Merge pull request #2541 from adaptlearning/issue/2540

Reintroduce fixed Mongoose dependency

Author: tomgreenfield

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to the Adapt authoring tool are documented in this file.
 **IMPORTANT**: For information on how to **correctly and safely** update your installation, please consult **INSTALL.md**.<br/>
 _Note that we adhere to the [semantic versioning](http://semver.org/) scheme for release numbering._
 
+## [0.10.5] - 2020-11-09
+
+Bugfix release.
+
+### Fixed
+- Users can change the passwords of other users ([#2540](https://github.com/adaptlearning/adapt_authoring/issues/2540))
+
 ## [0.10.4] - 2020-08-21
 
 Bugfix release.
@@ -711,6 +718,7 @@ Initial release.
 - Loading screen of death
 - Session cookie security issues
 
+[0.10.5]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.4...v0.10.5
 [0.10.4]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.3...v0.10.4
 [0.10.3]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.2...v0.10.3
 [0.10.2]: https://github.com/adaptlearning/adapt_authoring/compare/v0.10.1...v0.10.2

lib/application.js

@@ -290,17 +290,9 @@ Origin.prototype.createServer = function (options, cb) {
       requestDomain.session = req.session;
       requestDomain.on('error', next);
       requestDomain.run(next);
-      req.domain = requestDomain;
     });
     server.use(auth.initialize());
     server.use(auth.session());
-    server.use((req, res, next) => {
-      if (!process.domain) {
-        // set process.domain again, fixes adaptlearning/adapt_authoring#2504
-        req.domain.enter();
-      }
-      next();
-    });
     server.use(express.static(path.join(require('./configuration').serverRoot, 'frontend', 'build')));
     server.use(express.static(path.join(require('./configuration').serverRoot, 'frontend', 'src', 'libraries')));
     if(!app.configuration.getConfig('isProduction')) {

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "adapt_authoring",
-  "version": "0.10.4",
+  "version": "0.10.5",
   "license": "GPL-3.0",
   "description": "A server-based user interface for authoring eLearning courses using the Adapt Framework.",
   "keywords": [
@@ -62,7 +62,7 @@
     "mime": "^2.4.4",
     "moment": "^2.24.0",
     "mongodb-uri": "^0.9.7",
-    "mongoose": "^5.9.18",
+    "mongoose": "5.8.13",
     "morgan": "^1.9.1",
     "multer": "^1.4.2",
     "needle": "^2.4.0",