Merge pull request #2944 from withspectrum/2.2.7

2.2.7

Author: brianlovin

.circleci/config.yml

@@ -39,6 +39,7 @@ aliases:
     name: Setup and build
     command:
       |
+        cp now-secrets.example.json now-secrets.json
         yarn run build:web
         yarn run build:api
 
@@ -107,10 +108,10 @@ jobs:
       - run:
           name: Danger
           when: always
-          command: test -z $DANGER_GITHUB_API_TOKEN && yarn run danger ci || echo "forks are not allowed to run danger"
+          command: test $DANGER_GITHUB_API_TOKEN && yarn run danger ci || echo "forks are not allowed to run danger"
       - run:
           name: Run E2E Tests
-          command: yarn run test:e2e
+          command: test $CYPRESS_RECORD_KEY && yarn run test:e2e -- --record || yarn run test:e2e
 
   # Run eslint, flow etc.
   test_static_js:

.github/PULL_REQUEST_TEMPLATE.md

@@ -12,6 +12,7 @@
 - mercury
 - hermes
 - chronos
+- pluto
 - mobile
 
 **Run database migrations (delete if no migration was added)**

.gitignore

@@ -31,3 +31,4 @@ api/.env
 .expo
 mobile/.expo
 test-results.json
+public/uploads

.prettierignore

@@ -1 +1,2 @@
 flow-typed
+package.json

.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "es5"
+}

README.md

@@ -190,6 +190,11 @@ yarn run db:seed
 # ⚠️ To empty the database (e.g. if there's faulty data) run yarn run db:drop
 ```
 
+There's a shortcut for dropping, migrating and seeding the database too:
+```sh
+yarn run db:reset
+```
+
 #### Getting the secrets
 
 While the app will run without any secrets set up, you won't be able to sign in locally. To get that set up, copy the provided example secrets file to the real location:

admin/package.json

@@ -44,11 +44,8 @@
     "subscriptions-transport-ws": "^0.9.5"
   },
   "scripts": {
-    "start": "react-scripts start",
-    "build": "react-scripts build",
-    "test": "react-scripts test --env=jsdom",
-    "eject": "react-scripts eject",
-    "predeploy": "npm run build",
-    "deploy": "now build"
+    "start": "NODE_PATH=../ react-scripts start",
+    "build": "NODE_PATH=../ react-scripts build",
+    "test": "NODE_PATH=../ react-scripts test --env=jsdom"
   }
 }

api/index.js

@@ -11,6 +11,7 @@ import express from 'express';
 import Raven from 'shared/raven';
 import { ApolloEngine } from 'apollo-engine';
 import toobusy from 'shared/middlewares/toobusy';
+import addSecurityMiddleware from 'shared/middlewares/security';
 import { init as initPassport } from './authentication.js';
 import type { DBUser } from 'shared/types';
 
@@ -28,6 +29,9 @@ app.set('trust proxy', true);
 // Return the request if the server is too busy
 app.use(toobusy);
 
+// Security middleware.
+addSecurityMiddleware(app);
+
 // Send all responses as gzip
 app.use(compression());
 

api/models/community.js

@@ -1,7 +1,7 @@
 // @flow
 const { db } = require('./db');
 import { parseRange } from './utils';
-import { uploadImage } from '../utils/s3';
+import { uploadImage } from '../utils/file-storage';
 import getRandomDefaultPhoto from '../utils/get-random-default-photo';
 import {
   sendNewCommunityWelcomeEmailQueue,

api/models/user.js

@@ -1,6 +1,6 @@
 // @flow
 const { db } = require('./db');
-import { uploadImage } from '../utils/s3';
+import { uploadImage } from '../utils/file-storage';
 import { createNewUsersSettings } from './usersSettings';
 import { sendNewUserWelcomeEmailQueue } from 'shared/bull/queues';
 import type { PaginationOptions } from '../utils/paginate-arrays';