diff --git a/CHANGELOG.md b/CHANGELOG.md index 20890b9d75..35834883da 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,13 @@ All notable changes to the Adapt authoring tool are documented in this file. **IMPORTANT**: For information on how to **correctly and safely** update your installation, please consult **INSTALL.md**.
_Note that we adhere to the [semantic versioning](http://semver.org/) scheme for release numbering._ +## [0.10.5] - 2020-11-09 + +Bugfix release. + +### Fixed +- Users can change the passwords of other users ([#2540](https://github.com/adaptlearning/adapt_authoring/issues/2540)) + ## [0.10.4] - 2020-08-21 Bugfix release. @@ -711,6 +718,7 @@ Initial release. - Loading screen of death - Session cookie security issues +[0.10.5]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.4...v0.10.5 [0.10.4]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.3...v0.10.4 [0.10.3]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.2...v0.10.3 [0.10.2]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.1...v0.10.2 diff --git a/lib/application.js b/lib/application.js index 40fe4c6c81..c868c28073 100644 --- a/lib/application.js +++ b/lib/application.js @@ -290,17 +290,9 @@ Origin.prototype.createServer = function (options, cb) { requestDomain.session = req.session; requestDomain.on('error', next); requestDomain.run(next); - req.domain = requestDomain; }); server.use(auth.initialize()); server.use(auth.session()); - server.use((req, res, next) => { - if (!process.domain) { - // set process.domain again, fixes adaptlearning/adapt_authoring#2504 - req.domain.enter(); - } - next(); - }); server.use(express.static(path.join(require('./configuration').serverRoot, 'frontend', 'build'))); server.use(express.static(path.join(require('./configuration').serverRoot, 'frontend', 'src', 'libraries'))); if(!app.configuration.getConfig('isProduction')) { diff --git a/package-lock.json b/package-lock.json index 0d0c9e683e..8aa32ead45 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "adapt_authoring", - "version": "0.10.4", + "version": "0.10.5", "lockfileVersion": 1, "requires": true, "dependencies": { @@ -4115,15 +4115,15 @@ "integrity": "sha1-D3ca0W9IOuZfQoeWlCjp+8SqYYE=" }, "mongoose": { - "version": "5.9.18", - "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.9.18.tgz", - "integrity": "sha512-agZbIuQcN1gZ12BJn6KesA+bgsvoLVjCwhfPw88hggxX8O24SWK4EJwN35GEZKDej9AHUZKNAPgmdeXCVQxviA==", + "version": "5.8.13", + "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.8.13.tgz", + "integrity": "sha512-YUBykYbx8/PMR1N8xAxl81PU+JQuMx5pVp7eHelifUMazshQqIwvToUtIxlinEG3NYbbS9FTSzYBrbBLDfrADQ==", "requires": { - "bson": "^1.1.4", + "bson": "~1.1.1", "kareem": "2.3.1", - "mongodb": "3.5.8", + "mongodb": "3.4.1", "mongoose-legacy-pluralize": "1.0.2", - "mpath": "0.7.0", + "mpath": "0.6.0", "mquery": "3.2.2", "ms": "2.1.2", "regexp-clone": "1.0.0", @@ -4132,56 +4132,26 @@ "sliced": "1.0.1" }, "dependencies": { - "bl": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.0.tgz", - "integrity": "sha512-wbgvOpqopSr7uq6fJrLH8EsvYMJf9gzfo2jCsL2eTy75qXPukA4pCgHamOQkZtY5vmfVtjB+P3LNlMHW5CEZXA==", - "requires": { - "readable-stream": "^2.3.5", - "safe-buffer": "^5.1.1" - } - }, - "bson": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/bson/-/bson-1.1.4.tgz", - "integrity": "sha512-S/yKGU1syOMzO86+dGpg2qGoDL0zvzcb262G+gqEy6TgP6rt6z6qxSFX/8X6vLC91P7G7C3nLs0+bvDzmvBA3Q==" - }, "mongodb": { - "version": "3.5.8", - "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-3.5.8.tgz", - "integrity": "sha512-jz7mR58z66JKL8Px4ZY+FXbgB7d0a0hEGCT7kw8iye46/gsqPrOEpZOswwJ2BQlfzsrCLKdsF9UcaUfGVN2HrQ==", + "version": "3.4.1", + "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-3.4.1.tgz", + "integrity": "sha512-juqt5/Z42J4DcE7tG7UdVaTKmUC6zinF4yioPfpeOSNBieWSK6qCY+0tfGQcHLKrauWPDdMZVROHJOa8q2pWsA==", "requires": { - "bl": "^2.2.0", - "bson": "^1.1.4", - "denque": "^1.4.1", + "bson": "^1.1.1", "require_optional": "^1.0.1", "safe-buffer": "^5.1.2", "saslprep": "^1.0.0" } }, "mpath": { - "version": "0.7.0", - "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.7.0.tgz", - "integrity": "sha512-Aiq04hILxhz1L+f7sjGyn7IxYzWm1zLNNXcfhDtx04kZ2Gk7uvFdgZ8ts1cWa/6d0TQmag2yR8zSGZUmp0tFNg==" + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.6.0.tgz", + "integrity": "sha512-i75qh79MJ5Xo/sbhxrDrPSEG0H/mr1kcZXJ8dH6URU5jD/knFxCVqVC/gVSW7GIXL/9hHWlT9haLbCXWOll3qw==" }, "ms": { "version": "2.1.2", "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" - }, - "readable-stream": { - "version": "2.3.7", - "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz", - "integrity": "sha512-Ebho8K4jIbHAxnuxi7o42OrZgF/ZTNcsZj6nRKyUmkhLFq8CHItp/fy6hQZuZmP/n3yZ9VBUbp4zz/mX8hmYPw==", - "requires": { - "core-util-is": "~1.0.0", - "inherits": "~2.0.3", - "isarray": "~1.0.0", - "process-nextick-args": "~2.0.0", - "safe-buffer": "~5.1.1", - "string_decoder": "~1.1.1", - "util-deprecate": "~1.0.1" - } } } }, diff --git a/package.json b/package.json index f5dc2a0df2..615eb7650b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "adapt_authoring", - "version": "0.10.4", + "version": "0.10.5", "license": "GPL-3.0", "description": "A server-based user interface for authoring eLearning courses using the Adapt Framework.", "keywords": [ @@ -62,7 +62,7 @@ "mime": "^2.4.4", "moment": "^2.24.0", "mongodb-uri": "^0.9.7", - "mongoose": "^5.9.18", + "mongoose": "5.8.13", "morgan": "^1.9.1", "multer": "^1.4.2", "needle": "^2.4.0",