b426a42a4f
fix(login): guard logIn() behind token check in password signup ( #10518 ) ( #10650 )
...
When MAIL_URL is configured the account service intentionally returns
token: undefined to enforce email confirmation before granting access.
SignupForm.svelte was calling logIn() unconditionally, which triggered
PUT /cookie with no Authorization header. The cookie endpoint returned
a 401 whose response body was not parseable as JSON, crashing the client
with "Unexpected token 'N', 'Not Found' is not valid JSON". The account
was created successfully but the user was stuck on the signup page.
- Guard logIn() with `result.token != null`, matching the pattern
already used in doLoginNavigate() in utils.ts
- Fix PUT /cookie 401 response to use ctx.res.writeHead + ctx.res.end
with the JSON body inline, consistent with the rest of the file.
Previously ctx.body was set (Koa pattern) then ctx.res.end() was
called with no body (raw Node pattern), so the body was never sent.
- Add unit tests for the token guard logic
Fixes #10518
Signed-off-by: Don Kendall <kendall@donkendall.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-19 14:48:29 +07:00
Artyom Savchenko and GitHub
5f7f712be3
Revert "Fix: password signup crashes with JSON parse error when MAIL_URL is c…" ( #10534 )
...
This reverts commit f391dd0a5d
2026-02-21 14:55:46 +07:00
Yulian Diaz and GitHub
f391dd0a5d
Fix: password signup crashes with JSON parse error when MAIL_URL is configured ( #10519 )
...
When signing up with a password on deployments with MAIL_URL set, the
account service returns token: undefined to enforce email confirmation.
SignupForm.svelte was calling logIn() unconditionally, which triggered
PUT /cookie without an Authorization header, returning a 401 with an
unparseable body and leaving the user stuck on the signup page.
- Guard logIn() in SignupForm.svelte with `result.token != null`, matching
the pattern already used in doLoginNavigate() in utils.ts
- Fix PUT /cookie 401 response to use Koa's ctx.status/ctx.body instead of
raw ctx.res.writeHead/end, so the error body is correctly serialized
- Add unit tests for the token guard logic
Fixes #10518
Signed-off-by: Yulian Diaz <5605867+spatialy@users.noreply.github.com >
2026-02-19 14:09:29 +07:00
c8aec52f13
Postgress support ( #10331 )
...
* Pure PostgreSQL
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
* Fix formatting
* Optimize a tests
+ Optimize a stream docker build
* Fix migrations
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* Fix datalake image
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* Fix formatting
Signed-off-by: Artem Savchenko <armisav@gmail.com >
---------
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
Signed-off-by: Artem Savchenko <armisav@gmail.com >
Co-authored-by: Andrey Sobolev <haiodo@gmail.com >
2025-12-26 12:11:38 +07:00
Alexander Onnikov and GitHub
621a61da22
add usage info to workspace status ( #10172 )
...
Signed-off-by: Alexander Onnikov <Alexander.Onnikov@xored.com >
2025-10-30 19:40:20 +07:00
Artyom Savchenko and GitHub
199ec6877c
Fix timezone updates ( #10127 )
...
Signed-off-by: Artem Savchenko <armisav@gmail.com >
2025-10-22 16:21:27 +07:00
Andrey Sobolev and GitHub
ef0db5597e
qfix: Update traces send to opentelemetry ( #9728 )
...
+ Minimize amount of data send to traces.
+ Join WebSocket and RPC calls into one flat hierarchy.
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-08-27 23:15:55 +07:00
Alexander Onnikov and GitHub
0904bb883c
fix: set account cookie to origin and target domains ( #9719 )
...
Signed-off-by: Alexander Onnikov <Alexander.Onnikov@xored.com >
2025-08-26 16:34:52 +07:00
Alexey Zinoviev and GitHub
f6b1b33794
UBERF-12509: Trusted accounts migration tool ( #9652 )
2025-08-08 15:43:26 +07:00
Andrey Sobolev and GitHub
88351f639f
qfix: Rework span creation ( #9613 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-07-29 23:32:16 +07:00
Andrey Sobolev and GitHub
8fef0d7f17
OpenTelemetry support ( #9584 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-07-23 13:49:14 +07:00
Alexey Zinoviev and GitHub
eb11d3515e
UBERF-12325: Add mongo warning for v7 ( #9543 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-07-15 16:52:37 +07:00
Anton Alexeyev and GitHub
0faa689520
Skip token validation on cookie delete ( #9526 )
...
Signed-off-by: Anton Alexeyev <alexeyev.anton@gmail.com >
2025-07-11 17:57:35 +07:00
Andrey Sobolev and GitHub
6038cdbc04
Custom maintenance messages support ( #9417 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-07-01 18:35:10 +07:00
Alexander Onnikov and GitHub
e617ffd15d
UBERF-12083 Expose service from token in datalake stats ( #9424 )
2025-07-01 18:05:15 +07:00
Andrey Sobolev and GitHub
6934f6b393
QFIX: Optimize getWorkspaceInfo use ( #9302 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-06-19 13:08:29 +05:00
Andrey Sobolev and GitHub
6f26cf0511
UBERF-11392: Fixes to statistics ( #9138 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-05-30 09:58:02 +07:00
Alexey Zinoviev and GitHub
bf39eedca8
UBERF-8425: more adjustments for migration scripts and tools ( #9099 )
...
* uberf-8425: more adjustments for migration scripts and tools
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
* uberf-8425: fix formatting
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-05-26 23:59:05 +07:00
Alexey Zinoviev and GitHub
efb6ea9085
UBERF-8425: Speed up accounts migration ( #8994 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-05-20 17:47:32 +07:00
Alexey Zinoviev and GitHub
f98007b2e9
UBERF-10550: Support internal endpoint in getLoginInfoByToken ( #8902 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-05-12 23:00:25 +07:00
a8d6eaca92
QFix: Fix default timezone ( #8547 )
...
* QFix: Fix default timezone
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* Clean up
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* Potential fix for code scanning alert no. 165: Unvalidated dynamic method call
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Artyom Savchenko <armisav@gmail.com >
---------
Signed-off-by: Artem Savchenko <armisav@gmail.com >
Signed-off-by: Artyom Savchenko <armisav@gmail.com >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-04-15 14:07:04 +07:00
Alexey Zinoviev and GitHub
4cb1f3e411
UBERF-9732: Use huly id as primary social id ( #8499 )
...
* uberf-9732: use huly id as primary social id
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
* uberf-9732: fix person id filter
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-04-09 09:52:06 +07:00
Alexey Zinoviev and GitHub
c6326b3c73
UBERF-9636: Meeting links - more cases ( #8369 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-03-28 01:05:53 +07:00
Alexander Onnikov and GitHub
651c1395a8
fix: exclude first segment from account cookie domain ( #8348 )
2025-03-26 17:14:47 +07:00
Alexey Zinoviev and GitHub
899b00df66
UBERF-9503: generated social ids ( #8208 )
2025-03-20 17:21:51 +07:00
Artyom Savchenko and GitHub
ed5983a9f8
UBERF-9661: Use MAIL_URL env for mail integration ( #8272 )
...
* UBERF-9661: Add mail url env
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* UBERF-9661: Use MAIL_URL env
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* UBERF-9661: Fix test
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* UBERF-9661: Remove SES_URL
Signed-off-by: Artem Savchenko <armisav@gmail.com >
* UBERF-9661: Update configs
Signed-off-by: Artem Savchenko <armisav@gmail.com >
---------
Signed-off-by: Artem Savchenko <armisav@gmail.com >
2025-03-19 12:56:09 +07:00
Andrey Sobolev and Andrey Sobolev
7ff824a058
Fix keep alive consistency for account + front ( #8198 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-03-11 21:23:07 +07:00
05f1d8395a
Merge 9522 9513 ( #8103 )
...
Signed-off-by: Denis Bykhov <bykhov.denis@gmail.com >
Signed-off-by: Alexander Onnikov <Alexander.Onnikov@xored.com >
Signed-off-by: Victor Ilyushchenko <alt13ri@gmail.com >
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
Co-authored-by: Denis Bykhov <bykhov.denis@gmail.com >
Co-authored-by: Alexander Onnikov <aonnikov@hardcoreeng.com >
Co-authored-by: Victor Ilyushchenko <alt13ri@gmail.com >
2025-02-27 16:57:36 +07:00
Alexander Onnikov and GitHub
20bbe82144
feat: cookie token ( #8057 )
...
Signed-off-by: Alexander Onnikov <Alexander.Onnikov@xored.com >
2025-02-24 13:12:19 +07:00
Alexey Zinoviev and GitHub
a1bf076977
uberf-9428: migrate accounts with multiple active services ( #8027 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-02-17 17:44:23 +04:00
Andrey Sobolev and GitHub
b487cb949b
QFIX: Fix missing SES_AUTH_TOKEN ( #8026 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2025-02-17 17:51:40 +07:00
Alexey Zinoviev and GitHub
d9d8813a86
uberf-9447: move accounts to pg tool ( #7976 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2025-02-11 18:03:13 +07:00
Alexey Zinoviev and GitHub
2c64ceadb8
UBERF-8425: Global accounts ( #7573 )
2025-02-04 10:31:03 +07:00
Anna Khismatullina and GitHub
57ee462ca6
Init scripts with unified import format ( #7242 )
...
* Integrate import to workspace initialization
Signed-off-by: Anna Khismatullina <anna.khismatullina@gmail.com >
* Support importing drawing along with attachments
Signed-off-by: Anna Khismatullina <anna.khismatullina@gmail.com >
* Put init scripts into workspace container
Signed-off-by: Anna Khismatullina <anna.khismatullina@gmail.com >
---------
Signed-off-by: Anna Khismatullina <anna.khismatullina@gmail.com >
2024-12-12 18:11:09 +07:00
Andrey Sobolev and GitHub
e493d35ac6
Rework triggers with arrays ( #7168 )
2024-11-13 21:25:57 +07:00
Alexey Zinoviev and GitHub
bad07b90fc
uberf-8511: configurable account db ns ( #6978 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-10-18 20:22:26 +07:00
Alexey Zinoviev and GitHub
171e1e88b7
uberf-8480: configurable liveness condition for upgrade ( #6943 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-10-15 17:09:00 +04:00
Alexey Zinoviev and GitHub
6b112fc1be
UBERF-8429: Allow to disable sign-ups ( #6934 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-10-15 14:03:55 +04:00
Andrey Sobolev and GitHub
9dc8ac3b4a
UBERF-8376: Move indexer from server-core ( #6829 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2024-10-09 12:08:27 +07:00
Andrey Sobolev and GitHub
a698889f61
UBERF-8379: Fix workspace creation and missing plugin configuration ( #6832 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2024-10-08 19:43:33 +07:00
Alexey Zinoviev and GitHub
e64b1aaf62
UBERF-8169: Account on postgres ( #6745 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-10-01 13:44:49 +07:00
Alexey Zinoviev and GitHub
9a35f013ad
uberf-8195: support openid auth ( #6654 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-09-20 21:59:23 +07:00
Denis Bykhov and GitHub
bf1de1f436
Cockroach ( #6334 )
...
Signed-off-by: Denis Bykhov <bykhov.denis@gmail.com >
2024-09-11 15:31:26 +07:00
Alexey Zinoviev and GitHub
db94cab1e0
UBERF-7684: Workspace service ( #6460 )
...
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com >
2024-09-02 23:12:04 +07:00
Alexey Zinoviev and GitHub
4d5d229364
uberf-7927: get rid of product id ( #6375 )
2024-08-22 21:10:59 +07:00
Andrey Sobolev and GitHub
ce807a4a28
UBERF-7749: Use MONGO_OPTIONS properly ( #6200 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2024-07-31 15:57:20 +07:00
Kristina and GitHub
8ec7c0ba89
Add login and signup by code ( #6097 )
...
Signed-off-by: Kristina Fefelova <kristin.fefelova@gmail.com >
2024-07-30 14:12:18 +07:00
Andrey Sobolev and GitHub
144d9a1a80
UBERF-7705: Maitenance warning for every transactor ( #6169 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2024-07-29 18:06:31 +07:00
Andrey Sobolev and GitHub
702f30ee2a
UBERF-7603: Support multiple transactors ( #6086 )
...
Signed-off-by: Andrey Sobolev <haiodo@gmail.com >
2024-07-19 01:04:48 +07:00
Denis Bykhov and GitHub
284a1c5b9b
Improve init script ( #6089 )
...
Signed-off-by: Denis Bykhov <bykhov.denis@gmail.com >
2024-07-18 15:11:42 +07:00
