Calvin Montgomery
875337d9a6
web/account: add referrer check
2017-11-05 16:17:37 -08:00
Calvin Montgomery
b876c8907a
ffmpeg: preserve cookies when following redirects in pre-flight req
2017-11-05 16:01:39 -08:00
Calvin Montgomery
3cd8bfa8c7
Remove /sioconfig for real
2017-09-30 15:26:47 -07:00
Calvin Montgomery
a2be65aead
Reset prometheus summaries for more accurate percentiles per 5 minutes
2017-09-27 21:55:42 -07:00
Calvin Montgomery
014f3f008e
Remove config key that is no longer used
2017-09-27 21:50:51 -07:00
Calvin Montgomery
f975f7ef85
Update password reset to use new nodemailer impl
2017-09-26 21:22:15 -07:00
Calvin Montgomery
9cfe71d4c4
Start working on nodemailer upgrade
2017-09-25 22:31:45 -07:00
Calvin Montgomery
bfc7cfc193
Remove old /useragreement
2017-09-19 22:07:00 -07:00
Calvin Montgomery
9868a97dbd
Remove a couple config keys that are no longer used
2017-09-19 22:03:34 -07:00
Calvin Montgomery
c159fa8060
Remove old HTTPS redirect kludges
2017-09-19 20:49:33 -07:00
Calvin Montgomery
de5cc3352a
Fix another bug with prometheus socket.io emtrics
2017-09-19 19:03:43 -07:00
Calvin Montgomery
9a1d50dcd3
Add support for v8-profiler (optional dep)
2017-09-18 21:54:36 -07:00
Calvin Montgomery
4db78deda3
Support updating profile via /account/data
2017-09-06 22:53:34 -07:00
Calvin Montgomery
9e3426633d
Support updating email via /account/data
2017-09-05 23:11:28 -07:00
Calvin Montgomery
5b6f86668a
Refactoring
2017-09-05 22:47:29 -07:00
Calvin Montgomery
3eb97bab6a
Fix bug in cytube_sockets_num_connected metric
2017-09-04 10:04:33 -07:00
Calvin Montgomery
45d0e0b4c3
Guard unfinished web route with env variable
2017-09-03 17:22:57 -07:00
Calvin Montgomery
b76869e2d2
Add some basic tests for implemented /account/data handlers
2017-09-01 21:20:07 -07:00
Calvin Montgomery
8b1b501bbd
Start working on /account/data controller
2017-08-30 22:45:48 -07:00
Calvin Montgomery
33b2bc2d30
Add basic knex methods for channel data needed for /account/*
2017-08-29 21:23:04 -07:00
Calvin Montgomery
269aa6bfe6
Add basic knex methods to be used for /account/* pages
2017-08-28 23:37:32 -07:00
Calvin Montgomery
3d50b8f52e
Fix getSafeReferrer when referrer is null
2017-08-24 20:55:18 -07:00
Calvin Montgomery
cc69b3c225
Revert "Remove legacy /sioconfig and user agreement link"
...
ACP has a dependency on `/sioconfig`. Reverting until that can be
fixed.
This reverts commit a48cab81b9 .
2017-08-23 23:15:30 -07:00
Calvin Montgomery
cacde7f72d
Fix unhandled rejections in webserver
2017-08-23 23:02:08 -07:00
Calvin Montgomery
7e6312f9d1
Remove ?dest= redirect logic for /login and use referrer instead
2017-08-22 17:25:18 -07:00
Calvin Montgomery
a48cab81b9
Remove legacy /sioconfig and user agreement link
...
- `/sioconfig` has been deprecated for ages in favor of
`/socketconfig/${channel}.json`
- Each website administrator should be responsible for determining the
appropriate terms of service for their website instead of CyTube
providing a default one.
2017-08-21 23:19:19 -07:00
Calvin Montgomery
ae7098085c
Work on knexifying password resets
2017-08-16 23:28:29 -07:00
Calvin Montgomery
791a712a68
Move channel register/delete reload logic to message bus
2017-08-15 18:55:36 -07:00
Calvin Montgomery
d16cfb7328
Add message bus for #677
2017-08-15 18:23:03 -07:00
Calvin Montgomery
9ee650461f
Change unhandledRejection from fatal log level to error
2017-08-14 20:35:30 -07:00
Calvin Montgomery
2990d83c02
ffmpeg: add ETIMEDOUT error message
2017-08-14 20:33:09 -07:00
Calvin Montgomery
99076412b6
Fix unhandled rejection
2017-08-14 20:31:45 -07:00
Calvin Montgomery
c6c3bafca2
database: include legacy query() in prometheus metrics
2017-08-14 18:24:53 -07:00
Calvin Montgomery
82004aab73
ioserver: change on disconnect to once to avoid double-counting
2017-08-14 18:23:07 -07:00
Calvin Montgomery
70b875c0e9
Remove some ancient db upgrade stuff
...
If anyone is still running a database from 2014 they want to upgrade,
sorry.
2017-08-13 22:19:47 -07:00
Calvin Montgomery
4102d6eaf2
Refactor index.js logic into src/main
2017-08-13 22:16:42 -07:00
Calvin Montgomery
a90d88ad65
Fix race condition that might be causing errors
2017-08-12 13:30:24 -07:00
Calvin Montgomery
8a8ed0a932
ffmpeg: better error messages for ECONNREFUSED and ENOTFOUND
2017-08-12 13:20:44 -07:00
Calvin Montgomery
d0c1e8cbd9
Change metric names to follow prometheus naming guide
2017-08-12 13:12:58 -07:00
Calvin Montgomery
92f0a956b9
custom-media: import spec and fix a minor missed validation
2017-08-08 20:46:10 -07:00
Calvin Montgomery
04c9d48779
custom-media: implement queueing and playback changes
2017-08-08 20:35:17 -07:00
Calvin Montgomery
a6de8731b3
custom-media: add metadata downloader
2017-08-07 22:37:56 -07:00
Calvin Montgomery
f4ce2fe69d
custom-media: add converter to CyTube Media object
2017-08-07 21:44:55 -07:00
Calvin Montgomery
c7f7dcfed3
custom-media: use url.parse, not whatwg URL (node v6 compat)
2017-08-06 21:59:14 -07:00
Calvin Montgomery
ea6e3f921f
custom-media: add validator
...
Initial work for #655
2017-08-06 21:50:27 -07:00
Calvin Montgomery
331a4626a0
Fix borrow-rank
2017-08-06 20:42:33 -07:00
Calvin Montgomery
0b560f15a9
Add prometheus counter for changeMedia
2017-08-05 18:50:27 -07:00
Calvin Montgomery
cb6cfc8455
Instrument some more metrics with prometheus
2017-08-02 21:24:44 -07:00
Calvin Montgomery
6043647cb7
Skip full user auth for most page renders
...
Previously, the user's session cookie was being checked against the
database for all non-static requests. However, this is not really
needed and wastes resources (and is slow).
For most page views (e.g. index, channel page), just parsing the value
of the cookie is sufficient:
* The cookies are already HMAC signed, so tampering with them ought to
be for all reasonable purposes, impossible.
* Assuming the worst case, all a nefarious user could manage to do is
change the text of the "Welcome, {user}" and cause a (non-functional)
ACP link to appear clientside, both of which are already possible by
using the Inspect Element tool.
For authenticated pages (currently, the ACP, and anything under
/account/), the full database check is still performed (for now).
2017-08-01 21:40:26 -07:00
Calvin Montgomery
0118a6fb15
Refactor socket.io controller
2017-08-01 19:29:11 -07:00