dcshzj commented 7 months ago

What's Changed

Full Changelog: https://github.com/isomerpages/isomercms-backend/compare/v0.69.0...v0.70.0

Tests

[x] Use the script provided in the VAPT report on page 17 and 18
[x] Adjust the URL to point to your test instance
[x] Adjust the email address to be one that is valid (i.e. your own account) and attempt to log in (without keying in the correct OTP)
[x] Run the script and verify that you hit the max attempts after 5 tries

[x] connect to ogp vpn
[x] run node ddos.js
[x] assert that the remaining counter fell from 100
[x] note the reset time (this is the window time, and by extension the amount of time to wait for this test)
[x] unconnect from vpn
[x] run node ddos.js
[x] assert that the remaining counter fell from 100
[x] After the reset time is achieved, do above steps again and verify that after the reset time, the counters for both the simulated user resets.

Check that the following endpoints do not throw an error from validation:

[x] Create collaborator
[x] Feedback
[x] Create Review Request
[x] Update review request
[x] Create Comment
[x] get preview info
[x] Verify email otp
[x] Verify mobile otp
- [x] Specifically, verify that the /mobile/verifyOtp endpoint no longer accepts an array for mobile
[x] Sgid login

mergify[bot] commented 7 months ago

⚠️ The sha of the head commit of this PR conflicts with #1201. Mergify cannot evaluate rules on this PR. ⚠️

mergify[bot] commented 7 months ago

⚠️ The sha of the head commit of this PR conflicts with #1201. Mergify cannot evaluate rules on this PR. ⚠️