Commit Graph

47 Commits

Author SHA1 Message Date
Sem Bauke
e32f0c83f1
chore(api): builduser update function (#50642)
Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2023-07-04 22:10:22 +02:00
Oliver Eyton-Williams
16c0949a4b
feat(api): user/user-token (#50721)
Co-authored-by: Shaun Hamilton <shauhami020@gmail.com>
2023-06-29 10:36:44 +00:00
Oliver Eyton-Williams
ca1b6a230a
fix(api): require CSRF token for user routes (#50684) 2023-06-28 00:04:49 +05:30
Muhammed Mustafa
ea45dc84b7
feat(api): add :email unsubscribe/:email to the deprecated (#50497)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-06-22 10:25:40 -05:00
Muhammed Mustafa
01ae9d3561
feat(api): add update-my-about endpoint (#50334)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Co-authored-by: Sem Bauke <semboot699@gmail.com>
2023-06-15 13:15:58 +02:00
Sem Bauke
f3385dda8e
feat: /status/ping endpoint (#50697) 2023-06-14 19:27:10 +04:00
Oliver Eyton-Williams
65239ee68b
feat(api): allow redirection with message (#50525)
Co-authored-by: Muhammed Mustafa <MuhammedElruby@gmail.com>
2023-06-07 15:30:12 +02:00
Oliver Eyton-Williams
962f45475c
fix(api): improve schema accuracy (#50626) 2023-06-07 14:08:37 +02:00
Sem Bauke
754ae54387
feat: add /add-donation endpoint (#50441)
Co-authored-by: Muhammed Mustafa <MuhammedElruby@gmail.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-06-07 14:04:32 +02:00
Oliver Eyton-Williams
30419c2e20
refactor: register fastify-sentry directly (#50622) 2023-06-06 13:45:12 +02:00
Muhammed Mustafa
e368410c89
feat(api): deprecate get account endpoint (#50419) 2023-06-02 08:09:54 +02:00
Sem Bauke
c5deeccd3f
feat: update my username endpoint (#50271)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-06-02 07:04:50 +02:00
Niraj Nandish
8171abfa6d
feat(api): reset progress endpoint (#50432)
---------

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-05-26 11:26:26 +03:00
Niraj Nandish
a4ab0b4e18
chore: move update socials schema (#50506)
* chore: move update scoials schema

* fix: set maxLength value to satisfy tests
2023-05-24 11:57:19 -07:00
Oliver Eyton-Williams
39857b5aa4
test(api): schema security (#50413)
* test: confirm all schemas pass basic validation

* refactor: use tested schemas in routes

* chore: move ajv to dev deps
2023-05-24 09:31:13 -07:00
Oliver Eyton-Williams
4cfd03224d
fix(api): cleanup test dbs after use (#50466) 2023-05-24 15:16:31 +02:00
Niraj Nandish
94534382ae
fix(api): rename account delete endpoint (#50485) 2023-05-23 21:37:29 -07:00
Muhammed Mustafa
1e6b3cfa70
refactor(test): remove extra undefined mark (#50428) 2023-05-18 10:40:31 -07:00
Muhammed Mustafa
2fdaeaf550
fix(api): socials endpoint test (#50423)
fix(api): uocials endpoint textt
2023-05-18 14:08:40 +00:00
Niraj Nandish
999d8a6c03
feat(api): create account delete endpoint (#50304)
* feat(api): create account delete endpoint

---------

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-05-18 17:01:21 +03:00
Muhammed Mustafa
885cf86cd6
feat(api): add socials links endpoint (#50332)
* feat(api): add socials links endpoint

* Sort the typo in body call

Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>

* Revert "Sort the typo in body call"

This reverts commit 0588d3d70d.

---------

Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>
2023-05-18 17:29:43 +04:00
Oliver Eyton-Williams
c3c912db07
feat(api): add csrf protection (#50275)
Co-authored-by: Sboonny <muhammed@freecodecamp.org>
2023-05-18 17:06:40 +05:30
Oliver Eyton-Williams
df12c72f46
test: stop mocking FREECODECAMP_NODE_ENV (#50406)
While this lets us write slightly better tests, I don't think it's worth
the extra complexity. For example, it interferes with the creation of
test databases. We could work around this, but I'd rather keep things
simple.
2023-05-17 22:36:22 +04:00
Niraj Nandish
5bc14c21b9
feat: deprecated endpoint (#50403)
* feat: deprecated endpoints
2023-05-17 10:24:57 +03:00
Naomi Carrigan
cdcea13d5f
fix(tools): api settings test (#50394) 2023-05-16 07:32:17 +03:00
Shaun Hamilton
651e1905fd
chore(api): pull prod db schema (#49735)
* chore(api): pull prod db schema

* manual user model schema

* adjust json types

* temp: fix object type

* adjust schema with Json types

* fix: oliver found my bugs 🐛

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>

* ttl to int, remove github from user

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>

* fix: remove unused parts of the prisma schema

---------

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-05-16 07:28:39 +03:00
Niraj Nandish
032f9d95ae
feat(api): add update privacy terms endpoint (#50300)
* feat: move update privacy terms route

* test: update privacy terms route tests

* feat: add /settings prefix to settings route

* fix: updated routes in tests

* Revert "fix: updated routes in tests"

This reverts commit 4a1305e135.

* Revert "feat: add /settings prefix to settings route"

This reverts commit 2a0d4566fe.
2023-05-15 13:21:32 -07:00
renovate[bot]
decb2e87b6
fix(deps): update dependency fastify to v4.17.0 (#50230)
* fix(deps): update dependency fastify to v4.17.0

* add missing code in error object

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Sboonny <muhammed@freecodecamp.org>
2023-05-15 11:17:09 +03:00
Muhammed Mustafa
c7f5a4cf8b
feat(api): add update IsHonest value endpoint (#50281)
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-05-09 09:29:48 -07:00
Muhammed Mustafa
afd4402a49
feat(api): add subscribe to quincy email endpoint (#50305) 2023-05-09 09:10:39 +00:00
Muhammed Mustafa
d502ff973b
feat(api): add keyboard shortcut endpoint (#50286) 2023-05-09 09:55:36 +02:00
Oliver Eyton-Williams
c2cb818f87
chore(api): add test utilities (#50289) 2023-05-09 11:15:54 +05:30
Muhammed Mustafa
0d98f28b9e
feat(client): delete generic success message in the alert (#49780)
* change the flash message in profileui endpoint

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-05-08 16:58:06 +02:00
Oliver Eyton-Williams
5e17868c74
fix(api): allow fastify to set content-type dynamically (#50248)
fix: allow fastify to set content-type dynamically

We can set content-type: application/json for specific routes, but
doing so ends up with confusing, over-engineered code.

Instead we should take care when auditing the endpoints.
2023-05-02 10:15:31 -07:00
Oliver Eyton-Williams
7572f99f74
refactor(api): remove unused endpoints (#50252)
Also adds "dev" as an alias because I keep trying to use it.
2023-05-02 19:54:05 +03:00
Oliver Eyton-Williams
46cdfd7802
feat(api): add CORS headers (#50120)
* test: allow mocking of env vars

Since utils/env is a module, we can mock it to control env vars in
tests. However, it's not compatible with building the server in
setupFilesAfterEnv, so, instead, we can use a utility function to keep
things DRY.

* fix: update type of fastifyTestInstance

* chore: add comment about sts preload

* chore: rename header plugin

* test: add get util + provide origin on request

* feat: add cors headers

* chore: add TODO
2023-04-26 09:02:12 +02:00
Sem Bauke
a1504eed2a
feat: update my theme endpoint (#50183)
Co-authored-by: Shaun Hamilton <ShaunSHamilton@users.noreply.github.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Co-authored-by: Muhammed Mustafa <muhammed@freecodecamp.org>
Co-authored-by: Tom <moT01@users.noreply.github.com>
2023-04-25 18:01:32 +02:00
Oliver Eyton-Williams
5f12720ad2
fix: use onRequest to add headers (#50125)
* fix: use onrequest to add headers

We want to add them no-matter what, so we should use the earliest hook
available.
2023-04-24 11:08:19 +02:00
Sem Bauke
a980ac03e5
feat: introduce /update-my-profileui route in new API (#49827)
* feat: add response codes

* fix: update TypeBox imports

* refactor: convert inject based tests to supertest

* feat: require authentication to use route

* test: confirm db is updated as expected

* fix: respond appropriately on error

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>
Co-authored-by: Tom <20648924+moT01@users.noreply.github.com>
2023-04-18 15:01:26 +00:00
Muhammed Mustafa
daa23a3d83
feat(api): swap to immobiliarelabs sentry plugin (#50041) 2023-04-17 13:10:23 -07:00
Muhammed Mustafa
01b9bd9245
fix(api): fix eslint error (#50080) 2023-04-17 20:21:36 +05:30
Oliver Eyton-Williams
6289efbbad
test(api): always start server before testing (#49994) 2023-04-17 17:54:50 +07:00
Oliver Eyton-Williams
71d5a67745
feat(api): add security headers (#49995)
* feat(api): add security headers

Includes the OWASP recommended headers for REST APIs. Taken from
https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html#security-headers

* test: check OWASP headers appear on GET / request

* fix: only enable Strict-Transport-Security in prod
2023-04-13 10:16:58 +02:00
Muhammed Mustafa
1d8e9fb0b7
feat(api): create sentry plugin (#49731)
* feat(api): add sentry plugin

Apply suggestions from code review

Revert "feat(api): add sentry plugin"

This reverts commit fcde4ee03e9b83e335a6a2bccd490490e9993597.

install sentryNode

WIP: create sentry debug

WIP: find out why use errorhandler isn't typed correct

install sentry

add the deleted sentry code

create sentry plugin

* fix error found through sentry

* Polish sentry plugin

Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>

* duplicate the changes made in the other plugin

* add done to seterrorHandler

* Fix a typo in sentry option

Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>

* Stop the dns from running if a DSN wasn't provided

Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>

* Polish the function and check the variable value

Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>

* check the dsn dashboard in the env

* export dsn value if it isn't sentrydashboard

Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>

* when the value is undefined init errors

* revert the if statement

* throw an error whenever an environment variable is not right

---------

Co-authored-by: Niraj Nandish <nirajnandish@icloud.com>
Co-authored-by: Naomi Carrigan <nhcarrigan@gmail.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-04-05 08:35:23 -07:00
renovate[bot]
b48d12714a
fix(deps): update dependency @sinclair/typebox to v0.26.6 (#49855)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
2023-04-03 09:13:36 +00:00
Oliver Eyton-Williams
06d4076a45
feat(api): dev login (#49880)
Co-authored-by: Mrugesh Mohapatra <hi@mrugesh.dev>
2023-03-29 18:08:38 +05:30
Oliver Eyton-Williams
a128dd8fcd
chore(api): compile TS into /dist (#49812
* chore: compile TS into /dist

Having the output co-located with the source meant that the js would be
imported by default. Given that we don't recompile on source changes,
this means the server got 'stuck' at the point of compilation and would
only register changes on build.

Also, compiling to a dist directory should make it easier to build when
we want to deploy. That said, the motivation is mostly DX.

* fix: put schema.prisma in the default location
2023-03-28 19:42:20 +05:30