Use DynamoDbBackUp:master in recovery script

Fixed:

• Switch recovery script back to using master branch of our DynamoDbBackUp fork (now that it uses NodeJS 10.x)

Easier Disaster Recovery (DR)

Added:

• New ./recovery/do-full-recovery.sh script for streamlined Disaster Recovery (DR)
• --service parameter to serverless.yml to avoid naming collisions among multiple copies of this

Update to NodeJS 10.x

Fixed:

• Switch to NodeJS 10.x and update dependencies

Update local development dependency

Security:

• Update lodash (used by local testing framework, not in production) to get past published vulnerability.

---

The lodash vulnerability does not seem to be exposed in any way in our system, but it is nonetheless being reported to us since we use lodash as a (sub) (dev-)dependency, so it seems worth updating.

Refine permissions, use Pay-Per-Request for DynamoDB

Added:

• Begin using pay-per-request billing for DynamoDB

Fixed:

• Fix u2f endpoint paths in readme
• Clean up quotes and whitespace
• Remove hardcoded DynamoDB region
• Limit access to table namespace

Update Cucumber (and other npm dependencies)

Fixed:

• Updated npm dependencies
• Added missing documentation of backup strategy to README
• Stop using deprecated defineSupportCode in cucumber tests

Security:

• Stop using a vulnerable version of lodash (via cucumber), though it's only in our tests so the risk was probably quite minimal

Update npm dependencies

Merge pull request #38 from silinternational/develop

Release 2.0.2

Fix encoding issue for iOS

Merge pull request #35 from silinternational/develop

Release 2.0.1

Renamed to serverless-mfa-api

Merge pull request #34 from silinternational/develop

Release 2.0.0 - Renamed