Andrew Huling e1d2ecef10 In the case of an expired nonce, return a 400 status code instead of a 500. ...

500 status codes are for unexpected server-side error scenarios. When an expired nonce is used by the client, a 4XX-level error is more appropriate because the client has submitted a bad request (by using an expired nonce). A 500 also causes Internet Explorer to show its default 500 page which does not show the error message and leads to a bad end user experience. I am choosing 400 for the new status rather than 401 or 403 because 401 requires a WWW-Authenticate header which would be difficult to generate in an SSO scenario and a 403 implies that no re-authentication will address the failure.

2015-05-14 16:03:02 -04:00

..

assets

FIX: replaceWith on leaf routes changed behavior in latest ember

2015-05-14 13:44:57 -04:00

controllers

In the case of an expired nonce, return a 400 status code instead of a 500.

2015-05-14 16:03:02 -04:00

helpers

FIX: include youtube link in embedded comments

2015-05-01 18:34:45 +05:30

jobs

FIX: user archive export was failing in some cases

2015-05-14 20:35:25 +05:30

mailers

FIX: error when user name was nil

2015-05-06 23:56:34 +02:00

models

FIX: post gutter links are broken when using a subfolder

2015-05-14 14:26:18 -04:00

serializers

PERF: hit all index conditions to speed up anon ip tracking

2015-05-14 17:21:02 +10:00

services

FEATURE: Multiple notifications at once (1/topic)

2015-05-13 18:23:42 -07:00

views

Ember 1.11 broken WIP

2015-05-11 11:18:37 -04:00