Commit Graph
99 Commits
Author SHA1 Message Date
Tuan Dang a79c6227b1 Fix frontend lint issues 2023-08-28 11:25:50 +01:00
Tuan Dang f1f64e6ff5 Fix flaky regex g flag causing unexpected validation password validation issue 2023-08-28 11:08:00 +01:00
Joel Biddle a99751eb72 Moved pwd checks into a subfolder 2023-08-25 12:36:53 +10:00
Joel Biddle 4d6a8f0476 Fixed form (error messages too long). Consolidated tests & errors. Moved regexes to another file. Added regex to check for PII & reject pwd if true. Confirmed hashing & encryption/decryption works with top 50 languages, emojis etc (screen videos & unit tests to come). 2023-08-25 01:44:02 +10:00
Joel Biddle 14fc78eaaf Switched to crypto.subtle, cleaned up code, added types & properly cleared sensitive data from memory (even if error) 2023-08-24 14:01:26 +10:00
Joel Biddle 368855a44e >>> yup for email & url validation, fixed minor err in error msgs 2023-08-24 12:59:24 +10:00
Joel Biddle 7ec00475c6 +maxRetryAttempts, padding & safer error handling. Improved readability & comments. 2023-08-23 12:59:00 +10:00
Joel Biddle 25fc508d5e Fixed spelling 2023-08-23 02:56:03 +10:00
Joel Biddle ea262da505 Added check that password is not an email address 2023-08-23 02:14:22 +10:00
Joel Biddle 2960f86647 Fix comments explaining "international" password requirements 2023-08-23 01:41:37 +10:00
Joel Biddle b2888272f2 Added password criterion support for multiple languages and emojis 2023-08-23 01:27:30 +10:00
Joel Biddle e5c87442e5 Changed to use ES2018 rather than load scripts 2023-08-23 01:04:52 +10:00
Joel Biddle be08417c8b internationalize password requirements 2023-08-23 00:48:45 +10:00
Joel Biddle 61e44e152c optimised import 2023-08-22 23:47:33 +10:00
Joel Biddle 52c4f64655 Removed log and fixed comments 2023-08-22 23:36:24 +10:00
Joel Biddle 3e36adcf5c Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria. 2023-08-22 23:30:24 +10:00
Joel Biddle 1f60a3d73e fixed more error handling for password checks & translations 2023-08-22 22:42:02 +10:00
Joel Biddle 026ea29847 further fixes to password check logic 2023-08-22 20:42:07 +10:00
Joel Biddle 1242d88acb Fixed breached pwd error messages 2023-08-22 20:20:54 +10:00
Joel Biddle 0b359cd797 Made breached pwd API comments clearer 2023-08-22 19:45:35 +10:00
Joel Biddle c5ae402787 Added comments to explain breach passwords API 2023-08-22 18:14:03 +10:00
Joel Biddle 196beb8355 removed logs & added pwndpasswords.com api to CSP 2023-08-22 17:50:43 +10:00
Joel Biddle d6222d5cee attempt to fix crypto.subtle issue 2023-08-22 17:33:35 +10:00
Joel Biddle e855d4a0ba added types for crypto 2023-08-22 17:26:00 +10:00
Joel Biddle 20f34b4764 removed async in crypto.subtle 2023-08-22 17:14:18 +10:00
Joel Biddle 0eb21919fb Password breach check 2023-08-22 16:49:17 +10:00
Joel Biddle 534d96ffb6 Set max password length (100 chars) to help prevent DDOS attack 2023-08-22 14:05:00 +10:00
Tuan Dang a4edf6bd0c Remove remaining SecurityClient auth calls in favor of hooks, keep RouteGuard 2023-08-11 11:27:33 +07:00
Tuan Dang 2dba7847b6 Convert all SecurityClient API calls to hooks except auth 2023-08-10 17:19:23 +07:00
Tuan Dang b47f61f1ad Delete more deprecated frontend calls 2023-08-09 17:55:57 +07:00
Tuan Dang 2a1665a2c3 Begin marking endpoints for deprecation, clean unused frontend code 2023-08-09 16:45:52 +07:00
Tuan Dang b78150e78d Updated membership logic for SAML auth 2023-07-31 17:36:42 +07:00
Vladyslav Matsiiako 5ab218f1f8 fixed parsing .env with : 2023-07-27 19:40:39 -07:00
Vladyslav Matsiiako bdf4ebd1bc second iteration of the new sidebar 2023-07-09 23:58:27 -07:00
Tuan Dang 056f5a4555 Finish preliminary making user settings, org settings styling similar to usage and billing page 2023-06-29 17:47:23 +07:00
Vladyslav Matsiiako 12d0916625 casting to date 2023-06-22 16:25:21 -07:00
Vladyslav Matsiiako e0976d6bd6 added ? to getTime 2023-06-22 16:16:46 -07:00
Vladyslav Matsiiako a31f364361 converted date to unix 2023-06-22 16:10:54 -07:00
Vladyslav Matsiiako 8efa17928c intercom date fix 2023-06-22 15:57:20 -07:00
Vladyslav Matsiiako 48bfdd500d date format intercom 2023-06-22 15:30:21 -07:00
Vladyslav Matsiiako 4621122cfb added created timestamp to intercom 2023-06-22 15:17:11 -07:00
Vladyslav Matsiiako 62fb048cce intercom debugging 2023-06-22 15:09:02 -07:00
Vladyslav Matsiiako 0a6e8e009b intercom update 2023-06-22 14:59:55 -07:00
Vladyslav Matsiiako 7b3bd54386 intercom check 2023-06-22 13:29:26 -07:00
Tuan Dang 1cbab58d29 Merge remote-tracking branch 'origin' into stripe-error 2023-06-22 16:38:46 +07:00
Tuan Dang 28943f3b6f Finish removing Stripe from codebase 2023-06-22 16:38:02 +07:00
quinton11 8a5e655122 fix: frontend lint errors 2023-06-21 07:29:05 +00:00
quinton 9b447a4ab0 Merge branch 'main' into feat/cli-login-redirect 2023-06-21 06:47:57 +00:00
Khoa Le 9d33e4756b Add eslint rule and fix as many issues as possible 2023-06-19 23:42:04 -04:00
quinton11 dd0fdea19f fix: included mfa login flow 2023-06-16 12:58:00 +00:00