Kevin Ansfield
b6d9bad6dc
Added custom theme settings browse/edit permissions for Administrators ( #13361 )
...
refs https://github.com/TryGhost/Team/issues/1070TryGhost/Team#1070
- initial implementation will only allow browse+edit via the API
2021-09-27 09:59:09 +01:00
Renovate Bot
91a6917563
Update dependency mocha to v9.1.2
2021-09-27 03:11:58 +00:00
Naz
dbb78820b3
Removed unnecessary error parameter in bridge
...
no issue
- The error parameter is passed arround by never used. Removed it to have less type check errors
2021-09-23 18:39:43 +02:00
Naz
035ad01f24
Swapped to American English spellings
...
refs 16728a3ef1
- initialised -> initialized
2021-09-23 18:36:38 +02:00
Matt Hanley
a9ea792d65
Updated OAuth middleware to use the correct URL helpers
...
no-ref
Hardcoded redirect URLs were breaking when admin and site URLs were
different, or when Ghost is configured with a subdirectory.
2021-09-23 17:26:29 +01:00
Daniel Lockyer
a3f46708e2
v4.16.0
2021-09-23 16:04:57 +01:00
Daniel Lockyer
77ac9a99d5
Updated Admin to v4.16.0
2021-09-23 16:04:56 +01:00
Daniel Lockyer
d940cc5d56
Updated Casper to v4.1.1
2021-09-23 16:04:55 +01:00
Kevin Ansfield
04dd409243
Added syncing and theme exposure of custom theme settings ( #13354 )
...
refs https://github.com/TryGhost/Team/issues/1070
- added `@tryghost/custom-theme-settings-service` as a dependency
- `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance
- requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance
- updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache
- updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 12:44:39 +01:00
Renovate Bot
cecec3d253
Update dependency @tryghost/email-analytics-service to v1.0.1
2021-09-23 12:39:32 +01:00
Kevin Ansfield
57effd9585
Added custom_theme_settings
table/model ( #13327 )
...
refs https://github.com/TryGhost/Team/issues/1070
- stores values of custom theme settings
- will be merged with full settings data parsed from themes for API output
- will be cached and made available for lookup in themes to avoid db roundtrips
- stores type of custom theme settings so we can coerce values and know if the type has changed when syncing
- records will be synced with themes upon activation
2021-09-23 11:51:18 +01:00
Fabien O'Carroll
91907cd900
Bumped @tryghost/members-api for security patch
...
refs https://github.com/TryGhost/Ghost/commit/944c2cc9af
The original fix for this happened off of `main` on a separate branch for
v4.15.1 - the same was the case for the @tryghost/members-api package.
Because work happened on both packages in `main`, since the versions
that were patched, we needed to rebump the dependency here to include
the changes.
2021-09-23 12:18:08 +02:00
Daniel Lockyer
57664696a4
v4.15.1
...
-----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTqYa7kNs8D7Oo9dgLSEYbwtHKVrQUCYUxOIgAKCRDSEYbwtHKV
reO6AQCL2mFdVLBwRbpVQa2Zs9RlYKk88ivLRMpAZPPiElNblQEAqt710wrVbMwm
hOOWbWdFpPOWCrop9zhO8GJSPeNpJw0=
=Ff3M
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTqYa7kNs8D7Oo9dgLSEYbwtHKVrQUCYUxTawAKCRDSEYbwtHKV
ra28AQCcambctLCH70Sc7SJmexojA5k6Ti0p3pwOktWY/WygZQEAlMEHSDw89wdY
3U8R8zY1d1MeXqj51Op95sTYwiDAjg8=
=HoUL
-----END PGP SIGNATURE-----
Merged v4.15.1 into main
v4.15.1
2021-09-23 11:13:56 +01:00
Naz
bf4587d29e
Fixed typos
2021-09-23 12:05:15 +02:00
Daniel Lockyer
94d3f556e6
v4.15.1
2021-09-23 10:51:30 +01:00
Daniel Lockyer
92533b2de7
Updated Admin to v4.15.1
2021-09-23 10:51:30 +01:00
Fabien O'Carroll
944c2cc9af
🔒 Fixed member email change vulnerability
...
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr
This updates the signup/signin flow for members to no longer support the
email address change flow - which had missing authentication. It has
been replaced with a dedicated email change flow, and Portal has been
updated to use it.
2021-09-23 10:49:30 +01:00
Renovate Bot
8560aa6b34
Update dependency @tryghost/email-analytics-provider-mailgun to v1.0.1
2021-09-23 10:09:38 +01:00
Daniel Lockyer
20870aa2fa
🐛 Fixed sending emails via SES or non-standard SMTP config
...
fixes https://linear.app/tryghost/issue/CORE-45/
- this commit fixes two email related issues:
- SES transport: the auth mechanism was set up wrong and so none of
the requests would go through. This now follows the docs on https://nodemailer.com/transports/ses/
- SMTP transport: the latest versions of Nodemailer don't seem to
allow overriding of options if a service is present. I've filed
https://github.com/nodemailer/nodemailer/issues/1327 but in the
mean time, I assign the options back to the transporter object
to ensure they always get applied
- I've fixed this in our `@trghost/nodemailer` package and so this commit
bumps that here
2021-09-23 10:08:43 +01:00
Renovate Bot
592ac2dcb7
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-23 10:08:43 +01:00
Renovate Bot
701d5555a2
Update dependency glob to v7.2.0
2021-09-23 01:03:51 +00:00
Renovate Bot
5da0caf9cc
Update dependency @tryghost/package-json to v1.0.3
2021-09-22 19:17:29 +01:00
Renovate Bot
99c776aa10
Update dependency @tryghost/constants to v0.1.9
2021-09-22 19:17:20 +01:00
Renovate Bot
c52d1bbe37
Update dependency @tryghost/job-manager to v0.8.8
2021-09-22 19:17:12 +01:00
Renovate Bot
9c64228e13
Update dependency @tryghost/mw-session-from-token to v0.1.23
2021-09-22 19:17:05 +01:00
Renovate Bot
ee67df704e
Update dependency @tryghost/vhost-middleware to v1.0.16
2021-09-22 19:16:58 +01:00
Renovate Bot
cabb7c779b
Update dependency @tryghost/security to v0.2.10
2021-09-22 19:16:45 +01:00
Renovate Bot
a8fb066c71
Update dependency @tryghost/limit-service to v0.6.2
2021-09-22 18:02:34 +01:00
Renovate Bot
e6845237e0
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:02:09 +01:00
Renovate Bot
ca798ccb73
Update dependency @tryghost/errors to v0.2.14
2021-09-22 18:02:00 +01:00
Renovate Bot
cd008a6d48
Update dependency @tryghost/config-url-helpers to v0.1.1
2021-09-22 18:01:50 +01:00
Renovate Bot
db907f88f2
Update dependency @tryghost/bootstrap-socket to v0.2.10
2021-09-22 18:01:44 +01:00
Renovate Bot
0c4e119483
Update dependency @tryghost/adapter-manager to v0.2.15
2021-09-22 18:01:38 +01:00
Renovate Bot
be47f78293
Update dependency @tryghost/promise to v0.1.10
2021-09-22 18:01:17 +01:00
Renovate Bot
27ce353222
Update dependency @tryghost/session-service to v0.1.25
2021-09-22 18:01:07 +01:00
Renovate Bot
db2c7b64dd
Update dependency @tryghost/tpl to v0.1.4
2021-09-22 18:00:59 +01:00
Renovate Bot
40fd068229
Update dependency @tryghost/zip to v1.1.15
2021-09-22 18:00:40 +01:00
Renovate Bot
23bece59a9
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 16:31:51 +01:00
Rishabh
4c4efc3a3a
Added member analytics events handling
...
refs https://github.com/TryGhost/Team/issues/1064
refs https://github.com/TryGhost/Team/issues/1056
refs https://github.com/TryGhost/Team/issues/1054
refs https://github.com/TryGhost/Team/issues/1055
- adds handling for new member analytic events including new ingress endpoint
- introduces member-analytics packages and code
2021-09-22 18:21:10 +05:30
Naz
f13ee0e4fb
Corrected type declarations in ThemeStorage
...
refs https://linear.app/tryghost/issue/CORE-35/refactor-route-and-redirect-settings
- Type declarations were incorrect, co changed them to something more suitable based on the implementation to reduce the error output.
2021-09-22 14:16:39 +02:00
Peter Zimon
496b98b751
Added Offers Alpha flag
2021-09-22 13:20:36 +02:00
renovate[bot]
e9e9d90ec4
Update dependency @tryghost/members-ssr to v1.0.13 ( #13332 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-22 11:33:14 +02:00
renovate[bot]
bbe6a0a933
Update dependency @tryghost/magic-link to v1.0.12 ( #13331 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-22 11:32:59 +02:00
Renovate Bot
c8afdac0c9
Update dependency postcss to v8.3.7
2021-09-22 10:01:09 +01:00
Naz
7589218abc
Converted import-manager module to a class
...
refs https://github.com/TryGhost/Team/issues/694
refs https://linear.app/tryghost/issue/CORE-16/tackle-importersdataindexjs
- The codebase uses class syntax instead of extending/instantiating a native function (this is a very old of doing pseudo OOP in JS). Updated the old syntax in a very one-to-one brainless way with intention to improve the file again when touched again
2021-09-22 20:10:23 +12:00
Naz
c39d1996a4
Brought back importer index.js file exposing a single thing
...
refs https://github.com/TryGhost/Team/issues/694
refs https://linear.app/tryghost/issue/CORE-16/tackle-importersdataindexjs
- This extra step was done to keep the git history cleaner (previous commit was a clean rename). This new index file exposes just one thing.
- The next step here should be refactoring of the "importer-manager" module into a class following a DI pattern.
2021-09-22 20:10:23 +12:00
Naz
0d32552d7a
Renamed imports indexjs to import-manager
...
refs https://github.com/TryGhost/Team/issues/694
refs https://linear.app/tryghost/issue/CORE-16/tackle-importersdataindexjs
- The index file should contain an API index that the module/folder exposes. In this instance it is a full blown class-like set of data and functions that don't belong to index.js
2021-09-22 20:10:23 +12:00
Rishabh
1e239de039
Added new ingress endpoint for client-side events
...
res https://github.com/TryGhost/Team/issues/1064
- adds new events endpoint on members app to capture client side events for member analytics behind the `membersActivity` flag
2021-09-21 23:37:25 +05:30
Renovate Bot
ebf13f07a0
Update dependency @sentry/node to v6.13.2
2021-09-21 16:32:20 +00:00
Naz
90e9e473ad
Brought back index.js file exposing a single thing
...
refs https://github.com/TryGhost/Team/issues/694
refs https://linear.app/tryghost/issue/CORE-16/tackle-importersdataindexjs
- This extra step was done to keep the git history cleaner (previous commit was a clean rename). This new index file exposes just one thing.
- The next step here should probably be refactoring of the data-importer module into a class following a DI pattern.
2021-09-22 03:23:12 +12:00