Commit Graph

122 Commits (f56bd90dce40487177541d30aa20c01fea2a37f6)

Author SHA1 Message Date
Dan Stroot 7121cbfe83 Better approach to Twitter email and Facebook location 2014-02-04 08:23:52 -08:00
Brian Ridings ba1916c7d3 Removed extra app.use(express.csrf()); 2014-02-03 13:31:04 -05:00
Brian Ridings 8f0e61c26b Removed dynamicHelpers comment 2014-02-03 13:27:06 -05:00
Brian Ridings ae2c6f7dce Merge pull request #1 from GeneralZero/master
Changed Views to accept CSRF token
2014-02-03 10:10:43 -08:00
Brian Ridings c99c8fe1f8 Changed Views to accept CSRF token 2014-02-03 13:08:34 -05:00
Brian Ridings f9ec861151 Added CSRF Protection to all form views 2014-02-03 13:02:24 -05:00
Brian Ridings 8c0981a1d6 Move session secret in to config Secret file 2014-02-03 12:21:41 -05:00
Brian Ridings 71f05d2852 Add CSRF Security measures on login forms
just added the csrf middleware
2014-02-03 11:33:55 -05:00
Sahat Yalkabov 924a030c2c Remove res.locals.cacheBuster. Cache busting is done by connect-assets 2014-02-03 09:28:38 -05:00
Sahat Yalkabov cb6781aec6 Removed less middleware 2014-02-03 09:16:20 -05:00
Sahat Yalkabov 81534d6d63 Add support for assets concatenation and minification 2014-02-03 08:34:12 -05:00
Sahat Yalkabov 7b0faee208 MongoDB connection error printed out with a console.error() instead of console.log() with a red method to make control the text color 2014-02-03 07:36:55 -05:00
Sahat Yalkabov 81d30c2925 Return 404 status on a 404 page. Fixed #33 2014-02-02 06:11:22 -05:00
Sahat Yalkabov 1db2daa01a Removed redundant req.assert for empty email
Swapped code order of a few things in app.js to make it more consistent in terms of coding style
2014-02-02 05:38:38 -05:00
Sahat Yalkabov e820b9f02a Separated routes into 3 categories with comments explaining which is which instead of having one giant block of routes. 2014-02-01 03:30:14 -05:00
Sahat Yalkabov 6557f72d99 Added isAuthorized middleware to twitter and facebook api example routes 2014-01-30 18:49:36 -05:00
Sahat Yalkabov 9f8caca659 Add auto_reconnect option to connect-mongo middleware 2014-01-30 04:22:35 -05:00
Sahat Yalkabov dae13cbc4b connect-mongo will now use existing mongoose connection 2014-01-30 04:19:33 -05:00
Sahat Yalkabov b9d3ec8463 Add friendlier variables for cache time: hour, day, week, month instead of a large number in milliseconds 2014-01-30 04:18:34 -05:00
Sahat Yalkabov d31c00ec0e Add mode type to console.log when you start the server 2014-01-30 04:16:50 -05:00
Sahat Yalkabov 9596ac6a48 Placed app = express() right after module dependencies 2014-01-30 03:05:14 -05:00
Sahat Yalkabov f80c890287 Added connect-mongo for storing sessions in the MongoDB database instead of memory 2014-01-29 00:49:09 -05:00
Sahat Yalkabov e541ac0793 Removed forgot_password URLs for now until they are implemented on another branch 2014-01-29 00:01:33 -05:00
Sahat Yalkabov cecba541a7 Add Forgot your password routes 2014-01-28 18:58:37 -05:00
Sahat Yalkabov 4e21e761ad Remove flash messages view helper 2014-01-28 17:50:23 -05:00
Ignazio Setti 28d3c14bca Make flash messages available to every view 2014-01-28 20:03:01 +01:00
Ignazio Setti be7f77dbb9 Replace connect-flash with express-flash 2014-01-28 20:02:45 +01:00
Sahat Yalkabov 96d9719daf Automatically try to re-connect to MongoDB every 5 seconds in case of connection.error 2014-01-28 12:48:29 -05:00
Sahat Yalkabov d7b1bfe032 Update mongodb connection error message 2014-01-28 12:43:17 -05:00
Sahat Yalkabov e9b2555e1b Refactor 404 middleware 2014-01-28 01:46:33 -05:00
Sahat Yalkabov 639db23067 Static content caching 2014-01-28 01:45:45 -05:00
Sahat Yalkabov 0a0cc7493b Enable express.compress() middleware for "gzipping" content 2014-01-28 00:24:55 -05:00
Sahat Yalkabov 6d54b34723 Remove unused 'fs' module 2014-01-28 00:02:16 -05:00
Tim Messerschmidt b023ea1c01 Adds PayPal routes for the SDK 2014-01-27 11:35:23 -08:00
Sahat Yalkabov 9a4c5450eb Added error validation express middleware 2014-01-23 22:18:35 -05:00
Sahat Yalkabov 41e85876e3 Remove MongoStore 2014-01-20 05:07:54 -05:00
Sahat Yalkabov 38245ccfb8 Code cleanup, updated jsdoc comments, added missing "next" error middleware to api.js controllers. 2014-01-13 04:24:31 -05:00
Sahat Yalkabov e8b1616e13 Replaced clusters in favor of mongoose connection error handler. Plus, Css updates. 2014-01-11 22:53:31 -05:00
Sahat Yalkabov b09c8f16ac Added clusters for zero-downtime.
mongoose auto-reconnect set to true.
2014-01-08 01:37:40 -05:00
Sahat Yalkabov 0e82538dd3 Updated 404 page.
Deleted 500 page.
Switched to default Connect's expressHandler() that show stack trace.
2014-01-08 00:41:56 -05:00
Sahat Yalkabov bd36575122 Refactoring 2014-01-07 18:15:14 -05:00
Sahat Yalkabov 5d5d546d25 Refactoring 2014-01-07 14:13:35 -05:00
Sahat Yalkabov c389525a8d Connect-mongo for mongodb sessions 2014-01-07 14:07:18 -05:00
Sahat Yalkabov 32577b78be Comments.
Updated readme.
2014-01-06 19:31:30 -05:00
Sahat Yalkabov 9598f3119c Using clusters instead of domains.
Appended all controller variables with Controller to make it more explicit.
2014-01-06 19:22:28 -05:00
Sahat Yalkabov f660cd5129 Declared Passport helper middleware so you don't have to explicitly pass user: req.user explicitly to templates 2014-01-03 18:19:11 -05:00
Sahat Yalkabov 30a610be2c Cleaned up code + simplified 2013-12-20 14:12:29 -05:00
Sahat Yalkabov 2f0fe0eb27 Add authentication middleware to github route.
Removed old ios7 signup login page for now.
2013-12-20 02:39:51 -05:00
Sahat Yalkabov fa6cfa7ccd Some more code cleanup 2013-12-20 01:47:52 -05:00
Sahat Yalkabov a9ac61e063 Renamed config.js to secrets.js to better match the intents of the file 2013-12-20 01:31:16 -05:00