Johannes Zellner
|
f60ff45cb6
|
Tokens are now valid for a week
|
2016-08-01 10:14:47 +02:00 |
|
Johannes Zellner
|
4e9dc75a37
|
Replace DatabaseError with ClientsError where applicable
|
2016-06-13 14:43:56 +02:00 |
|
Johannes Zellner
|
0160c12965
|
Allow to distinguish between built-in auth clients and external ones
|
2016-06-09 15:35:00 +02:00 |
|
Johannes Zellner
|
4776a005a5
|
Remove redundant client TYPE_*s
|
2016-06-08 14:09:06 +02:00 |
|
Johannes Zellner
|
207e81345f
|
Log event for external login
|
2016-06-07 11:59:54 +02:00 |
|
Johannes Zellner
|
226537de04
|
Move client TYPE_* to clients.js
|
2016-06-03 15:05:00 +02:00 |
|
Johannes Zellner
|
201efa70b7
|
use clients instead of clientdb in oauth2.js
|
2016-06-03 14:38:58 +02:00 |
|
Johannes Zellner
|
3a9a667890
|
Make all token grants without PREFIX_USER
|
2016-06-03 13:01:05 +02:00 |
|
Johannes Zellner
|
9d8a803185
|
Handle scope roles in scope checks
|
2016-06-03 11:09:48 +02:00 |
|
Johannes Zellner
|
e335aa5dee
|
Check for sdk token instead of token type DEV
|
2016-06-03 10:17:52 +02:00 |
|
Johannes Zellner
|
10163733db
|
Separate the scope checking
|
2016-06-03 10:10:58 +02:00 |
|
Girish Ramakrishnan
|
80ca69a128
|
user.update does not need the user object
|
2016-06-02 23:53:06 -07:00 |
|
Johannes Zellner
|
7326ea27ca
|
Only set username and displayName after successful update
|
2016-06-02 21:12:02 +02:00 |
|
Girish Ramakrishnan
|
82cd215ffa
|
merge bad fields and pass error.message correctly in REST responses
|
2016-06-02 00:12:21 -07:00 |
|
Girish Ramakrishnan
|
efa3ccaffe
|
fix crash because of missing error handling
|
2016-05-18 10:00:32 -07:00 |
|
Girish Ramakrishnan
|
ffedbdfa13
|
various minor fixes to eventlog
|
2016-05-02 10:01:23 -07:00 |
|
Girish Ramakrishnan
|
b322f6805f
|
move authType into source
|
2016-05-01 21:53:44 -07:00 |
|
Girish Ramakrishnan
|
ccc119ddec
|
add appLocation to user login
|
2016-05-01 21:47:35 -07:00 |
|
Girish Ramakrishnan
|
1f31fe6f8f
|
make user.remove and user.update add eventlog
|
2016-05-01 20:11:11 -07:00 |
|
Girish Ramakrishnan
|
7967610f3f
|
add user login to event log
|
2016-04-30 23:18:14 -07:00 |
|
Girish Ramakrishnan
|
c511019d79
|
remove jslint hint
|
2016-04-30 11:53:46 -07:00 |
|
Johannes Zellner
|
40bee79e3d
|
Fix oversight to store userId as user.username for auth codes
|
2016-04-13 10:45:11 +02:00 |
|
Johannes Zellner
|
435ec2365b
|
fix sendError() args
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
ff3562b0e8
|
Show error page for invalid reset tokens
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
3be5511e33
|
Ensure we pass the resetToken on error
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
c8604e95ab
|
Prevent password reset for not activated user
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
bbaf4c77fd
|
This is ejs not angular
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
8af01f2955
|
Give basic form feedback for account creation
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
c73213b2f2
|
Handle username conflict in account setup
|
2016-04-05 09:28:41 +02:00 |
|
Johannes Zellner
|
951934f275
|
Remove unused require
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
b8d0c01187
|
fix typo
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
7a5ac1a2f5
|
Add POST account/setup to distinguish between setup and password reset
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
c90a8041e2
|
Move password/setup.html -> account/setup.html
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
18b91b5fa0
|
Rename password setup to account setup
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
e0114c87ac
|
Also update the user record when username and email is sent
|
2016-04-05 09:27:32 +02:00 |
|
Johannes Zellner
|
c98275000b
|
Optionally support username and email in password setter route
|
2016-04-05 09:27:32 +02:00 |
|
girish@cloudron.io
|
c1cd7ac129
|
fix typo
|
2016-02-09 18:53:14 -08:00 |
|
girish@cloudron.io
|
60988ff7f3
|
make hasAccessTo take a callback
|
2016-02-09 12:48:21 -08:00 |
|
Johannes Zellner
|
9b4c385a64
|
Ensure we send proper password requirements on password reset
|
2016-01-26 15:21:03 +01:00 |
|
Johannes Zellner
|
6b8d5f92de
|
Set meaningful page title for oauth rendered pages
|
2016-01-21 16:19:38 +01:00 |
|
Johannes Zellner
|
9595b63939
|
Correctly encode the redirectURI in oauth callback
|
2015-11-25 17:45:18 +01:00 |
|
Johannes Zellner
|
5fbcebf80b
|
Stop using the cloudron name in the oauth views
|
2015-10-20 12:31:16 +02:00 |
|
Johannes Zellner
|
cc64c6c9f7
|
Test using simple auth credentials in oauth
|
2015-10-16 11:48:12 +02:00 |
|
Johannes Zellner
|
0c0782ccd7
|
Fixup oauth to not allow simple auth clients
|
2015-10-16 11:27:42 +02:00 |
|
Johannes Zellner
|
5bc9f9e995
|
use clientdb types in authorization endpoint
|
2015-10-16 11:22:16 +02:00 |
|
Johannes Zellner
|
22402d1741
|
Remove legacy test auth client type
|
2015-10-16 10:05:58 +02:00 |
|
Johannes Zellner
|
8f203b07a1
|
Fix indentation
|
2015-10-16 09:19:05 +02:00 |
|
Girish Ramakrishnan
|
9c157246b7
|
add type field to clients table
|
2015-10-15 17:35:47 -07:00 |
|
Johannes Zellner
|
5a0bf8071e
|
Handle the various appId types we have by now
|
2015-10-15 17:57:07 +02:00 |
|
Johannes Zellner
|
09dfc6a34b
|
Get the oauth2 debug()s in shape
|
2015-10-15 16:55:48 +02:00 |
|