habitica-self-host/website/server
Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457)
* start work to avoid sending reset password in plaintext via email

* start checking parameters

* fix new password reset email

* render error if password reset code is missing or invalid

* implement POST route, conversion to bcrypt and messages

* add auth.local.passwordResetCode field

* add failing tests, move reset code validation func to lib, fixes, remove old tests

* fix unit tests

* fix page rendering and add integration tests

* fix password reset page

* add integration test

* fix string

* fix tests url
2017-02-14 18:08:31 +01:00
..
controllers Don't send plaintext reset passwords via email (#8457) 2017-02-14 18:08:31 +01:00
libs Don't send plaintext reset passwords via email (#8457) 2017-02-14 18:08:31 +01:00
middlewares Migrate to bcrypt (#8446) 2017-01-24 12:28:42 +01:00
models Don't send plaintext reset passwords via email (#8457) 2017-02-14 18:08:31 +01:00
.eslintrc Upgrade ESLint to v3 (#8299) 2016-12-20 22:31:36 +01:00
api-doc.js chore(docs): Add global definitions for param types 2016-10-11 21:35:58 -05:00
index.js remove newrelic 2017-02-05 18:43:00 +01:00
server.js fix: move attachMiddlwares function so mongoose models have tx strings 2016-09-12 20:40:12 -05:00