{"push_id":712886583,"size":12,"distinct_size":8,"ref":"refs/heads/devel","head":"6f3c22481bc39e42d61f63dee4afab6b3a11f036","before":"d694b07910f72dcf152c51eebefbcf6b50d0725c","commits":[{"sha":"c63212958020490cbd313fe4f46ce98b323710e7","author":{"email":"7217ef4b3b3726c3603e3ee300515ad6f5798ba4@gmail.com","name":"Kahmali Rose"},"message":"Bump version to 0.6.6","distinct":false,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/c63212958020490cbd313fe4f46ce98b323710e7"},{"sha":"27f885b12b32f43da9499daaa4c3836138f0ab9e","author":{"email":"b958ce85204bc9ffb4c40ae8160c680147b007a5@gmail.com","name":"Jaz Singh"},"message":"Use hashed token in authentication\n\n- Validate against a hashed version of any provided token during auth\n  (previously validated against token directly)\n- Update the default auth endpoints to store and remove tokens from the\n  location expected by the Meteor Accounts package\n  - The `accounts-base` package now stores hashed tokens in\n    `services.resume.loginTokens.hashedToken`, instead of storing a\n    `services.resume.loginTokens.token` unhashed.\n- Resolve #79","distinct":false,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/27f885b12b32f43da9499daaa4c3836138f0ab9e"},{"sha":"18ce68046ac010ecfd371b221e309ab1df4369c7","author":{"email":"6530da6990ab5c3f72b4ed9ca20e263a84093b6d@gmail.com","name":"Kahmali Rose"},"message":"Merge pull request #82 from jazeee/fix-issue-79\n\nUse hashed token in authentication","distinct":false,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/18ce68046ac010ecfd371b221e309ab1df4369c7"},{"sha":"8fe7e6f23c556e06f630619aa1e8e74b6ec870ca","author":{"email":"b958ce85204bc9ffb4c40ae8160c680147b007a5@gmail.com","name":"Jaz Singh"},"message":"Add delay when accessing unauthorized ReST endpoints\n\n - When logging in or accessing a restricted ReST endpoint with invalid\n   credentials, the system shall delay before responding.\n - Note that this is not a great fix, since hackers could distribute\n   their requests across CPUs.\n - This is an initial temporary fix for #81","distinct":false,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/8fe7e6f23c556e06f630619aa1e8e74b6ec870ca"},{"sha":"a94aa48068c7cc2a981fd817f609494d0185f83b","author":{"email":"6530da6990ab5c3f72b4ed9ca20e263a84093b6d@gmail.com","name":"Kahmali Rose"},"message":"Merge pull request #83 from jazeee/fix-issue-81-2\n\nAdd delay when accessing unauthorized ReST endpoints","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/a94aa48068c7cc2a981fd817f609494d0185f83b"},{"sha":"fc451572ef5ca62cde4bc5edee1e557f0603e6b6","author":{"email":"7217ef4b3b3726c3603e3ee300515ad6f5798ba4@gmail.com","name":"Kahmali Rose"},"message":"Return a 401 instead of 403 for authentication errors","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/fc451572ef5ca62cde4bc5edee1e557f0603e6b6"},{"sha":"8ac544ba8cc281321ba6f5b4cd9f3711b7ad58b8","author":{"email":"7217ef4b3b3726c3603e3ee300515ad6f5798ba4@gmail.com","name":"Kahmali Rose"},"message":"Ensure auth token is only hashed in default auth\n\nToken hashing is now confined to the default authentication endpoints\nand the default user auth function, and will no longer interfere with\nthe custom auth described in #6. This also means that only clients\nconsuming a Restivus API with default authentication will require\nreauthentication.","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/8ac544ba8cc281321ba6f5b4cd9f3711b7ad58b8"},{"sha":"582db44b8c27246193e323a232f1eda6054cd1b0","author":{"email":"7217ef4b3b3726c3603e3ee300515ad6f5798ba4@gmail.com","name":"Kahmali Rose"},"message":"Update docs\n\n- Update README\n  - Add information on upgrading to v0.7.0 (the next release)\n  - Remove the section on \"Upgrading from 0.6.0\" since the information\n    can be found in the change log and it is unlikely there are many\n    users still on v0.6.0\n  - Rearrange the \"Upgrading\" sections in descending order by most\n    recent\n  - Update the default auth example to include token hashing (to match\n    current implementation)\n- Update change log\n  - Clean up the warning about the API-breaking changes in v0.7.0","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/582db44b8c27246193e323a232f1eda6054cd1b0"},{"sha":"4fa8525812106c3b6a11276d70a429b77440ed37","author":{"email":"7217ef4b3b3726c3603e3ee300515ad6f5798ba4@gmail.com","name":"Kahmali Rose"},"message":"Bump version to 0.7.0","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/4fa8525812106c3b6a11276d70a429b77440ed37"},{"sha":"2e76663f3e9d9261c4beb3d88e25fa4667f6b9b8","author":{"email":"15db4c7b269af1c401b4889333ceffe8528f31a8@gmail.com","name":"Dan Dascalescu"},"message":"Spell \"URL\" consistently","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/2e76663f3e9d9261c4beb3d88e25fa4667f6b9b8"},{"sha":"6ee653037b8c098498a1c6223357084060b118fd","author":{"email":"6530da6990ab5c3f72b4ed9ca20e263a84093b6d@gmail.com","name":"Kahmali Rose"},"message":"Merge pull request #87 from dandv/patch-1\n\nSpell \"URL\" consistently","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/6ee653037b8c098498a1c6223357084060b118fd"},{"sha":"6f3c22481bc39e42d61f63dee4afab6b3a11f036","author":{"email":"b958ce85204bc9ffb4c40ae8160c680147b007a5@gmail.com","name":"Jaz Singh"},"message":"Merge remote-tracking branch 'original/devel' into devel","distinct":true,"url":"https://api.github.com/repos/jazeee/meteor-restivus/commits/6f3c22481bc39e42d61f63dee4afab6b3a11f036"}]}