- Transition to the updated method of signing authenticated app requests: #983
- [FIX]: Fix for an issue that prevented making app authenticated requests with query parameters containing '!': #978
- Require
firstName
andlastName
on signup: #945 - Extra deployment steps: None
- Produce the emailChanged event only once: #940
- Produce Hubspot tracking cookie to watchman when an account is created: #932
- [REMOVAL]: Users module will no longer send emails: #887
- Ensure
target
is set properly on all watchman notifications: #887 - Use
target
to give signup users correct roles/policies: #887 - Extra deployment steps:
- Deploy userSvc cookbook 1.4.4
- Ensure Cloudfront is forwarding
host
header - Create policies for new showcase users + update config for
newUserPermissions
- Produce certain user account events to a Kinesis stream
- [FEATURE]: Add ability to give orgs a
paymentPlanId
when they are created viaPOST /api/account/users/confirm/:id
: #838 - Extra deployment steps:
- Deploy userSvc cookbook 1.4.3 to staging/production envs
- Deploy watchman 0.2.0
- Disable emailing in the userSvc environment
- Add flag to toggle email notifications: #825
- [FEATURE]: Support app authentication: #823
- [FIX]: Stop jamming user id into new advertisers on signup: #806
- Extra deployment steps: None
- Deploy userSvc cookbook 1.4.2 to staging/production envs
- [FIX]: Fix characters of uuids to be url-safe: #822
- Extra deployment steps:
- Search through existing ids and convert '~' to '-' and '!' to '_'
- [FIX]: Compress job results written to memcached: #819
- Extra deployment steps: None
- Update UUIDs: #768
- [FEATURE]: Support app authentication: #798
- Update
/confirm
endpoint to use app authentication instead of sixxy user: #799 - Extra deployment steps:
- Deploy c6env cookbook version 2.16.0
- Deploy userSvc cookbook version 1.4.0
- Create cwrx application in db
- Support
referralCode
prop, + set on org when confirming new user: #737 - Extra deployment steps:
- Update system user's policy with
fieldValidation.orgs.referralCode.__allowed = true
- Update system user's policy with
- [FIX]: Cease recursive validation if a field is unchanged: #728
- Add support for
decorated
query param on POST + PUT user endpoints: #729 - [FIX]: Upgrade mongo driver to 2.x, fixing reconnect issues: #717
- [BREAKING CHANGE]: Do not create customers on user confirmation: #697
- [BREAKING CHANGE]: Do not store
advertiser
ids on users: #697
- [FIX]: Do not put the user into
'error'
state if confirmation fails: #668 - Extra deployment steps: None
- [FEATURE]: Add job manager to userSvc to send 202s for long requests: #638
- Extra deployment steps: None
- [FIX]: Fix spacing on logo in email templates #645
- Changing user's email sends messages to new + old address: #642
- Extra deployment steps: None
- Integrate designed email templates: #553
- Extra deployment steps:
- Deploy userSvc cookbook 1.3.9 to staging/production envs
- [FIX]: Fix for an issue that arose on concurrent confirmation requests: #567
- Allow
null
to be set for validated fields: #573 - Expire login sessions after 30 minutes: #487
- Extra deployment steps:
- Deploy userSvc cookbook 1.3.8 to staging/production envs
- Test environments need to be updated to run memcached and monitor
- [FIX]: Fix for an issue that prevented cookie being returned for internal endpoint in staging: #566
- [FIX]: Fix for an issue that prevented newly signed up users from receiving roles and policies: #564
- Extra deployment steps: None
- [FIX]: Stop logging cookie header: #539
- [FEATURE]: Add resend activation endpoint: #508
- [FEATURE]: Add new user confirmation endpoint: #484
- [FIX]: Setting
ids
user filter param to''
returns no users: #524 - [FEATURE]: Add new user signup endpoint: #483
- Extra deployment steps:
- Deploy new userSvc cookbook to staging/production envs
- Create sixxy user for staging + production environments with permissions to create orgs, customers, and advertisers
- [FIX]: Validate pagination params: #512
- [FEATURE]: Add handling for
fields
param: #454 - [FEATURE]: Add endpoints for roles + policies: #475
- [FIX]: Auth middleware will handle users with roles + policies: #475
- [FIX]: Use Model to validate user docs: #475
- Extra deployment steps:
- Deploy updated cookbook
- Update c6mongo cfg in environments to setup role + policy indexes
- Update proshop to correctly create + edit users, roles, and policies
- [REFACTOR]: Re-write to use CrudSvc: #446
- Multi-get endpoint now returns 200: [] when no users are found instead of a 404: #337
- [FIX]: Cookie and session security improvements: #423
- Extra deployment steps:
- Deploy updated cookbooks
- Set
sessions.secure = true
for staging + production environments
- [FEATURE]: Add ability to query by list of ids: #365
- Extra deployment steps: None
- [FEATURE]: Add journaling: #309
- Extra deployment steps:
- Deploy new c6mongo and create capped audit collection
- Deploy new cookbook and update environment with c6Journal config
- [FIX]: Defend against query selector injection attacks: #303
- Extra deployment steps: None
- [FIX]: Give default users permission to read org's sites: #285
- Extra deployment steps: Update existing users with site permissions
- [FIX]: Check equality of existing permissions before rejecting on PUT: #280
- Extra deployment steps: None
- [FIX]: Save session docs as JSON, not strings: #261
- [FEATURE]: Add endpoint for deleting users' login sessions: #261
- [FIX]: Change mongo read preference to primaryPreferred: #262
- Extra deployment steps: Delete/convert existing stringified sessions
- [FEATURE]: Send Content-Range header when paginating orgs: #257
- Extra deployment steps: None
- [FIX]: By default, allow users to read org-level users and edit own org: #255
- Extra deployment steps: None
- [FIX]: Default new users' type to 'Publisher': #250
- Extra deployment steps: None
- [FIX]: Fix hardcoding new users' config: #242
- Extra deployment steps: None
- [FIX]: Allow admins to change users' orgs: #235
- [FIX]: Properly allow overriding the default applications list: #235
- Extra deployment steps: None
- [FIX]: Force emails to lowercase: #228
- Extra deployment steps: Convert all existing user's email addresses to lowercase
- [FIX]: Setup default config object on new users: #224
- [FEATURE]: Allow admins to query for all users: #219
- [FEATURE]: Email notifications for account updates: #209
- Extra deployment steps:
- Deploy new userSvc cookbook to staging/production envs
- Verify that staging/production IAM roles have proper access to SES
- [FIX]: Update default user perms to allow org-level exp edits: #211
- Extra deployment steps: None
- [FIX]: Fix mongo reconnect: #151
- [FIX]: Check for existing user with newEmail when changing email: #153
- Extra deployment steps: None
- [FIX]: Escape/unescape keys in mongo objects: #147
- Extra deployment steps: None
- [FIX]: Use email field in place of username: #124
- Extra deployment steps: None