Manuel
ecf0814499
fix: authentication adapter app ID validation may be circumvented; this fixes a vulnerability that affects configurations which allow users to authenticate using the Parse Server authentication adapter for *Facebook* or *Spotify* and where the server-side authentication adapter configuration appIds is set as a string (e.g. abc) instead of an array of strings (e.g. ["abc"]) ([GHSA-r657-33vp-gp22]( https://github.com/parse-community/parse-server/security/advisories/GHSA-r657-33vp-gp22 )) ( #8185 )
2022-09-20 22:31:19 +02:00
Diamond Lewis
033a0bd443
Fix Prettier ( #7066 )
2020-12-13 11:19:04 -06:00
Florent Vilmart
d83a0b6808
Use Prettier JS ( #5017 )
...
* Adds prettier
* Run lint before tests
2018-09-01 13:58:06 -04:00
Florent Vilmart
b9673da07b
Refactor all auth adapters to reduce duplications ( #4954 )
...
* Refactor all auth adapters to reduce duplications
* Adds mocking and proper testing for all auth adapters
* Proper testing of the google auth adapter
* noit
2018-08-12 11:05:28 -04:00
Florent Vilmart
5813fd0bf8
Fix flaky tests ( #3724 )
...
* adds continuation to silence rejected promises
* Wrap json parsing
2017-04-16 16:50:03 -04:00
Arthur Cinader
4cb6e7d209
Add lint rule space-infix-ops ( #3237 )
...
Disallows: 1+1. Must be 1 + 1.
2017-01-11 12:31:40 -08:00
Florent Vilmart
c1dcaf1271
Auth Adapters refactoring ( #3177 )
...
* Moves all authentication providers to Adapter/Auth
* refactors specs
* Deprecates oauth option in favor of auth option
- Deprecates facebookAppIds option (in favor of auth.facebook.appIds)
- Adds warnings about the deprecated options
* nits
2016-12-06 14:09:43 -08:00
