Commit Graph

1429 Commits (50092fdd9b56940bdd5065f283324c3f8485c563)

Author SHA1 Message Date
Sahat Yalkabov 04d8a45233 Merge pull request #114 from GeneralZero/patch-3
CSRF token to headers for AJAX POST. Fix for #113
2014-03-28 19:06:18 -04:00
Brian Ridings 6aef38c550 Merge pull request #4 from GeneralZero/master
Changed CSRF
2014-03-28 16:33:03 -04:00
Brian Ridings 8c2b102690 Merge pull request #3 from GeneralZero/patch3
Patch3
2014-03-28 13:49:35 -04:00
Brian Ridings 096e4d4d71 Merged view 2014-03-28 13:46:04 -04:00
Brian Ridings f6c4900b3b Changed Varable from token to _csrf 2014-03-28 13:42:26 -04:00
Brian Ridings f88a09081f Changed Varable from token to _csrf 2014-03-28 13:40:55 -04:00
Brian Ridings 205318ea42 Change token to _csrf 2014-03-28 10:38:29 -04:00
Brian Ridings 9587150e7b Change token to _csrf 2014-03-28 10:38:04 -04:00
Brian Ridings 05f7191c19 Change token to _csrf 2014-03-28 10:37:16 -04:00
ammit ebec37f7b5 Update README.md 2014-03-28 03:46:23 +05:30
Ammit b6f3dc9620 use app.get('env') 2014-03-28 03:12:57 +05:30
Ammit e659018576 Update returnTo middleware
by default express doesn't do case sensitive routing, so `/login` & '/LogIn' are treated same.
2014-03-28 03:03:04 +05:30
Brian Ridings eb0332609c CSRF token to headers for AJAX POST. Fix for #113
This is how you do a JS post with the CSRF Protection

```
$.ajax({
url: "http://test.com",
type:"post"
headers: {'X-CSRF-Token': $('meta[name="csrf-token"]').attr('content')}})
```
2014-03-27 14:09:13 -04:00
Sahat Yalkabov a49ee82150 Updated dependencies' versions 2014-03-27 00:04:03 -04:00
Tim Suchanek 98440cf154 bump express-validator
1.0.1 lacks of some fundamental features like .matches
2014-03-20 10:33:24 +01:00
Sahat Yalkabov 78be8c918f Removed top border from #footer 2014-03-17 03:05:29 -04:00
Sahat Yalkabov f9679e5cb4 Improved footer colors (Flatly theme) 2014-03-17 03:00:55 -04:00
Sahat Yalkabov 783598398d Updated footer 2014-03-17 03:00:18 -04:00
Sahat Yalkabov 65ae9b18ad PayPal api example refactoring 2014-03-16 14:07:15 -04:00
Sahat Yalkabov 0e30f2f7b3 Updated contact form mail options 2014-03-16 13:46:08 -04:00
Sahat Yalkabov 83383c8bc6 Merge remote-tracking branch 'origin/master'
* origin/master:
  adding one step to mongolab deployment
2014-03-15 15:44:06 -04:00
Sahat Yalkabov 5804389b05 Added Bootflat UI bootstrap theme to the Recommendation list 2014-03-15 15:28:43 -04:00
Sahat Yalkabov 5815c13f43 Merge pull request #109 from chris-ramon/patch-1
adding one step to mongolab deployment
2014-03-14 10:47:21 -04:00
Christian Ramón db983d66b0 adding one step to mongolab deployment
Actually you have to enter to the recently created database in order to see the message: "A database user is required to connect to this database.* **Click here** *to create a new one."
2014-03-14 08:51:02 -05:00
Sahat Yalkabov 3ab66a5378 Merge remote-tracking branch 'origin/master'
* origin/master:
  Added Twit library to List of Packages
  Corrected buildAssets to builtAssets directory in .gitignore file
  Added a comment explanation on returnTo previous URL middleware, changed static cache from 1 week to 1 month
2014-03-13 16:34:44 -04:00
Sahat Yalkabov 727983e1ae Added environment variables. Fixes #100 2014-03-13 16:33:56 -04:00
Sahat Yalkabov 83a90c643c Added Twit library to List of Packages 2014-03-12 04:25:02 -04:00
Sahat Yalkabov 02548d7e8c Merge pull request #105 from rosswilson/master
Corrected buildAssets to builtAssets directory in .gitignore file
2014-03-12 03:16:01 -04:00
Ross Wilson 9fc7407cf3 Corrected buildAssets to builtAssets directory in .gitignore file 2014-03-12 00:41:45 +00:00
Sahat Yalkabov fa917a1a15 Added a comment explanation on returnTo previous URL middleware, changed static cache from 1 week to 1 month 2014-03-11 14:15:04 -04:00
Sahat Yalkabov 678f6d90d5 Merge pull request #104 from rockaBe/gravatar
stores lowercase email for gravatar
2014-03-11 00:24:26 -04:00
rockaBe 1dcbe0ec97 stores lowercase email for gravatar 2014-03-11 01:17:53 +01:00
Sahat Yalkabov 98f2abe767 Updated project structure table 2014-03-10 13:36:32 -04:00
Sahat Yalkabov b3a47677da Added Google Analytics script 2014-03-09 13:53:12 -04:00
Sahat Yalkabov af08279735 Redirect to original URL when users sign-in via Local strategy 2014-03-08 15:01:32 -05:00
Sahat Yalkabov b82cef30b7 Redirect back to original destination after a successful sign-in via OAuth 2014-03-08 14:58:27 -05:00
Sahat Yalkabov e8365c7321 Removed .row from login form 2014-03-07 14:42:37 -05:00
Sahat Yalkabov d4b03f7dd2 2px border radius on social buttons 2014-03-07 14:40:01 -05:00
Sahat Yalkabov c2cda88433 Merged forgot/reset controllers into user controller 2014-03-07 14:08:56 -05:00
Sahat Yalkabov d6020beebb Updated footer 2014-03-07 14:02:38 -05:00
Sahat Yalkabov 3207dbc9a4 Merge remote-tracking branch 'origin/master'
* origin/master:
  Update package.json
2014-03-06 03:28:44 -05:00
Sahat Yalkabov 9396ff1b69 Removed login required text from Paypal api link (false) 2014-03-06 03:03:27 -05:00
Sahat Yalkabov c046c990b7 Updated button text to Change Password 2014-03-06 02:48:59 -05:00
Sahat Yalkabov aa1b9dbc26 Removed hacker news logo 2014-03-06 02:47:50 -05:00
Sahat Yalkabov 81d8b5bdad Add NPM logo, changed npm logo from Base64 to image url 2014-03-06 02:46:46 -05:00
Sahat Yalkabov d4c9786986 Updated TO nodemailer field in reset controller 2014-03-06 02:43:32 -05:00
Sahat Yalkabov e53949cde1 Code refactoring 2014-03-06 02:36:55 -05:00
Sahat Yalkabov f76dbb1679 Updated TO and SUBJECT nodemailer fields on forgot password controller 2014-03-06 02:09:11 -05:00
Sahat Yalkabov fdbe2fe45c Update package.json 2014-03-05 19:42:53 -05:00
Sahat Yalkabov 5fef9092ad Placed single sign-in buttons at the bottom of the login form 2014-03-05 16:41:42 -05:00