Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-06-28 | Normalize i18n keys | Tulio Casagrande | |
2016-06-27 | Csrf not being enforced on GET | Caio Carrara | |
2016-06-27 | Fix xsrf-token verification in async calls | Caio Carrara | |
The previous behaviour only checked xsrf-token in headers, but it can be informed in a token as well. | |||
2016-06-24 | Issue #694 add an admin restricted resource for user stats | NavaL | |
2016-06-23 | refactoring: renaming services factory methods to relate them to user ↵ | NavaL | |
services sessions | |||
2016-06-14 | Empty FEEDBACK_URL env variable should also disable feedback | NavaL | |
This is needed as we need to provide empty FEEDBACK_URL, just to remind that it can be set if desired Issue #710 | |||
2016-06-02 | RootResource should return 503 during startup (#699) | Blake Williams | |
Return 503 code while RootResource is in MODE_STARTUP | |||
2016-05-26 | Updated calls to addRawHeader to use setRawHeaders | shabbyrobe | |
2016-05-22 | accomodates the case where the email address is the data sent with the event | NavaL | |
- now username and user_id are mapped when the user logs in - Issue #686 | |||
2016-05-18 | Issue #692 re-added logout back in the feature toggle | NavaL | |
2016-05-13 | Issue #691: Refactor to Twisted 16.1.1 | Felix Hammerl | |
2016-05-11 | Remove dispatcher references from service | Caio Carrara | |
Since we're not using dispatcher anymore, it doesn't make sense to keep dispatcher references and program flows that depend on it. For example, it doesn't make sense keep the flag --organization-mode, so it was removed as well. | |||
2016-04-13 | Issue #431: Review | Felix Hammerl | |
* Remove GenericDeferredErrorHandler class * Convert static method generic_error_handling to function instead | |||
2016-04-12 | Removed time logging from mails_resource | Bruno Wagner | |
Removed the time logging, it can be put adhoc when we want to test a specific case | |||
2016-04-11 | Removed general timings from methods | Bruno Wagner | |
I kept the logging functions so we can log times for tests and to investigate issues, but I removed all usages of them until someone needs them | |||
2016-04-08 | Issue #431: extractes the generic handling for error callbacks in init and ↵ | Zara Gebru | |
handles login, logout, mail and tags resources | |||
2016-04-08 | Issue #431: add errback on logout | Zara Gebru | |
2016-04-06 | Issue #292: add fingerprint to user settings resource | Zara Gebru | |
2016-03-24 | Issue #656: Fix sandbox fonts | Felix Hammerl | |
Add CORS headers to sandbox resource Add OpenSans in normal font weight (400) to the sandbox CSS | |||
2016-03-24 | Work in progress: Fix loading webfonts in the sandbox. | Tobias Adam | |
2016-03-09 | Issue #617: Serve content from Sandbox resource | Felix Hammerl | |
2016-03-04 | Fix: Logout calls session expire | Folker Bernitt | |
- Deferred was not handled as required - Test did not assert call to expire | |||
2016-03-01 | Fix tests after change on OpenPGPKey.get_json API | Giovane | |
- The main identifier of a key now is the fingerprint, not the id anymore - The address is not required anymore when creating the json | |||
2016-02-25 | only adding feature resource in root_resource test -- fixing build | NavaL | |
Issue #612 | |||
2016-02-25 | changed logout to post | NavaL | |
Issue #612 | |||
2016-02-25 | Backend and frontend protection against csrf attacks: | NavaL | |
- root resources changes the csrf token cookie everytime it is loaded, in particular during the intestitial load during login - it will also add that cookie on single user mode - initialize will still load all resources - but they you cant access them if the csrf token do not match - all ajax calls needs to add the token to the header - non ajax get requests do not need xsrf token validation - non ajax post will have to send the token in as a form input or in the content Issue #612 | |||
2016-02-24 | Recreate session on soledad problems | Folker Bernitt | |
- Issue #615 - invalid token raised by soledad after timeout, if we see this, recreate the session on next login | |||
2016-02-23 | Improve error message if send mail fails | Folker Bernitt | |
- Issue #609 | |||
2016-02-22 | Removes stacktrace errors from appearing on the login page. | NavaL | |
For the case of wrong file path or file not existing Issue #214 | |||
2016-02-22 | Removes stacktrace errors from appearing on the login page. | NavaL | |
Instead shows a generic: "invalid xml format" message Issue #214 | |||
2016-02-19 | Fixed arity of two event callbacks | Folker Bernitt | |
2016-02-12 | attachments are only un-linked from emails but not deleted in soledad | Jefferson Stachelski | |
- removed backend delete of attachments - JS unit tests - Functional test Issue #549 | |||
2016-02-12 | Revert "Revert "Issue #549 - Implemented remove attachment in server side"" | NavaL | |
This reverts commit 91223543207c4a56370ff609df9912a5b11262d7. | |||
2016-02-12 | Revert "Revert "Issue #549 - Implemented remove attachment"" | NavaL | |
This reverts commit 3c6b905d7e5b78e521b2e7692e5e32b7b0c226bc. | |||
2016-02-11 | adds argument to supply custom disclaimer/banner on login screen | NavaL | |
Issue #598 | |||
2016-02-10 | Fix Issue #596: Provide correct content-type | Felix Hammerl | |
Provide the proper content-type Quote filename due to Firefox bug https://bugzilla.mozilla.org/show_bug.cgi?id=221028 | |||
2016-02-08 | Revert "Issue #549 - Implemented remove attachment" | Felix Hammerl | |
This reverts commit 9442be5c230e286073244451189ffc05ae6c8083. | |||
2016-02-08 | Revert "Issue #549 - Implemented remove attachment in server side" | Felix Hammerl | |
This reverts commit 92f0e9887a216e0ec82355941655d3deebf2d422. | |||
2016-02-05 | suppressing Error logs being spit out in tests | NavaL | |
2016-02-05 | closing the services closes leap session, which stops background tasks, ↵ | NavaL | |
close soldedad and remove it from cache Issue #586 | |||
2016-02-04 | Issue #549 - Implemented remove attachment in server side | Jefferson Stachelski | |
2016-02-04 | Issue #549 - Implemented remove attachment | Jefferson Stachelski | |
2016-02-03 | reverting unnecessary steps to not re-load leap-sessions on re-login, as ↵ | NavaL | |
they are already cached from leap side - fixing build Issue #590 | |||
2016-02-03 | checks to load leap sessions and services or not | NavaL | |
Issue #590 | |||
2016-02-03 | move leap session creation to be done after interstitial is loaded | NavaL | |
Issue #590 | |||
2016-02-02 | Merge branch 'load', the load testing code | Victor Shyba | |
2016-02-02 | Log some times to identify very slow parts | Folker Bernitt | |
2016-02-02 | WIP | NavaL | |
2016-01-28 | making async setup user services after auth | NavaL | |
Issue #583 | |||
2016-01-27 | Add a login multi user functional test | Folker Bernitt | |
- Issue #576 - Extended AppTestClient with multi user support |