gristlabs_grist-core

Commit Graph

Author	SHA1	Message	Date
SALIH AYDIN	d753d5e7ae	Translated using Weblate (Turkish) Currently translated at 0.4% (6 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/tr/	1 month ago
SALIH AYDIN	813e5cc26f	Added translation using Weblate (Turkish)	1 month ago
xabirequejo	1c77909cda	Translated using Weblate (Basque) Currently translated at 99.8% (1376 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	1 month ago
Florent	fde6c8142d	Support nonce and acr with OIDC + other improvements and tests (#883 ) * Introduces new configuration variables for OIDC: - GRIST_OIDC_IDP_ENABLED_PROTECTIONS - GRIST_OIDC_IDP_ACR_VALUES - GRIST_OIDC_IDP_EXTRA_CLIENT_METADATA * Implements all supported protections in oidc/Protections.ts * Includes a better error page for failed OIDC logins * Includes some other improvements, e.g. to logging, to OIDC * Adds a large unit test for OIDCConfig * Adds support for SERVER_NODE_OPTIONS for running tests * Adds to documentation/develop.md info about GREP_TESTS, VERBOSE, and SERVER_NODE_OPTIONS.	1 month ago
Владимир В	be0de1852e	Translated using Weblate (Russian) Currently translated at 99.4% (1371 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/ru/	1 month ago
xabirequejo	9a761caf9f	Translated using Weblate (Basque) Currently translated at 99.8% (1376 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
Paul Janzen	5dfc2f6009	Translated using Weblate (German) Currently translated at 100.0% (1378 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/de/	2 months ago
Paul Janzen	a7a11d378e	Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (1378 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/pt_BR/	2 months ago
Franček Prijatelj	d6bdb0e726	Translated using Weblate (Slovenian) Currently translated at 100.0% (1378 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sl/	2 months ago
gallegonovato	09dcc81dda	Translated using Weblate (Spanish) Currently translated at 100.0% (1378 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	2 months ago
gallegonovato	7ae60e82ef	Translated using Weblate (Spanish) Currently translated at 99.7% (1374 of 1378 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	2 months ago
xabirequejo	c205f4cfb1	Translated using Weblate (Basque) Currently translated at 99.8% (1365 of 1367 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
Roman Holinec	edfe1f9630	Translated using Weblate (Slovak) Currently translated at 100.0% (1367 of 1367 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	2 months ago
github-actions[bot]	07eae477e2	automated update to translation keys (#1132 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	2 months ago
xabirequejo	f2d3cff7e4	Translated using Weblate (Basque) Currently translated at 99.8% (1365 of 1367 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
gallegonovato	7037c36cc9	Translated using Weblate (Spanish) Currently translated at 100.0% (1367 of 1367 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	2 months ago
Camille L	19d877f4fb	Translated using Weblate (French) Currently translated at 99.7% (1364 of 1367 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/fr/	2 months ago
xabirequejo	bceecaf1ad	Translated using Weblate (Basque) Currently translated at 99.8% (1339 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
github-actions[bot]	a9521a8544	automated update to translation keys (#1119 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	2 months ago
xabirequejo	bb3135291c	Translated using Weblate (Basque) Currently translated at 90.5% (1214 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
xabirequejo	7bae7a86bf	Translated using Weblate (Basque) Currently translated at 90.4% (1213 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
xabirequejo	d982ca2103	Translated using Weblate (Basque) Currently translated at 40.2% (540 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/eu/	2 months ago
xabirequejo	43aa714137	Added translation using Weblate (Basque)	2 months ago
Ricky From Hong Kong	916bff63b0	Translated using Weblate (Chinese (Traditional)) Currently translated at 74.1% (994 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/zh_Hant/	2 months ago
gallegonovato	57cacc9e2f	Translated using Weblate (Spanish) Currently translated at 100.0% (1341 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	2 months ago
Franček Prijatelj	ea1de9d220	Translated using Weblate (Slovenian) Currently translated at 100.0% (1341 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sl/	2 months ago
Владимир В	4c2b5781df	Translated using Weblate (Russian) Currently translated at 99.5% (1335 of 1341 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/ru/	2 months ago
Libor Blaheta	73e022b0c5	Translated using Weblate (Czech) Currently translated at 7.9% (107 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/cs/	2 months ago
Владимир В	30eb956f5c	Translated using Weblate (Russian) Currently translated at 99.6% (1335 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/ru/	2 months ago
Paul Fitzpatrick	6171a012db	(core) updates from grist-core	2 months ago
CamilleLegeron	0bfdaa9c02	Add authorization header in webhooks stored in secrets table (#941 ) Summary: Adding authorization header support for webhooks. Issue: https://github.com/gristlabs/grist-core/issues/827 --------- Co-authored-by: Florent <florent.git@zeteo.me>	3 months ago
Jarosław Sadziński	7f28aee79c	(core) Billing updates Summary: - Adding confirmation dialog when user doesn't want to cancel site - Changing `Cancel subscription` to `Cancel plan` - Removing `Pro` from upgrade header on pricing modal - Better handling situation when there is no default price - Removing mentions about sprouts program - Removing cache for stripe plans Test Plan: Updated tests Reviewers: georgegevoian Reviewed By: georgegevoian Differential Revision: https://phab.getgrist.com/D4273	3 months ago
Roman Holinec	3082fe0f01	Translated using Weblate (Slovak) Currently translated at 100.0% (1340 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago
Grégoire Cutzach	6801732c29	Translated using Weblate (French) Currently translated at 99.1% (1329 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/fr/	3 months ago
Paul Janzen	0e777b1fcf	Translated using Weblate (German) Currently translated at 100.0% (1340 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/de/	3 months ago
Paul Janzen	d6d9d1c52e	Translated using Weblate (Spanish) Currently translated at 100.0% (1340 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	3 months ago
Paul Janzen	3769c57915	Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (1340 of 1340 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/pt_BR/	3 months ago
Roman Holinec	994432e5de	Translated using Weblate (Slovak) Currently translated at 100.0% (1337 of 1337 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago
Riccardo Polignieri	6e9dae291c	Translated using Weblate (Italian) Currently translated at 100.0% (1337 of 1337 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/it/	3 months ago
github-actions[bot]	187358cfa2	automated update to translation keys (#1065 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	3 months ago
Roman Holinec	eed5f364c0	Translated using Weblate (Slovak) Currently translated at 37.1% (496 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago
Franček Prijatelj	c0e4cea273	Translated using Weblate (Slovenian) Currently translated at 100.0% (1336 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sl/	3 months ago
Leslie H	24ce54b586	Improve session ID security (#1059 ) Follow-up of #994. This PR revises the session ID generation logic to improve security in the absence of a secure session secret. It also adds a section in the admin panel "security" section to nag system admins when GRIST_SESSION_SECRET is not set. Following is an excerpt from internal conversation. TL;DR: Grist's current implementation generates semi-secure session IDs and uses a publicly known default signing key to sign them when the environment variable GRIST_SESSION_SECRET is not set. This PR generates cryptographically secure session IDs to dismiss security concerns around an insecure signing key, and encourages system admins to configure their own signing key anyway. > The session secret is required by expressjs/session to sign its session IDs. It's designed as an extra protection against session hijacking by randomly guessing session IDs and hitting a valid one. While it is easy to encourage users to set a distinct session secret, this is unnecessary if session IDs are generated in a cryptographically secure way. As of now Grist uses version 4 UUIDs as session IDs (see app/server/lib/gristSessions.ts - it uses shortUUID.generate which invokes uuid.v4 under the hood). These contain 122 bits of entropy, technically insufficient to be considered cryptographically secure. In practice, this is never considered a real vulnerability. To compare, RSA2048 is still very commonly used in web servers, yet it only has 112 bits of security (>=128 bits = "secure", rule of thumb in cryptography). But for peace of mind I propose using crypto.getRandomValues to generate real 128-bit random values. This should render session ID signing unnecessary and hence dismiss security concerns around an insecure signing key.	3 months ago
Roman Holinec	e007b38115	Translated using Weblate (Slovak) Currently translated at 29.7% (398 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago
Paul Janzen	3c7623b51b	Translated using Weblate (German) Currently translated at 100.0% (1336 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/de/	3 months ago
Paul Janzen	fbdd896f04	Translated using Weblate (Spanish) Currently translated at 100.0% (1336 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/es/	3 months ago
Paul Janzen	64dc9e13c9	Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (1336 of 1336 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/pt_BR/	3 months ago
Roman Holinec	6c2079166c	Translated using Weblate (Slovak) Currently translated at 27.5% (368 of 1334 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago
github-actions[bot]	8bc8d60fca	automated update to translation keys (#1053 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	3 months ago
Roman Holinec	414e0c5e69	Translated using Weblate (Slovak) Currently translated at 13.7% (184 of 1334 strings) Translation: Grist/client Translate-URL: https://hosted.weblate.org/projects/grist/client/sk/	3 months ago

1 2 3 4 5 ...

634 Commits (d753d5e7ae848a121eda9f27d7ed97c7ad157fc0)