mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-09-19 15:38:48 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
1211 commits 36 branches 47 tags 158 MiB
Commit graph

1211 commits

This branch
This branch
All branches
Author SHA1 Message Date
renovate[bot]
d8313d83d0
chore(deps): update dependency mkdocs-material to v8.1.5 (#1964) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-09 15:46:31 +00:00
renovate[bot]
c58011c0c2
fix(deps): update dependency @nestjs/config to v1.1.6 (#1961) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-08 04:32:35 +00:00
renovate[bot]
7a07c2dea9
chore(deps): update dependency jest to v27.4.7 (#1960) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-08 04:24:31 +00:00
renovate[bot]
2851334deb
chore(deps): update dependency eslint-plugin-import to v2.25.4 (#1959) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-08 04:15:52 +00:00
renovate[bot]
d2b5910d2c
chore(deps): update dependency @types/node to v16.11.19 (#1958) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-08 02:03:41 +00:00
Erik Michelson
820a1ae43a
Rename local password check method 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2022-01-03 23:41:34 +01:00
Erik Michelson
277e2fb1ca
feat(auth): password change requires old password 
By checking the "old" password of the user prior to a password change, the
password change function is more secured against abuse.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2021-12-28 01:46:40 +01:00
Erik Michelson
20b0ded223
refactor(frontend-config): return auth providers as array 
This change removes the customAuthNames property and redefines the
authProviders property of the frontend-config DTO. Instead of an
map from auth providers to their enabled-state (boolean), there is
now an array that just includes the configured auth providers while
also having the identifier and providerName of custom auth providers.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2021-12-28 01:16:42 +01:00
David Mehren
dcfb00adc1
refactor(identity): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 22:10:59 +01:00
David Mehren
3539216cf3
refactor(user): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 22:03:41 +01:00
David Mehren
16c9d6c011
refactor(session): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 21:49:29 +01:00
David Mehren
5f87406809
refactor(revision): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 21:38:36 +01:00
David Mehren
4e70044a2c
refactor(edit): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 19:58:01 +01:00
David Mehren
7f7886c5a7
docs(permissions): document why we can't lazy-load 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 19:32:31 +01:00
David Mehren
d7aaf736a2
refactor(tag): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-05 19:06:05 +01:00
David Mehren
235e4f647c
refactor(note): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-30 16:46:07 +01:00
David Mehren
d761ff7f4f
refactor(alias): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-18 18:53:39 +01:00
David Mehren
296d73c121
refactor(media-upload): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-18 18:47:12 +01:00
David Mehren
4d57105853
docs(history-entry): document why we can't lazy-load 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-18 18:08:29 +01:00
David Mehren
0c5fdf4201
refactor(group): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-16 19:05:28 +01:00
David Mehren
5d7b544e1f
refactor(author): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-16 18:45:40 +01:00
David Mehren
de6d75238c
refactor(auth-token): lazy-load relations 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-11-16 18:39:52 +01:00
renovate[bot]
b25e6fc365
chore(deps): update dependency mkdocs-material to v8.1.4 (#1948) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-02 14:07:03 +00:00
Renovate Bot
60ccfb80b0
chore(deps): update dependency eslint to v8.6.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2022-01-02 00:14:55 +00:00
Renovate Bot
6f4343461f
fix(deps): update dependency rxjs to v7.5.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2022-01-02 00:15:16 +00:00
Renovate Bot
c0d300b023
chore(deps): update dependency @types/jest to v27.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2022-01-02 00:14:36 +00:00
renovate[bot]
29bdc4f19b
chore(deps): update dependency eslint-plugin-jest to v25.3.4 (#1946) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-02 00:13:03 +00:00
renovate[bot]
53e408c5ac
chore(deps): update dependency eslint-plugin-jest to v25.3.3 (#1941) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-01 08:32:54 +00:00
Renovate Bot
0be939ee60
chore(deps): lock file maintenance 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-12-27 19:28:45 +00:00
Renovate Bot
92069023ae
chore(deps): update linters to v5.8.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-12-27 19:15:06 +00:00
renovate[bot]
98fa933096
chore(deps): update definitelytyped (#1929) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-25 02:49:05 +00:00
Chasethechicken
5b8b731004
Correct documentation on how to access Hedgedoc 
Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-21 10:37:11 +01:00
Chasethechicken
ec4d539c99
Apply suggestions from code review 
Use real backend by default.
Start server with NODE_ENV set to development mode.

Co-authored-by: David Mehren <git@herrmehren.de>
Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-15 22:22:11 +01:00
Falk Rehse
30ab3e3831
Improve wording 
Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-14 11:53:26 +01:00
Chasethechicken
9af0d85879
Remove paragraph about development setup 
As this is documented in dev/getting-started.md

Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-14 11:38:43 +01:00
Chasethechicken
c61b4bdbf2
Add note about proxy 
Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-14 11:37:37 +01:00
Chasethechicken
19bd892c69
Remove section about production deployments 
As this is meant to document a development setup.

Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-12-14 11:37:12 +01:00
Chasethechicken
6a1704a45b
Add Docs for getting started with 2.0 
This page describes how to set up HedgeDoc 2 for local development.

Signed-off-by: Falk Rehse <neuringe1234@gmail.com>
 2021-10-31 00:56:54 +02:00
renovate[bot]
c41e4ba581
chore(deps): lock file maintenance (#1925) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-20 02:40:27 +00:00
renovate[bot]
1c010ce3c2
chore(deps): update dependency mkdocs-material to v8.1.3 (#1922) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-19 15:10:41 +00:00
Renovate Bot
25313c4e79
fix(deps): update dependency swagger-ui-express to v4.3.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 11:11:02 +00:00
Renovate Bot
477849b6b2
chore(deps): update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 11:10:45 +00:00
renovate[bot]
52d1ad1cd3
fix(deps): update dependency passport to v0.5.2 (#1915) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 11:09:08 +00:00
renovate[bot]
7ae368940d
chore(deps): update test packages (#1914) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 10:46:31 +00:00
renovate[bot]
fe28317ad8
chore(deps): update nestjs packages (#1913) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 10:33:51 +00:00
renovate[bot]
019f761dea
chore(deps): update dependency typescript to v4.5.4 (#1912) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 08:50:08 +00:00
renovate[bot]
80b3b50a40
chore(deps): update dependency mkdocs-material to v8.1.2 (#1911) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 05:33:39 +00:00
renovate[bot]
345c5f80d7
chore(deps): update dependency @types/node to v16.11.14 (#1910) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-18 03:48:12 +00:00
David Mehren
708ae86444
docs: explain the choice of sha-512 for auth tokens 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-14 19:21:28 +01:00
David Mehren
b4a65b47f0
fix(auth): use sha-512 for auth tokens 
Bcrypt hashes are too slow to be validated on every request.
As our tokens are random and have a fixed length, it is reasonable
to use SHA-512 instead.

SHA-512 is recommended as cryptographically strong by the BSI:
https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf?__blob=publicationFile

Fixes https://github.com/hedgedoc/hedgedoc/issues/1881

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-12-09 23:04:00 +01:00