public/once-campfire
1
0 Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-10-28 00:16:48 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
58a25c628129fc140452ac8153324b9a9831d8d1
once-campfire/app/models
T
History
Jeremy Daer 58a25c6281 End sign-in links made before a password change 
A transfer link signed only the user id, so one copied before the
password changed still started a session for up to four hours after.
Bind it to the password salt with generates_token_for, so a new
password ends those links too. Links made before this upgrade stop
working; they last four hours at most.

From #371.

(cherry picked from commit 160ba295b5)
2026-10-19 11:37:05 -07:00
..
account
Hello world
2025-08-21 09:31:59 +01:00
concerns
Hello world
2025-08-21 09:31:59 +01:00
membership
Hello world
2025-08-21 09:31:59 +01:00
message
Bound accessible search probes and reject invalid benchmark responses
2026-10-07 14:22:07 +02:00
opengraph
Don't let an http_proxy environment variable bypass the pinned address in link previews
2026-10-17 01:11:38 -07:00
push
Count unread rooms for push badges once per batch
2026-10-05 16:49:59 +02:00
room
Stop sending push notifications to banned users (#338)
2026-10-07 11:25:16 -07:00
rooms
Find a direct room with one query instead of checking every one
2026-10-05 04:06:17 +02:00
user
End sign-in links made before a password change
2026-10-19 11:37:05 -07:00
account.rb
Disable libvips unfuzzed operations (#226)
2026-07-28 11:57:57 -04:00
application_platform.rb
Hello world
2025-08-21 09:31:59 +01:00
application_record.rb
Hello world
2025-08-21 09:31:59 +01:00
ban.rb
Add IP-based user banning
2025-11-26 14:30:38 +00:00
boost.rb
Hello world
2025-08-21 09:31:59 +01:00
current.rb
Delete server-side session on logout
2026-01-16 09:31:22 +01:00
first_run.rb
Hello world
2025-08-21 09:31:59 +01:00
membership.rb
Compose sidebar lists from existing room scopes
2026-10-05 12:48:29 +00:00
message.rb
Merge commit from fork
2026-10-07 01:41:12 -07:00
purchaser.rb
Hello world
2025-08-21 09:31:59 +01:00
push.rb
Hello world
2025-08-21 09:31:59 +01:00
room.rb
Reset former members' connections and grant open rooms in one statement
2026-10-06 14:45:18 +02:00
search.rb
Hello world
2025-08-21 09:31:59 +01:00
session.rb
Hello world
2025-08-21 09:31:59 +01:00
sound.rb
Hello world
2025-08-21 09:31:59 +01:00
user.rb
Close live connections on the transaction that changed the password
2026-10-19 10:57:49 -07:00
webhook.rb
Post a webhook reply as an attachment only when the bot answered 200
2026-10-05 02:58:11 +02:00