f4f8a293e7
FEATURE: Implement 2factor login TOTP
...
implemented review items.
Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator
add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests
add qunit tests - password reset, preferences
fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.
Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP
add two factor to email signin link
rate limit if second factor token present
add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
80ec6ce4fd
bump onebox
2018-02-21 10:06:17 +11:00
107eb5d830
FIX: binding_of_caller not working on Ruby 2.5
2018-02-19 11:37:16 +11:00
9d8df812dd
PERF: upgrade Oj gem
2018-02-19 11:37:16 +11:00
9bb7c3dcf0
bump onebox version
2018-02-16 21:32:25 +05:30
e456ae1b6c
Revert "Upgrade mail gem to drop dependency on `mime-types`."
...
This reverts commit 498cc15aa9
2018-02-16 07:04:22 +11:00
498cc15aa9
Upgrade mail gem to drop dependency on `mime-types`.
...
Boot Memory Usage
```
Total allocated: 225695379 bytes (1990663 objects)
Total retained: 32795116 bytes (291607 objects)
```
```
Total allocated: 218342892 bytes (1897350 objects)
Total retained: 30123426 bytes (261198 objects)
```
2018-02-15 16:24:26 +08:00
94b2c70c0d
PERF: remove oga gem
...
oga gem is automatically required by the aws gem
the oga gem retains about 1mb of memory, aws now uses nokogiri
This also removes the html normalize from the pretty text specs that was
a fair bit buggy as the polls test shows.
2018-02-15 14:36:40 +11:00
c89b42c488
PERF: only require the rss library if used
...
Before:
Total allocated: 257909321 bytes (2514134 objects)
Total retained: 39681579 bytes (343387 objects)
allocated memory by gem
-----------------------------------
42875979 rss
retained memory by gem
-----------------------------------
2080188 rss
retained objects by gem
-----------------------------------
13052 rss
After:
Total allocated: 210562047 bytes (2252030 objects)
Total retained: 37433816 bytes (328635 objects)
----
So, 2 less megabytes on boot and 13000 objects stuck in ruby heaps forever.
2018-02-15 13:11:33 +11:00
218c8e8623
Merge pull request #5595 from discourse/new-gfycat-onebox
...
New gfycat onebox
2018-02-14 19:03:28 -02:00
c3606fdef6
Update onebox
2018-02-14 17:43:13 -02:00
0b13b82e94
Update nokogiri to latest version
2018-02-13 19:36:19 -05:00
19b4116416
Bump `rails_multisite` to 2.0.4.
2018-02-12 15:39:21 +08:00
5dabcc9081
Fix Gemfile.lock.
2018-02-12 14:08:02 +08:00
87b0cc382b
Bump `rails_multisite` to 2.0.3.
2018-02-12 14:03:04 +08:00
508a8e29ab
update email_reply_trimmer to latest version
2018-02-06 01:04:45 +01:00
073d072aa6
correct lockfile
2018-01-29 18:28:59 +11:00
d2025e33cf
FEATURE: bump rbtrace to latest
2018-01-23 15:36:47 +11:00
36ed8f5176
Correct regression where /sidekiq/scheduler was not working
2018-01-22 10:48:35 +11:00
54dc191a91
Update `rails_multisite` to 2.0.1.
2018-01-19 10:19:16 +08:00
12872d03be
PERF: run post timings in background
...
This means that if a very large amount of registered users hit
a single topic we will handle it gracefully, even if db gets slow.
2018-01-19 08:27:29 +11:00
5d7a33cd6d
Update email_reply_trimmer to improve performance
2018-01-17 12:04:56 +01:00
8c47eb2951
update coderay
2018-01-17 15:50:41 +11:00
a0f0ed576a
bump onebox version
2018-01-11 23:15:25 +05:30
afb18a5c41
bump onebox version
2018-01-11 14:30:35 +05:30
d5fd6d2639
PERF: defer message bus on hidden tabs so only one in 1.5 seconds happens
2018-01-09 12:39:17 +11:00
74ec100aff
Upgrade `pg` gem.
2018-01-08 10:27:19 +08:00
e3f8182125
FIX: Google Calendar oneboxes weren't working
2018-01-07 19:15:11 +01:00
8d4cd57662
Update libv8 from 5.9 to 6.3
2018-01-05 17:12:04 +11:00
05ec1be101
Drop the fork usage of fastimage ( #5461 )
...
Fork is not needed anymore since fastimage 2.1.1 has been released with the needed PR merged in.
2018-01-04 09:53:53 +01:00
030a0cd698
bump onebox for vimeo private link support
2017-12-29 09:38:25 +11:00
b74e933cfb
bump onebox version
2017-12-23 01:17:30 +05:30
16076f9ab8
bump onebox version
2017-12-21 14:49:59 +05:30
fd67508497
FIX: don't count users as replying long after they are done typing
...
Also, don't leak a large amount of redis usage for presence stuff
2017-12-18 15:41:32 +11:00
f9990eeb13
bump onebox version
2017-12-07 12:05:19 +05:30
5f318a5241
FEATURE: Replace SimpleRSS with Ruby RSS module ( #5311 )
...
* SPEC: PollFeedJob parsing atom feed
* add FeedItemAccessor
It is to provide a consistent interface to access a feed item's tag
content.
* add FeedElementInstaller
to install non-standard and non-namespaced feed elements
* FEATURE: replace SimpleRSS with Ruby RSS module
* get FinalDestination and download with Excon
* support namespaced element with FeedElementInstaller
2017-12-06 10:45:09 +11:00
7bbf137238
bump onebox version
2017-12-05 07:28:45 +05:30
f5d45f797a
Fix broken Gemfile.lock.
2017-12-04 11:28:45 +08:00
78f09f0489
Logster 1.2.9 is the version we want to be at.
2017-12-04 11:05:14 +08:00
846b047847
Revert "Revert "Upgrade logster.""
...
This reverts commit 57ca4b20e2
2017-12-04 09:30:21 +08:00
57ca4b20e2
Revert "Upgrade logster."
...
This reverts commit 1376a86bcc
2017-12-01 17:32:49 +08:00
1376a86bcc
Upgrade logster.
2017-12-01 16:03:00 +08:00
3053499375
Update mini_suffix.
2017-11-30 11:14:06 +08:00
fffb7561c4
Update `mini_suffix`.
2017-11-29 17:07:41 +08:00
8491c5fba5
UX: Replace heuristic solution for extracting root domain.
2017-11-29 16:26:46 +08:00
64cdb4f7e8
bump onebox version
2017-11-27 12:21:47 +05:30
c8157f6b07
Update seed-fu with PG10 support.
...
https://meta.discourse.org/t/discourse-appears-to-be-broken-with-postgres-10/71723
2017-11-27 10:26:59 +08:00
abbb2b28eb
bump onebox version
2017-11-25 15:53:18 +05:30
407d80f1dd
FEATURE: update rack-mini-profiler to latest
2017-11-24 10:28:35 +11:00
8fd09fe616
FEATURE: upgrade message bus
...
new version recovers very cleanly from redis flush
2017-11-24 09:23:12 +11:00
Jeff Wong
Sam
Arpit Jalan
Guo Xiang Tan
Rafael dos Santos Silva
Robin Ward
Régis Hanol
Gerhard Schlager
Jano Suchal
Kyle Zhao