require authentication on complete_* wsapis to reduce risk now that password...
require authentication on complete_* wsapis to reduce risk now that password is provided before email verification. issue #290 and a pre-requisite for issue #1000
Showing
- lib/db.js 9 additions, 8 deletionslib/db.js
- lib/db/json.js 15 additions, 4 deletionslib/db/json.js
- lib/db/mysql.js 22 additions, 28 deletionslib/db/mysql.js
- lib/httputils.js 4 additions, 0 deletionslib/httputils.js
- lib/wsapi/complete_email_addition.js 38 additions, 13 deletionslib/wsapi/complete_email_addition.js
- lib/wsapi/complete_user_creation.js 62 additions, 20 deletionslib/wsapi/complete_user_creation.js
- lib/wsapi/email_for_token.js 16 additions, 3 deletionslib/wsapi/email_for_token.js
- lib/wsapi/stage_user.js 3 additions, 3 deletionslib/wsapi/stage_user.js
- tests/db-test.js 2 additions, 2 deletionstests/db-test.js
- tests/stalled-mysql-test.js 2 additions, 1 deletiontests/stalled-mysql-test.js
Loading
Please register or sign in to comment