00ce76f9c5
fix: Allow spaces/special chars in application names
...
closes #534
2020-11-03 15:15:16 +01:00
9c384dfae7
feat: Allow migration style import ( #645 )
2020-11-03 14:56:07 +01:00
3c860d7bce
fix: constriants must have at least one value defined
...
closes #640
2020-10-30 16:40:29 +01:00
4f3a94cb86
fix: do not allow empty ('') constrain values.
...
related #640
2020-10-30 10:31:58 +01:00
24347adbfb
fix: context legalValues should be at max 100 chars
2020-10-04 20:36:40 +02:00
c65f7c27ee
fix: enable trust-proxy
2020-10-02 16:40:42 +02:00
cd25078792
fix: upgrade cookie-session library
2020-10-02 16:38:51 +02:00
34a7c2b244
fix: default maxAge for session set to two days
...
Unleash will now extend the session once every hour as long as
the user keeps the browser tab open within two days.
2020-10-02 16:34:16 +02:00
ce0c66d127
fix: add TTL to sessions
2020-10-02 16:32:05 +02:00
ef5b67974d
fix: use validated and stripped data when updating
2020-10-01 22:40:47 +02:00
192c292ecf
fix: should use stripped update data for featureToggle
2020-10-01 22:34:28 +02:00
0121a0e207
fix: set clear-site-data on logout
2020-10-01 21:57:33 +02:00
5a58c2ea3f
fix: use secure proxy to session cookie
2020-10-01 21:53:37 +02:00
51f26be759
fix: add secureHeaders option for HSTS
2020-10-01 21:47:40 +02:00
0204a52d9b
fix: failing tests for 409
2020-09-25 22:31:35 +02:00
1e26c64912
fix: Name conflict should return 409
...
closes #509
2020-09-25 22:14:31 +02:00
2ce9b4e0c3
fix: Add option via env for ADMIN_AUTHENTICATION
...
closes #626
2020-09-25 21:35:34 +02:00
4a3c136167
feat: Remove applications ( #635 )
2020-09-25 09:39:12 +02:00
6f41332055
fix: update helmet config
2020-09-18 11:52:54 +02:00
8ac4a243b2
Fix/upgrade knex ( #630 )
2020-09-18 09:05:09 +02:00
7ac134312f
fix: helmet wap csp in quotes
2020-09-07 09:52:49 +02:00
bf42fa135d
fix: lax helmet csp config for styles.
...
Required to support react-selct, see
https://github.com/JedWatson/react-select/issues/2917
2020-09-07 09:23:59 +02:00
a870c12138
fix: add optional helmet security headers
...
Allow users to enable the helmet middleware to enable
security headers by default.
https://github.com/helmetjs/helmet
2020-09-01 21:21:26 +02:00
83dda55172
feat: add stale property on toggle ( #619 )
2020-08-07 10:46:35 +02:00
6568457ed8
feat: Add support for toggle types ( #618 )
2020-08-06 11:18:52 +02:00
1bb0d03855
fix: version should be part of ui-config ( #616 )
2020-08-03 13:34:10 +02:00
e42337e523
feat: add weightType as legal property on variant schema ( #614 )
2020-08-03 13:24:51 +02:00
acc674c0e7
fix: replace @hapi/joi with joi
2020-07-31 22:15:09 +02:00
91eab0550c
fix: exporting only feature toggles as yaml should not crash
...
fixes #615
2020-07-30 23:57:17 +02:00
58f36d03ea
fix: add keepAliveTimeout option
2020-07-13 21:40:22 +02:00
d2a3e72bd8
Feat: Adds server.create() ( #606 )
2020-06-17 08:03:02 +02:00
04b416bdd7
fix: add 'options' field to AuthenticationRequired
2020-05-14 22:32:33 +02:00
5675f99e78
fix: add user-store ( #590 )
2020-05-12 23:05:26 +02:00
5600b3fd61
fix: we are not ready for node 14
2020-05-02 09:12:36 +02:00
770336e181
fix: add missing await for node 14
2020-05-02 09:00:08 +02:00
7599553a90
fix: stop measure responsetime for unknown paths ( #591 )
2020-04-30 23:04:06 +02:00
924edc8109
fix: expose evaluated config and permissions object
...
To make it easier to extend unleash we should expose
evaluated configuration.
2020-04-28 08:20:29 +02:00
bf7a246707
fix: user should not crash if email is missing
2020-04-28 08:17:04 +02:00
2c90d3fbff
chore: reduce log-level for metrics
2020-04-19 20:57:54 +02:00
562321175d
fix: add users-table to store user details ( #586 )
2020-04-19 20:51:15 +02:00
1e9db236c4
fix: Support proper SSL settings using DATABASE_SSL ( #585 )
...
As described in https://node-postgres.com/features/ssl , `ssl` is an object which will be passed to Node TLS socket.
Also:
```
(node:1) DeprecationWarning: Implicit disabling of certificate verification is deprecated and will be removed in pg 8. Specify `rejectUnauthorized: true` to require a valid CA or `rejectUnauthorized: false` to explicitly opt out of MITM protection.
```
This change makes it possible to configure accepted SSL CA certificate, or to accept self-signed certificate.
2020-04-18 16:29:05 +02:00
d01c9d2dac
fix: use airbnb lint rules directly ( #583 )
...
This drops usage of finn-eslint rules as they are no
longer maintained.
2020-04-14 22:29:11 +02:00
636270b54e
fix: upgrade ava to version 3.7.0
...
closes #552
2020-04-13 22:53:06 +02:00
e42b0c7801
feat: Update "enableLegacyRoutes" to false ( #580 )
...
Defining "enableLegacyRoutes" as "true" is less secure than setting it to "false" by default, according to the documentation in "Securing Unleash" (https://unleash.github.io/docs/securing_unleash ).
2020-04-13 22:43:14 +02:00
b912768923
feat: move secrets to settings ( #577 )
...
* feat: move secrets to settings
* feat: Add better support for detailed db options.
Added db field in options to allow better control of
db-options. Especially important to allow special chars
in database password which might lead to an invaid url
when defined as a database-url.
* fix: integrate logger with knex logger
* fix: remove secret option from all examples
* fix: more options.js unit tests
* fix: added settings-store e2e tests
2020-04-13 22:38:46 +02:00
333601eaea
fix: Logout should not be xhr call ( #576 )
...
closes #520
2020-03-29 22:22:19 +02:00
aac12fbee8
fix: metrics for toggle count and version ( #565 )
2020-02-28 14:50:32 +01:00
7a410508cb
feat: api supports context fields ( #564 )
...
* feat: api supports context fields
* fix: typo for cotnext group in event-differ
2020-02-27 21:26:18 +01:00
2a1bcdf937
fix: failing user.test on gravatar url
2020-02-21 23:26:44 +01:00
93aa34256e
fix: use gravatar-url instead of gravatar dep
2020-02-21 23:20:06 +01:00
Ivar Conradi Østhus