Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Prevent Parse Server start in case of unknown option in server configuration #8987

Merged
merged 33 commits into from
Apr 7, 2024
Merged

Commits on Mar 4, 2024

  1. Configuration menu
    Copy the full SHA
    b3924bd View commit details
    Browse the repository at this point in the history

Commits on Mar 5, 2024

  1. Configuration menu
    Copy the full SHA
    70e7a02 View commit details
    Browse the repository at this point in the history

Commits on Mar 14, 2024

  1. fix: splitting test cases | ignored internal configs | covered all co…

    …nfig variables | fixed issues with initial validations
    vivekjoshi556 committed Mar 14, 2024
    Configuration menu
    Copy the full SHA
    99a03d2 View commit details
    Browse the repository at this point in the history
  2. fix: resolve conflicts

    vivekjoshi556 committed Mar 14, 2024
    Configuration menu
    Copy the full SHA
    a9e7875 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    946d4b4 View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2024

  1. Configuration menu
    Copy the full SHA
    b70592e View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    e791e40 View commit details
    Browse the repository at this point in the history
  3. Apply suggestions from code review

    Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
    Signed-off-by: Vivek Joshi <37882929+vivekjoshi556@users.noreply.github.com>
    vivekjoshi556 and mtrezza committed Mar 16, 2024
    Configuration menu
    Copy the full SHA
    d4ab4f0 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    e9311b3 View commit details
    Browse the repository at this point in the history
  5. chore(release): 7.0.0-alpha.27 [skip ci]

    # [7.0.0-alpha.27](7.0.0-alpha.26...7.0.0-alpha.27) (2024-03-15)
    
    ### Bug Fixes
    
    * CacheAdapter does not connect when using a CacheAdapter with a JSON config ([#8633](#8633)) ([720d24e](720d24e))
    semantic-release-bot authored and vivekjoshi556 committed Mar 16, 2024
    Configuration menu
    Copy the full SHA
    8aaa172 View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    8ef8f54 View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    80fb070 View commit details
    Browse the repository at this point in the history
  8. Update src/ParseServer.js

    Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
    Signed-off-by: Vivek Joshi <37882929+vivekjoshi556@users.noreply.github.com>
    vivekjoshi556 and mtrezza committed Mar 16, 2024
    Configuration menu
    Copy the full SHA
    79f41fc View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    93022fe View commit details
    Browse the repository at this point in the history
  10. Configuration menu
    Copy the full SHA
    b754139 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2024

  1. Configuration menu
    Copy the full SHA
    7819bdb View commit details
    Browse the repository at this point in the history

Commits on Mar 21, 2024

  1. Configuration menu
    Copy the full SHA
    744fb9e View commit details
    Browse the repository at this point in the history
  2. refactor: removing duplication

    feat: Upgrade to Parse JS SDK 5 (#9022)
    
    chore(release): 7.0.0-alpha.28 [skip ci]
    
    * Upgrade to Parse JS SDK 5 ([#9022](#9022)) ([ad4aa83](ad4aa83))
    
    fix: Server crashes on invalid Cloud Function or Cloud Job name; fixes security vulnerability [GHSA-6hh7-46r2-vf29](GHSA-6hh7-46r2-vf29) (#9024)
    
    chore(release): 7.0.0-alpha.29 [skip ci]
    
    * Server crashes on invalid Cloud Function or Cloud Job name; fixes security vulnerability [GHSA-6hh7-46r2-vf29](GHSA-6hh7-46r2-vf29) ([#9024](#9024)) ([9f6e342](9f6e342))
    
    empty
    
    chore(release): 7.0.0-beta.1 [skip ci]
    
    * CacheAdapter does not connect when using a CacheAdapter with a JSON config ([#8633](#8633)) ([720d24e](720d24e))
    * Conditional email verification not working in some cases if `verifyUserEmails`, `preventLoginWithUnverifiedEmail` set to functions ([#8838](#8838)) ([8e7a6b1](8e7a6b1))
    * Deny request if master key is not set in Parse Server option `masterKeyIps` regardless of ACL and CLP ([#8957](#8957)) ([a7b5b38](a7b5b38))
    * Docker image not published to Docker Hub on new release ([#8905](#8905)) ([a2ac8d1](a2ac8d1))
    * Docker version releases by removing arm/v6 and arm/v7 support ([#8976](#8976)) ([1f62dd0](1f62dd0))
    * GraphQL file upload fails in case of use of pointer or relation ([#8721](#8721)) ([1aba638](1aba638))
    * Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2](GHSA-6927-3vr9-fxf2) which affects Parse Server deployments using a Postgres database ([#8961](#8961)) ([cbefe77](cbefe77))
    * Incomplete user object in `verifyEmail` function if both username and email are changed ([#8889](#8889)) ([1eb95ae](1eb95ae))
    * Parse Server option `emailVerifyTokenReuseIfValid: true` generates new token on every email verification request ([#8885](#8885)) ([0023ce4](0023ce4))
    * Parse Server option `fileExtensions` default value rejects file extensions that are less than 3 or more than 4 characters long ([#8699](#8699)) ([2760381](2760381))
    * Server crashes on invalid Cloud Function or Cloud Job name; fixes security vulnerability [GHSA-6hh7-46r2-vf29](GHSA-6hh7-46r2-vf29) ([#9024](#9024)) ([9f6e342](9f6e342))
    * Server crashes when receiving an array of `Parse.Pointer` in the request body ([#8784](#8784)) ([66e3603](66e3603))
    * Username is `undefined` in email verification link on email change ([#8887](#8887)) ([e315c13](e315c13))
    
    * Add `installationId` to arguments for `verifyUserEmails`, `preventLoginWithUnverifiedEmail` ([#8836](#8836)) ([a22dbe1](a22dbe1))
    * Add `installationId`, `ip`, `resendRequest` to arguments passed to `verifyUserEmails` on verification email request ([#8873](#8873)) ([8adcbee](8adcbee))
    * Add `Parse.User` as function parameter to Parse Server options `verifyUserEmails`, `preventLoginWithUnverifiedEmail` on login ([#8850](#8850)) ([972f630](972f630))
    * Add password validation via POST request for user with unverified email using master key and option `ignoreEmailVerification` ([#8895](#8895)) ([633a9d2](633a9d2))
    * Add support for MongoDB 7 ([#8761](#8761)) ([3de8494](3de8494))
    * Add support for MongoDB query comment ([#8928](#8928)) ([2170962](2170962))
    * Add support for Node 20, drop support for Node 14, 16 ([#8907](#8907)) ([ced4872](ced4872))
    * Add support for Postgres 16 ([#8898](#8898)) ([99489b2](99489b2))
    * Allow `Parse.Session.current` on expired session token instead of throwing error ([#8722](#8722)) ([f9dde4a](f9dde4a))
    * Deprecation DEPPS5: Config option `allowClientClassCreation` defaults to `false` ([#8849](#8849)) ([29624e0](29624e0))
    * Deprecation DEPPS6: Authentication adapters disabled by default ([#8858](#8858)) ([0cf58eb](0cf58eb))
    * Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ([#8855](#8855)) ([4e6a375](4e6a375))
    * Deprecation DEPPS8:  Parse Server option `allowExpiredAuthDataToken` defaults to `false` ([#8860](#8860)) ([e29845f](e29845f))
    * Deprecation DEPPS9: LiveQuery `fields` option is renamed to `keys` ([#8852](#8852)) ([38983e8](38983e8))
    * Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling ([#8894](#8894)) ([70c280c](70c280c))
    * Switch GraphQL server from Yoga v2 to Apollo v4 ([#8959](#8959)) ([105ae7c](105ae7c))
    * Upgrade Parse Server Push Adapter to 5.0.2 ([#8813](#8813)) ([6ef1986](6ef1986))
    * Upgrade to Parse JS SDK 5 ([#9022](#9022)) ([ad4aa83](ad4aa83))
    
    * Improved IP validation performance for `masterKeyIPs`, `maintenanceKeyIPs` ([#8510](#8510)) ([b87daba](b87daba))
    
    * The Parse Server option `allowClientClassCreation` defaults to `false`. ([29624e0](29624e0))
    * A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class. ([a7b5b38](a7b5b38))
    * Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before. ([70c280c](70c280c))
    * Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true` ([0cf58eb](0cf58eb))
    * Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter ([e29845f](e29845f))
    * LiveQuery `fields` option is renamed to `keys` ([38983e8](38983e8))
    * Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'` ([4e6a375](4e6a375))
    * Removes support for Node 14 and 16 ([ced4872](ced4872))
    * Removes support for Postgres 11 and 12 ([99489b2](99489b2))
    * The `Parse.User` passed as argument if `verifyUserEmails` is set to a function is renamed from `user` to `object` for consistency with invocations of `verifyUserEmails` on signup or login; the user object is not a plain JavaScript object anymore but an instance of `Parse.User` ([8adcbee](8adcbee))
    * `Parse.Session.current()` no longer throws an error if the session token is expired, but instead returns the session token with its expiration date to allow checking its validity ([f9dde4a](f9dde4a))
    * `Parse.Query` no longer supports the BSON type `code`; although this feature was never officially documented, its removal is announced as a breaking change to protect deployments where it might be in use. ([3de8494](3de8494))
    
    ci: Add lint rule for curly braces (#9032)
    
    refactor: Dry `handleAuthData` for safer code maintenance in the future (#9025)
    
    refactor: Upgrade @graphql-tools/merge from 8.4.1 to 9.0.3 (#9030)
    
    refactor: Bump mongodb-runner from 5.4.4 to 5.5.4 (#9036)
    
    fix: `Required` option not handled correctly for special fields (File, GeoPoint, Polygon) on GraphQL API mutations (#8915)
    
    chore(release): 7.0.0-alpha.30 [skip ci]
    
    * `Required` option not handled correctly for special fields (File, GeoPoint, Polygon) on GraphQL API mutations ([#8915](#8915)) ([907ad42](907ad42))
    
    refactor: removing duplication
    vivekjoshi556 committed Mar 21, 2024
    Configuration menu
    Copy the full SHA
    05ce806 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    49fdbf4 View commit details
    Browse the repository at this point in the history
  4. fix: import error

    vivekjoshi556 committed Mar 21, 2024
    Configuration menu
    Copy the full SHA
    c5c2b5d View commit details
    Browse the repository at this point in the history

Commits on Mar 24, 2024

  1. nits

    Signed-off-by: Manuel <5673677+mtrezza@users.noreply.github.com>
    mtrezza committed Mar 24, 2024
    Configuration menu
    Copy the full SHA
    53f1d93 View commit details
    Browse the repository at this point in the history
  2. suggestion

    mtrezza committed Mar 24, 2024
    Configuration menu
    Copy the full SHA
    e333d73 View commit details
    Browse the repository at this point in the history
  3. Update ParseServer.js

    mtrezza committed Mar 24, 2024
    Configuration menu
    Copy the full SHA
    2297f47 View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2024

  1. Merge branch 'alpha' into issue_8938

    Signed-off-by: Manuel <5673677+mtrezza@users.noreply.github.com>
    mtrezza committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    3ce2ae6 View commit details
    Browse the repository at this point in the history
  2. refactor

    mtrezza committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    753bbd8 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    2c058d8 View commit details
    Browse the repository at this point in the history
  4. refactor

    mtrezza committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    024c154 View commit details
    Browse the repository at this point in the history

Commits on Apr 6, 2024

  1. Configuration menu
    Copy the full SHA
    7699453 View commit details
    Browse the repository at this point in the history
  2. refactor: v2

    vivekjoshi556 committed Apr 6, 2024
    Configuration menu
    Copy the full SHA
    b25cfef View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    adfed9d View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    5756cca View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    f9ed251 View commit details
    Browse the repository at this point in the history
  6. removing empty newlines

    Signed-off-by: Manuel <5673677+mtrezza@users.noreply.github.com>
    mtrezza committed Apr 6, 2024
    Configuration menu
    Copy the full SHA
    7ac43a5 View commit details
    Browse the repository at this point in the history