leap_web.git/test, branch drop/ruby-2.1

fix: respond with error on invalid pgp key

2017-11-16T12:18:55+00:00

We used to just ignore the key.
Also separated the code for handling key updates from other
user updates. This should eventually be moved to a different
route. Mixing the two makes the implementation really hard.

minor: clean up account test

2017-11-16T12:17:22+00:00

also ensures that created user is cleaned up even if test fails

fix: alternate email dialogue

2017-11-13T12:16:41+00:00

fixes #8796

Cleaned up UserController#update earlier but missed that it was
used to change fallback email addresses. Now it is back. This
time including an integration test.

fix #8010 - publish public key in webfinger

2017-11-08T10:47:17+00:00

we were simply referring to the wrong key.
includes test

Merge branch '8800-hand-out-configs-json-without-authentication' into 'master'

2017-11-08T06:58:09+00:00

feat: allow unauthenticated access to list of configs

Closes #8800

See merge request leap/webapp!45

fix: sanity checks on user params

2017-10-24T11:33:03+00:00

fixes #8801

Includes a test reproducing 500 on lynx

We now make use of ActionController::Parameters require and permit
methods.

fix: also remove invite codes used for tmp users

2017-10-24T10:12:26+00:00

fixes #8807

fix: destroy invites used to create test accounts

2017-10-17T09:05:53+00:00

Production instances are getting cluttered with invites from
test accounts. Instead of marking them as used we will now completely
remove them.

refers to #8804
refers to #8807\

fix: login error message with locale set

2017-10-16T13:47:39+00:00

On a failed login the warden failure app gets called.
Some of the params are changed accordingly but controller
and action remain.
set_locale would detect there was no locale in the path
and thus attempt to redirect. However the params still
belong to the previous request which was a POST to
  Api::SessionsController.
This route does not respond to get requests and so it
would trigger a 404 in production and a 500 in development.

This commit prevents set_locale to act upon warden failure
app controller calls by adding /new to the list of
`NON_LOCALE_PATHS`. (The path is updated by warden to the
name of the action called in the failure app).

A test is included in this commit that tries to login
with an invalid username, password combination and a german
locale set.

fixes #8805

feat: allow unauthenticated access to list of configs

2017-09-11T12:55:14+00:00

This should simplify client code significantly according to
platform#8849