discourse/spec/models
Sam Saffron 7e8f0dc967 FIX: attempt to handle ios edge case where token is seen but unsaved
This relaxes our security in the following way

- prev auth token is always accepted as long as rotation
date is within our window of SiteSetting.maximum_session_age.hours
(previously old token expired within a minute of new one being seen)

- new auth token is marked unseen if we are presented with an old token
after we already saw new one

This attempts to fix an issue where ios webkit is not committing new cookies
2017-02-26 17:09:57 -05:00
..
about_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
admin_dashboard_data_spec.rb Add failing tests 2017-02-15 00:05:58 -08:00
api_key_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
application_request_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
backup_spec.rb FEATURE: Support subfolders in SiteSetting.s3_backup_bucket. 2016-08-15 16:14:51 +08:00
badge_spec.rb Reset I18n.locale in tests. 2016-09-29 13:42:56 +08:00
badge_type.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
category_featured_topic_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
category_featured_user_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
category_group_spec.rb Enums that are used in tables need to be stable 2016-01-08 20:43:11 +05:30
category_list_spec.rb FIX: /categories page on mobile 2016-08-19 01:47:00 +02:00
category_spec.rb FIX: Associate category logo and background to uploads record. 2016-12-12 17:37:28 +08:00
category_user_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
color_scheme_color_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
color_scheme_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
developer_spec.rb FEATURE: allow "developer" account flagging via developers table 2016-07-28 10:14:06 +10:00
digest_email_site_setting_spec.rb FEATURE: More digest email frequency options. Digests can be sent as often as every 30 minutes. 2016-03-02 15:43:47 -05:00
directory_item_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
discourse_single_sign_on_spec.rb clarify override semantics in spec 2017-02-07 10:41:27 -05:00
draft_sequence_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
draft_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
email_change_request_spec.rb FIX: Don't allow invalid email to be saved. 2016-12-21 17:47:11 +08:00
email_log_spec.rb FIX: only ever send users 1 email per post 2016-04-15 15:59:01 +10:00
email_token_spec.rb FEATURE: remove email_token_grace_period_hours 2016-12-19 17:15:20 +11:00
embeddable_host_spec.rb FIX: Support multiple embeddable host records with the same host 2017-02-17 12:41:34 -05:00
emoji_spec.rb FIX: Support unicode replacements with multiple codepoints 2016-07-05 13:55:41 -04:00
given_daily_like_spec.rb FIX: Use a logging table for daily likes given. Use it for badges. 2016-03-18 11:18:54 -04:00
global_setting_spec.rb Fix specs. 2017-02-03 08:38:19 +08:00
group_history_spec.rb FEATURE: Group logs. 2016-12-12 17:29:54 +08:00
group_spec.rb FIX: Show groups that user is owner of on groups page. 2017-02-03 16:51:32 +08:00
incoming_link_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
incoming_links_report_spec.rb FIX: broken links on admin dashboard in Top Referrers section 2016-02-22 14:31:13 -05:00
invite_redeemer_spec.rb FEATURE: new invite acceptance page, where username can be chosen and password can be set 2017-02-15 16:51:57 -05:00
invite_spec.rb FIX: allow existing users to be invited to topic/message when must_approve_users is enabled 2017-02-03 13:01:23 +05:30
locale_site_setting_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
mailing_list_mode_site_setting_spec.rb FEATURE: More granular mailing list mode (#4068) 2016-05-21 15:17:54 +02:00
notification_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
optimized_image_spec.rb SECURITY: protect upload params, only allow very strict filenames 2016-12-19 10:16:18 +11:00
permalink_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
plugin_store_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
post_action_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
post_action_type_spec.rb Enums that are used in tables need to be stable 2016-01-08 20:43:11 +05:30
post_analyzer_spec.rb FIX: don't extract links from .elided parts 2016-12-05 15:19:15 +01:00
post_detail_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
post_mover_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
post_reply_spec.rb FIX: Update post replies when we move posts. (#4324) 2016-07-13 17:34:21 +02:00
post_spec.rb FIX: Escape regexp chars in SiteSetting.censored_words. 2017-01-31 10:14:51 +08:00
post_timing_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
post_upload_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
queued_post_spec.rb Enums that are used in tables need to be stable 2016-01-08 20:43:11 +05:30
quoted_post_spec.rb FIX: don't raise exception when a quote was already extracted 2016-11-30 17:18:34 +01:00
report_spec.rb FIX: admin dashboard posts count should not include system posts and whispers 2017-02-21 14:45:41 -05:00
rtl_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
s3_region_site_setting_spec.rb New AWS S3 Storage Mumbai region added (#4335) 2016-07-18 09:03:26 +02:00
screened_email_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
screened_ip_address_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
screened_url_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
site_customization_spec.rb FIX: Raw templates in customizations were broken 2016-07-11 12:57:05 -04:00
site_setting_spec.rb PERF: Don't calculate the same query twice. 2016-11-24 14:05:26 +08:00
site_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
stylesheet_cache_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
tag_spec.rb add the spec for unused tag count 2016-10-28 16:14:20 -04:00
tag_user_spec.rb remove rails-observers 2016-12-22 16:46:53 +11:00
top_menu_item_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
top_topic_spec.rb FEATURE: make top criteria formula multipliers controlled by site 2016-01-21 10:30:06 +05:30
topic_allowed_user_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
topic_converter_spec.rb FEATURE: move a topic from PM to regular topic or vice versa 2016-05-02 21:34:05 +05:30
topic_embed_spec.rb FEATURE: Support author meta tags for embedding 2016-08-30 12:01:04 -04:00
topic_featured_users_spec.rb FIX: If posts are deleted they should be updated in consistency jobs 2016-06-21 13:05:56 -04:00
topic_invite_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
topic_link_click_spec.rb FIX: Support links with google analytics tracking and hashes 2016-08-23 12:13:31 -04:00
topic_link_spec.rb FIX: Support links with google analytics tracking and hashes 2016-08-23 12:13:31 -04:00
topic_list_spec.rb amend preloader api to supply topic list 2017-02-15 12:04:02 -05:00
topic_participants_summary_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
topic_posters_summary_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
topic_spec.rb FIX: token rotation not accounting for overlapping tokens correctly 2017-02-15 10:58:18 -05:00
topic_status_update_spec.rb FIX: Autoclose message was not correct when immediate 2015-12-08 18:16:48 +05:30
topic_tracking_state_spec.rb FIX: whisper no longer experimental 2016-12-02 17:03:31 +11:00
topic_user_spec.rb FIX: token rotation not accounting for overlapping tokens correctly 2017-02-15 10:58:18 -05:00
topic_view_item_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
translation_override_spec.rb FIX: Allow message format translations to be overridden 2016-04-08 14:49:50 -04:00
trust_level3_requirements_spec.rb remove UserActionObserver, replace with after_save and service 2016-12-22 16:46:53 +11:00
twitter_user_info_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
unsubscribe_key_spec.rb FEATURE: simpler and friendlier unsubscribe workflow 2016-06-17 11:28:49 +10:00
upload_spec.rb FEATURE: new 'max_image_megapixels' site setting 2017-01-11 23:37:12 +01:00
user_action_spec.rb FIX: Do not update user stats like counts for private messages. 2017-01-16 11:07:53 +08:00
user_api_key_spec.rb FEATURE: user API now contains scopes so permission is granular 2016-10-14 16:05:42 +11:00
user_archived_message_spec.rb FEATURE: don't move muted messages back into inbox 2016-02-15 10:56:39 +11:00
user_auth_token_spec.rb FIX: attempt to handle ios edge case where token is seen but unsaved 2017-02-26 17:09:57 -05:00
user_avatar_spec.rb FEATURE: Import facebook avatars when logging in via facebook 2016-09-19 15:10:23 +10:00
user_badge.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
user_history_spec.rb Enums that are used in tables need to be stable 2016-01-08 20:43:11 +05:30
user_open_id_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
user_option_spec.rb FIX: ensure consistency of user options 2016-03-17 10:03:56 +11:00
user_profile_spec.rb FEATURE: new setting to validate user website 2016-12-26 21:29:27 +05:30
user_profile_view_spec.rb FIX: Don't track user profile view when viewed by system user. 2016-08-23 16:25:31 +08:00
user_search_spec.rb FEATURE: allow user search API to restrict to group 2017-02-09 18:45:39 -05:00
user_spec.rb reset bounce score when email is successfully changed 2017-02-20 10:37:01 +01:00
user_stat_spec.rb FEATURE: first pass at user summary page 2016-01-20 15:14:25 +11:00
user_summary_spec.rb SECURITY: user summary could show topic links you have no permissions to 2016-01-28 11:12:12 +11:00
user_visit_spec.rb fix intermittent spec failure due to Time comparison with TimeWithZone 2017-02-17 10:30:29 -05:00
username_validator_spec.rb Prepare for separation of RSpec helper files 2015-12-01 20:39:42 +00:00
web_hook_event_spec.rb FEATURE: Webhooks. 2016-09-05 18:44:00 +08:00
web_hook_event_type_spec.rb FEATURE: Webhooks. 2016-09-05 18:44:00 +08:00
web_hook_spec.rb Add user_updated event to webhooks. 2016-12-13 11:26:26 +08:00