 Girish Ramakrishnan
|
c3631350cf
|
We can skip user.scope here since we will intersect at access time anyway
|
2018-06-17 15:11:10 -07:00 |
|
|
Girish Ramakrishnan
|
669a1498aa
|
Do not dump token in logs
|
2018-06-17 15:01:42 -07:00 |
|
|
Girish Ramakrishnan
|
e8d9597345
|
Fix various error codes
401 - bad password/wrong password
403 - authenticated but not authorized
409 - conflict
|
2018-06-15 23:15:30 -07:00 |
|
|
Girish Ramakrishnan
|
24b0a96f07
|
Move passport logic to routes
|
2018-06-15 17:32:40 -07:00 |
|
|
Girish Ramakrishnan
|
858ffcec72
|
Add note
|
2018-06-15 17:04:18 -07:00 |
|
|
Girish Ramakrishnan
|
05a8911cca
|
condense the comments
|
2018-06-15 16:56:35 -07:00 |
|
|
Girish Ramakrishnan
|
89b41b11a4
|
Remove bogus accesscontrol logic
|
2018-06-15 16:26:14 -07:00 |
|
|
Girish Ramakrishnan
|
0a0884bf93
|
lint
|
2018-06-15 16:10:06 -07:00 |
|
|
Girish Ramakrishnan
|
2e92172794
|
Do not dump the entire token
|
2018-06-15 14:56:52 -07:00 |
|
|
Girish Ramakrishnan
|
042ea081a0
|
Typo
|
2018-06-15 14:35:52 -07:00 |
|
|
Girish Ramakrishnan
|
02d5d2f808
|
Add API to add and update the group roles
|
2018-06-15 00:28:27 -07:00 |
|
|
Girish Ramakrishnan
|
a77d45f5de
|
Add rolesJson to groups table
This will contain the roles ('role definition') of a group of
users. We will internally map these to our API scopes.
|
2018-06-14 22:54:52 -07:00 |
|
|
Girish Ramakrishnan
|
dc86b0f319
|
validateRequestedScopes -> hasScopes
|
2018-06-14 20:31:48 -07:00 |
|
|
Girish Ramakrishnan
|
f7089c52ff
|
normalizeScope -> intersectScope
|
2018-06-14 20:23:56 -07:00 |
|
|
Girish Ramakrishnan
|
55e5c319fe
|
Fix failing log test
|
2018-06-14 13:43:44 -07:00 |
|
|
Girish Ramakrishnan
|
32e6b9024c
|
Add email query param to reset code path
This reduces any attack surface
|
2018-06-12 17:56:41 -07:00 |
|
|
Girish Ramakrishnan
|
4369b3046e
|
Make options non-optional
|
2018-06-11 15:14:59 -07:00 |
|
|
Girish Ramakrishnan
|
d752ef5fad
|
Move password generation logic to model code
|
2018-06-11 13:06:08 -07:00 |
|
|
Girish Ramakrishnan
|
6534297a5d
|
Remove hat module
It's not been updated for 6 years!
|
2018-06-11 12:38:29 -07:00 |
|
|
Johannes Zellner
|
177243b7f2
|
Support new platform/addon log style
|
2018-06-11 20:09:45 +02:00 |
|
|
Johannes Zellner
|
3d57c32853
|
Explicitly send empty object for successful post to avoid angular warnings
|
2018-06-07 16:10:47 +02:00 |
|
|
Girish Ramakrishnan
|
900225957e
|
typo: code should return SetupError
|
2018-06-05 21:19:47 -07:00 |
|
|
Johannes Zellner
|
9eb58cdfe5
|
Check for plan when enabling email
|
2018-05-29 13:31:43 +02:00 |
|
|
Girish Ramakrishnan
|
bac3ba101e
|
Add mailboxName to app configure route
Fixes #558
|
2018-05-24 16:26:34 -07:00 |
|
|
Girish Ramakrishnan
|
c85ca3c6e2
|
account setup simply redirects to main page now
|
2018-05-17 09:17:08 -07:00 |
|
|
Girish Ramakrishnan
|
c3fbead658
|
Allow zoneName to be changed in domain update route
|
2018-05-15 15:39:30 -07:00 |
|
|
Girish Ramakrishnan
|
a45b1449de
|
Allow ghost users to skip 2fa
|
2018-05-14 15:07:01 -07:00 |
|
|
Girish Ramakrishnan
|
a1020ec6b8
|
remove /user from profile route
|
2018-05-13 21:53:06 -07:00 |
|
|
Girish Ramakrishnan
|
e5c43e9acd
|
Remove debug
|
2018-05-02 12:41:22 -07:00 |
|
|
Girish Ramakrishnan
|
f09e8664d1
|
Return canonical scope in REST responses
The '*' scope is purely an implementation detail. It cannot
be requested as such.
|
2018-05-02 12:36:41 -07:00 |
|
|
Girish Ramakrishnan
|
8c4015851a
|
merge auth.js into accesscontrol.js
|
2018-05-01 14:03:10 -07:00 |
|
|
Girish Ramakrishnan
|
a545bdd574
|
merge developer.js into clients.js
|
2018-05-01 14:02:59 -07:00 |
|
|
Girish Ramakrishnan
|
d1135accbd
|
lint
|
2018-05-01 13:58:13 -07:00 |
|
|
Girish Ramakrishnan
|
d5b594fade
|
return the scope as part of the user profile
send canonical scope in the profile response
|
2018-05-01 13:25:47 -07:00 |
|
|
Girish Ramakrishnan
|
c5ffb65563
|
Fix usage of normalizeScope
|
2018-05-01 13:21:53 -07:00 |
|
|
Girish Ramakrishnan
|
f76a5a7ba7
|
Move the clients API out of oauth prefix
|
2018-05-01 11:30:51 -07:00 |
|
|
Girish Ramakrishnan
|
23bc0e8db7
|
Remove SDK Role
Just compare with the token's clientId instead
|
2018-04-30 23:03:30 -07:00 |
|
|
Girish Ramakrishnan
|
240ee5f563
|
Ensure we hand out max user.scope
The token.scope was valid at token creation time. The user's scope
could since have changed (maybe we got kicked out of a group).
|
2018-04-30 22:51:57 -07:00 |
|
|
Girish Ramakrishnan
|
61d803f528
|
Use SCOPE_ANY everywhere
|
2018-04-30 21:44:24 -07:00 |
|
|
Girish Ramakrishnan
|
e7c8791356
|
lint
|
2018-04-30 21:41:09 -07:00 |
|
|
Girish Ramakrishnan
|
bc4f9cf596
|
Remove redundant requireAdmin
We already hand out scopes based on the user's access control
|
2018-04-30 21:38:48 -07:00 |
|
|
Girish Ramakrishnan
|
9789966017
|
Set the scope for a token basedon what the user has access to
|
2018-04-30 21:21:18 -07:00 |
|
|
Girish Ramakrishnan
|
1432d90f37
|
lint
|
2018-04-30 21:13:23 -07:00 |
|
|
Girish Ramakrishnan
|
c84f984205
|
No need to create a token on password reset
|
2018-04-30 15:15:05 -07:00 |
|
|
Johannes Zellner
|
6e19153350
|
Remove now unused result argument
|
2018-04-30 20:37:12 +02:00 |
|
|
Johannes Zellner
|
c5c3748aa9
|
Do not auto login on password reset
|
2018-04-30 19:55:59 +02:00 |
|
|
Girish Ramakrishnan
|
f809e359c9
|
refactor the global variables as functions
|
2018-04-29 20:17:45 -07:00 |
|
|
Girish Ramakrishnan
|
b5f8ca6c16
|
Fix nasssty typo
|
2018-04-29 17:50:12 -07:00 |
|
|
Girish Ramakrishnan
|
922ab3bde1
|
lint
|
2018-04-29 17:50:12 -07:00 |
|
|
Girish Ramakrishnan
|
3b7bcc1f61
|
refactor scopes into accesscontrol.js
this will be our authorization layer for oauth and non-oauth tokens.
|
2018-04-29 17:50:07 -07:00 |
|