* master: (405 commits)
remove CSP live setting
remove service worker live setting
tweak slack icon
tweak logging order
New Crowdin translations (#5468)
tweak socket handler
remove team tournament points
upgrade dependencies
remove team best members list
i18n: ...ize -> ...ise
i18n: tournament 404 tweak (#5473)
i18n: tweak coordinates (#5473)
i18n: misc source tweaks (#5473)
i18n: source is british (#5473)
i18n: tweak site description (#5473)
log all signups in slack
add cli example
cosmetic
signup agreement
fix identification of lichess comments - for #5470
...
- Create a new runtime setting for socket debug info
- When setting is active, bad VersionCheck messages will send additional
info. The client can then report this info together with their current
version. Client reporting not implemented yet, but will be a simple
GET or json post.
The Origin-Trial header can be managed with nginx if nescessary. For
example:
location ~ ^/(analysis|practice|training|study) {
# WebAssembly Threads trial (wasmx), ends 2019-03-06
add_header Origin-Trial "Ap9XcH0KudHVbEiGod0LQEdRpQAJTkZB4CvOeNI3D7I6CWgsrJLC26CnghTE8RaFx7dQloqGEjBtYWK4Gk+zzQ8AAABXeyJvcmlnaW4iOiJodHRwczovL2xpY2hlc3Mub3JnOjQ0MyIsImZlYXR1cmUiOiJXZWJBc3NlbWJseVRocmVhZHMiLCJleHBpcnkiOjE1NTE4MzAzOTl9";
include lichess-hsts.conf;
limit_req zone=nodos burst=20;
include lichess-proxy.conf;
proxy_read_timeout 10s;
proxy_pass http://backend;
}
* 2fa: (33 commits)
22FA login wording
improve 2fa feedback
fix login form error message
2fa login form
let enabling 2fa terminate all other sessions
totpDefault -> currentTotp, totp(period) can be private
XHR login form
use Seq.has in ToptSecret.verify
login with ToptToken - WIP
white border around qrcode required for dark theme
license header for qrcode.min.js
trans invalidAuthenticationToken
hide 2fa as beta
allow mods to disable 2fa
load totp secret in user object
allow to disable 2fa again
fixes from code review
remove wrapping div
more tests
actually enable totp
...
