Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Personal upstream changes #15

Merged
merged 9 commits into from
Feb 27, 2023
Merged

Personal upstream changes #15

merged 9 commits into from
Feb 27, 2023

Conversation

VottonDev
Copy link
Collaborator

  • Update NodeJS CI/CD to use version 16
  • Add python as dependency for Docker
  • Update majority of node modules
  • Add rate limiting to API routes just in-case
  • Update Passport.JS to be compatible with the latest update (Logout logic)
  • Add extra error handling for database type
  • Simplify some code
  • Update CSS to be compatible with latest sass
  • Add missing website title
  • Add missing favicon declaration
  • Make MySQL methods compatible with latest module update
  • Make copyright year dynamic instead of static 2021

These are changes that I've done for Willard Networks, so I would like to push them upstream to patch security problems and generally making the code easier to maintain forward if anybody else uses it.

Copy link
Collaborator Author

@VottonDev VottonDev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a note I want to add

"json-beautify": "^1.1.1",
"lusca": "1.7.0",
"mysql2": "^3.1.2",
"passport": "github:joeyguerra/passport#missing-regenerate-on-req",
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You may wonder why I'm using a GitHub repo for this, but PassportJS hasn't fixed a problem upstream:
jaredhanson/passport#907

This concerns the version 0.6.0 and fixes a vulnerability in 0.5.3, which is why using the custom version of PassportJS till the fix has been implemented upstream.

@VottonDev
Copy link
Collaborator Author

Got the CI/CD running now with all the current tests.

@VottonDev VottonDev merged commit 506c864 into itz-coffee:main Feb 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant