Commit Graph

52 Commits

Author SHA1 Message Date
Abdullah Atta
5ca66f5819 identity: save which platform a user signed up from
this is normalized to web, android or iOS.
Specific device information is not saved.
2023-05-22 18:23:22 +05:00
Abdullah Atta
4b67b7eedb sync: prevent multiple syncs from a single connection 2023-05-22 18:22:32 +05:00
Abdullah Atta
19056a9302 sync: detect multiple conflicting syncs
When 2 or more syncs conflict, it is necessary to adjust last synced
date to avoid data from entering a Sync Blindspot.
2023-05-22 18:22:16 +05:00
Abdullah Atta
99a7ffa6ae identity: keep all grants for 12 hours before cleaning up 2023-04-27 12:26:54 +05:00
Abdullah Atta
6f47574556 migrate to Streetwriters.IdentityServer4.KeyRack 2023-03-28 16:55:16 +05:00
Abdullah Atta
7dcda17474 identity: disable 2FA by SMS for trial users 2023-03-02 17:43:27 +05:00
Abdullah Atta
20eec79cef identity: prevent users with disposable emails from signing up
while this is not a perfect way to prevent abuse of service, we do want
to avoid getting spammed with fake accounts. Creating a valid email
account is significantly more cumbersome than using a disposable email
address.

Currently the list of blacklisted domains is extracted from
https://github.com/disposable/disposable
and it is refreshed after every 24 hours.
2023-03-02 17:43:10 +05:00
Abdullah Atta
5d5c179810 fix: fail by default if user has no 2fa method but is using a recovery code 2023-02-14 19:51:07 +05:00
Abdullah Atta
061a07120c fix: mfa recovery codes not working due to dual otp & recovery code checks 2023-02-14 18:02:17 +05:00
Abdullah Atta
c560f2ac5f identity: use Quartz.NET for token cleanup 2023-01-24 15:34:18 +05:00
Abdullah Atta
f38e61d58f global: update copyright year to 2023 2023-01-16 13:33:47 +05:00
Abdullah Atta
40ea0ab6b6 identity: add automatic expired token cleanup in prod 2023-01-16 13:30:34 +05:00
Abdullah Atta
ad03e9d6f0 identity: add support for infinite sliding refresh tokens
this fixes a lot of unexpected session expiry issues.
2023-01-16 13:30:12 +05:00
Abdullah Atta
16e370855f common: always use http server url for internal use 2023-01-16 13:29:35 +05:00
Abdullah Atta
a14ccfadce identity: better handling of unregistered users 2023-01-16 13:28:35 +05:00
Abdullah Atta
f2ee766b09 identity: get correct remote address in case of auth failure 2023-01-16 13:28:03 +05:00
Abdullah Atta
fc17e7a2fb identity: add support for account email changing 2023-01-16 13:25:38 +05:00
Abdullah Atta
1b5678a26c sync: minor refactors 2023-01-16 13:24:04 +05:00
Abdullah Atta
443b4ab715 sync: improve perf of user account reset & deletion
this adds a new UserId index in all the notesnook collections which
helps to speed up the deletion time during account reset & delete.
This fixes the request timeout issues during both of these processes.
2023-01-16 13:22:57 +05:00
Abdullah Atta
9dc0c99e77 common: set default value for NOTESNOOK_CORS_ORIGINS 2023-01-05 22:05:52 +05:00
Abdullah Atta
a5e02df851 config: docker should ignore .env files 2023-01-05 19:45:21 +05:00
Abdullah Atta
c368d32694 identity: use MultipartSigned.CreateAsync 2023-01-05 19:45:03 +05:00
Abdullah Atta
cb3c8ed4ac global: add very basic server versioning 2023-01-05 19:44:45 +05:00
Abdullah Atta
8730d3fb0b common: add discovery config for subscriptions server 2023-01-05 19:42:05 +05:00
Abdullah Atta
38c410db58 common: make CORS origins configurable 2023-01-05 19:41:25 +05:00
Abdullah Atta
50c06fc11d global: read env from .env file in release mode 2023-01-05 19:27:25 +05:00
Abdullah Atta
9db20e7f98 global: add ssl support to all servers 2023-01-03 22:28:17 +05:00
Abdullah Atta
4a5889caee chore: add CODE_OF_CONDUCT 2022-12-31 15:02:50 +05:00
Abdullah Atta
91bc4da922 chore: add AUTHORS 2022-12-31 15:02:40 +05:00
Abdullah Atta
5169be8e11 env: NOTESNOOK_SENDER_EMAIL & NOTESNOOK_SENDER_NAME are not optional 2022-12-31 14:58:55 +05:00
Abdullah Atta
8d22505113 chore: add instruction for running the server via docker 2022-12-31 14:57:13 +05:00
Abdullah Atta
7ebbbb8004 docker: use minio for s3 storage 2022-12-31 14:56:00 +05:00
Abdullah Atta
78f8151828 docker: start mongodb as a replica set 2022-12-31 14:55:40 +05:00
Abdullah Atta
69e02bfbb5 common: fix order of recovery & email confirm redirect urls 2022-12-31 13:33:59 +05:00
Abdullah Atta
9af8a46f87 chore: read env vars from .env.local during dev 2022-12-30 19:23:39 +05:00
Abdullah Atta
a789c5bb55 chore: add launch config for vscode 2022-12-30 11:43:41 +05:00
Abdullah Atta
19b0d94406 sync: add some helpful comments 2022-12-30 11:39:57 +05:00
Abdullah Atta
f539a29b41 chore: update readme 2022-12-30 11:25:01 +05:00
Abdullah Atta
b15495d1bc docker: add Dockerfiles for all servers & enable docker compose 2022-12-30 11:24:33 +05:00
Abdullah Atta
c0fab8a735 global: make ready for self hosting
This exposes a few more env vars for configuration &
bypasses the Subscription backend
so each user is Pro by default. This is required because there won't be
any mechanism for the user to upgrade. We'll also have to disable a few
things on the client side to avoid confusion.
2022-12-30 11:23:02 +05:00
Abdullah Atta
3f89ebc214 global: move more config to env vars 2022-12-29 11:18:29 +05:00
Abdullah Atta
9463d484a4 add comments in .env file 2022-12-28 17:35:04 +05:00
Abdullah Atta
af9b357f3f read env vars from .env file 2022-12-28 17:33:18 +05:00
Abdullah Atta
4e9f82fe48 open source identity server 2022-12-28 17:24:47 +05:00
Abdullah Atta
8fcb5257eb common: use env vars to get origin cert paths 2022-12-28 17:22:02 +05:00
Abdullah Atta
e5942a1b31 chore: update build docs 2022-12-28 17:05:59 +05:00
Abdullah Atta
b26b0871c8 open source Streetwriters.Messenger 2022-12-28 17:02:50 +05:00
Abdullah Atta
037854cd3d chore: update self-hosting todo 2022-12-28 16:59:49 +05:00
Abdullah Atta
e39c6f50ad chore: update self-hosting todo 2022-12-28 16:56:25 +05:00
Abdullah Atta
021f098233 chore: add license & readme 2022-12-28 16:52:22 +05:00