Johannes Zellner
63f6f065ba
Add and fixup invite link related tests
2021-10-28 11:18:31 +02:00
Johannes Zellner
92f0f56fae
do not strictly require fallbackEmail on user creation but provide a fallback
2021-10-28 10:29:02 +02:00
Johannes Zellner
cb8aa15e62
Do not allow setting ghost password for user without username
2021-10-27 23:36:44 +02:00
Johannes Zellner
4356d673bc
Fix wrong assert and minor typos
2021-10-27 22:31:54 +02:00
Johannes Zellner
b59776bf9b
fail getting invite link or sending invite if invate was already used
2021-10-27 21:25:43 +02:00
Johannes Zellner
475795a107
Invite is now also separate
2021-10-27 19:58:06 +02:00
Johannes Zellner
9a80049d36
Add two distinct password reset routes
2021-10-27 19:12:18 +02:00
Johannes Zellner
daf212468f
fallbackEmail is now independent from email
2021-10-26 22:50:02 +02:00
Johannes Zellner
885ea259d7
Set inviteToken on user creation
2021-10-01 14:52:58 +02:00
Johannes Zellner
4ce21f643e
send invite status via user rest api
2021-10-01 14:32:37 +02:00
Johannes Zellner
cb31e5ae8b
Separate invite and password reset token
2021-10-01 12:27:22 +02:00
Johannes Zellner
c7b668b3a4
remove unused require
2021-10-01 11:55:35 +02:00
Girish Ramakrishnan
54c6f33e5f
Fix broken invitation link
2021-09-25 17:36:56 -07:00
Girish Ramakrishnan
1aa96f7f76
demo: do not send login notification
2021-09-23 09:13:07 -07:00
Girish Ramakrishnan
bb2ad0e986
Implement operator role for apps
...
There are two main use cases:
* A consultant/contractor/external developer is given access to just an app.
* A "service" personnel (say upstream app author) is to be given access to single app
for debugging.
Since, this is an "app admin", they are also given access to apps to be consistent with
the idea that Cloudron admin has access to all apps.
part of #791
2021-09-21 12:30:02 -07:00
Girish Ramakrishnan
a36c51483c
no need to re-throw
2021-09-20 10:36:46 -07:00
Johannes Zellner
c6c62de68a
Move ghosts into settings table
2021-09-20 13:05:42 +02:00
Johannes Zellner
b3fe2a4b84
Set correct default ghost expiration
2021-09-17 16:08:03 +02:00
Johannes Zellner
2ea5786fcc
Fix setGhost api usage
2021-09-17 15:52:52 +02:00
Johannes Zellner
f75b0ebff9
Add set ghost route
2021-09-17 12:52:41 +02:00
Johannes Zellner
8fde4e959c
Support ghost password expiration in ghost file
2021-09-17 11:48:56 +02:00
Johannes Zellner
9da18d3acb
Fixup user tests
2021-09-16 15:38:06 +02:00
Johannes Zellner
6785253377
Invitation is now also just a single route like password reset
2021-09-16 15:03:48 +02:00
Johannes Zellner
074ce574dd
Return password reset link on reset request route
2021-09-16 14:34:56 +02:00
Girish Ramakrishnan
7ba3203625
users: getAll -> list
2021-08-20 11:31:10 -07:00
Girish Ramakrishnan
4cd5137292
mailer: fix error handling
...
previous mailer code has no callback and thus no way to pass back errors.
now with asyncification it passes back the error
2021-08-19 12:40:53 -07:00
Girish Ramakrishnan
200018a022
settings: async'ify
...
* directory config
* unstable app config
2021-08-18 15:46:08 -07:00
Girish Ramakrishnan
beb1ab7c5b
make users-test work
2021-08-13 14:52:57 -07:00
Girish Ramakrishnan
fee38acc40
Fix crash when setting up user account
2021-07-31 04:39:10 -07:00
Johannes Zellner
8e42423f06
When using await on superagent we should not call end()
...
https://visionmedia.github.io/superagent/#promise-and-generator-support
2021-07-29 11:26:28 +02:00
Girish Ramakrishnan
6e9b62dfba
fix various users-test.js
2021-07-19 23:38:20 -07:00
Girish Ramakrishnan
a1c61facdc
merge userdb.js into users.js
2021-07-16 22:33:22 -07:00
Girish Ramakrishnan
01a585aa11
remove safe usage
2021-07-08 08:52:51 -07:00
Johannes Zellner
0db62b4fd8
Make avatar apis buffer based
2021-07-08 11:17:13 +02:00
Johannes Zellner
81e6cd6195
Make gravatar support explicit only
2021-07-07 16:16:04 +02:00
Girish Ramakrishnan
31498afe39
async'ify the groups code
2021-06-29 09:08:45 -07:00
Girish Ramakrishnan
e7d9af5aed
users: asyncify and merge userdb.del
2021-06-26 10:13:21 -07:00
Girish Ramakrishnan
147c8df6e3
async'ify avatar and apppassword code
2021-06-25 23:32:21 -07:00
Girish Ramakrishnan
7bee7b9ef8
tokens: async'ify
2021-06-04 13:06:38 -07:00
Girish Ramakrishnan
c90a9e43cf
Fix usage of eventlog.add
2021-06-03 11:42:32 -07:00
Girish Ramakrishnan
53dce1e7aa
users: rename createdAt to creationTime
2021-05-17 07:54:54 -07:00
Johannes Zellner
7dcc904af9
Fix new login location detection
2021-05-09 10:19:19 +02:00
Girish Ramakrishnan
44ac406e57
admin -> dashboard
2021-05-05 12:29:04 -07:00
Johannes Zellner
5cc5c1923a
If user-agent is not known pass the agent as incoming string
2021-05-04 20:36:41 +02:00
Johannes Zellner
fed8ba95f0
Fallback to unkown useragent and don't stash such login attempts
2021-05-04 20:07:28 +02:00
Johannes Zellner
5ab925e284
Fix login location stash
2021-05-04 15:00:09 +02:00
Johannes Zellner
e10b7b59dc
Only use simplified user agent for login detection
2021-05-04 09:11:16 +02:00
Girish Ramakrishnan
64414eb932
new login mail: minor adjustments to text
2021-04-30 12:01:57 -07:00
Girish Ramakrishnan
8ff68331a8
proxyAuth: use default expiry time in cookie (1 year)
2021-04-30 10:31:09 -07:00
Girish Ramakrishnan
6fe8974a2d
location -> loginLocations
2021-04-30 10:28:34 -07:00
