Stanko K.R. b6edb93c47 Pin sign in attempts to the current session ...

This makes it way more difficult to brute-force a magic link.

Original implementation by udiudi. Ref: https://github.com/udiudi/fizzy/pull/1/files

Discussion: https://github.com/basecamp/fizzy/discussions/1981

Co-Authored-By: Udi <udi@udi.codes>

2025-12-11 19:05:54 +01:00

..

accounts

Add validation for the join code usage limit

2025-12-10 10:10:08 -05:00

active_storage

Allow direct uploads via API

2025-12-11 11:52:38 +01:00

admin

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

boards

Add index actions for Comments and Columns

2025-12-10 09:23:52 +01:00

cards

API: Support created_at for API card and comment creation (#2056)

2025-12-10 19:57:38 -08:00

columns

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

concerns

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

events/day_timeline

Update test

2025-11-24 12:04:33 +01:00

my

Move Identities to My::Identities

2025-12-10 15:13:35 +01:00

notifications

Add API for reading notifications

2025-12-10 09:23:52 +01:00

prompts

Constrain user queries to the current or relevant account

2025-11-17 09:11:57 -05:00

public

Replace collection with board in the code, tests green

2025-11-05 13:41:12 +01:00

searches

Format

2025-06-24 13:26:37 +02:00

sessions

Pin sign in attempts to the current session

2025-12-11 19:05:54 +01:00

signup

Bring simple signup flow from the fizzy-saas gem

2025-11-28 15:53:58 +01:00

users

Fix stale-read race when creating push subscriptions

2025-12-09 01:34:37 -08:00

webhooks

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

allow_browser_test.rb

Update useragent to recognize twitterbot/facebot

2025-11-25 18:05:21 -05:00

api_test.rb

Move tests into their controller tests

2025-12-10 09:23:52 +01:00

boards_controller_test.rb

Add API for creating and updating boards

2025-12-10 09:23:52 +01:00

cards_controller_test.rb

API: Support created_at for API card and comment creation (#2056)

2025-12-10 19:57:38 -08:00

controller_authentication_test.rb

Remove the internal API

2025-10-31 16:26:08 +01:00

events_controller_test.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

filters_controller_test.rb

Make IDs more time-sortable in tests

2025-11-17 09:12:40 -05:00

join_codes_controller_test.rb

Validate email before creating identity during join code redemption

2025-12-07 13:26:34 -05:00

landings_controller_test.rb

Redirect to root to avoid changing the path by default

2025-11-05 19:00:50 +01:00

non_production_remote_access_test.rb

Only staff can access beta/staging

2025-11-28 15:53:58 +01:00

notifications_controller_test.rb

Add API for reading notifications

2025-12-10 09:23:52 +01:00

searches_controller_test.rb

Fix rubocop

2025-11-21 15:30:14 +00:00

sessions_controller_test.rb

Test that sign in respects single tenant state

2025-12-11 12:49:03 +00:00

signups_controller_test.rb

Use initializer to configure tenant mode

2025-12-11 11:20:43 +00:00

tags_controller_test.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller_test.rb

Handle user update failures

2025-12-10 09:23:53 +01:00

webhooks_controller_test.rb

Pass correct params to webhook reactivation url helper.

2025-12-05 22:44:34 -05:00