6 Commits
Author SHA1 Message Date
Matthew Dawson 8e476b3d42 Fix api-secret header name in swagger configuration.
The /api-docs/ endpoint will now send the correct api-secret header
when API_SECRET is used for authentication.
2021-10-31 00:45:55 -04:00
Sulka Haro 2189bea307 * Bump version to 14.2.3
* Change packaging to include full moment.js locale library to fix date processing issues for some users
2021-02-23 14:54:32 +02:00
Sulka Haro 3200af6299 * Bump dev to 14.2.2
* Add ADMIN_NOTIFIES_ENABLED feature flag
* Skip setting language code if language value is not null
2021-02-18 18:10:50 +02:00
Sulka Haro 9890770714 * Bump version to 14.2.1
* Update socket.io
2021-02-16 16:35:10 +02:00
Sulka Haro b3ccaf3505 Bump version to 14.2.0 2021-02-02 19:57:10 +02:00
Sulka HaroandGitHub d7e011d8f5 Refactoring organisation, bundling and security improvements (#6765)
* * Simplified bundling to just one bundle
* Removed cache invalidation token from bundling
* Generate strong persistent random string on deploy to use for JWT signing
* WIP: moving api-secret and JWT signing to a separate centralized security component
* Moved some server components away from project root
* Fix issues reported by linter

* Ignore detect-object-injection everywhere but the client

* Make admin message button red

* Remove alarms for some security alerts on code

* api_secret is now fully contained in the enclave
2021-02-02 19:53:30 +02:00