Commit graph

342 commits

Author SHA1 Message Date
Jared Donovan
903713e705 WIP - Mixed content error for Issue #543 (#661)
* Set trust proxy option on Express app.

* Fix replacement of filePath for full screen and embed sketches.

* Use const rather than let because  is never reassigned.
2018-07-03 13:02:46 -07:00
Cassie Tarakajian
fa5a9e39b2 fix linting errors and do stuff to make build work 2018-06-26 19:13:13 -07:00
Cassie Tarakajian
82059bbfb0 remove nginx Dockerfile because it's not actually necessary 2018-06-26 19:05:08 -07:00
Cassie Tarakajian
f06198a4e1 start to add mongo configuration 2018-06-25 16:13:31 -07:00
Cassie Tarakajian
432361bc86 fix lint errors 2018-06-20 10:28:54 -07:00
Cassie Tarakajian
d29be20395 Merge branch 'master' into production-docker 2018-06-20 10:23:13 -07:00
Jared Donovan
9a0c044884 Fixed the linting errors that I could. (#653) 2018-06-18 14:45:50 -07:00
Cassie Tarakajian
b172087b98 get local-ssl-proxy working for testing prod locally 2018-06-18 14:32:09 -07:00
Cassie Tarakajian
a14c232935 fix fetch example scripts, add webpack config to build fetch script bundles 2018-06-18 14:32:09 -07:00
Cassie Tarakajian
131e853503 change Dockerfile to fix environment variables and fetching examples 2018-06-18 14:32:09 -07:00
Cassie Tarakajian
41f793b130 remove unused index.html, move example fetch to own folder 2018-06-18 14:30:10 -07:00
Cassie Tarakajian
5613a285f6 move github files to .github folder, delete useless server config, get development Docker build working 2018-06-18 14:30:10 -07:00
Jared Donovan
c814826c4a Remove EXAMPLE_USERNAME as a settable option as per discussion on Issue #646 (#651) 2018-06-18 14:30:05 -07:00
Cassie Tarakajian
9958619fc4 fixes #630 and updates codemirror 2018-05-30 15:23:32 -07:00
Cassie Tarakajian
63be548f63 fix linting error 2018-05-30 14:23:11 -07:00
Liang Tang
d5856ba923 Remove authorization from specific routes (#642)
* fixes #569

* update listObjectsInS3ForUser

* update client-side routes

* update aws controller

* update

* redirect to /login when unlogged in
2018-05-29 21:37:10 -07:00
Andrew Mitchell
3bb5bea0ff Issue #598 Add Meta to Transnational Emails (#634)
* Added meta tags to transactional emails

* Use single quotation marks to match style

* single quotes must be used

* single quotes must be used
2018-05-14 11:53:21 -07:00
Cassie Tarakajian
9ba507e091 fix server-side lint error 2018-05-08 19:30:33 -07:00
Cassie Tarakajian
bd303b7710 fix even more linting errors 2018-05-08 19:16:04 -07:00
Cassie Tarakajian
c90dac55b7 update eslint and fix linting errors 2018-05-08 19:16:04 -07:00
Cassie Tarakajian
f9d1c601b3 move around static and dist folders to work with server bundle, and make preview generation work with this 2018-05-08 19:16:03 -07:00
Cassie Tarakajian
7b6a755ef4 add meta viewport tag 2018-05-02 13:14:05 -07:00
Cassie Tarakajian
96646d0d73 update references to p5.js to latest version 2018-05-02 12:44:16 -07:00
Cassie Tarakajian
fa2f3fb444 fix crash in example fetch script 2018-05-02 12:29:38 -07:00
Cassie Tarakajian
9daa0a35f8 fix linting errors in #556 2018-05-02 12:16:20 -07:00
Bharathvaj
bc36a79b94 Move examples username and password to .env file (#556)
* Move examples username and password to .env file

* Update README.md

* Update examples.js

* Update examples.js
2018-05-02 12:15:33 -07:00
Madhurjya Pegu
307091ad3c Solving #553 Addition of google oauth 2.0 for easy login (#608)
* google oauth added

* google credentials 

updated .env description for google oauth

* changes done wrt review
2018-04-18 13:38:02 -07:00
Himanshu
ae1e13fd11 Adding basic meta tags. (#565)
* Adding basic meta tags.

* Update index.html

* Changing description.

* Added meta to 404error
2018-03-08 16:16:48 -05:00
Dhruvdutt Jadhav
51f39c003e Clean explicit json parse (#584) 2018-03-01 18:13:19 -05:00
Dhruvdutt Jadhav
3efe3d20f7 chore: fix linting issues (#570) 2018-02-26 15:05:02 -05:00
Cassie Tarakajian
e70b9d618e fix linting errors 2018-02-20 14:22:33 -05:00
Cassie Tarakajian
f05abfcb9a fix for #552 2018-02-20 14:16:58 -05:00
Joey Lee
2a92d87b52 Updated generative-design branch ref to master (#552)
* replaced () with {} to fix implicit return error

* added first version of fetching generative-design examples

* ignore local testing files

* formatting

* updated examples-gg-latest

* updated examples-gg-latest.js

- data files not served via rawgit - hallelujah!
- added jquery

* updated p5 version

* refactoring and code cleanup

* added comment

* comment out link to svgFiles - unused

* moved commented code

* fixed conflicts

* linted examples-gg-latest

* changed branch ref to master

* rm spaces
2018-02-20 13:01:22 -05:00
Mr.tang
27d4013585 Fixes #520 (#538)
* Fix #520

* delete consoles

* restore

* return 404 from server side

* fix lint error

* add sketch check for user
2018-02-19 15:21:47 -05:00
Cassie Tarakajian
7c421d5e15 fix minor crash in generative design example fetch 2018-02-15 15:33:07 -05:00
Mr.tang
6f5472020c Fixes #517 (#530)
* update download file's name

* fix lint error

* use moment.js

* slugify filename

* fix lint error
2018-02-13 11:28:06 -05:00
Cassie Tarakajian
daeed8749d
fixes #528 (#536) 2018-02-09 16:32:06 -05:00
Joey Lee
6faf52f61e Added script to download and save all generative-design project examples to p5-web-editor (#526)
* replaced () with {} to fix implicit return error

* added first version of fetching generative-design examples

* ignore local testing files

* formatting

* updated examples-gg-latest

* updated examples-gg-latest.js

- data files not served via rawgit - hallelujah!
- added jquery

* updated p5 version

* refactoring and code cleanup

* added comment

* comment out link to svgFiles - unused

* moved commented code

* fixed conflicts

* linted examples-gg-latest
2018-02-08 16:02:35 -05:00
Cassie Tarakajian
3307613aec
adds slugify feature for #522 (#523) 2018-02-07 16:00:09 -05:00
Cassie Tarakajian
86318795ef update p5 versions to latest 2018-02-01 17:17:05 -05:00
Cassie Tarakajian
6cd71acb81
update list of mime types and move to common server and client file (#511)
Fixes #476 and fixes #450
2018-02-01 16:45:19 -05:00
Cassie Tarakajian
c50f64c0f3 fix linting errors 2018-01-09 16:21:40 -05:00
Cassie Tarakajian
81f7c53a1b update script to migrate assets to cdn url 2018-01-09 16:12:02 -05:00
Cassie Tarakajian
fb1684ce4b add isAuthenticated middleware, add isAuthenticated middleware to certain routes, make all other routes consistent 2018-01-09 15:57:49 -05:00
Francis Li
2f29d6add1 Fixes #500 removes CSRF token setting in cookie and validation on request (#501) 2018-01-08 16:12:55 -05:00
Cassie Tarakajian
b45e53483f try moving url if key does not exist 2018-01-08 15:01:43 -05:00
Cassie Tarakajian
9cf50aa8d5 keep playing with logging 2018-01-08 14:57:49 -05:00
Cassie Tarakajian
faae16d930 add more logging 2018-01-08 14:44:32 -05:00
Cassie Tarakajian
b4833a6fb1 log userid 2018-01-08 14:41:27 -05:00
Cassie Tarakajian
26b37b6ec7 add logging, call file cb if key does not exist 2018-01-08 14:39:33 -05:00
Cassie Tarakajian
3f5420d437 don't crash if file doesn't exist 2018-01-08 14:34:56 -05:00
Cassie Tarakajian
d58d8ea0bd finish moving migration of projects to username folder to chunks 2018-01-08 14:26:51 -05:00
Cassie Tarakajian
899b5c9710 update migration to move assets to under user id 2018-01-08 13:51:35 -05:00
Cassie Tarakajian
a11e37116a fix callback mismatch 2017-12-27 12:29:36 -05:00
Cassie Tarakajian
4d5f18b1de remove console.log 2017-12-27 12:23:04 -05:00
Cassie Tarakajian
6612919f96 remove stray async 2017-12-27 12:22:12 -05:00
Cassie Tarakajian
fbc0dd40da process all files 2017-12-27 12:20:59 -05:00
Cassie Tarakajian
d4f78e0800 another fix 2017-12-27 12:20:04 -05:00
Cassie Tarakajian
665b1440d3 only use async 2017-12-27 12:18:23 -05:00
Cassie Tarakajian
00e49d647e change move bucket name to use async 2017-12-27 12:04:52 -05:00
Cassie Tarakajian
b2ee44a6c2 only save files that need to be saved 2017-12-26 22:23:45 -05:00
Cassie Tarakajian
754518bf77 fix syntax error 2017-12-26 22:21:41 -05:00
Cassie Tarakajian
9127d8f553 trying this again 2017-12-26 22:21:02 -05:00
Cassie Tarakajian
362a9702f4 maybe use await correctly now? 2017-12-26 22:17:53 -05:00
Cassie Tarakajian
434ee8e013 using await for the first time 2017-12-26 22:08:20 -05:00
Cassie Tarakajian
f196c4ebf8 more debugging 2017-12-26 21:57:44 -05:00
Cassie Tarakajian
ce89d6cc78 there is going to be a string of terrible commit messages while i fix this and the world will have to accept this 2017-12-26 21:55:56 -05:00
Cassie Tarakajian
cdd4f1c29b need to limit the number of projects loaded into runtime memory... 2017-12-26 21:54:09 -05:00
Cassie Tarakajian
0ba9f33f09 more debugging for migration 2017-12-26 21:50:45 -05:00
Cassie Tarakajian
ad269d60c6 add printing project name for debugging 2017-12-26 21:49:44 -05:00
Cassie Tarakajian
6abaf99899 for testing, exit after first file 2017-12-26 21:48:37 -05:00
Cassie Tarakajian
1c0da9320f actually save project in db migration 2017-12-26 21:47:11 -05:00
Cassie Tarakajian
9880ec5070 add database migration to move s3 bucket 2017-12-26 21:43:49 -05:00
Francis Li
76a81bb1a0 Fixes #497 by adding support for an optional new env variable, S3_BUCKET_URL_BASE (#499)
* Fixes #497 by adding support for an optional new env variable, S3_BUCKET_URL_BASE

* Add a section to README about optional S3 bucket URL base configuration.
2017-12-13 14:56:24 -05:00
Francis Li
c820b6258f Fixes #494 removes extra / in webpack url references in index.html (#495) 2017-12-08 15:07:54 -05:00
Francis Li
aadd533061 Fixes #491 adds support for a configurable cache-control max-age setting for serving static assets, with a default of 1d on production and 0 elsewhere (#492) 2017-12-08 15:01:39 -05:00
Francis Li
82ca755362 Fixes #489, only logs request in development (#490) 2017-12-08 14:50:53 -05:00
Cassie Tarakajian
03eae2f1ef fixes #479 and fixes #449 2017-11-28 14:48:50 -05:00
Cassie Tarakajian
e38474ce40 fix linting errors 2017-11-27 17:32:03 -05:00
Cassie Tarakajian
44f02d1159 add csrf token debugging 2017-11-27 17:26:32 -05:00
Cassie Tarakajian
d03b433cfe add additional logging for CSRF errors, redirect to 404 for invalid embed path 2017-11-27 16:58:53 -05:00
Cassie Tarakajian
28c2bda663 remove console logs to figure out getProjectAsset crash 2017-11-27 16:06:59 -05:00
Cassie Tarakajian
286c725407 add more debugging to getProjectAsset 2017-11-27 15:43:58 -05:00
Cassie Tarakajian
3b33f3acca catch getProjectAsset error 2017-11-27 15:14:50 -05:00
Cassie Tarakajian
fd284358c2 fix #466 2017-10-30 15:36:09 -04:00
Cassie Tarakajian
c30aba8e78 fix lingering linting errors 2017-10-15 20:27:05 -07:00
Akarshit Wal
20bc8633d7 Login and signup page not visible after login (#431)
* Login and signup page not visible after login

* Redirect added on server side
2017-09-29 11:52:20 -07:00
Cassie Tarakajian
63b47319d4 fix merge conflict 2017-08-01 16:07:21 -04:00
Zach Rispoli
e987e8f483 Bundle libraries when project is downloaded as zip (New approach) (#376)
* External libraries are bundled with zip when project is downloaded (#44)

* Fix linting errors

* Add a check for valid URLs before trying to bundle a library into project

* Add is-url lib to package.json
2017-07-19 19:56:52 +02:00
Cassie Tarakajian
4684feaff6 fix #394 2017-07-14 15:35:02 -04:00
Cassie Tarakajian
57402cca8b catch migration error 2017-07-11 11:53:38 -04:00
Cassie Tarakajian
0bac435c72 debug asset migration 2017-07-11 11:51:56 -04:00
Cassie Tarakajian
3b36cd1e9c fix asset migration script 2017-07-11 11:50:23 -04:00
Cassie Tarakajian
e140702784 Create Asset List View and refactor overlay code (#356)
* start to create asset list

* begin refactoring overlay component to remove duplicate code

* refactoring of overlays, asset list styles

* changes to add size to asset list

* fixes to asset list

* handle case in which a user hasn't uploaded any assets

* fix bug in which asset list only grabbed first asset

* remove console.log

* update overlay exit styling to use icon mixin
2017-07-11 17:37:43 +02:00
Cassie Tarakajian
0532990314 update p5 version to latest 2017-06-26 15:11:42 -04:00
Andrew Nicolaou
6cbc376d6e CSRF/XSS protection (#374)
* /api endpoints only allows requests with application/json Content-Type

Otherwise sends 406 Unacceptable

* Uses CSRF token

The CSRF token is sent as the cookie 'XSRF-TOKEN' on all HTML page
requests. This token is  picked up automatically by axios
and sent to the API with all requests as an 'X-XSRF-TOKEN' header.
The middleware runs on all routes and verifies that the token matches
what's stored in the session.
2017-06-26 13:58:58 -04:00
Cassie Tarakajian
4476405021 change all email links to update protocol based on node env 2017-06-26 13:48:24 -04:00
Andrew Nicolaou
1dc0c22cb7 Email verification (#369)
* Re-introduce Email Verification code

Revert "Revert "Email verification""
This reverts commit d154d8bff259350523a0f139e844db96c43d2ee1.

* Uses MJML to generate Reset Password email

* Sends Password Reset and Email Confirmation emails using MJML template

* Sends verified status along with user data

* API endpoint for resending email verification confirmation

* Displays verification status on Account page and allows resending

* Send back error string

* Passes email address through to sign/verify helper

* Uses enum-style object to set verified state

* Sends minimal info when user verifies since it can be done without login

* Provides /verify UI and sends confirmation token to API

* Better name for JWT secret token env var

* Adds mail config variables to Readme

* Encrypts email address in JWT

The JWT sent as the token in the Confirm Password URL
can be unencoded by anyone, although it's signature can only
be verified by us. To ensure that no passwords are leaked,
we encrypt the email address before creating the token.

* Removes unused mail templates

* Resets verified flag when email is changed and sends another email

* Moves email confirmation functions next to each other

* Extracts random token generator to helper

* Moves email confirmation actions into Redux

- updates the AccountForm label with a message to check inbox
- show status when verifying email token

* Uses generated token stored in DB for email confirmation

* Sets email confirmation status to verified if logging in from Github

* Sends email using new method on account creation

* Fixes linting errors

* Removes replyTo config
2017-06-26 12:48:28 -04:00
Cassie Tarakajian
1ae37ebaaa fix lingering linting errors 2017-06-13 16:47:36 -04:00
Zach Rispoli
396fc701c7 Fix issue with serving assets inside folders 2017-06-12 13:49:45 -04:00