leap_web.git/users/test, branch 0.2.5

blacklist system logins for aliases and logins

2013-10-17T10:05:26+00:00

We blacklist based on three things:
* blacklist in APP_CONFIG[:handle_blacklist]
* emails in RFC 2142
* usernames in /etc/passwd

The latter two can be allowed by explicitly whitelisting them in APP_CONFIG[:handle_whitelist].

We stick to blocking names that have been configured as both blacklisted and whitelisted - better be save than sorry.

Since local part of email is case sensitive, want to allow remote email addresses with uppercase letters in local part.

2013-09-26T19:06:25+00:00

visual feedback when submitting forms (#3164)

2013-09-25T08:12:08+00:00

This also helps with the failing integration test. We needed a way to tell the ajax request was back. Observing the button state now works for that.

use token auth when accessing the api from webapp

2013-09-24T08:48:32+00:00

One failing integration test still needs to be fixed

This ensures that email addresses contain only lowercase letters, and that an identity's destination is a valid Email.

2013-09-23T19:23:08+00:00

Merge branch 'develop' into feature/only_lower_case_aliases

2013-09-19T19:07:25+00:00

Merge pull request #82 from azul/feature/sessions-expire

2013-09-19T17:41:58+00:00

Feature/sessions expire

user.account shortcut to Account.new(user)

2013-09-18T08:27:19+00:00

integration tests for session expiry

2013-09-17T11:04:11+00:00

Merge branch 'develop' into feature/only_lower_case_aliases

2013-09-09T20:54:29+00:00