixes

  • customs: set config for flowIdExemptUserAgentREs to format: Array (0e8961c2a)
  • lint: Fix customs server lint issues (e5137b793)

Other changes

1.160.1

No changes.

1.160.0

No changes.

1.159.0

Bug fixes

  • docker: don't rm /tmp after npm i (6fc34fc45)

1.158.1

No changes.

1.158.0

No changes.

1.157.0

Bug fixes

  • build: Add nsp exception for cryptiles entropy issue to customs and profile servers (71fa92c23)

1.156.0

No changes.

1.155.0

Refactorings

  • git: merge all package gitignores into single root-level gitignore (a238c3d27)

1.154.0

No changes.

1.153.0

New features

  • emails: Add verify secondary email by code routes (e06b3edf3)

Other changes

  • monorepo: remove stale references to travisci (9b4789125)
  • node: updated node to v12 (7169a367e)

1.152.1

No changes.

1.152.0

Other changes

  • fxa-customs-server: update google-code/pubsub (326cae0df)

1.151.5

No changes.

1.151.4

No changes.

1.151.3

No changes.

1.151.2

No changes.

1.151.1

No changes.

1.151.0

New features

  • audit: run npm audit on push instead of in ci (ccd3c2b07)

Bug fixes

  • deps: Fix a bunch of audit warnings (f8a1da3be)

Other changes

  • deps: Remove stale nsp exceptions from .nsprc files (f7324a1b2)
  • deps: Get audit-filter working for all packages in monorepo (1b0141e2b)
  • monorepo: eslint consolidation (0a5e3950f)

1.150.9

No changes.

1.150.8

No changes.

1.150.7

No changes.

1.150.6

No changes.

1.150.5

No changes.

1.150.4

No changes.

1.150.3

No changes.

1.150.2

No changes.

1.150.1

No changes.

1.150.0

Refactorings

  • build: some random dev build changes (3c3a888a8)

1.149.4

No changes.

1.149.3

Bug fixes

  • customs: Fix ip_blocklist .netstat file parse error. (3f806570f)

1.149.2

No changes.

1.149.1

No changes.

1.149.0

Other changes

  • deps: bump csv-parse in /packages/fxa-customs-server (2b5eddd1f)

1.148.8

No changes.

1.148.7

No changes.

1.148.6

No changes.

1.148.5

No changes.

1.148.4

No changes.

1.148.3

No changes.

1.148.2

Other changes

  • release: Merge branch 'train-147' into train-148-merge-147 (66e170d45)

1.148.1

No changes.

1.148.0

New features

  • add vscode tasks for running tests and debugger (dac5e8b98)

Other changes

  • tests: Update tap to run customs server tests serially (d5be31b8c)

1.147.5

No changes.

1.147.4

No changes.

1.147.3

No changes.

1.147.2

No changes.

1.147.1

No changes.

1.147.0

New features

  • dataflow: handle new action messages from dataflow pipeline (7c6a2ed9d)

Bug fixes

  • deps: Add nsp exception to fxa-customs-server (994a80549)
  • build: npm audit fix (4839fcc5e)
  • dataflow: ensure old-format messages don't clog the queue (b10a483a5)
  • dataflow: ignore old message from dataflow queue (2dafaf378)

1.146.4

No changes.

1.146.3

No changes.

1.146.2

No changes.

1.146.1

No changes.

1.146.0

Other changes

  • deps: fxa-customs-server npm audit changes (35e53017e)
  • deps: Update @google-cloud/pubsub for node 12 compat (913e67f6b)

1.145.5

No changes.

1.145.4

No changes.

1.145.3

No changes.

1.145.2

No changes.

1.145.1

No changes.

1.145.0

Other changes

1.144.4

No changes.

1.144.3

No changes.

1.144.2

No changes.

1.144.1

No changes.

1.144.0

No changes.

1.143.4

No changes.

1.143.3

No changes.

1.143.2

No changes.

1.143.1

No changes.

1.143.0

Other changes

  • ci: Remove CI config from within packages subdir. (66990a8f4)

1.142.1

No changes.

1.142.0

Other changes

  • deps: bump lodash.merge in /packages/fxa-customs-server (713e1f98b)

1.141.8

No changes.

1.141.7

No changes.

1.141.6

No changes.

1.141.5

No changes.

1.141.4

No changes.

1.141.3

No changes.

1.141.2

Other changes

  • package: manually bump version strings to 1.141.1 (737265b25)

1.141.1

No changes.

1.141.0

Bug fixes

  • format: fixed up COTRIBUTING.md files (a0422c6ae)

Other changes

  • style: added prettier to fxa-customs-server (c64de9c20)

1.140.3

No changes.

1.140.2

No changes.

1.140.1

No changes.

1.140.0

No changes.

1.139.2

No changes.

1.139.1

No changes.

1.139.0

No changes.

1.138.4

No changes.

1.138.3

No changes.

1.138.2

No changes.

1.138.1

No changes.

1.138.0

No changes.

1.137.4

No changes.

1.137.3

No changes.

1.137.2

No changes.

1.137.1

No changes.

1.137.0

Bug fixes

  • url: base, homepage, bug url updated for all packages in package.json (cee3dc741)

1.136.6

No changes.

1.136.5

No changes.

1.136.4

No changes.

1.136.3

No changes.

1.136.2

No changes.

1.136.1

No changes.

1.136.0

No changes.

1.135.6

No changes.

1.135.5

No changes.

1.135.4

No changes.

1.135.3

No changes.

1.135.2

No changes.

1.135.1

No changes.

1.135.0

New features

  • dataflow: Log if DataFlow declares a block that FxA does not have. (5dd23db53)

Bug fixes

  • customs: Standardize the log format in fetchIPReputation (41a3f9cd5)

Other changes

  • packages: remove old release tagging scripts and docs (6f168c244)

1.134.5

No changes.

1.134.4

No changes.

1.134.3

No changes.

1.134.2

No changes.

1.134.1 (2019-04-02)

Bug Fixes

  • deps: Fix the audit warnings. (6014d75)

1.134.0 (2019-04-02)

Features

  • docker: Use node 10 to build the docker image (2b124c2)

Refactor

  • server: Extract and simplify record retreival/storage, user defined rules. (6f73c3c)

1.132.0 (2019-03-05)

Features

  • fraud-detection: Listen for DataFlow fraud detection events (ad16e74), closes #311

1.130.0 (2019-02-06)

Bug Fixes

  • logs: preserve homogeneity of more log properties (bb91ab5)

chore

  • package: update shrinkwrap (28ad6d5)

1.129.0 (2019-01-25)

Bug Fixes

  • logs: preserve homogeneity of log properties (469ca49)

1.124.0 (2018-10-30)

Bug Fixes

Features

  • deps: Add tls-shrink, remove "^" prefix on audit-filter version (fd69125), closes #280

1.123.0 (2018-10-16)

1.122.0 (2018-10-02)

1.121.0 (2018-09-18)

1.120.1 (2018-09-07)

Features

  • code: add custom rate limits for token code (cd949ae)

1.120.0 (2018-09-06)

Bug Fixes

  • deps: Remove nsp support, add npm audit support in logging only mode. (#274) r=@vladik (884909e), closes #271

Features

  • deps: Update to the newest restify. (#264) (d50ec32)

1.119.0 (2018-08-22)

1.118.1 (2018-08-14)

Bug Fixes

  • restify: set keepAliveTimeout correctly on api.server object (#267) (17a4715)
  • restify: set server.keepAliveTimeout to 120s, similar to in node6 (#266) (c10d339)

1.118.0 (2018-08-08)

Bug Fixes

  • deps: update ip-reputation-js-client to 4.1.0 (#263) r=@vladikoff (3fd7639)

1.117.0 (2018-07-24)

Features

  • ci: update to circle 2 (#260) r=@vbudhram (c346bb8)
  • code: add recoveryKeyExists to account status actions (#259) r=@vladikoff (1d7ea3b)

1.116.0 (2018-07-11)

Bug Fixes

  • circle: docker run --rm -it fxa-customs-server:build npm ls --production fxa#302 (5037ee8)

chore

  • release: Merge mozilla/train-115 into master r=@shane-tomlinson (5112862)

1.115.0 (2018-06-27)

test

  • reputation: adds compose based integration test with iprepd (#253) r=@vladikoff (458f94d)

1.114.3 (2018-06-21)

Features

  • actions: Add 'verifyRecoveryCode' as a code-checking action. (fd4a1a3)

1.114.2 (2018-06-13)

Bug Fixes

  • docker: base image node:8-alpine and upgrade to npm6 (60a9013)

1.114.1 (2018-06-13)

Bug Fixes

  • tests: fix test-local.sh bug introduced in d177360 (3590801)

1.114.0 (2018-06-13)

Bug Fixes

  • deps: Update ip rep client to v3 (#247), r=@vbudhram (c40684e)
  • deps: update ip rep client to v4 (#249) r=@vladikoff (ab1fb6e)
  • tests: remove bash builtin from test-local.sh (#250) r=@vladikoff (d177360)

1.113.0 (2018-05-30)

chore

  • ci: Remove coveralls from travis config (#246) (3a988b6)

1.112.0 (2018-05-16)

Bug Fixes

  • npm: update shrinkwrap (#241) (aaa2afb)
  • nsp: Update newrelic version (#240) r=@vladikoff (40580f1)

1.111.0 (2018-05-02)

Features

  • node: update to node 8 (#239) r=@jrgm (e8e2e45)

1.110.0 (2018-04-18)

Bug Fixes

chore

  • docs: Add documentation on tagging private releases. (#237) r=@vladikoff (2a8c180)

Features

  • totp: add totp rate limits (#233), r=@rfk (970f01e)

1.109.0 (2018-04-04)

Bug Fixes

  • node: Use Node.js v6.14.0 (#232) r=@vladikoff (de0ddc7)

chore

  • deps: update ip-reputation-js-client (#231) r=@vladikoff (abac95c)

1.108.0 (2018-03-21)

Bug Fixes

  • test: start memcached as part of 'npm test' r=@vladikoff (475bf23), closes #228

1.106.0 (2018-02-21)

Bug Fixes

  • log: fix log op s/checkAuthenticated/checkIpOnly/ (13e6af4)

chore

docs

1.103.0 (2018-01-09)

Bug Fixes

Features

  • logs: add Sentry error logs (#224) r=@vbudhram (4cbc544)
  • token: Add rate limit for tokenCodes (#225), r=@rfk (0f94081)

1.102.0 (2017-12-13)

1.101.0 (2017-11-29)

Bug Fixes

  • sms: Load allowedPhoneNumbers from memcached! (6cc0ceb)

chore

  • sms: Store allowed phone numbers in a Set (17a9459)

Features

  • sms: Add an allow list of non-rate limited phone numbers for testing. (7822603), closes #217
  • sms: Added tests for change allowedPhoneNumbers config (35c37d5)

Refactor

  • isAllowed: Add isAllowed to allowedIPs. (7951772)

1.100.0 (2017-11-15)

Bug Fixes

  • grunt: Commit new file CHANGELOG.md, not the old file CHANGELOG (e21820c)
  • newrelic: Dockerpush fix newrelic must be first (#215) r=@vladikoff (bf06c0e), closes [(#215](https://github.com/(/issues/215)
  • newrelic: newrelic native requires python, gyp, c++; update node@6.12.0 (#216) r=@vladikof (19920cc)

chore

  • build: add changelog tag (#213) r=@vbudhram (f228d27)
  • npm: update shrinkwrap command (d45d1ab)

1.98.0 (2017-10-26)

chore

  • docker: Update to node v6.11.5 for security fix (290e678)

1.92.0 (2017-07-26)

Bug Fixes

  • docs: document the dependency on memcached (#211) r=vladikoff (32f9083)
  • server: remove mozdef integration (#209) (a682ae4), closes #204

1.91.0 (2017-07-12)

Bug Fixes

  • nodejs: upgrade to 6.11.1 for security fixes (ef20449)

Features

  • node: upgrade to Node 6 (#208) (7b20330)

1.90.0 (2017-06-28)

1.89.0 (2017-06-28)

1.88.0 (2017-05-31)

Features

  • actions: add consumeSigninCode as an ACCOUNT_ACCESS_ACTION (08fca60)
  • docker: add custom feature branch (#202) r=jrgm (159d53b)

1.86.0 (2017-05-03)

Bug Fixes

  • settings: pushOnMissing no longer updates on unexpected errors (a720749), closes #194
  • sms: Add ability to rate-limit sms by email (#198), r=@rfk (e2f206c)

chore

  • deps: Update shrinkwrap (da6765a)

Features

  • emails: Add createEmail to email sending endpoints (#199) r=vladikoff (b412411), closes #180

1.85.0 (2017-04-19)

Bug Fixes

  • security: escape json output (#193) r=vladikoff (720e7de)

chore

  • docker: Use official node image & update to Node.js v4.8.2 (#196) r=vladikoff (e7dd3c1)

1.84.0 (2017-04-04)

Bug Fixes

  • tests: Correctly rate limit sms by ip address (#191), r=@rfk (2a70689)

1.83.0 (2017-03-21)

Bug Fixes

  • docs: Add notes for sms (#184), r=@shane-tomlinson (1cd55b1)
  • tests: Update config and testing for sms (#189) r=vladikoff (8fef3d1)

1.82.0 (2017-03-08)

Bug Fixes

chore

  • changelog: Update the changelog (c0434db)
  • docs: add circle ci badge to README (63f30f6)
  • package: Use ip-rep service client with keepalive enabled (#181) r=vladikoff (7c2b774)

Features

  • docker: add Docker support (#176) r=vladikoff,jbuck (b0cb1fa)

1.81.0 (2017-02-24)

Bug Fixes

  • config-set: Don't attempt to merge array-valued config items. (#171); r=jrgm (310fafb)
  • reputation: add more (positive) logging to reputation service requests (#179), r=@vbudhram (a521224)

Features

  • blocklist: Add support to specify the block level for multiple blocklists (#167), r=@rfk (14e37c3)

0.80.0 (2017-02-16)

Bug Fixes

  • startup: Exit process on any startup error. (#169), r=@rfk (7a56e8b)
  • tests: remove old code coverage tool (#173), r=@vbudhram (84d6ca4), closes #164
  • timers: Unref all the update-polling timers. (#170); r=vbudhram (c5002be)

Features

  • sms: Add support for rate-limiting sms actions (#161), r=@philbooth, @rfk (dd30b0e)

Refactor

  • tests: Add ability to debug child processes (#162), r=@rfk (7a73ca4)

0.79.0 (2017-01-25)

Bug Fixes

  • retryAfter: Round blocking periods up instead of down. (#159), r=@vbudhram (a9f1932)
  • test: increase rateLimitInterval for send_violation_tests (#157), r=@vbudhram (262c210)

Features

  • config: Merge with existing config when writing to memcache. (#151) r=vladikoff (a8f4d68)
  • ipreputation: Use IP reputation service from /check (#152), r=@vbudhram (4f5d781)

0.78.0 (2017-01-11)

Bug Fixes

  • config: remove mockmyid rate limit, add second restmail (#156); r=rfk (d61ac26)
  • docs: Add note about commit messages (#155); r=rfk (da057a2)

chore

  • shrinkwrap: add npm script for shrinkwrap (#150) r=vladikoff (e84a4be), closes #149

0.72.1 (2016-10-26)

Bug Fixes

  • ip_record: Correctly total bad logins by unique email address. (4f20fad)

0.72.0 (2016-10-19)

Bug Fixes

  • blocklist: Convert date to milliseconds for file comparison (#143); r=rfk (dfc173e)
  • logging: Don't attempt to log a 'msg' field. (01d8e3d)
  • unblock: Return unblock value for IPs on a blocklist (fa2c306)

chore

  • config: Don't set allow ALLOWED_IPS by default. (#138); r=jrgm (9545e7d)
  • lint: Fix up some linty issues noticed in PR review. (623de15)

Features

  • blocklist: Add latest firehol sample list (#144); r=rfk (9f23903)
  • requestChecks: Backport "requestChecks" framework from private repo. (5ddfcf1)

0.71.0 (2016-10-05)

Bug Fixes

Features

  • blocklist: Add blocklist module (#117), r=@rfk, @seanmonstar (029111d)
  • unblock: add unblock rate limits (#131); r=rfk (03c8c02)
  • verify-code: Add rate-limiting of code verification attempts. (#132); r=vbudhram (1dc03ef)

0.69.0 (2016-09-08)

feature

  • newrelic: add optional newrelic integration (bac4bbc)

0.67.0 (2016-08-11)

Bug Fixes

  • ip: Rate-limit all status-checking actions per IP. (9a4eaf5)

chore

  • release: Add changelog for v0.66.0 (ca57b82)
  • server: Remove some left-over references to account lockout. (#124) r=vladikoff (383412c)

Features

  • block: ip record blocks trump all other conditions (112277f)
  • server: Add uid_record and checkAuthenticated endpoint (#121) r=vladikoff,rfk (3a254c4)

Refactor

  • test: Modify test cases to use promises instead of callbacks (#123) r=vladikoff (6fadc52), closes #97

0.66.0 (2016-07-27)

Bug Fixes

  • tests: add coveralls and enforce coverage (c236800), closes #12

Features

  • server: Remove badLoginLockout config and EmailRecord.lf (loginFailure) related code. (28343cb)
  • server: Remove account lockout. (f409c6f), closes #120

0.64.0 (2016-06-22)

chore

0.61.0 (2016-05-04)

Features

  • email: Add config option to avoid blocking certain email domains (e578c26)
  • scripts: added admin scripts: block-ip and customs-info (5405ac5)

0.60.1 (2016-04-20)

0.60.0 (2016-04-19)

Bug Fixes

  • blocking: Merge and now blocks all request on server-side error (484ff0c)
  • blocking: Send block for all requests if memcache is down (721dffe)
  • blocking: Send block for all requests if memcache is down (6955b6a)
  • check: Include more action names in various checks. (a8f5892)
  • config: add more config to ip rate limits (f52d913)
  • config: update name values for ip ban (92a0008)
  • handler: add new config values to handler.js (5ca3052)
  • ip: Be less aggressive about extending IP rate-limit duration. (b8469d4)
  • ip: Don't rate-limit email sending based on IP address alone. (6c2f892)
  • ip: Pass updated config params to ip_record in the ban-handling script. (09dd129)
  • iprecord: Fix calls to IpRecord.addBadLogin (13c339a)
  • ips: Add ALLOWED_IPS environment variable for config. (4456e35)
  • lifetime: ensure memcache lifetime is set in more places (3c3c722)
  • lifetime: Ensure records are written with sufficient ttls in memcache. (5aff49c)
  • lock: add ip lock test (30f8a5d)
  • logins: add docs and simplify test (ed6790f)
  • logins: add test and adjust rate limit (8d94c1c)
  • logins: combine limiting for bad logins and rate (2f0aa17)
  • style: Fix some typos (cafe245)
  • tests: adjust config values for status check (746e9d5)
  • tests: adjust login tests (7c4de25)

chore

Features

  • config: Allow config to be udpated via memcached (8fa354a)
  • ip: Add config option for list of allowed ips. (2632ae7)
  • ip: Count IP rate limits based on unique emails only. (2773c40)
  • iprecord: record errno and ratelimit when errno is 102 (37b4a1a)
  • login: Allow different bad-login errnos to have different weights. (50c84e5)
  • logins: Count rate-limited login attempts as failed logins. (4761653)

0.57.0 (2016-03-01)

Bug Fixes

  • config: restore top-level "config" dir for $(NODE_ENV).json files. (b853875)

Features

  • api: Add check account status (4df20b8)

Refactor

  • lib: Put all the code inside a "lib" subdirectory. (493984a)

0.55.0 (2016-01-31)

Bug Fixes

  • build: add grunt-nsp (816ae95)
  • travis: build and test on 0.10, 0.12 and 4.x (4922a10)
  • travis: remove broken validate-shrinkwrap (f01517b)

chore

  • docs: remove misleading reference to awsbox (8f9c06f)

0.45.0 (2015-09-13)

chore

  • build: Replace JSHint with ESLint (dad97a5)
  • shrinkwrap: update npm-shrinkwrap (cc6444b)
  • travis: Tell Travis to use #fxa-bots (f835276)
  • version: generate legacy-format output for ./config/version.json (129d885)

0.39.0 (2015-06-10)

chore

  • config: Update convict and switch on strict validation. (d2168f9)
  • license: Update license to be SPDX compliant (237f745)
  • shrinkwrap: update ass to what other modules use; update shrinkwrap (06920e5)

0.36.0 (2015-04-28)

chore

  • travis: build/test on 0.10, 0.12, and iojs (2818e43)
  • travis: quiet validate-shrinkwrap failure on security warning on module (4b93b2b)

docs

  • changelog: changelog for train-34 (9f299cc)

0.34.0 (2015-04-02)

Bug Fixes

  • release: add tasks "grunt version" and "grunt version:patch" to create release tags (532f8c2)
  • tests: files were not being linted; so now, make jshint happy (152b7f8)

chore

  • shrinkwrap: update shrinkwrap (e9c5d91)

0.33.0 (2015-03-17)

Bug Fixes

  • config: fix units typo in default config (6befc10)

Features

  • config: Add a badLoginLockoutIntervalSeconds configuration option. (429eec1), closes #75
  • docs: Include a snipped about the memcached requirement. (2446f1a), closes #77

Older Versions

0.6.0

  • Add more logging when handling sqs ban events - #73

    0.5.0

  • Block all actions for emails that are explicitly banned - #70

    0.4.0

  • Validation errors should return 400 errors, not 500 - #68

  • Document the current blocking and rate-limiting policies - #63

    0.3.0

  • Add support for account lockout on excessive login attempts - #58, #60

  • normalize email addresses (compare the lower case values) - #59, #62

    0.2.0

  • update request and restify for new qs module

  • update ass version

  • use npm shrinkwrap

    0.1.1

  • Remove redundant memcache.host and memcache.port settings

  • expose all configuration settings to the environment; add option memcache.address to work with previous puppet settings

  • removing npm spinner from travis logs

    0.1.0

  • init