0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-03-11 02:12:21 -05:00
ghost/core/server/services
Simon Backx f732b0181d
Fixed last_seen updated for suspended users (#14715)
refs https://github.com/TryGhost/Team/issues/1461

- A suspended user was able to make it through the Express middlewares to the `updateUserLastSeen` middleware, until it was halted when checking the user permissions in the API pipeline. This was only the case for session logins, not for API keys.
- For API keys, the user status is checked:
6dc3f1bf56/core/server/services/auth/api-key/admin.js (L178-L181)
- In the session middleware, the `findUserById` in `getUserForSession` didn't filter on the active status of users:
be4146e324/core/server/services/auth/session/middleware.js (L22-L27)
- This has been fixed now by updating the sessionService's `findUserById` method.
2022-05-10 13:34:12 +02:00
..
adapter-manager
api-version-compatibility Added Integration Name in version mismatch emails 2022-05-10 17:55:18 +08:00
auth Fixed last_seen updated for suspended users (#14715) 2022-05-10 13:34:12 +02:00
bulk-email Added newsletter info to email unsubscribe url (#14693) 2022-05-05 11:00:24 +05:30
email-analytics Prevent an event-processing error if there is no timezone setting 2022-03-02 13:58:26 +01:00
integrations
invitations
invites
jobs
mail Extracted email-content-generator into a package 2022-05-04 17:28:09 +08:00
mega Fixed wrong newsletter used when sending scheduled post (#14734) 2022-05-09 17:30:50 +02:00
members Update dependency @tryghost/url-utils to v3 (#14705) 2022-05-05 16:10:18 +01:00
newsletters Fixed newsletter includes when adding or editing (#14696) 2022-05-05 11:20:15 +02:00
notifications
offers Fixed same redirectManager used in offer service between tests (#14340) 2022-03-24 10:18:52 +01:00
permissions
posts Fixed wrong newsletter used when sending scheduled post (#14734) 2022-05-09 17:30:50 +02:00
public-config
redirects
route-settings Removed sync method from route settings loader 2022-04-28 15:37:09 +01:00
settings Added settingsCache handling to e2e-framework 2022-02-11 16:24:24 +00:00
stats Replaced stats service with @tryghost/stats-service (#14527) 2022-04-21 14:57:07 +01:00
stripe Cleaned up output errors during tests 2022-04-05 18:17:47 +08:00
themes Switched gscan to validate against v5 set of rules 2022-05-02 20:56:25 +08:00
url Removed api:versions from config 2022-05-06 08:22:05 +01:00
webhooks Fixed undefined error when serializing webhooks 2022-05-03 11:40:59 +01:00
custom-theme-settings.js
limits.js
nft-oembed.js
oembed.js Added missing message string 2022-03-21 09:07:54 +00:00
slack.js Replaced schema.isPost in slack service /w custom fn 2022-04-05 14:24:42 +01:00
twitter-embed.js
users.js Renamed destroyByAuthor to reassignByAuthor 2022-04-28 15:37:13 +01:00
xmlrpc.js