OpenSourceArk/Ghost
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3f7a7fff44
Ghost/ghost/members-api/package.json

54 lines
1.5 KiB
JSON
Raw Normal View History

Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
{
"name": "@tryghost/members-api",
Switched to unversioned Members packages - these packages are split apart for local development, but will be bundled into Ghost when publishing - therefore, these packages won't be published so we are resetting the versions to make them cleaner
2022-07-21 10:15:29 +03:00
"version": "0.0.0",
Disabled publishing for Members packages - we don't want to publish these anymore so this commit disables the ability to - also fixes up a missing version that wasn't reset
2022-07-21 10:24:02 +03:00
"private": true,
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
"author": "Ghost Foundation",
"license": "MIT",
"main": "index.js",
"scripts": {
"dev": "echo \"Implement me!\"",
Configured all unit tests to use dot reporter refs https://ghost.slack.com/archives/C02G9E68C/p1696490748701419 - this configures mocha to use the dot reporter because the default is way too verbose in CI
2023-10-05 13:09:39 +03:00
"test:unit": "NODE_ENV=testing c8 --all --reporter text --reporter cobertura -- mocha --reporter dot --reporter dot './test/**/*.test.js'",
Fixed full Admin test suite running during unit tests - because of how the npm scripts were set up, we were running the full Admin integration tests during the unit tests phase of CI - this commit renames the majority of `test` to `test:unit` in the package.json files, and aliases `test` to `test:unit` - special packages like Admin have no-op'd `test:unit` scripts so we don't end up running its tests
2022-08-15 16:20:45 +03:00
"test": "yarn test:unit",
Added consistent linting pattern to all packages refs: https://github.com/TryGhost/Toolbox/issues/188 - some of our older packages used a pattern for linting which missed using test config for linting tests - we need this to be consistent so that we can add more eslint rules for testing - two packages also didn't use the lib pattern, which made the lint pattern error - so this was fixed as well
2023-06-12 17:27:12 +03:00
"lint:code": "eslint *.js lib/ --ext .js --cache",
"lint": "yarn lint:code && yarn lint:test",
"lint:test": "eslint -c test/.eslintrc.js test/ --ext .js --cache"
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
},
"files": [
"index.js",
Moved MembersAPI.js into lib no-issue The previous published version was broken as we only include index.js and the lib directory in the npm package
2021-07-15 19:54:24 +03:00
"MembersAPI.js",
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
"lib",
"gateway"
],
"devDependencies": {
✨ Added logging configuration option for timestamps to use the local timezone fixes https://github.com/TryGhost/Ghost/issues/15190 refs https://github.com/TryGhost/framework/pull/76 - log output always uses UTC timestamps, but it may be desirable to configure logs to use the local machine timezone - a new config option has been added to `@tryghost/logging` so you can switch the logs to the local timezone - this commit bumps the package and sets the default config option to `false`, so it doesn't suddenly change the timezone of the logs - docs will be updated soon but if you'd like to use the timezone-altered timestamps, you can set `logging.useLocalTime` to `true` - credits to https://github.com/levee223 for the implementation and PR
2022-08-31 12:01:34 +03:00
"@tryghost/member-attribution": "0.0.0",
Update Types packages
2023-11-08 14:14:10 +03:00
"@types/node-jose": "1.1.13",
Updated linting and testing packages
2023-09-01 16:32:29 +03:00
"c8": "8.0.1",
Added test coverage for JWKS token verification refs https://github.com/TryGhost/Team/issues/1640 - Adds coverage for token verification based on public key exposed through the `/.well-known/jwks.json` endpoint
2022-05-23 12:59:33 +03:00
"jwk-to-pem": "2.0.5",
Update dependency mocha to v10.2.0
2022-12-12 16:20:22 +03:00
"mocha": "10.2.0",
Updated linting and testing packages
2023-09-01 16:32:29 +03:00
"nock": "13.3.3",
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
"should": "13.2.3",
Update Test & linting packages
2023-07-11 16:11:02 +03:00
"sinon": "15.2.0"
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
},
"dependencies": {
Pinned internal packages - we're going to be pinning all dependencies within the monorepo - this shouldn't change anything anyway because we're using the same version across all packages
2022-07-21 17:35:19 +03:00
"@tryghost/domain-events": "0.0.0",
Updated `@tryghost/errors` dependency - this version is written in TS, but was published a few months ago and needs to be bumped here - also updates a previous deep include into the library, which was unnecessary anyway
2024-03-11 19:14:14 +03:00
"@tryghost/errors": "1.3.1",
Added queueing middleware to handle high request volume (#19887) ref https://linear.app/tryghost/issue/CFR-4/ - added request queueing middleware (express-queue) to handle high request volume - added new config option `optimization.requestQueue` - added new config option `optimization.requestConcurrency` - added logging of request queue depth - `req.queueDepth` We've done a fair amount of investigation around improving Ghost's resiliency to high request volume. While we believe this to be partly due to database connection contention, it also seems Ghost gets overwhelmed by the requests themselves. Implementing a simple queueing system allows us a simple lever to change the volume of requests Ghost is actually ingesting at any given time and gives us options besides simply increasing database connection pool size. --------- Co-authored-by: Michael Barrett <mike@ghost.org>
2024-03-21 17:25:07 +03:00
"@tryghost/logging": "2.4.13",
Pinned internal packages - we're going to be pinning all dependencies within the monorepo - this shouldn't change anything anyway because we're using the same version across all packages
2022-07-21 17:35:19 +03:00
"@tryghost/magic-link": "0.0.0",
"@tryghost/member-events": "0.0.0",
"@tryghost/members-payments": "0.0.0",
Removed usage of `yg` when using NQL (#19287) refs https://github.com/TryGhost/NQL/pull/73 The referenced PR removes `yg` from the parsed NQL output, so we also need to remove any usage of it in Ghost
2024-01-15 17:40:01 +03:00
"@tryghost/nql": "0.12.1",
Update TryGhost packages
2024-04-30 23:04:58 +03:00
"@tryghost/tpl": "0.1.28",
"@tryghost/validator": "0.2.9",
Update Types packages
2024-04-30 22:48:58 +03:00
"@types/jsonwebtoken": "9.0.6",
Update dependency body-parser to v1.20.2
2023-02-22 11:57:53 +03:00
"body-parser": "1.20.2",
Update dependency bson-objectid to v2.0.4
2022-11-23 13:37:03 +03:00
"bson-objectid": "2.0.4",
Update dependency express to v4.19.2 [SECURITY]
2024-03-27 13:08:42 +03:00
"express": "4.19.2",
Upgraded got package from v9.6.0 to v11.8.6 (#16261) Refs TryGhost/Team#2459 -upgraded got from v9.6.0 to v11.8.6 to support following redirects (and other fixes) -got v12+ requires ESM, so we do not want to upgrade further at this time -required changes to a few libraries that use externalRequests -mention discovery service tests updated to test for follow redirects
2023-02-20 18:33:11 +03:00
"got": "11.8.6",
Pin dependencies
2022-07-21 15:38:42 +03:00
"jsonwebtoken": "8.5.1",
"lodash": "4.17.21",
Organized package dependencies - cleaned up unused dependencies - adds missing dependencies that are used in the code - this should help us be more explicit about the dependencies a package uses
2022-08-18 12:36:16 +03:00
"moment": "2.29.4",
🔒 Added support for logging out members on all devices (#18935) fixes https://github.com/TryGhost/Product/issues/3738 https://www.notion.so/ghost/Member-Session-Invalidation-13254316f2244c34bcbc65c101eb5cc4 - Adds the transient_id column to the members table. This defaults to email, to keep it backwards compatible (not logging out all existing sessions) - Instead of using the email in the cookies, we now use the transient_id - Updating the transient_id means invalidating all sessions of a member - Adds an endpoint to the admin api to log out a member from all devices - Added the `all` body property to the DELETE session endpoint in the members API. Setting it to true will sign a member out from all devices. - Adds a UI button in Admin to sign a member out from all devices - Portal 'sign out of all devices' will not be added for now Related changes (added because these areas were affected by the code changes): - Adds a serializer to member events / activity feed endpoints - all member fields were returned here, so the transient_id would also be returned - which is not needed and bloats the API response size (`transient_id` is not a secret because the cookies are signed) - Removed `loadMemberSession` from public settings browse (not used anymore + bad pattern) Performance tests on site with 50.000 members (on Macbook M1 Pro): - Migrate: 6s (adding column 4s, setting to email is 1s, dropping nullable: 1s) - Rollback: 2s
2023-11-15 19:10:28 +03:00
"node-jose": "2.2.0",
"uuid": "9.0.1"
Added package.json and deps for members-api no-issue
2019-05-07 17:36:58 +03:00
}
}
Reference in New Issue Copy Permalink