Releases · jenkins-infra/account-app

🚀 New features and improvements

Remove some Indian given names from email BL (#136) @daniel-beck
Show actions on the main user page (#131) @oleg-nenashev
Add support for basic authentication in the Account App REST API (#129) @oleg-nenashev
Send email notification when resetting passwords + minor fixes and enhancements (#128) @oleg-nenashev

🐛 Bug Fixes

Send email notification when resetting passwords + minor fixes and enhancements (#128) @oleg-nenashev

👻 Maintenance

chore: replace issues.jenkins.io/project/INFRA by jenkins-infra/helpdesk (#135) @lemeurherve

✍ Other changes

chore: migrate pipeline to infra.ci and use eclipse-temurin instead (deprecated) openjdk (#137) @dduportal
Update jira url to issues.jenkins.io (#133) @olblak
/admin/doSignup: Allow hiding the temporary password and adding a message to the email (#132) @oleg-nenashev
Password Reset: Do not return an HTML page when called as REST API (#130) @oleg-nenashev
Fix assets after jenkins.io moved to www.jenkins.io (#127) @timja
Add username and basedn configuration for jira-ldap-syncer (#125) @olblak
Bump jira ldap sync version (#126) @timja
WEBSITE-710 - Add check for empty username / password (#124) @zbynek
Require docker&&linux (#123) @slide
Add the jenkins.io domain to some broken resources (#122) @aeoris
Modernize account app, fix warnings (#121) @daniel-beck
INFRA-1651 - Add datadog apm agent (#120) @olblak
should clas really be class ? (#118) @jeis2497052
Generate 14 char passwords (#119) @daniel-beck
INFRA-1370 - Remove spamcheck on usedfor signup form field (#116) @olblak
INFRA-1477 - Check if old/new password is provided (#117) @olblak
[WIP]INFRA-1407 - Make people type their email address twice in the account app signup (#112) @olblak
INFRA-1365 - Fix account.jenkins password mismatch exception (#113) @olblak
INFRA-883 - Ensure accountid or email is provided while password reset (#114) @olblak
INFRA-1298 - Update reset password and login message (#115) @olblak
INFRA-1413 - , INFRA-1381 - [WIP]Switch from google reCAPTCHA to botdetect (#111) @olblak
INFRA-536 - INFRA-1323 - Implement voting in board election (#108) @olblak
INFRA-1373 - Add ldap connection pooling (#110) @olblak
INFRA-1347 - Doesn't escape all html error message (#109) @olblak
Fix XSS vulnerabilities (#107) @olblak
INFRA-1210 - Accountapp: Add Auth options for SMTP server (#105) @olblak
BoardElections && CSS improvements (#104) @olblak
Add application configuration through env variables (#103) @olblak
Remove trailing space after password in email. (#98) @larrys
Update the Jenkinsfile to be a bit more modern and properly skip deployment for PRs (#97) @rtyler
Having issues with this triggering all the time. Remove ldap exists c… (#95) @larrys
Remove a few blacklist items. (#94) @larrys
Remove geoip information. ipvoid link can provide that information, i… (#93) @larrys
Removal of bad name checks. (#92) @larrys
Update the container to use the official jetty image (#91) @rtyler
Migrate the accountapp to Gradle and prepare for Docker-based deployment (#90) @rtyler
More blacklist removals (#89) @larrys
Remove the IP reputation checks. (#88) @larrys
Blacklist updates and for badeNameElement, require at least two chara… (#87) @larrys
Blacklist updates (#86) @larrys
Blacklist updates (#85) @larrys
Provide a spot to put things that usedFor can contain (smaller list o… (#84) @larrys
Blacklist updates. (#83) @larrys
Blacklist updates. (#82) @larrys
Blacklist updates (#81) @larrys
Blacklist updates (#80) @larrys
Provide a useful message for existing emails (#79) @larrys
Blacklist updates (#78) @larrys
Blacklist updates. (#77) @larrys
Blocklist updates. (#76) @larrys
Disallow naughty words from name and used for elements. (#75) @larrys
More blacklist items. (#74) @larrys
Blacklist updates (#73) @larrys
Fix non routable IP address being used for checks (#72) @larrys
Blacklist item (#71) @larrys
Backlist updates (#70) @larrys
Add the Jenkinsfile that's currently being used in ci.j.o to the repo (#69) @rtyler
Blacklist updates (#68) @larrys
Link to account search (#67) @larrys
More blacklist items. (#66) @larrys
Clean up emails that end in seo and digits. Move that to the regex em… (#65) @larrys
Let's now require the use (#64) @larrys
More blacklist items. (#63) @larrys
More blacklist items. (#62) @larrys
More blacklist items. (#61) @larrys
Fix used for check. (#60) @larrys
Email details on accounts that do get created (subject differs, so em… (#59) @larrys
Give us all the reasons they were blocked in the rejection email, to … (#58) @larrys
More blacklist items (#57) @larrys
More blacklist items (#56) @larrys
Fix checks for duplicate email and userids (#55) @larrys
Fix compile issue, and a few other things. (#54) @larrys
More blacklist items. (#53) @larrys
Use MegaRBL.net for reputation checks for IP addresses. (#52) @larrys
More blacklist items. (#51) @larrys
More blacklist items. (#50) @larrys
More blacklist items. (#49) @larrys
More blacklist items. (#48) @larrys
More blacklist items. (#47) @larrys
More blacklist items. (#46) @larrys
More blacklist items. (#45) @larrys
Blacklist updates (#44) @larrys
Blacklist updates (#43) @larrys
More blacklist items (#42) @larrys
More blacklist items (#41) @larrys
Move use blacklist checks below ip and email checks. (#40) @larrys
More blacklist items (#39) @larrys
Check use is not same as a name element (#38) @larrys
Allow the IP blacklist allow to block whole subnets (#37) @larrys
Add some more invalid uses of jenkins. (#36) @larrys
Trivial readme updates to test PR builds (#8) @rtyler
Provide a use blacklist. At least some spammers are honest. (#35) @larrys
Ask for a reason (optional) on the account request page, so we can di… (#34) @larrys
Fixed warning about duplicate dependency (#33) @batmat
Try and accelerate the spammer triage process (#32) @batmat
Change to check stopforumspam after we check our out list of checks. (#31) @larrys
In addition to the userid, check first and last name for characters m… (#30) @larrys
Block persistant spammer. (#29) @larrys
Block userids make up of just sdfg in any order and just those charac… (#28) @larrys
Don't spam on cookie catches (#27) @larrys
INFRA-550 - First stab at reCAPTCHA 2. (#23) @larrys
Block some IP's that are tripping the circuit breaker a lot. (#26) @larrys
Block yandex.com email addresses. (#25) @larrys
Add in an IP blacklist. (#24) @larrys
For circuit breaker, don't give spammers any clue this will be tempor… (#22) @larrys
Create a cookie that will prevent users from creating multiple accoun… (#21) @larrys
This should catch all the ones that end in seo1@gmail.com (#20) @larrys
Another temporary email service to block. (#19) @larrys
INFRA-532 - Check for duplicate userid, and show the java.net error m… (#17) @larrys
Another throw away email domain to block. (#18) @larrys
Block janesmith*, since they create lots of gmail accounts. (#16) @larrys
INFRA-532 - Block users from creating multiple accounts with the same… (#15) @larrys
More updates (#14) @larrys
Since this user uses *viz.michael@gmail.com, block viz.michael@gmail.… (#13) @larrys
Blacklist this spammer email (#12) @larrys
More spammers. (#11) @larrys
Sort addresses, and add some spammers. (#10) @larrys
More pesky spammers. (#9) @larrys
Another pesky spammer. (#7) @larrys
More pesky spammers (#6) @larrys
Another pesky spammer. (#5) @larrys
Block another common spam domain. (#4) @larrys
Block persistent spammer. (#3) @larrys
Docker image update (#2) @rtyler
Disallow mailinator.com addresses. (#1) @larrys