All notable changes to this project will be documented in this file. See standard-version for commit guidelines.
6.0.1 (2020-01-04)
- remove superfluous files from package (b1681a5)
6.0.0 (2020-01-04)
- mongodb driver update requires server port to be specified
- make debug a dev dependency (c9b0a78)
- update dependencies and specify server port in tests (807d9cf)
- use Buffer.from instead of new Buffer (37375b8)
5.0.1 (2018-06-20)
5.0.0 (2018-03-01)
- add back passwordValidatorPromisified (4794266)
- promise return signature (0612b5b)
- update build matrix (788e0c9)
- implement promises for authenticate and static authenticate including tests (6752e0c)
- promisify external functions not part of passport.js interface (e687753)
- drop support for node 4 and 5
- 4.4.0
- Merge pull request #233 from 4umfreak/master Issue #79 and Bug #58, handle save() asynchronously
- Update changelog
- 4.3.0
- Merge pull request #234 from MeestorHok/master Fixed vulnerable dependency
- Fixed vulnerable dependency
- fixed up code tabbing style differences
- added code and tests to handle mongoose errors and concurrency gracefully.
- 4.2.1
- Revert setting hash and salt to null in model since this is a breaking change with possibly the implication to loos credentials in a running system
- Remove superfluous parameters and ;
- 4.2.0
- Remove methuselah aged node.js versions 0.10 and 0.12 from travis build matrix
- Correct test to check that salt and hash are null
- Merge branch 'master' of github.com:saintedlama/passport-local-mongoose
- Implement findByUsername option. Fixes #227
- Move function setPasswordAndAuthenticate to end of file
- Merge pull request #226 from guoyunhe/patch-1 Hide hash and salt fields of user in register()
- Change undefined to null
- Hide hash and salt of user in authenticate callback
After authentication, salt and hash are usually not used anymore. It is better to drop them to avoid exposing in
req.user - Hide hash and salt fields of user in register()
Usually, in
register()callback, you do not need salt and hash anymore. They should be hidden to avoid exposing to API.
- 4.1.0
- Move to nyc for coverage
- Adapt change password functionality and tests
- Refactor authenticate function to its own module
- Merge pull request #128 from Gentlee/change-password Implement changePassword method #127
- Merge pull request #140 from AshfordN/patch-2 Update index.js
- Add syntax highlighting to code examples
- Modernize example code by using single line variable declarations and const
- Refactor pbkdf2 adapter to a module of its own
- Update dependencies
- Update build matrix to test against node 7, 8 and mongodb 3.4
- Compare fields and not object to avoid fields added by mongoose to break the build
- Downgrade to cross-env ^2.0.0.0 to run tests on node 0.10 and 0.12
- Update dependencies and adapt code to pass buffers to scmp 2
- Set timeout to 5000ms for all tests
- Use the ^ semver operator instead of 4.5.x operator
- Update dependencies and add debug dependency
- Minor code style fixes
- Migrate from assert to chai.expect
- Retry dropping mongodb collections Implementation works around a mongoose issue that background indexes are created while trying to drop a collection
- Migrate to chai.expect
- Migrate to chai.expect and cleanup code
- Rename test "error" to "errors" to match tested file
- Update index.js Corrected Grammatical error in the IncorrectUsernameError and IncorrectUsernameError messages
- Simplify .travis.yml by moving dependencies required for coverage to dev dependencies
- Adapt .travis.yml to new container based infrastructure
- Fix output handling in shelljs 0.7
- Use cross-env for cross platform tests
- if user model doesn't include salt/hash, get them from db, change tests timeouts
- optimize and add test for situation when passwords are the same
- fix changePassword() test
- implement changePassword method
- Merge pull request #123 from Gentlee/optimize-lowercase optimize username lowercasing
- Remove io.js from build matrix
- Use travis container-based infrastructure
- Simplify repository field
- Use digestAlgorithm sha1 and sha1 generated hash for backward compatibility tests
- optimize username lowercase
- Add test to verify that authenticate/hashing is 3.0.0 compatible
- 4.0.0
- Revert "Revert "Use semver to do a version check instead of argument length checks"" This reverts commit e17e720867eb283789d9461ec9b452fb513ee52e.
- 3.1.2
- Revert "Use semver to do a version check instead of argument length checks" This reverts commit 8732239272636272badcc7e88e0483fdd2be0366.
- 3.1.1
- Run tests against latest 4.x and latest 5.x versions
- Use semver to do a version check instead of argument length checks
- Update changelog
- 3.1.0
- Bring back customizable error messages
- 3.0.0
- Make the example depend on the latest npm version
- Move main file to index.js to simplify the package
- Refactor error generation and yielding
- Rename variable Err to errors
- Move mongotest module to helpers
- Merge pull request #105 from opencharterhub/fix/error-handling Error handling: Always return instance of 'AuthenticationError'
- Lint: Add some semicolons
- Lint: Handle error case
- Lint: Don't shadow variable names
- Error handling: Always return instance of 'AuthenticationError'
- 2.0.0
- Update changelog
- Add upgrade warning and document new default digest algorithm
- Add node.js 4.0.0 as build target
- Reformat code
- Add editorconfig
- Update dependencies
- 1.3.0
- Remove superfluous queryParameters declaration
- Add missing semicolon
- Merge pull request #98 from theanimal666/master Fix Issue #96
- Replace my tabs with spaces to macth project coding style
- Support test MongoDB server other then localhost Implemented using MONGO_SERVER environment variable
- Merge remote-tracking branch 'upstream/master'
- Make authenticate work without salt/hash selected by default
- Add a generated changelog
- 1.2.0