Abdullah Atta
abe7e67933
identity: include scope when validating account recovery token
2024-05-16 13:15:04 +05:00
Abdullah Atta
90dd4e548d
db: decrease maxPoolSize to 500
2024-05-16 13:14:37 +05:00
Abdullah Atta
6e192e1765
s3: return 0 on failure instead of null when getting attachment size
2024-05-16 13:14:16 +05:00
Abdullah Atta
45a8f056b9
api: handle sync v2 in SyncRequirement
2024-05-16 13:13:38 +05:00
Abdullah Atta
1c901aad84
api: remove profile from user settings
2024-05-16 13:13:06 +05:00
Abdullah Atta
98b5143bfe
sync: v3 compatible sync
2024-05-16 13:12:37 +05:00
Abdullah Atta
7ad546a863
s3: require pro subscription to upload files
2024-05-16 13:10:18 +05:00
Abdullah Atta
1e3b308210
api: minor refactors
2024-03-05 10:26:44 +05:00
Abdullah Atta
9a98c1afb8
notesnook: add support for user profile
2024-03-05 10:25:54 +05:00
Abdullah Atta
1dcf6557a7
announcements: add support for variable substitution
2024-03-05 10:24:52 +05:00
Abdullah Atta
ce7fb81df3
monographs: self destruct monographs on api call
2024-03-05 10:24:13 +05:00
Abdullah Atta
61adea6a06
monographs: check monograph size on update
2024-03-05 10:23:36 +05:00
Abdullah Atta
8781531042
sync: add new repositories for vault & settings
2024-03-05 10:22:51 +05:00
Abdullah Atta
dbc726aea8
sync: remove colors & tags syncing from v1 sync
2024-03-05 10:20:51 +05:00
Abdullah Atta
36690c5472
sync: rename Settings repository to LegacySettings
2024-03-05 10:20:23 +05:00
Abdullah Atta
e7350e2c49
sync: fix vault key getting reset on sync
2024-03-05 10:16:04 +05:00
Abdullah Atta
b8835923c5
sync: validate cipher base64 before adding to database
2024-03-05 10:13:36 +05:00
Abdullah Atta
e21e2f1510
identity: fix no error being showed if user is locked out
2024-03-05 10:10:47 +05:00
Abdullah Atta
b7e423a3d4
common: support getting local ip for wifi & ethernet adapters during debug
2024-03-05 10:08:58 +05:00
Abdullah Atta
cece6ad4e2
identity: catch and log errors during signup
2024-03-05 10:08:14 +05:00
Abdullah Atta
1e43f7bfdd
identity: fix expired tokens not being removed
2024-03-05 10:07:54 +05:00
Abdullah Atta
29eedd57e8
global: minor refactoring
2024-03-05 10:07:01 +05:00
Abdullah Atta
4da9614851
global: upgrade to net8.0
2024-03-05 10:03:27 +05:00
Abdullah Atta
9f4293560f
identity: only clean reference_tokens
2023-10-28 11:38:18 +05:00
Abdullah Atta
1f72e2c3a8
identity: fix session revokation
2023-10-28 11:08:17 +05:00
Abdullah Atta
3746c4b42b
identity: extend token expiration time
2023-10-24 10:11:02 +05:00
Abdullah Atta
aa77c543dd
identity: change disposable domains blocklist
2023-10-24 10:10:22 +05:00
Abdullah Atta
aa62803c73
identity: fix build
2023-09-09 20:37:45 +05:00
Abdullah Atta
3208fdd532
identity: allow twilio errors to propagate
2023-09-09 20:36:05 +05:00
Abdullah Atta
2c1dc6f95e
identity: minor refactors
2023-09-09 20:31:21 +05:00
Abdullah Atta
d91df60c57
identity: reset user 2fa on password reset
2023-09-09 20:31:02 +05:00
Abdullah Atta
1a5fe8230e
identity: move to twilio verify for SMS 2FA
2023-09-09 20:30:35 +05:00
Abdullah Atta
ab7ea72fd4
sync: introduce sync v2
2023-09-09 20:29:05 +05:00
Abdullah Atta
55a7e9fd1c
sync: make collection & db name usage more obvious
2023-09-09 20:28:46 +05:00
Abdullah Atta
8bbb4d0b9e
sync: make tags & colors syncable
2023-09-09 20:26:51 +05:00
Abdullah Atta
fc757674a9
sync: improve announcements & monograph query performance
2023-09-09 20:23:16 +05:00
Abdullah Atta
87fd5b8196
identity: delete user completely on unregister
2023-06-28 17:16:29 +05:00
Abdullah Atta
5e95cd5ec9
identity: do not enable mfa on sign up
2023-06-28 17:13:01 +05:00
Abdullah Atta
eb45e8c3ce
identity: enable mfa after user confirms email
2023-06-28 17:12:49 +05:00
Abdullah Atta
6e7a85763c
sync: pause all fetches if another device is pushing
2023-06-28 17:12:02 +05:00
Abdullah Atta
0ad00c9747
identity: make 2fa truly mandatory
2023-06-08 12:55:27 +05:00
Abdullah Atta
26703bfd8e
identity: add support for toggling marketing consent
2023-06-08 12:54:57 +05:00
Abdullah Atta
5ca66f5819
identity: save which platform a user signed up from
...
this is normalized to web, android or iOS.
Specific device information is not saved.
2023-05-22 18:23:22 +05:00
Abdullah Atta
4b67b7eedb
sync: prevent multiple syncs from a single connection
2023-05-22 18:22:32 +05:00
Abdullah Atta
19056a9302
sync: detect multiple conflicting syncs
...
When 2 or more syncs conflict, it is necessary to adjust last synced
date to avoid data from entering a Sync Blindspot.
2023-05-22 18:22:16 +05:00
Abdullah Atta
99a7ffa6ae
identity: keep all grants for 12 hours before cleaning up
2023-04-27 12:26:54 +05:00
Abdullah Atta
6f47574556
migrate to Streetwriters.IdentityServer4.KeyRack
2023-03-28 16:55:16 +05:00
Abdullah Atta
7dcda17474
identity: disable 2FA by SMS for trial users
2023-03-02 17:43:27 +05:00
Abdullah Atta
20eec79cef
identity: prevent users with disposable emails from signing up
...
while this is not a perfect way to prevent abuse of service, we do want
to avoid getting spammed with fake accounts. Creating a valid email
account is significantly more cumbersome than using a disposable email
address.
Currently the list of blacklisted domains is extracted from
https://github.com/disposable/disposable
and it is refreshed after every 24 hours.
2023-03-02 17:43:10 +05:00
Abdullah Atta
5d5c179810
fix: fail by default if user has no 2fa method but is using a recovery code
2023-02-14 19:51:07 +05:00