Commit graph

493 commits

Author SHA1 Message Date
jelhan
8061760490 move encrypt / decrypt to methods of encryption service< 2015-10-29 12:50:00 +01:00
jelhan
bfe1f488d4 remove proof key knowledge cause it's not secure implemented yet 2015-10-29 12:48:46 +01:00
jelhan
176d45b317 use a service for encryption key handling 2015-10-25 19:38:14 +01:00
jelhan
3a197f20f3 Fix: show users sorted by creation date and correct date of last participation in evaluation 2015-10-25 17:15:57 +01:00
jelhan
1fd7f27f03 add legacy support 2015-10-25 16:46:11 +01:00
jelhan
6275fb54ec Merge branch 'model-fragments' of github.com:jelhan/croodle into model-fragments
Conflicts:
	app/templates/poll.hbs
	tests/acceptance/view-poll-test.js

There isn't any legacy support yet; so integration tests for legacy support will fail.
2015-10-25 16:01:55 +01:00
jelhan
cb2634e10a array transform is replaced by model fragments 2015-10-25 15:32:42 +01:00
jelhan
243ed3b12a model fragments for user selections (currently same as answers) 2015-10-25 15:32:42 +01:00
jelhan
d020f67e90 model fragments for options 2015-10-25 15:29:47 +01:00
jelhan
dd1a8436e0 model fragments for answers 2015-10-25 15:29:47 +01:00
jelhan
3c26bd7001 data of integration tests isn't cleared, so we can't be sure that there aren't more users by runs before 2015-10-25 15:26:27 +01:00
jelhan
128cb35162 another legacy test 2015-10-19 11:19:01 +02:00
jelhan
d09aa843bb introduce test helper for poll participation and extend some tests with it 2015-10-18 14:04:04 +02:00
jelhan
dec12d81a7 move legacy support to api 2015-10-17 15:44:27 +02:00
jelhan
cd7737d65b add legacy support for v0.3.0 2015-10-16 17:41:24 +02:00
jelhan
72d50350c4 Fixes #50 and tests for 1b02c26 2015-10-16 16:49:18 +02:00
jelhan
1b02c262d2 even more test helpers 2015-10-16 11:21:06 +02:00
jelhan
187155811c make more use of test helpers in acceptance tests 2015-10-14 20:36:47 +02:00
jelhan
bf1d18b2c0 array transform is replaced by model fragments 2015-10-13 21:46:49 +02:00
jelhan
9004eb6027 model fragments for user selections (currently same as answers) 2015-10-13 21:30:26 +02:00
jelhan
505319e464 model fragments for options 2015-10-13 11:29:51 +02:00
jelhan
3d4cf3f408 model fragments for answers 2015-10-12 13:40:29 +02:00
jelhan
a8a10ad42a Fixes #74 and some other validation issues 2015-10-12 11:42:51 +02:00
jelhan
38eecd64ff PHP 7 is right: an empty string is not a valid JSON 2015-08-23 19:04:58 +02:00
jelhan
b9bef69977 user has to proof that he knows encryption key when he participates
Therefore sha256 hash of encryption key is validated against one which is stored
on server on poll creation.
This one is transfered as X-Croodle-Proof-Key-Knowledge HTTP HEADER.

Prevents an attacker of transmitting data with wrong encryption key, which
would cause decryption errors for legit users.
2015-08-23 18:56:41 +02:00
jelhan
0ad6026715 includePlainOnCreate serializer option and use it for serverExpirationDate 2015-08-23 16:13:52 +02:00
jelhan
095ba3a2eb some documentation; no functional changes 2015-08-23 06:18:35 +02:00
jelhan
6ed0cc367a reimplement expiration date in new api models 2015-08-23 06:18:05 +02:00
jelhan
6cbbfebc82 list all used npm packages with version in travis build 2015-08-23 00:34:35 +02:00
jelhan
4cc10cd35b disable always_populate_raw_post_data in travis to aviod deprecation warning 2015-08-23 00:32:41 +02:00
jelhan
5ff11445e2 increased requirements to PHP 5.6 2015-08-23 00:06:47 +02:00
jelhan
09c8310bb6 rewritten API models 2015-08-22 23:47:31 +02:00
jelhan
0ae62f31f1 added test for translation object 2015-08-21 12:29:09 +02:00
jelhan
5a240e79e1 added some (ugly) tests for evaluation 2015-08-21 12:10:02 +02:00
jelhan
bfb7b1f48e Fix: top scrollbar width is wrong if vertical scrollbar is added without resize (document height becomes > than window height) 2015-08-20 14:52:11 +02:00
jelhan
12706d7d57 do not lookup encryption key by application container due this breaks tests in travis 2015-08-20 14:12:28 +02:00
jelhan
203204571e floatThead 1.2.13 released 5 hours ago makes trouble... 2015-08-19 23:01:26 +02:00
jelhan
1136af5b74 remove deprecation: COMPUTED PROPERTIES WITH A SHARED GETTER AND SETTER
http://emberjs.com/deprecations/v1.x/#toc_computed-properties-with-a-shared-getter-and-setter
2015-08-19 22:24:20 +02:00
jelhan
398453c1e4 do encryption / decryption in serializer
before it was done as computed properties of model

accessing encryption key in serializer is done via global application var.
this should be removed in long-term
2015-08-19 22:00:01 +02:00
jelhan
1bcee719d1 user id has to be unique 2015-08-19 15:30:33 +02:00
jelhan
0317c7c0c8 use ember-cli-build-info 2.0 to fix #65 2015-08-19 13:42:38 +02:00
jelhan
3e000f146d even more user-friendly evaluation 2015-08-19 13:27:14 +02:00
jelhan
089ddafe86 Merge branch 'master' into evaluation 2015-08-19 12:07:13 +02:00
jelhan
0daa56bdac update README 2015-08-19 12:05:44 +02:00
jelhan
c9ed3e8a06 readd integration test 2015-08-19 11:29:30 +02:00
jelhan
839695b224 Merge branch 'master' into evaluation 2015-08-19 11:14:08 +02:00
jelhan
450a78255d expiration date should also be encrypted on get;
therefore we have to duplicate it in store:
* encrypted for to serve for clients (encryptedExpirationDate)
* unencrypted for server to check if it's exceeded (serverExpirationDate)
serverExpirationDate should never be send to client
2015-08-18 21:53:52 +02:00
jelhan
3e017231c0 subresource integrity attribute
http://www.w3.org/TR/SRI/
2015-08-06 16:48:40 +02:00
jelhan
22d9e5045c Merge branch 'master' into evaluation 2015-08-01 23:54:53 +02:00
jelhan
7cef56c2d1 some more tests about showing correct dates and times and handeling
different time zones
2015-08-01 23:54:07 +02:00