537fbff4aa
Use ws directly to handle new exec ws route
2017-08-18 19:46:18 -07:00
52db28e876
Verify the websocket request
2017-08-18 11:25:49 -07:00
b421866bf5
Remove simpleauth
...
Simple Auth used to provide auth over HTTP. The original motivation
behind this was this was a simple way to add Cloudron Auth integration.
Back in the day, Cloudron Auth was a requirement for apps but this is
not the case anymore.
This is currently not used by any app and having this might encourage
people to make Cloudron specific un-upstreamable changes.
2017-03-19 01:31:38 -07:00
97a17ff25f
Amend common template values in a central place
2016-10-13 17:34:21 +02:00
68d37b7260
Render the cloudronName in oauth views
2016-10-13 17:24:26 +02:00
bca57b5e47
Show cloudron name for webadmin login
...
Fixes #80
2016-10-13 13:56:29 +02:00
59b53d347f
display demo user credentials in demo cloudrons
2016-09-01 16:21:12 -07:00
f60ff45cb6
Tokens are now valid for a week
2016-08-01 10:14:47 +02:00
4e9dc75a37
Replace DatabaseError with ClientsError where applicable
2016-06-13 14:43:56 +02:00
0160c12965
Allow to distinguish between built-in auth clients and external ones
2016-06-09 15:35:00 +02:00
4776a005a5
Remove redundant client TYPE_*s
2016-06-08 14:09:06 +02:00
207e81345f
Log event for external login
2016-06-07 11:59:54 +02:00
226537de04
Move client TYPE_* to clients.js
2016-06-03 15:05:00 +02:00
201efa70b7
use clients instead of clientdb in oauth2.js
2016-06-03 14:38:58 +02:00
3a9a667890
Make all token grants without PREFIX_USER
2016-06-03 13:01:05 +02:00
9d8a803185
Handle scope roles in scope checks
2016-06-03 11:09:48 +02:00
e335aa5dee
Check for sdk token instead of token type DEV
2016-06-03 10:17:52 +02:00
10163733db
Separate the scope checking
2016-06-03 10:10:58 +02:00
80ca69a128
user.update does not need the user object
2016-06-02 23:53:06 -07:00
7326ea27ca
Only set username and displayName after successful update
2016-06-02 21:12:02 +02:00
82cd215ffa
merge bad fields and pass error.message correctly in REST responses
2016-06-02 00:12:21 -07:00
efa3ccaffe
fix crash because of missing error handling
2016-05-18 10:00:32 -07:00
ffedbdfa13
various minor fixes to eventlog
2016-05-02 10:01:23 -07:00
b322f6805f
move authType into source
2016-05-01 21:53:44 -07:00
ccc119ddec
add appLocation to user login
2016-05-01 21:47:35 -07:00
1f31fe6f8f
make user.remove and user.update add eventlog
2016-05-01 20:11:11 -07:00
7967610f3f
add user login to event log
2016-04-30 23:18:14 -07:00
c511019d79
remove jslint hint
2016-04-30 11:53:46 -07:00
40bee79e3d
Fix oversight to store userId as user.username for auth codes
2016-04-13 10:45:11 +02:00
435ec2365b
fix sendError() args
2016-04-05 09:28:41 +02:00
ff3562b0e8
Show error page for invalid reset tokens
2016-04-05 09:28:41 +02:00
3be5511e33
Ensure we pass the resetToken on error
2016-04-05 09:28:41 +02:00
c8604e95ab
Prevent password reset for not activated user
2016-04-05 09:28:41 +02:00
bbaf4c77fd
This is ejs not angular
2016-04-05 09:28:41 +02:00
8af01f2955
Give basic form feedback for account creation
2016-04-05 09:28:41 +02:00
c73213b2f2
Handle username conflict in account setup
2016-04-05 09:28:41 +02:00
951934f275
Remove unused require
2016-04-05 09:27:32 +02:00
b8d0c01187
fix typo
2016-04-05 09:27:32 +02:00
7a5ac1a2f5
Add POST account/setup to distinguish between setup and password reset
2016-04-05 09:27:32 +02:00
c90a8041e2
Move password/setup.html -> account/setup.html
2016-04-05 09:27:32 +02:00
18b91b5fa0
Rename password setup to account setup
2016-04-05 09:27:32 +02:00
e0114c87ac
Also update the user record when username and email is sent
2016-04-05 09:27:32 +02:00
c98275000b
Optionally support username and email in password setter route
2016-04-05 09:27:32 +02:00
c1cd7ac129
fix typo
2016-02-09 18:53:14 -08:00
60988ff7f3
make hasAccessTo take a callback
2016-02-09 12:48:21 -08:00
9b4c385a64
Ensure we send proper password requirements on password reset
2016-01-26 15:21:03 +01:00
6b8d5f92de
Set meaningful page title for oauth rendered pages
2016-01-21 16:19:38 +01:00
9595b63939
Correctly encode the redirectURI in oauth callback
2015-11-25 17:45:18 +01:00
5fbcebf80b
Stop using the cloudron name in the oauth views
2015-10-20 12:31:16 +02:00
cc64c6c9f7
Test using simple auth credentials in oauth
2015-10-16 11:48:12 +02:00
Girish Ramakrishnan