* Bump version to 14.1.1

* Allow reducing timer length in delays for security tests

lib/authorization/delaylist.js

@@ -1,10 +1,12 @@
 'use strict';
 
-function init () {
+const _ = require('lodash');
+
+function init (env) {
 
   const ipDelayList = {};
 
-  const DELAY_ON_FAIL = 5000;
+  const DELAY_ON_FAIL = _.get(env, 'settings.authFailDelay') || 5000;
   const FAIL_AGE = 60000;
 
   const sleep = require('util').promisify(setTimeout);

lib/authorization/index.js

@@ -4,20 +4,22 @@ const _ = require('lodash');
 const jwt = require('jsonwebtoken');
 const shiroTrie = require('shiro-trie');
 
-const ipdelaylist = require('./delaylist')();
 const consts = require('./../constants');
 
 const sleep = require('util').promisify(setTimeout);
 
-const addFailedRequest = ipdelaylist.addFailedRequest;
-const shouldDelayRequest = ipdelaylist.shouldDelayRequest;
-const requestSucceeded = ipdelaylist.requestSucceeded;
 
 function getRemoteIP (req) {
   return req.headers['x-forwarded-for'] || req.connection.remoteAddress;
 }
 
 function init (env, ctx) {
+
+  const ipdelaylist = require('./delaylist')(env, ctx);
+  const addFailedRequest = ipdelaylist.addFailedRequest;
+  const shouldDelayRequest = ipdelaylist.shouldDelayRequest;
+  const requestSucceeded = ipdelaylist.requestSucceeded;
+
   var authorization = {};
   var storage = authorization.storage = require('./storage')(env, ctx);
   var defaultRoles = (env.settings.authDefaultRoles || '').split(/[, :]/);

lib/settings.js

@@ -67,6 +67,7 @@ function init () {
     , frameName6: ''
     , frameName7: ''
     , frameName8: ''
+    , authFailDelay: 5000
   };
 
   var secureSettings = [
@@ -102,6 +103,7 @@ function init () {
     , bgLow: mapNumber
     , bgTargetTop: mapNumber
     , bgTargetBottom: mapNumber
+    , authFailDelay: mapNumber
   };
 
   function filterObj(obj, secureKeys) {

npm-shrinkwrap.json

@@ -1,6 +1,6 @@
 {
   "name": "nightscout",
-  "version": "14.1.0",
+  "version": "14.1.1",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "nightscout",
-  "version": "14.1.0",
+  "version": "14.1.1",
   "description": "Nightscout acts as a web-based CGM (Continuous Glucose Montinor) to allow multiple caregivers to remotely view a patients glucose data in realtime.",
   "license": "AGPL-3.0",
   "author": "Nightscout Team",

swagger.json

@@ -8,7 +8,7 @@
   "info": {
     "title": "Nightscout API",
     "description": "Own your DData with the Nightscout API",
-    "version": "14.1.0",
+    "version": "14.1.1",
     "license": {
       "name": "AGPL 3",
       "url": "https://www.gnu.org/licenses/agpl.txt"

swagger.yaml

@@ -4,7 +4,7 @@ servers:
 info:
   title: Nightscout API
   description: Own your DData with the Nightscout API
-  version: 14.1.0
+  version: 14.1.1
   license:
     name: AGPL 3
     url: 'https://www.gnu.org/licenses/agpl.txt'

tests/verifyauth.test.js

@@ -1,6 +1,5 @@
 'use strict';
 
-const { geoNaturalEarth1 } = require('d3');
 var request = require('supertest');
 var language = require('../lib/language')();
 require('should');
@@ -70,7 +69,7 @@ describe('verifyauth', function ( ) {
       function checkTimer(res) {
         res.body.message.message.should.equal('UNAUTHORIZED');
         const delta = Date.now() - time;
-        delta.should.be.greaterThan(1000);
+        delta.should.be.greaterThan(49);
         done();
       }