f1c59be2d2
Merge pull request #27637 from overleaf/jel-remove-unused-group-sso
...
[web] Use `providerId` for group SSO and remove unused `universityId`
GitOrigin-RevId: 0928cdfee78cae5cdede57159b9968c15e26f27c
2025-08-08 08:07:34 +00:00
9839dc57b3
Merge pull request #27620 from overleaf/mj-remove-ai-assistant-notification
...
[web] Remove AI Assist notification
GitOrigin-RevId: e3ffcac233eb77d215bff8af7e35f7fdecacf29a
2025-08-08 08:07:00 +00:00
c9a1ecd060
Remove Bootstrap version 3 ( #27420 )
...
* Remove bootstrap-3 entrypoint
* Rename bootstrap-5 entrypoint to bootstrap
* Restore entrypoints
* Remove `bootstrap-5` and `bootstrap-3` entrypoints and a single `bootstrap.ts` file is now the default entrypoint
* Update `bootstrap-5` component imports to `bootstrap`
* Update `bootstrap-5` CSS imports to `bootstrap`
* Remove the `isBootstrap5` utility
* Remove `bootstrapVersion`
* Remove `ol-bootstrapVersion`
* Remove getCssThemeModifier
* Update path and rename
* Source format
* Remove Bootstrap v3 and Bootstrap v5 alias npm packages
* Remove bootstrap argument
* Remove unused files
* Update with the latest split tests
* Remove remaining bootstrap5PageStatus
* Update path
GitOrigin-RevId: 7acda2f80114d2de8699e1f06729a2a29218e284
2025-08-08 08:06:00 +00:00
70e0ca3eb5
Split adminCapabilities middleware into two
...
GitOrigin-RevId: 093e455e33459cae2e3da236958cb991f128299e
2025-08-08 08:05:52 +00:00
0f4534260b
Try checking admin access before getting capabilities
...
GitOrigin-RevId: 75ff99aa6b6e94c1b84a99d22d65b327f4d40126
2025-08-08 08:05:47 +00:00
ccfeb59c59
Move hasAdminCapability middleware into helpers
...
This is so that we can test it more easily than embedding it would allow
GitOrigin-RevId: be23d945bc7c816d32b18b4990ecd9e0a6592eb5
2025-08-08 08:05:42 +00:00
192aacbecd
Add hasAdminCapabilities function to ExpressLocals
...
This will be available in pug to allow admin capabilities to be used.
GitOrigin-RevId: 6bc4e38385b421aa44ee9385e28f3c59b09e3ade
2025-08-08 08:05:37 +00:00
3f11776ecd
Remove LESS stylesheets and dependencies ( #27409 )
...
* Remove components, core and modules LESS stylesheets
* Remove variables LESS stylesheets
* Remove app LESS stylesheets
* Remove github-sync, onboarding LESS stylesheets
* Remove main-light and IEEE LESS stylesheets
* Remove Less loader configuration
* Remove bootstrap-3 entrypoint
* Rename bootstrap-5 entrypoint to bootstrap
* Remove bootstrap-5 CSS folder and move stylesheets
* Update CSS variables
* Restore and update github-sync.scss path
* Fix try-premium.scss path and fix undefined mixin error
* Restore entrypoints
* Simplify buildCssPath to always use main-style.css
* Remove less from prettier formatting scripts
* Remove less from addHook extension
* Source format
* Remove nvd3 file reference from prettierignore (equivalent of nvd3.scss)
* Remove less and less-loader
* Add SCSS files to pirates require hook
GitOrigin-RevId: bd83c79f4d6ef7305d75993959a4dc5e7714ef9c
2025-08-06 08:05:38 +00:00
d7b282c176
removing split test and enforcing WF account creation as winning variant ( #26920 )
...
GitOrigin-RevId: 49d801004a6fced936214e5c08b82284ab771e72
2025-08-06 08:05:30 +00:00
58b8e36739
Merge pull request #27215 from overleaf/rh-stripe-pause-status
...
Update features and subscription state when Stripe pause starts and ends
GitOrigin-RevId: 368f5d9b046cfe26e996be336189081b96926713
2025-08-06 08:04:57 +00:00
5e293f8c79
Merge pull request #27413 from overleaf/rh-sp-remove-geoip
...
Only make GeoIP lookup for premium nudge experiment in SaaS environment
GitOrigin-RevId: a0df9186dc957cd5ead6e798266874aebedabee5
2025-08-06 08:04:41 +00:00
1c4b55fff4
Merge pull request #27498 from overleaf/mf-fix-subscriptionX-segmentation-stripe
...
[web] Only send one subscriptionId data in event segmentation for Stripe subscription to follow recurly
GitOrigin-RevId: 9e514d2991df768ea7e77bd5fa5f9d851c4ee8f0
2025-08-05 08:06:26 +00:00
4bb6019e56
Merge pull request #27506 from overleaf/slg-improve-add-manager-error
...
Improve error message when attempting to add non-registered manager
GitOrigin-RevId: d098b3640940c6299c279b86c9c7e2631cc73191
2025-08-05 08:06:21 +00:00
e129856dfe
Merge pull request #27445 from overleaf/slg-improve-domain-matcher-error
...
Improve domain matcher error message
GitOrigin-RevId: 8f07a8e27854637cb931f852e6c59d4960caa33b
2025-08-05 08:06:16 +00:00
7b7b560431
Use AsyncLocalStorage to cache userFullEmails on the request, avoiding duplicated calls to the affiliations endpoint ( #27542 )
...
* Use AsyncLocalStorage to cache userFullEmails
* Rename temporary fakeUser override to avoid conflicts
GitOrigin-RevId: 3a74816f677c1357293b0d46f245b4cfc499f2fa
2025-08-05 08:06:04 +00:00
7b7d03bcc0
Merge pull request #27516 from overleaf/slg-hide-enrolment_ad_html
...
hide enrolment_ad_html field from v1 admin form and remove unused usage in web
GitOrigin-RevId: 7cf8eed1a68bbaf2ebbb77069bfd421cd26ef01d
2025-08-05 08:05:41 +00:00
85878cdd8b
[web] Prevent 6-digits verification on SSO-emails ( #27496 )
...
* Rename token -> code
* Add test: don't verify SSO emails through the 6-digits verification
* Add a test on `/user/emails/resend-confirmation-code`
* Rename to `confirmationEmailMiddleware`
* Add `Modules.middleware('confirmationEmailMiddleware')` to `/user/emails/send-confirmation-code`
* Log attempted verifications of SAML emails
GitOrigin-RevId: ccc11831c860b219711cd57bba1a76ac975e71fb
2025-08-01 08:06:47 +00:00
8f2001e477
Merge pull request #27329 from overleaf/dp-editor-redesign-beta
...
Prepare editor redesign for beta release
GitOrigin-RevId: 584c0303f652640669234bd227780ed4f20b76c0
2025-08-01 08:05:42 +00:00
cf0a4c472f
[web] Group audit log link in settings ( #27390 )
...
* [web] Group audit log link in settings
Adds a link to access the `/manage/groups/:subscription_id/audit-logs`
endpoint
* [web] Add `group-audit-logs` split test for gradual rollout
GitOrigin-RevId: 60d6c9917ca54ff5e228996e7454a901f0f3b9ca
2025-08-01 08:05:10 +00:00
29045b9085
[web] download binary files in clsi from filestore via new endpoints ( #27505 )
...
* [history-v1] use String.padStart instead of lodash.padStart
* [web] download binary files in clsi from filestore via new endpoints
* [server-ce] tests: Cypress.env() is parsing boolean values
* [server-ce] tests: run history migration as root
GitOrigin-RevId: bdf6c0e542531ccc4b3f13d2ed68ca0d31e580e9
2025-07-31 08:05:28 +00:00
1c5ed10bbb
Merge pull request #27276 from overleaf/ii-domain-capture-anaylze-saml-response
...
[web] Domain capture analyze saml response
GitOrigin-RevId: 5a970968bdf14ab6f52d883a390d420b00cb4d8d
2025-07-30 08:07:30 +00:00
ca7a8f417f
Merge pull request #26902 from overleaf/ii-group-sso-config-email-attribute
...
[web] Add email attribute to ssoConfig
GitOrigin-RevId: 313ad45987fb408c62ef30575dacaea1041471da
2025-07-30 08:07:16 +00:00
7f8a423104
[web] Fixup: Remove unused sendReconfirmation ( #27486 )
...
Wrong merge caused this error in https://github.com/overleaf/internal/pull/27423 (37c8fa1)
GitOrigin-RevId: 3b0033f69fc872439c3f2ae37429fb05d9d69af1
2025-07-30 08:06:55 +00:00
6a92acf542
Merge pull request #27476 from overleaf/jpa-transfer-all
...
[web] add script for transferring all of a users projects in Server Pro
GitOrigin-RevId: 3aad2b624e1da2af83fec0715c2e5e08eff43695
2025-07-30 08:06:51 +00:00
b5d26217ac
Merge pull request #27291 from overleaf/ls-update-group-plan-display-name
...
Update group plan display name
GitOrigin-RevId: 7ffd46645f857d102e278833537d86ff6d74fb1c
2025-07-30 08:06:43 +00:00
1cebef56f0
Remove endpoint /user/emails/send-reconfirmation ( #27423 )
...
GitOrigin-RevId: bd96d749175248cba83eb07c00dab7e7a9f819da
2025-07-30 08:06:38 +00:00
535a9774ef
[web] Remove the unused endpoint /user/emails/resend_confirmation ( #27416 )
...
* Remove the unused endpoint `/user/emails/resend_confirmation`
* Remove exported middleware `resendConfirmationEmail`
* Revert "Remove exported middleware `resendConfirmationEmail`"
This reverts commit 7989bf25465dbc9b68c9d1af0d64d1097a747b55.
GitOrigin-RevId: 8054c6f217a734881093f78599a7b2be29436793
2025-07-30 08:06:33 +00:00
ec69641649
[web] Remove the endpoint /user/emails (POST) ( #27418 )
...
* Remove `/user/emails` (post)
* Update test
GitOrigin-RevId: 3979820935209ca36fdd8fabc016ad55d4858cef
2025-07-30 08:06:29 +00:00
c41a451f98
[dsmp] Add a route for accepting changes ( #27398 )
...
* [dsmp] Add a route for accepting changes
* change the payload to accept both change id and range
* remove project lookup
* Remove try/catch from DsMobileAppManager test
GitOrigin-RevId: afd4f793e9389cad97555cfb6675944e5fcf9b84
2025-07-29 08:05:42 +00:00
ec591c4f7b
Merge pull request #27150 from overleaf/ls-flexible-licensing-for-stripe-manually-billed-users
...
Support Stripe manually billed users in flexible licensing
GitOrigin-RevId: b3211577a313f3a241320bfe3910cf648ee49319
2025-07-25 08:05:32 +00:00
86d9f55f38
Merge pull request #27141 from overleaf/rh-stripe-schedule-pause
...
Support subscription pausing in Stripe
GitOrigin-RevId: 5550b2af2db99fd456d591c9bb4ba64d34dc7615
2025-07-24 08:05:29 +00:00
082121d3da
[web] reject upload requests without a file path ( #27156 )
...
* [web] reject upload requests without a file path
* [web] update copy on error message and link to contact form
Co-authored-by: Kamal Arkinstall <kamal.arkinstall@overleaf.com >
* [web] update copy: move dot to the end
---------
Co-authored-by: Kamal Arkinstall <kamal.arkinstall@overleaf.com >
GitOrigin-RevId: ba1ee81a91b046540caeb2f3f3da0e305611b35f
2025-07-22 08:07:03 +00:00
81f0807fc6
[web] prepare filestore migration for Server Pro/CE ( #27230 )
...
* [web] prepare filestore migration for Server Pro/CE
* [history-v1] remove unused USER_FILES_BUCKET_NAME env var from script
* [server-ce] tests: write default docker-compose.override.yml on startup
* [server-ce] tests: extend access logging of host-admin for response
* [server-ce] tests: test text and binary file upload
* [server-ce] tests: add tests for filestore migration
* [web] simplify feature gate for filestore/project-history-blobs logic
Co-authored-by: Brian Gough <brian.gough@overleaf.com >
* [server-ce] test: fix flaky test helper
---------
Co-authored-by: Brian Gough <brian.gough@overleaf.com >
GitOrigin-RevId: f89bdab2749e2b7a49d609e2eac6bf621c727966
2025-07-22 08:06:58 +00:00
d5b5710d01
Add docModified hook in ds-mobile-app module ( #27196 )
...
* Add docModified hook in ds-mobile-app module
* use Object.entries when iterating over promises
* avoid project lookup
* update tests
GitOrigin-RevId: 88676746f56558a97ce31010b57f5eeb254fefef
2025-07-22 08:05:56 +00:00
868d562d96
Support password-fallbackPassword array in requireBasicAuth ( #27237 )
...
GitOrigin-RevId: 33b15a05996bfa0190041f347772867a9667e2ca
2025-07-22 08:05:51 +00:00
5aacccc9d0
Merge pull request #27138 from overleaf/dp-overleaf-dark
...
Add overleaf dark editor theme
GitOrigin-RevId: bd8cdbcc7ad6b56078611b7c2ab69008ea578ae7
2025-07-18 08:07:06 +00:00
3fe4cd31b9
Merge pull request #27203 from overleaf/dp-overleaf-dark-theme-name
...
Change name of dark overall theme from "Default" to "Dark"
GitOrigin-RevId: 6928e4779c433e55525becfb5ba3f07a5b3847d3
2025-07-18 08:07:02 +00:00
cf668d897d
[web] Create middleware and functions for checks on admin permissions ( #27107 )
...
* Create AdminCapabilities in admin-panel module
* Add `adminRolesEnabled` setting
* Use `PermissionsController.requirePermission` in admin-panel routes
* Update `adminCapabilities` to be an array
* Update frontend tests
* Rename `defaultAdminCapabilities` to `fullAdminCapabilities`
Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com >
* Add tests to PermissionsManagerTests.js
* Get admin roles and capabilities from the database
* Add tests to admin-panel
* Fixup PermissionsManagerTests.js without admin-panel module
* Revert "Use `PermissionsController.requirePermission` in admin-panel routes"
This reverts commit ccbf3e3e3bca9239b786c662cba2ac6bd2f4117a.
* Revert "Fixup PermissionsManagerTests.js without admin-panel module"
This reverts commit 6d7ad207bb17c5ca4c12c489d4636a02c608926d.
* Revert "Add tests to PermissionsManagerTests.js"
This reverts commit 8f9cc911750911e1c4b74b631d8c8a1b1ca86630.
* Fix tests after the reverts
* Replace capabilities to more sensible examples ('modify-user-email' and 'view-project')
* Set `adminRolesEnabled: false` for now
* Return `[]` capabilities for non-admins
* Misc: types, test description, settings ordering
* Small refactor of AdminPermissions.mjs:
Reuse code with `getMissingCapabilities`
Throw when `requiredCapabilities` is empty
* Update tests after update
* Rename `checkAdminPermissions` to `hasAdminPermissions`
* Change role permissions to array instead of object
* Remove admin capabilities when `!Settings.adminPrivilegeAvailable`
* Return `[]` if there is no user id
* Throw if `user?._id` is missing
* Update services/web/modules/admin-panel/app/src/AdminPermissions.mjs
Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com >
* Adjust to ForbiddenError constructor syntax
* Give empty capabilities for unknown role, update tests
---------
Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com >
GitOrigin-RevId: 1eec4f6a45e1cc3ae76a3a4603cec1ceba1c2322
2025-07-18 08:06:40 +00:00
71a33925b6
Update types to match usage
...
GitOrigin-RevId: c3d175ba804bcb27613adf6604b9a45b714ee531
2025-07-18 08:06:26 +00:00
98af0e3d82
[web] In tests, update email confirmation to use the 6-digits flow ( #27069 )
...
* Rename `sendExistingSecondaryEmailConfirmationCode` to `sendExistingEmailConfirmationCode`
* Deduplicate error handling into `throwIfErrorResponse`
* Update `userHelper.confirmEmail` to use the 6-digits flow
GitOrigin-RevId: 91bdf7b185407b58520ca6b2aa1a7c71bdd23bc8
2025-07-18 08:06:18 +00:00
29d9408a69
Add vitest check when initialising redis
...
This is similar to the Mocha checks and will error if a connection is
attempted.
GitOrigin-RevId: 35e73cb56dc7c72393c55f40b6c18e9aaf74ab50
2025-07-18 08:05:14 +00:00
9720413218
[web] add support for pug caching when running E2E tests in dev-env ( #27073 )
...
GitOrigin-RevId: bbb53723bd1bc22db5b3d440539f1624a905341f
2025-07-16 08:06:07 +00:00
8c39add865
[clsi-cache] meter ingress and egress bandwidth ( #27143 )
...
* [mics] fix "app" label in clsi-cache metrics in dev-env
* [clsi-cache] validate filePath when processing file
* [clsi-cache] meter ingress and egress bandwidth
Files are downloaded directly from nginx, hence we cannot meter egress
in clsi-cache easily.
GitOrigin-RevId: 24de8c41728f0e9c984113c1470dec6153e75f20
2025-07-16 08:05:59 +00:00
1daa49d9d2
Merge pull request #27093 from overleaf/ls-support-3ds-in-group-plan-update-flows
...
Support 3DS verification in group plan update flows
GitOrigin-RevId: 3206f612e5699f39ac44864daf6610da2956e6ca
2025-07-16 08:05:25 +00:00
9e22ed9c3f
Merge pull request #26934 from overleaf/ls-support-individual-to-group-plan-upgrade
...
Support individual to group plan upgrade in Stripe
GitOrigin-RevId: 24cbe7bd6de86a4d9410e1abc49b6457e0871f40
2025-07-16 08:05:20 +00:00
ce074ecf11
Merge pull request #27128 from overleaf/mj-ide-tooltip-teardown
...
[web] Editor Redesign: Tear down editor nudge tooltips
GitOrigin-RevId: 83c412ad782d041c960eba8533ffc49935524b9c
2025-07-16 08:05:07 +00:00
524402e817
Merge pull request #26603 from overleaf/jel-domainCaptureEnabled
...
[web] Add admin toggle for setting `domainCaptureEnabled` feature for groups
GitOrigin-RevId: d116a493402f39c06b3267bf5294ed90ed3e762d
2025-07-15 08:06:23 +00:00
3c24c9bcc9
Merge pull request #26473 from overleaf/jel-group-domainCapture
...
[web] Add admin toggle for setting `domainCapture` feature for groups
GitOrigin-RevId: d4dc373aa0d7863f83129126613a38d914afbd5f
2025-07-15 08:06:19 +00:00
1768bef22a
Merge pull request #26366 from overleaf/jel-group-csv
...
[web] Include in group members CSV if user is managed and/or linked to the group's SSO
GitOrigin-RevId: 449974917d98cf121ea46eaa58be4b3666d88268
2025-07-15 08:06:14 +00:00
fe8964cc0a
Merge pull request #26994 from overleaf/rh-cio-ai-assist
...
Expose AI status to customer.io
GitOrigin-RevId: 7e69676d686326f50b16cbae9b1e4d97c14612fa
2025-07-15 08:05:42 +00:00
Jessica Lawshe