Girish Ramakrishnan
|
f932f8b3d3
|
Add user management scope
This splits the user and groups API into those who have just 'read' access
and those who have 'manage' access.
|
2018-06-25 16:10:00 -07:00 |
|
Girish Ramakrishnan
|
6cd0601629
|
Map group roles to scopes
|
2018-06-18 14:52:39 -07:00 |
|
Girish Ramakrishnan
|
7f3114e67d
|
Rename to get/setMembership (to indicate IDs and not group objects
|
2018-06-18 13:57:17 -07:00 |
|
Girish Ramakrishnan
|
f24a099e79
|
Remove user.admin property
The UI will now base itself entirely off the scopes of the token
|
2018-06-17 16:49:56 -07:00 |
|
Girish Ramakrishnan
|
156ffb40c9
|
Remove scope from users.get
|
2018-06-17 16:07:20 -07:00 |
|
Girish Ramakrishnan
|
491d1c1273
|
getByResetToken already has the user object
|
2018-06-15 16:22:28 -07:00 |
|
Girish Ramakrishnan
|
a77d45f5de
|
Add rolesJson to groups table
This will contain the roles ('role definition') of a group of
users. We will internally map these to our API scopes.
|
2018-06-14 22:54:52 -07:00 |
|
Girish Ramakrishnan
|
32e6b9024c
|
Add email query param to reset code path
This reduces any attack surface
|
2018-06-12 17:56:41 -07:00 |
|
Girish Ramakrishnan
|
4369b3046e
|
Make options non-optional
|
2018-06-11 15:14:59 -07:00 |
|
Girish Ramakrishnan
|
d752ef5fad
|
Move password generation logic to model code
|
2018-06-11 13:06:08 -07:00 |
|
Girish Ramakrishnan
|
c099d5d3fa
|
Make password strength be 8 chars
Fixes #434
|
2018-06-11 12:55:24 -07:00 |
|
Girish Ramakrishnan
|
6534297a5d
|
Remove hat module
It's not been updated for 6 years!
|
2018-06-11 12:38:29 -07:00 |
|
Girish Ramakrishnan
|
2aa6350c94
|
Change the function names
We had these because user and mailbox code used to be mixed
|
2018-06-11 11:43:41 -07:00 |
|
Girish Ramakrishnan
|
ab80cc9ea1
|
Add username to the TOTP secret name
This works around issue in FreeOTP app which crashed when
the same name is used.
https://github.com/freeotp/freeotp-ios/issues/69
https://github.com/freeotp/freeotp-android/issues/69
|
2018-06-04 16:08:03 -07:00 |
|
Girish Ramakrishnan
|
a45b1449de
|
Allow ghost users to skip 2fa
|
2018-05-14 15:07:01 -07:00 |
|
Girish Ramakrishnan
|
0c07c6e4d0
|
Allow "-" in usernames
now that username and mailboxes are totally separate, we can allow '-'.
'+' is still reserved because LDAP it.
Fixes #509
|
2018-05-05 09:56:21 -07:00 |
|
Girish Ramakrishnan
|
616e38189c
|
Revert "x"
This reverts commit 182ea3dac3.
|
2018-05-03 09:29:23 -07:00 |
|
Girish Ramakrishnan
|
182ea3dac3
|
x
|
2018-05-01 15:17:48 -07:00 |
|
Girish Ramakrishnan
|
9789966017
|
Set the scope for a token basedon what the user has access to
|
2018-04-30 21:21:18 -07:00 |
|
Girish Ramakrishnan
|
c84f984205
|
No need to create a token on password reset
|
2018-04-30 15:15:05 -07:00 |
|
Girish Ramakrishnan
|
b5f8ca6c16
|
Fix nasssty typo
|
2018-04-29 17:50:12 -07:00 |
|
Girish Ramakrishnan
|
d8acf92929
|
UserError -> UsersError
|
2018-04-29 11:22:15 -07:00 |
|
Girish Ramakrishnan
|
7bb8d059b5
|
GroupError -> GroupsError
|
2018-04-29 11:21:01 -07:00 |
|
Girish Ramakrishnan
|
4fd58fb46b
|
Rename user.js to users.js
|
2018-04-29 11:19:04 -07:00 |
|