Johannes Zellner
03cd3f0b6f
Remove attached tokenType on req.user
2016-06-03 12:53:11 +02:00
Johannes Zellner
615f875169
Remove PREFIX_DEV for developer tokens
2016-06-03 12:52:10 +02:00
Johannes Zellner
f27ba04a00
Add test case for developer tokens
2016-06-03 11:11:11 +02:00
Johannes Zellner
3e0006a327
Allow tokens with SCOPE_ROLE_SDK through without a password
2016-06-03 11:10:59 +02:00
Johannes Zellner
558ca42ae8
Issue developer tokens with SCOPE_ROLE_SDK
2016-06-03 11:10:22 +02:00
Johannes Zellner
9d8a803185
Handle scope roles in scope checks
2016-06-03 11:09:48 +02:00
Johannes Zellner
105047b0c4
Add SCOPE_ROLE_SDK
2016-06-03 11:08:35 +02:00
Johannes Zellner
e335aa5dee
Check for sdk token instead of token type DEV
2016-06-03 10:17:52 +02:00
Johannes Zellner
10163733db
Separate the scope checking
2016-06-03 10:10:58 +02:00
Girish Ramakrishnan
251fad8514
add test for groupIds in listing api
2016-06-03 00:14:52 -07:00
Girish Ramakrishnan
036740f97b
filter out correct fields in the route code
2016-06-03 00:04:17 -07:00
Girish Ramakrishnan
f4958d936c
return groupIds in get user route
2016-06-03 00:00:11 -07:00
Girish Ramakrishnan
80ca69a128
user.update does not need the user object
2016-06-02 23:53:06 -07:00
Girish Ramakrishnan
097d23c412
move logic to model code
2016-06-02 23:29:43 -07:00
Girish Ramakrishnan
13a1213b0d
make group listing API return member userIds
2016-06-02 21:07:33 -07:00
Girish Ramakrishnan
76fe2bf531
add note to fix precision at some point
2016-06-02 19:43:23 -07:00
Girish Ramakrishnan
50c4e4c91e
log event only after lock is acquired
2016-06-02 19:26:58 -07:00
Girish Ramakrishnan
46441d1814
cloudron.update is not exposed
2016-06-02 19:23:21 -07:00
Girish Ramakrishnan
a4e73be834
pass auditSource for certificate renewal
2016-06-02 18:54:45 -07:00
Girish Ramakrishnan
6be0d0814d
pass auditSource from cron.js
2016-06-02 18:51:50 -07:00
Girish Ramakrishnan
e30d71921e
pass auditSource for app autoupdater
2016-06-02 18:49:56 -07:00
Girish Ramakrishnan
a49c78f32c
make box autoupdate generate eventlog
2016-06-02 18:47:09 -07:00
Girish Ramakrishnan
b077223e58
fix scope name
2016-06-02 17:49:54 -07:00
Girish Ramakrishnan
d2864dfe56
rename root scope to cloudron scope (for lack of better scope name)
2016-06-02 16:51:14 -07:00
Girish Ramakrishnan
6d08af35a8
give developer token root scope
2016-06-02 15:58:40 -07:00
Girish Ramakrishnan
54f9d653f7
fix error messages
2016-06-02 14:41:21 -07:00
Girish Ramakrishnan
8d65f93fa4
return error.message
2016-06-02 14:40:29 -07:00
Girish Ramakrishnan
462440bb30
do not check for password in profile route
...
This is already checked by the verifyPassword middleware based on
the token type.
When using dev tokens, this check barfs for lack of password field
even when none is required.
2016-06-02 14:26:01 -07:00
Girish Ramakrishnan
65261dc4d5
add time_zone setter route
2016-06-02 13:54:07 -07:00
Girish Ramakrishnan
54ead09aac
make the name API work
...
currently this only works for the main webadmin (and not for
nakeddomain, error etc) but that's fine.
2016-06-02 13:25:02 -07:00
Girish Ramakrishnan
28b3550214
use error.message
2016-06-02 13:00:23 -07:00
Girish Ramakrishnan
e2e70da4c5
restrict length to 32
2016-06-02 12:51:49 -07:00
Johannes Zellner
7326ea27ca
Only set username and displayName after successful update
2016-06-02 21:12:02 +02:00
Girish Ramakrishnan
1fe00f7f80
do not use verbs in resource url
2016-06-02 12:01:48 -07:00
Girish Ramakrishnan
e9e9d6000d
remove token check for user.update to work with dev tokens
2016-06-02 11:29:59 -07:00
Girish Ramakrishnan
6dccb3655f
add no groups available message in edit user dialog
2016-06-02 10:55:34 -07:00
Girish Ramakrishnan
c3113bd74d
go back to step2 if activation fails
2016-06-02 10:40:06 -07:00
Girish Ramakrishnan
e79119b72a
0.15.0 changes
2016-06-02 10:32:10 -07:00
Johannes Zellner
086cfdc1e6
Disabled form fields are not POSTed
...
I did not know about that fact, one has to use readonly
2016-06-02 16:12:32 +02:00
Johannes Zellner
1f091d3b4b
We have to let angular know
2016-06-02 16:06:15 +02:00
Johannes Zellner
892fa4b2ec
We still require the username to be sent always
2016-06-02 16:01:25 +02:00
Johannes Zellner
a87b4b207c
Adhere to already set username in user setup view
2016-06-02 15:47:58 +02:00
Johannes Zellner
bdd14022d6
Report user conflict message all the way through the rest routes
2016-06-02 15:41:07 +02:00
Johannes Zellner
3d40cf03b1
Pass down the reason why the user conflicts
2016-06-02 15:39:21 +02:00
Johannes Zellner
594be7dbbd
Allow the userdb code to distinguish between username or email duplicates
2016-06-02 15:34:27 +02:00
Johannes Zellner
a52e2ffc23
Distinguish between username and email conflict
2016-06-02 15:19:35 +02:00
Johannes Zellner
8eeee712aa
Remove unused require
2016-06-02 14:14:16 +02:00
Johannes Zellner
0f62faa198
All our tokens are now representing an user with a profile
2016-06-02 14:13:57 +02:00
Johannes Zellner
bfd66cf309
Remove unused token PREFIX_APP
2016-06-02 14:07:41 +02:00
Johannes Zellner
c2f7d61e34
Remove unused token TYPE_APP
2016-06-02 14:07:19 +02:00
