Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

0.4.0 #2

Merged
merged 153 commits into from
Jul 9, 2015
Merged

0.4.0 #2

merged 153 commits into from
Jul 9, 2015

Conversation

rhutchison
Copy link

No description provided.

lirantal and others added 30 commits October 14, 2014 12:14
It used to fail silently (client only displays error when a message is available).
removed extra comma
The user password salt should be encoded with Base64 before being saved
to the database.

The current code adds an unecessary step of converting the result of
crypto.randomBytes() (which already returns a SlowBuffer) to a Base64
string and back again to a Buffer, and misses the final step of
converting the Buffer's bytes back to a Base64 string.

Because of this, the salt stored in the database is garbled. This is
inconvenient when manipulating the data in a terminal or text editor.

When generating the password hash, the crypto.pbkdf2Sync() method
creates a new Buffer directly from the data supplied. Due to the
incorrect encoding of the salt, entropy is lost at this step,
weakening the security of stored passwords against brute force attacks.
Currently createTransport is unnecessarily called upon every time a password request is made.
…ub.com/lirantal/meanjs into lirantal-enhancements-express-cookie-parameters

Conflicts:
	config/env/all.js
…ress-cookie-parameters

Enhancements express cookie parameters
fix getToggleElement on dropdown by updating to angular-bootstrap 0.12.0 meanjs#250
Removed unneeded comas from gruntfile.
…tance

Abstract nodemailer createTransport
Show error message when sending password request mail fails
Remove unecessary comment in karma.conf.js
lirantal and others added 28 commits June 9, 2015 07:58
Remove targets on signin and signup anchors
- remove access.log (*.log is enough)
- Move local.js config under MEAN.JS
- Rename iOS/Apple => OS (this is a mix of windows/osx stuff anyways)
Remove duplicate assets definition
Update package.json to indent space-2.
Add return for done(err) in test
trainerbill pushed a commit that referenced this pull request Jul 9, 2015
@trainerbill trainerbill merged commit 301b703 into trainerbill:AdminModule Jul 9, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.