Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-04-09 | return token on successful login via api | Azul | |
2013-04-09 | let's use safe ids instead of the default couch ones | Azul | |
Couch uses partly random partly sequential ids by default. We could change that in couch config to be all random. But this is probably more safe. | |||
2013-04-09 | initial token model and unit test | Azul | |
2013-04-03 | make sure user tests also run when run from users subdir | Azul | |
* The APP_CONFIG needs to be initialized in core so that is required from other engines * paths for load_views need to be relative to the model - not to rails root. | |||
2013-04-02 | send more meaningful error message on completely failed login attempt | Azul | |
2013-04-02 | send salt on Session#create without srp ephemeral A | Azul | |
2013-03-05 | minor: fixed logout link | Azul | |
2013-03-01 | Merge pull request #32 from azul/feature/api-version-1-fixes | azul | |
Feature: API version 1 fixes | |||
2013-02-28 | Have specific error messages for usernames with incorrect formats. | jessib | |
Signed-off-by: jessib <jessib@leap.se> | |||
2013-02-26 | Merge branch 'master' into feature/limit_usernames | jessib | |
2013-02-26 | Change to language for when updating username/password. | jessib | |
2013-02-26 | Changes to valid format for usernames. | jessib | |
2013-02-26 | api for sessions fixed | Azul | |
* now we return the user id on login * allow a destroy request for logging out * added test for api sessions controller | |||
2013-02-25 | Admins cannot update a user. Eventually we will want to allow admins to ↵ | jessib | |
update some user fields. | |||
2013-02-25 | Slight refactoring of partials | jessib | |
2013-02-25 | Add hint that password change is optional | jessib | |
2013-02-19 | Needs some cleanup, but this has one form where user can change username and ↵ | jessib | |
password (they can leave either the same if they just want to change one, but we should make this clearer.) | |||
2013-02-19 | Only check if last email alias is valid if the user has a last email alias. | jessib | |
2013-02-06 | using ruby-srp 0.1.5 SRP::Client to wrap user in session | Azul | |
2013-01-31 | Remove public key if the key is passed as nil, but not otherwise. | jessib | |
There was a weird case with reloading the user in the test if the public key had been unset. | |||
2013-01-29 | A user's public_key is the only attribute they should be able to update via API. | jessib | |
2013-01-29 | Allow PUT API to update user. | jessib | |
2013-01-25 | Merge branch 'feature/webfinger' of https://github.com/leapcode/leap_web | Azul | |
Conflicts: users/app/views/users/edit.html.haml | |||
2013-01-24 | Removing aliases from webfinger as the link wouldn't work anyway, and don't ↵ | jessib | |
want to leak ID information. | |||
2013-01-23 | added a small test for HostMetaPresenter and using links hash in xml view | Azul | |
2013-01-23 | added unit tests for user presenter | Azul | |
changed the way the presenter works. Will need functional testing | |||
2013-01-23 | not inluding link to key if there is none | Azul | |
2013-01-23 | make raising not found error less confusing | Azul | |
2013-01-22 | Rough way to allow user to paste in their key, but certainly we will want ↵ | jessib | |
different display. | |||
2013-01-22 | Edit form should show email address for the currently displayed user. | jessib | |
2013-01-22 | Users now have an email_address, not an email. | jessib | |
2013-01-22 | fixing xml and adding json representation for host_meta | Azul | |
2013-01-22 | removed accidentaily commited files | Azul | |
2013-01-22 | adding json jrd responses to webfinger | Azul | |
2013-01-22 | render 404 if needed | Azul | |
2013-01-22 | some basic webfinger routes, controller, presenters, views | Azul | |
2013-01-18 | more flexible email partial | Azul | |
2013-01-18 | Merge remote-tracking branch 'origin/master' into feature/fixed-email-address | Azul | |
Conflicts: users/app/views/emails/_email.html.haml | |||
2013-01-17 | Should be able to create a user when not logged in. | jessib | |
This isn't ready to merge, as there is an issue with logging in as an admin in the test. | |||
2013-01-17 | Merge branch 'master' into feature/tickets_controllers_simplification | jessib | |
Conflicts: users/app/controllers/users_controller.rb | |||
2013-01-17 | Deal with corner case where we don't have authenticated user. Will write a ↵ | jessib | |
test after merging in show view for users. | |||
2013-01-17 | minor fixes to validation workflow | Azul | |
2013-01-17 | unit tests passing | Azul | |
2013-01-16 | incomplete initial changes to make email address just login@domain.tld | Azul | |
This involves a number of other changes like making sure the comparison between aliases and emails still works. Will do that by removing the @domain.tld from aliases as well. | |||
2013-01-15 | For both users and tickets, if the object is not found and the current user ↵ | jessib | |
is an admin, they should see an alert that the object wasn't found, and be redirected to the current controller. If the object isn't found and the current user is not an admin, then we will continue to give an error about no access, so as not to leak information about what IDs do and don't exist. | |||
2013-01-15 | Show different ticket characteristics when viewing the users versus when ↵ | jessib | |
listing the tickets. Give a message if a user has no tickets. | |||
2013-01-15 | reverted simplification - not good to have 'none set' in a %ul | Azul | |
2013-01-15 | minor: put emails in unstyled ul and simplify | Azul | |
Just found out that render(@collection) returns nil for emtpy collections. So that is usefull for putting messages about the emtpy collection in an or clause. | |||
2013-01-14 | Use partials for displaying details shown when viewing a user. Some of these ↵ | jessib | |
partials have specific CSS for another use, so we will likely want to tweak this. | |||
2013-01-14 | Merge branch 'master' into feature/show_user. Added new tests. | jessib | |
Conflicts: users/test/functional/users_controller_test.rb |