| Age | Commit message (Collapse) | Author |
|---|
|
utf-8 encoding used to be bundled with the SHA256 library. However we
only want to utf8 encode strings that are actual user input. We do not
want to encode the bytearrays that are used when hashing the hex values
calculated during for SRP.
So I separated the utf-8 encoding and the sha256 hashing.
|
|
use token from the form to submit password update
|
|
|
|
Now what else can you possibly zeroprefix?
This should be it - shouldn't it?
|
|
|
|
|
|
|
|
always use the API-only controller for all requests.
|
|
|
|
Refactor/separate session
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
addToForm was an attempt to not use ajax but just the normal form submit.
Turns out it's easy to add hidden fields to the form but quite cumbersome to remove the password fields from teh form so they are not submitted over the eventually untrusted channel.
So we use ajax for updates just like for signup.
|
|
|
|
|
|
|
|
|
|
They should be independent of the url we're serving the page from
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Also cleaned up the specs a bit
|
|
|
|
|
|
This way you don't have to add jquery to the lib dir for specs to work
|
|
|
|
|
|
* it returns the user
* it will return errors if sth. goes wrong.
|
|
|
|
|
|
also cleaned up some other parts that were not needed anymore
|
|
|
|
|
|
|
|
|
|
|
|
|
