AJ Jordan

Right now there are several logical "jobs" that I can think of that the pump system performs: * HTTP request/response * OAuth nonce/session cleanup in the database * Distribution These...

See https://github.com/trentm/node-bunyan#raw--ringbuffer-stream; this would be super helpful for debugging errors in production.

Reenable broken as-root tests

1

There are currently a couple as-root tests that are disabled since they're broken. We should reenable these ASAP.

I believe we _should_ be able to do this since the web UI acquires its own OAuth tokens and does stuff with that. Although I guess if it's compromised via...

As these may represent typos.

Set the Secure flag on cookies

1

See https://github.com/expressjs/session's `secure` option.

Ship manpages

1

At the very least, we should ship manpages for `pump(1)` and `pump.io.json(5)`. Also nice to have: ~~~- [ ] `pump-authorize(1)`~~~ ~~~- [ ] `pump-create-group(1)`~~~ ~~~- [ ] `pump-delete(1)`~~~ ~~~- [...

Warn on unused variables

1

Would fix unused `var ignore = function() {}` in `test/`, probably among other things; see https://github.com/pump-io/pump.io/issues/1647#issuecomment-393806152.