Fabien 'egg' O'Carroll e4cbb3d24d Reset magic link rate limiting upon successful login (#15345) ... refs https://github.com/TryGhost/Team/issues/1771 We don't have access to `req.brute.reset` due to the way the flow works, we have one endpoint which sends an email with a magic link, and another route which handles the login. We don't want to apply brute force protection to both because our rate limiting is designed for API requests not web page visits (which is how login is handled). Because of this we require access to the underlying ExpressBrute instance exposed by the spam-protection module, so that we can perform the reset.		2022-09-01 08:54:14 -04:00
..
__snapshots__	Mapped '/' attribution url to homepage	2022-08-25 14:51:38 +02:00
create-stripe-checkout-session.test.js	Removed out of date history items from UrlHistory	2022-08-25 16:09:34 -04:00
middleware.test.js	Fixed whitespace in bio not removed	2022-08-05 17:10:56 +02:00
send-magic-link.test.js	Removed out of date history items from UrlHistory	2022-08-25 16:09:34 -04:00
signin.test.js	Reset magic link rate limiting upon successful login (#15345)	2022-09-01 08:54:14 -04:00
webhooks.test.js	Added paid subscription start email alert	2022-08-25 19:53:02 +05:30
well-known.test.js	Converted Ghost repo into a monorepo	2022-07-20 16:41:05 +02:00