* Fixes#497 by adding support for an optional new env variable, S3_BUCKET_URL_BASE
* Add a section to README about optional S3 bucket URL base configuration.
* Re-introduce Email Verification code
Revert "Revert "Email verification""
This reverts commit d154d8bff259350523a0f139e844db96c43d2ee1.
* Uses MJML to generate Reset Password email
* Sends Password Reset and Email Confirmation emails using MJML template
* Sends verified status along with user data
* API endpoint for resending email verification confirmation
* Displays verification status on Account page and allows resending
* Send back error string
* Passes email address through to sign/verify helper
* Uses enum-style object to set verified state
* Sends minimal info when user verifies since it can be done without login
* Provides /verify UI and sends confirmation token to API
* Better name for JWT secret token env var
* Adds mail config variables to Readme
* Encrypts email address in JWT
The JWT sent as the token in the Confirm Password URL
can be unencoded by anyone, although it's signature can only
be verified by us. To ensure that no passwords are leaked,
we encrypt the email address before creating the token.
* Removes unused mail templates
* Resets verified flag when email is changed and sends another email
* Moves email confirmation functions next to each other
* Extracts random token generator to helper
* Moves email confirmation actions into Redux
- updates the AccountForm label with a message to check inbox
- show status when verifying email token
* Uses generated token stored in DB for email confirmation
* Sets email confirmation status to verified if logging in from Github
* Sends email using new method on account creation
* Fixes linting errors
* Removes replyTo config
* Higher-order component to force some routes to HTTPS
* Force all user-management routes to HTTPS
* Redirect to sourceProtocol as route unmounts.
By default, no redirection occurs if sourceProtocol is not explicitly
defined.
* Sets serveSecure flag on new projects and usea after forcing protocol
The flag is set to `false` on all projects and as the UI has no way to
change this, it always redirects to HTTP after a signup/login action.
* Move HoC to be with other top-level components
* Server should respond to account page request
* Serves AccountView over HTTPS
* Turns HTTPS redirection off in development by default
Will log to the browser console any redirection that would
have happened. Added a line in the README about how to
enable this for testing in development.
* Add ability to delete projects from sketch list
- Fixes#76
- Also gets rid of outdated Sketch module
* Styling for Sketch List trash can
* Merge all the stuff
* Fix trash can line height
Cassie Tarakajian