* * Simplified bundling to just one bundle
* Removed cache invalidation token from bundling
* Generate strong persistent random string on deploy to use for JWT signing
* WIP: moving api-secret and JWT signing to a separate centralized security component
* Moved some server components away from project root
* Fix issues reported by linter
* Ignore detect-object-injection everywhere but the client
* Make admin message button red
* Remove alarms for some security alerts on code
* api_secret is now fully contained in the enclave
* Clear module require()s between tests
Clear profile cache between tests
* Fix authentication for careportal test
* Add logging to see where the careportal test gets to
* Even more logging for headless setup
* Change to use before and after in careportal test
* Add time logging
* Bump headless setup time to a full minute
* More timers to figure out what's slow in GA
* Bump up timeout on failing test
* #6701 Report storage tests
Functional and unit tests
* #6701 Test cleanup
* #6701 js-storage teardown
The first time js-storage is required it evaluates if it's running in the browser or not: https://github.com/julien-maurel/js-storage/blob/master/js.storage.js#L423 and will define the localstorage getters and setters accordingly. This becomes an issue if testing localstorage between UI and non-UI tests. reportstorage.test.js was requiring it before hashauth.test.js causing a conflict.
* #6701 false positive test
The page isn't refreshing
Co-authored-by: Sulka Haro <sulka@sulka.net>
* feat: add feature to disable pump battery alarms at night
* add timezone handling for server side
* Update pump.test.js
* Update pump.test.js
* Update pump.test.js
Co-authored-by: Jeremy Cunningham <jpcunningh@gmail.com>
Co-authored-by: Sulka Haro <sulka@sulka.net>
* Adds a new method for the server to push notifies to the client, which require administration privileges from the user. If there are messages in queue but user is not privileged, she is notified of pending messages
* Fix unit tests
* Increase timeouts on tests
* Add translations
* * Aggregate admin messages
* Send admin message on auth fail
* Sending messages over bus
* XSS filtering of objects sent over the REST API
* Warn users if their instance is world readable
* Fix adminnotifies init()
* Fix couple issues from Codacy
* Auth resolve now supports async/await
* Read only tokens can be used for authentication and the UI shows privileges for these accounts correctly
* Failed attempt at authenticating an API_SECRET or token delays subsequent auth attempt by 5000 ms
* Use the delta plugin data to show the delta in the clock views
* Update Node checks
* Fix disabling the BG alarms for simple alarms
* Load battery and other rare events up to two months back
* Possibly fixes compatibility with ios9 - needs testing
* Unified black and color clock layouts
* Update clock data every 20 seconds
* Update clock time every second
* Fix how CSP policy is set for Helmet, fixes#6260
* Authorization fix for misformatted URLs
* Added unit test for batch upload of CGM entries
* Improved / removed some logging
* Test if user is in read only mode when Nightscout starts and give an error if so
* Corrected db size config for virtual assistants
* Language fix, improvements, added dbsize to virtAsst config
* Using env
* Added logging
* Debug logging
* Different logging
* More troubleshooting
* Another try
* Reverted stuff, added dbsize to server defaults
* Fixed test
* Fixed another test
* APIv3: isolating documents from tests (not allowing clashes of calculated identifiers)
* removing unused async keyword
* fixing api v3 swagger and moving it to /api3-docs
Co-authored-by: Petr Ondrusek <petr.ondrusek@seznam.cz>
Co-authored-by: Petr Ondrůšek <petr.ondrusek@okin.eu>
* On periodic polls, only load delta for CGM data, treatments and device statuses
* Serve basic CGM data API queries from in-memory cache. Increases the Nightscout memory footprint but should significantly reduce the Mongo load
* Serve device status, CGM and treatment records from memory cache
* Support count parameter in /profile
* * Update packages giving npm audit errors
* Fix Mongo test that broke after update (now uses async/await on getting the connection)
* Restore original navigation bar button order
* Disable Node 10 tests
readENV() was hard coding the default value of DISPLAY_UNITS, and
ignoring the default value for no particular reason. Fixed that. Also, I
added a full test suite for DISPLAY_UNITS environment settings to make
sure that it works as intended. Finally, I've added the console log for
the DISPLAY_UNITS since there's no particular reason why we log that setting
and not others.
* Test profile settings
* NPM Version change
* Use console log
* Use console log for client
* Use console log for client.sbx
* Use console log for client.ddata
* Use console log for client again
* revert
* Added multi-profile reporting capabilities
Co-authored-by: VIS TFS Admin <liveid@visualsolution.co.uk>
* Database size plugin - pill that displays current mongoDB database size
* Enabled dbsize by default
* Fixed bug with dbsize not shownig when size is (rounded) 0% but real bytes > 0
* Cleanup & update to iconfont generation manual
* Changed how warning/urgent levels are configured - from absolute MiB to percentage of DBSIZE_MAX
* Send coverage reports to Codacy
* Action secrets may not be read from forks :(
* Let's see if this fixes the path & key passing
* Ok one more try for the Actions env
* Run tests and coverage separately
* Try increasing the admintools test runtime for Node 10
* Run tests only once
* Allow auth tokens to be passed in the api-secret header and used in the client in place of the API secret
* Fix unit test
* Fix admin test
* Reload page when token is used as a secret
Sulka Haro
bassettbandGitHub
CalebandGitHub
joracineandGitHub
Dominik DzieniaandGitHub
JakobandSulka Haro
Bartłomiej SzubertandSulka Haro