stacker.news/worker
SatsAllDay 15f9950477
Store hashed and salted email addresses (#1111)
* first pass of hashing user emails

* use salt

* add a salt to .env.development (prod salt needs to be kept a secret)
* move `hashEmail` util to a new util module

* trigger a one-time job to migrate existing emails via the worker

so we can use the salt from an env var

* move newsletter signup

move newsletter signup to prisma adapter create user with email code path
so we can still auto-enroll email accounts without having to persist the email address
in plaintext

* remove `email` from api key session lookup query

* drop user email index before dropping column

* restore email column, just null values instead

* fix function name

* fix salt and hash raw sql statement

* update auth methods email type in typedefs from str to bool

* remove todo comment

* lowercase email before hashing during migration

* check for emailHash and email to accommodate migration window

update our lookups to check for a matching emailHash, and then a matching
email, in that order, to accommodate the case that a user tries to login
via email while the migration is running, and their account has not yet been migrated

also update sndev to have a command `./sndev email` to launch the mailhog inbox in your browser

also update `./sndev login` to hash the generated email address and insert it into the db record

* update sndev help

* update awards.csv

* update the hack in next-auth to re-use the email supplied on input to `getUserByEmail`

* consolidate console.error logs

* create generic open command

---------

Co-authored-by: Keyan <34140557+huumn@users.noreply.github.com>
Co-authored-by: keyan <keyan.kousha+huumn@gmail.com>
2024-05-04 18:06:15 -05:00
..
Dockerfile add sndev shell script and enhance docker compose local dev 2024-03-13 09:04:09 -05:00
auction.js Merge serializeInvoiceable with serialize without bug (#1051) 2024-04-09 19:49:20 -05:00
autowithdraw.js Allow deletion of wallet logs (#1101) 2024-05-03 14:14:33 -05:00
deleteUnusedImages.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
earn.js fix daily rewards 2024-05-02 00:18:45 -05:00
ephemeralItems.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
imgproxy.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
index.js Store hashed and salted email addresses (#1111) 2024-05-04 18:06:15 -05:00
nostr.js Rename HODL to JIT in frontend comments (#843) 2024-02-16 12:27:15 -06:00
ofac.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
ots.js territories 2023-12-04 21:34:06 -06:00
package.json Convert worker to ESM (#500) 2023-09-23 20:19:35 -05:00
repin.js territories 2023-12-04 21:34:06 -06:00
saltAndHashEmails.js Store hashed and salted email addresses (#1111) 2024-05-04 18:06:15 -05:00
search.js Search bookmarks (#1075) 2024-04-19 13:24:48 -05:00
streak.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
territory.js Merge serializeInvoiceable with serialize without bug (#1051) 2024-04-09 19:49:20 -05:00
trust.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
views.js Monthly rewards (#890) 2024-03-01 10:28:55 -06:00
wallet.js Fix duplicate autowithdrawal logs (#1121) 2024-04-29 20:39:31 -05:00