summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2022-10-17Merge branch 'github/fork/pazkero/jesusalva/compat' into 'master'HEADmasterJesusalva Jesusalva2-0/+18
2021-08-29Compatibility layer for Pythonic Vault APIgithub/fork/pazkero/jesusalva/compatJesusaves2-0/+18
2020-05-15set legacy variables in ported charsgumi10-15/+147
2020-04-12the max password length for evol2 is actually still 23gumi1-1/+1
2020-03-31add support for nanoid for session tokensgumi6-54/+69
2020-03-28add email validation bypass for local developmentgumi1-1/+10
2020-03-28require sending the email address on identity validationgumi2-3/+9
2020-03-28add authentication bypass for local developmentgumi2-1/+12
2020-03-27set the vault account id in an account variablegumi5-4/+90
2020-03-27use sequelize setters for ip addressesgumi9-11/+23
2020-03-19bump minor versiongumi2-5/+1229
2020-03-18make sure the identity table is not uppercasegumi1-0/+2
2020-03-18fix cache update on evol name changegumi1-1/+1
2020-03-15refactor strictIPCheck => strictIpCheck in vault.logingumi1-1/+2
2020-03-15add an Identity typegumi7-90/+207
2020-03-15turn the session store into a proper classgumi3-46/+131
2020-03-11refactor the authentication and validationgumi7-541/+361
2020-03-08immediately swap the uuid after login and check the emailgumi2-2/+42
2020-03-06only give 30 minutes to click a login linkgumi1-3/+7
2020-03-06prevent uuid bruteforcinggumi7-8/+140
2020-03-06expose the vault account idgumi2-0/+6
2020-03-05oh how I wish this was typescriptgumi2-1/+3
2020-03-04this is for you, Jesusalvagumi7-24/+24
2020-03-04pre-cache the game accounts on logingumi12-189/+397
2020-03-03add rudimentary anti-bruteforcinggumi6-11/+79
2020-03-03tmwa accounts can have 4-character passwords (yes, it's dumb)gumi1-1/+1
2020-03-03improve rate limiter logginggumi1-9/+19
2020-03-03reduce the cooldown on legitimate tmwa operations to avoid bansgumi1-2/+2
2020-03-03simplify some sequelize operationsgumi2-11/+6
2020-03-03auto-fix accounts with no primary identitygumi1-1/+6
2020-03-02more bugs, yaygumi2-2/+2
2020-03-02fix primary identity assignment for new accountsgumi1-1/+1
2020-03-02hotfixgumi2-6/+26
2020-03-02add support for Vault + major refactorgumi35-113/+3084
2019-07-14add web pagegumi2-0/+12
2019-07-14remove unused stuffgumi2-3/+0
2019-05-26fix a typo in the outbound emailgumi1-2/+3
2019-05-26list all account names in the outbound reset emailgumi1-1/+5
2019-05-26tell players to contact staff if they believe they've been hackedgumi1-3/+3
2019-05-26prevent from doing many resets at the same timegumi1-2/+18
2019-05-26add uuid-based password resetgumi3-6/+119
2019-05-25use template literals instead of relying on console printfgumi1-2/+2
2019-05-25unfortunately we're using an older node binary on dezilaromedgumi2-2/+3
2019-05-25send to webhook on successful account creationv2.1.0gumi3-4/+31
2019-05-25use integrated nodemailer and connect to tmwa-admin directlygumi4-150/+172
2018-04-11EXPERIMENTAL: automated password resets for tmwagumi3-4/+130
2018-04-11make the console less verbosegumi3-18/+16
2018-04-10remove a testing leftovergumi1-1/+0
2018-04-10...it turns out tokens can be quite longgumi1-1/+1
2018-04-10new major version: v1.0.0v1.0.0gumi6-212/+267