| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2013-08-13 | Fix this, so the comment will get set to false in cases where the user isn't ↵ | jessib | |
| an admin. | |||
| 2013-08-12 | Per ISEC informational issue, manually set the private property only in ↵ | jessib | |
| cases where it is an admin who set it. | |||
| 2013-08-08 | Merge pull request #64 from azul/feature/identity-rewrite | jessib | |
| Feature/identity rewrite | |||
| 2013-08-08 | Merge branch 'bugfix/3410-close-srp-vulnerablility' | Azul | |
| 2013-08-08 | close srp vulnerability and report error in webapp | Azul | |
| 2013-08-07 | integration test exploiting srp vulnerability | Azul | |
| 2013-07-31 | added empty 'home' layout and removed debugger from homecontroller | elijah | |
| 2013-07-24 | also destroy the identity for a test user during teardown | Azul | |
| 2013-07-24 | keeping the pgp_key accessors for User so views still work | Azul | |
| 2013-07-24 | separate signup and settings service objects for user | Azul | |
| 2013-07-24 | removed email settings controller and views | Azul | |
| PGP setting has been moved into account settings. It's using the API now issueing an Ajax request without any visual feedback. This obviously is not what we want but it hopefully suffices for uploading gpg keys for testing purposes before the Identity UI is in place. | |||
| 2013-07-24 | setter for keys for dirty tracking, more robust tests | Azul | |
| Just altering identity.keys did not mark identities as changed. Also we now have a sane default for keys. | |||
| 2013-07-24 | test user validates uniqueness of login amongst aliases | Azul | |
| 2013-07-24 | no need for a remote email class | Azul | |
| 2013-07-24 | support deprecated API to set users main identity pgp key | Azul | |
| We'll want to get rid of the #public_key and #public_key= functions but they are still used from the users controller. We'll probably have an identity controller instead at some point. | |||
| 2013-07-24 | remove email aliases test - we'll move them to identities | Azul | |
| 2013-07-24 | add keys to identity | Azul | |
| 2013-07-24 | remove the remainders of email aliases and forward from user | Azul | |
| 2013-07-24 | allow available and unique forwards only | Azul | |
| 2013-07-24 | validations of email format and local domain moved over | Azul | |
| 2013-07-24 | local email adds domain if needed | Azul | |
| 2013-07-24 | testing all versions of emial identities, emails are now strings | Azul | |
| 2013-07-24 | move identity creation into user class | Azul | |
| It's always based on a user and most default values are based on user properties. | |||
| 2013-07-24 | first take on identity model - still broken | Azul | |
| 2013-07-17 | Merge pull request #63 from azul/bugfix/3201-fix-empty-config-error | azul | |
| Fix breakage due to empty config file for a given env | |||
| 2013-07-17 | Fix breakage due to empty config file for a given env | Azul | |
| 2013-07-16 | Merge pull request #60 from azul/bugfix/srp-fix-for-zeroprefixed-hashes | jessib | |
| Bugfix/srp fix for zeroprefixed hashes | |||
| 2013-07-16 | adapt srp account_flow test for the api to new ruby_srp API | Azul | |
| 2013-07-16 | ensure the page has been reloaded before testing current_path | Azul | |
| This test would fail sometimes on assert_equal '/', current_path I believe it was a timing issue. page.has_content? will wait for the content to show up. So afterwards the current_path should always be correct. | |||
| 2013-07-16 | to move to the next iteration use continue in js. | Azul | |
| 2013-07-16 | use ruby-srp 0.2.0 which has a hex based api | Azul | |
| 2013-07-16 | prevent _ prefixes for couchDB document ids | Azul | |
| 2013-07-15 | Merge pull request #58 from elijh/bugfix/security | jessib | |
| fix misc security related bugs | |||
| 2013-07-15 | require test_helper from account test so it can be run in isolation | Azul | |
| 2013-07-14 | remove freeze on APP_CONFIG for now | elijah | |
| 2013-07-14 | make sure capybara runs the whole rack app | Azul | |
| We use port 3003 for the integration test server. This test takes a few seconds (~8) now. Most of this is startup time of the server. A second run still takes 2 seconds like before. | |||
| 2013-07-14 | we do not expose M2 in srp.js anymore. | Azul | |
| So there is no way to print it. This message used to be correct but there are also other things that can cause this to fail now. So let's just remove it. | |||
| 2013-07-14 | js integration test for signup, login, logout | Azul | |
| 2013-07-12 | remove test for duplicate login - we'll prevent that on the client side | Azul | |
| SRP happens in two steps: * handshake * validation During the validation we delete the handshake data from the session. So a second validation does not really work. It could build upon the first one but it would not be able to send M2 to the client. So instead of trying to do sth. usefull when two validation requests are send we require the client to only send one. | |||
| 2013-07-12 | print debug info on failed login attempts | Azul | |
| 2013-07-12 | Merge pull request #49 from azul/test/print-couchdb-version-on-travis | azul | |
| print couch version in test couch setup | |||
| 2013-07-11 | add header to prevent iframes | elijah | |
| 2013-07-11 | set no-cache headers in the response | elijah | |
| 2013-07-11 | config - add force_ssl to config, add configuration notes to README.md | elijah | |
| 2013-07-11 | fix incorrect calling of tickets_path | elijah | |
| 2013-07-11 | fix failing tests | elijah | |
| 2013-07-11 | Slight tweak in case we get back the default response to warden's fail!, ↵ | jessib | |
| which is not an enumerable. | |||
| 2013-07-11 | Slight cleanup due to some emacs annoyances. | jessib | |
| 2013-07-11 | Clear authentication errors before displaying new ones. | jessib | |
| 2013-07-11 | Merge branch 'master' into feature/authentication_generic_error | jessib | |
 |
index : leap_web.git | |
| [leap_web] | git repository hosting |
| summaryrefslogtreecommitdiff |