Johannes Zellner
0db62b4fd8
Make avatar apis buffer based
2021-07-08 11:17:13 +02:00
Johannes Zellner
81e6cd6195
Make gravatar support explicit only
2021-07-07 16:16:04 +02:00
Girish Ramakrishnan
147c8df6e3
async'ify avatar and apppassword code
2021-06-25 23:32:21 -07:00
Girish Ramakrishnan
b8ea9de439
move profile icons into the database
2021-04-29 13:57:24 -07:00
Girish Ramakrishnan
8c7eff4e24
user: add routes to set/clear avatar
2020-07-10 07:23:38 -07:00
Girish Ramakrishnan
c6c584ff74
user: move avatar handling into model code
2020-07-10 07:01:15 -07:00
Girish Ramakrishnan
64bc9c6dbe
disable profile view for all users to avoid confusion
2020-07-09 21:54:09 -07:00
Girish Ramakrishnan
0f5b7278b8
add directory config setting
...
part of #704
2020-07-09 16:02:58 -07:00
Girish Ramakrishnan
0e156b9376
migrate permissions and admin flag to user.role
2020-02-21 16:49:20 -08:00
Girish Ramakrishnan
c537dfabb2
add manage user permission
2020-02-13 22:49:58 -08:00
Girish Ramakrishnan
d1911be28c
user: load the resource with middleware
2020-02-13 20:59:17 -08:00
Girish Ramakrishnan
da85cea329
avatar: remove query param
...
let the ui add the size and default
2019-12-13 13:45:02 -08:00
Johannes Zellner
f2fca33309
Add support to upload custom profile avatar
2019-12-02 18:03:54 +01:00
Girish Ramakrishnan
6e57f8cc03
Refactor toHttpError code into BoxError
2019-10-24 18:09:55 -07:00
Girish Ramakrishnan
bc3169deb3
Move UsersError to BoxError
2019-10-24 15:06:41 -07:00
Johannes Zellner
f25d5b3304
Deliver the user account source in the profile api
2019-08-30 13:36:37 +02:00
Girish Ramakrishnan
5771478e4b
Use 412 for invalid token, otherwise user gets logged out
2019-06-20 16:37:16 -07:00
Girish Ramakrishnan
d752c68790
re-factor all the audit source objects
2019-03-25 15:15:39 -07:00
Girish Ramakrishnan
ee76c2c06e
Return 403 if totp token is invalid
...
the ui redirects to login screen otherwise
2019-03-23 14:12:46 -07:00
Girish Ramakrishnan
fba70d888b
Remove tokenScopes
...
decided that the UI won't use this any more and will just the admin flag
2018-08-03 10:07:23 -07:00
Girish Ramakrishnan
2a49569805
Send admin flag in the profile
2018-08-03 09:34:25 -07:00
Girish Ramakrishnan
ff73bc121f
Make tokenScope plural
2018-06-18 15:10:02 -07:00
Girish Ramakrishnan
ad6bc191f9
Make hasScopes take an array
2018-06-17 21:06:17 -07:00
Girish Ramakrishnan
f24a099e79
Remove user.admin property
...
The UI will now base itself entirely off the scopes of the token
2018-06-17 16:49:56 -07:00
Girish Ramakrishnan
156ffb40c9
Remove scope from users.get
2018-06-17 16:07:20 -07:00
Girish Ramakrishnan
e8d9597345
Fix various error codes
...
401 - bad password/wrong password
403 - authenticated but not authorized
409 - conflict
2018-06-15 23:15:30 -07:00
Girish Ramakrishnan
d5b594fade
return the scope as part of the user profile
...
send canonical scope in the profile response
2018-05-01 13:25:47 -07:00
Girish Ramakrishnan
b5f8ca6c16
Fix nasssty typo
2018-04-29 17:50:12 -07:00
Girish Ramakrishnan
d8acf92929
UserError -> UsersError
2018-04-29 11:22:15 -07:00
Girish Ramakrishnan
4fd58fb46b
Rename user.js to users.js
2018-04-29 11:19:04 -07:00
Johannes Zellner
50d7ade0d9
Remove unused property on set 2fa secret
2018-04-27 08:20:12 +02:00
Johannes Zellner
0d58a6bf33
Send 2fa auth status with profile info
2018-04-26 16:29:40 +02:00
Johannes Zellner
fbba636fb3
Handle more 2fa route errors
2018-04-26 16:14:37 +02:00
Johannes Zellner
9cd6333cf7
2fa routest work with the req.user object
2018-04-26 15:12:14 +02:00
Johannes Zellner
6574b22cf6
Add 2fa routest and business logic
2018-04-26 08:46:35 +02:00
Johannes Zellner
9f29438b34
Allow changing fallbackEmail via the profile api
2018-01-22 15:55:55 +01:00
Johannes Zellner
48d557b242
Replace alternateEmail with fallbackEmail
2018-01-21 14:50:24 +01:00
Girish Ramakrishnan
536c16929b
Remove showTutorial
2017-01-17 09:11:34 -08:00
Johannes Zellner
a0ef86f287
Remove now unused tutorial route and business logic
...
We can bring that back again if needed
2017-01-17 12:50:59 +01:00
Johannes Zellner
58b5613c6b
Send alternateEmail with profile and user rest api
2016-09-28 11:08:11 +02:00
Johannes Zellner
94ee636254
No need to again check the groups for admin
...
This is already in user.get() which is attached to req.user
2016-07-12 10:11:04 -07:00
Girish Ramakrishnan
80ca69a128
user.update does not need the user object
2016-06-02 23:53:06 -07:00
Girish Ramakrishnan
462440bb30
do not check for password in profile route
...
This is already checked by the verifyPassword middleware based on
the token type.
When using dev tokens, this check barfs for lack of password field
even when none is required.
2016-06-02 14:26:01 -07:00
Johannes Zellner
bdd14022d6
Report user conflict message all the way through the rest routes
2016-06-02 15:41:07 +02:00
Johannes Zellner
8eeee712aa
Remove unused require
2016-06-02 14:14:16 +02:00
Johannes Zellner
0f62faa198
All our tokens are now representing an user with a profile
2016-06-02 14:13:57 +02:00
Girish Ramakrishnan
60ce6b69ee
profile updates must be POST
2016-06-02 00:31:41 -07:00
Girish Ramakrishnan
82cd215ffa
merge bad fields and pass error.message correctly in REST responses
2016-06-02 00:12:21 -07:00
Johannes Zellner
d41eb81b3d
Add new profile/ route to set the showTutorial field
2016-05-06 13:56:40 +02:00
Girish Ramakrishnan
d7a34bbf68
remove profile action
2016-05-01 20:14:21 -07:00
