* Added fake site warning

* Fixed a bunch of style bugs for chrome browsers
* Improved check box styles on desktop and mobile
* Touch up tool tip styles. Only dark now.
* Created a separate terms page
* Added 2FA auth token options to login
* Added tool tip displays to some buttons on editor
* Added pinned and archived options to overflow menu
* Changed shared note styles
* Disabled Scroll into view
* Made image display smaller when adding images to notes
* Added a last used color option
* Updated help page
* Fixed spelling error on terms page
* Added a big ass green label on the new note icon
* Scratch pad now opens a note, which is the scratch pad
* Added better 2fa guide
* Added change password option
* Added log out and log out all active sessions option
* Added strict rate limiting on login and register actions
* Added middleware to routes that force authentication to be accessed
* Fixed bug that was causing shared notes to appear empty
* Updated option now appears on shared notes after they are actually updated

server/routes/userController.js

@@ -5,20 +5,24 @@ const User = require('@models/User')
 const Auth = require('@helpers/Auth')
 const cs = require('@helpers/CryptoString')
 
+let userId = null
+let masterKey = null
+
 // middleware that is specific to this router
-router.use(function timeLog (req, res, next) {
-	// console.log('Time: ', Date.now())
-	next()
+router.use(function setUserId (req, res, next) {
+
+	//Session key is required to continue
+	if(!req.headers.sessionId){
+		next('Unauthorized')
+	}
+
+	if(req.headers.userId){
+		userId = req.headers.userId
+		masterKey = req.headers.masterKey
+		next()
+	}
 })
 
-// Login User
-router.post('/login', function (req, res) {
-
-	User.login(req.body.username, req.body.password, req.body.authToken)
-	.then( returnData => {
-		res.send(returnData)
-	})
-})
 // Logout User
 router.post('/logout', function (req, res) {
 
@@ -28,19 +32,6 @@ router.post('/logout', function (req, res) {
 	})
 })
 
-// Register User
-router.post('/register', function (req, res) {
-
-	User.register(req.body.username, req.body.password)
-	.then( returnData => {
-
-		res.send(returnData)
-	})
-	.catch(e => {
-		res.send(false)
-	})
-})
-
 // change password
 router.post('/changepassword', function (req, res) {