leap_web.git - [leap

Age	Commit message (Collapse)	Author
2013-04-02	send salt on Session#create without srp ephemeral A	Azul

2013-03-05	Merge branch 'master' into feature/limit_user_leak	Azul
	Conflicts: users/lib/warden/strategies/secure_remote_password.rb
2013-03-05	minor: fixed logout link	Azul

2013-03-04	Update tests and documentation to reflect changed error messages with ↵	jessib
	incorrect username or password on login attempt.
2013-03-04	make api test script work with bitmask and print log	Azul

2013-03-01	Merge pull request #32 from azul/feature/api-version-1-fixes	azul
	Feature: API version 1 fixes
2013-02-28	When attempting to login, the error messages should not leak information ↵	jessib
	about whether a username is valid. This also means the error message is more appropriate if somebody tries to login with somebody else's username and their password.
2013-02-28	Have specific error messages for usernames with incorrect formats.	jessib
	Signed-off-by: jessib <jessib@leap.se>
2013-02-26	Merge branch 'master' into feature/limit_usernames	jessib

2013-02-26	Change to language for when updating username/password.	jessib

2013-02-26	Changes to valid format for usernames.	jessib

2013-02-26	api for sessions fixed	Azul
	* now we return the user id on login * allow a destroy request for logging out * added test for api sessions controller
2013-02-25	Admins cannot update a user. Eventually we will want to allow admins to ↵	jessib
	update some user fields.
2013-02-25	Slight refactoring of partials	jessib

2013-02-25	Add hint that password change is optional	jessib

2013-02-19	Needs some cleanup, but this has one form where user can change username and ↵	jessib
	password (they can leave either the same if they just want to change one, but we should make this clearer.)
2013-02-19	Only check if last email alias is valid if the user has a last email alias.	jessib

2013-02-06	we don't add srp stuff to user class anymore	Azul
	warden srp strategy in lib has it all.
2013-02-06	using ruby-srp 0.1.5 SRP::Client to wrap user in session	Azul

2013-01-31	Remove public key if the key is passed as nil, but not otherwise.	jessib
	There was a weird case with reloading the user in the test if the public key had been unset.
2013-01-29	A user's public_key is the only attribute they should be able to update via API.	jessib

2013-01-29	Allow PUT API to update user.	jessib

2013-01-25	Merge branch 'feature/webfinger' of https://github.com/leapcode/leap_web	Azul
	Conflicts: users/app/views/users/edit.html.haml
2013-01-24	Removing aliases from webfinger as the link wouldn't work anyway, and don't ↵	jessib
	want to leak ID information.
2013-01-23	functional test for webfinger	Azul

2013-01-23	added a small test for HostMetaPresenter and using links hash in xml view	Azul

2013-01-23	added unit tests for user presenter	Azul
	changed the way the presenter works. Will need functional testing
2013-01-23	not inluding link to key if there is none	Azul

2013-01-23	make raising not found error less confusing	Azul

2013-01-22	Rough way to allow user to paste in their key, but certainly we will want ↵	jessib
	different display.
2013-01-22	Edit form should show email address for the currently displayed user.	jessib

2013-01-22	Users now have an email_address, not an email.	jessib

2013-01-22	fixing xml and adding json representation for host_meta	Azul

2013-01-22	removed accidentaily commited files	Azul

2013-01-22	adding json jrd responses to webfinger	Azul

2013-01-22	render 404 if needed	Azul

2013-01-22	some basic webfinger routes, controller, presenters, views	Azul

2013-01-18	more flexible email partial	Azul

2013-01-18	Merge remote-tracking branch 'origin/master' into feature/fixed-email-address	Azul
	Conflicts: users/app/views/emails/_email.html.haml
2013-01-17	Merge pull request #17 from leapcode/feature/tickets_controllers_simplification	azul
	Refactoring of tickets controller to fetch the ticket in a before filter...
2013-01-17	Merge pull request #16 from leapcode/feature/fixing-routes-with-api	azul
	Fixing routes with api
2013-01-18	minor: smalles fix ever - is_admin? has a questionmark	Azul

2013-01-17	Should be able to create a user when not logged in.	jessib
	This isn't ready to merge, as there is an issue with logging in as an admin in the test.
2013-01-17	Merge branch 'master' into feature/tickets_controllers_simplification	jessib
	Conflicts: users/app/controllers/users_controller.rb
2013-01-17	Deal with corner case where we don't have authenticated user. Will write a ↵	jessib
	test after merging in show view for users.
2013-01-17	minor fixes to validation workflow	Azul

2013-01-17	unit tests passing	Azul

2013-01-16	incomplete initial changes to make email address just login@domain.tld	Azul
	This involves a number of other changes like making sure the comparison between aliases and emails still works. Will do that by removing the @domain.tld from aliases as well.
2013-01-16	using subdomain for api requests properly	Azul

2013-01-15	For both users and tickets, if the object is not found and the current user ↵	jessib
	is an admin, they should see an alert that the object wasn't found, and be redirected to the current controller. If the object isn't found and the current user is not an admin, then we will continue to give an error about no access, so as not to leak information about what IDs do and don't exist.