summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2013-07-12the 0 prefix in hex is essential for building the M and M2 stringsAzul
2013-07-04always use the API-only controller for all requests.elijah
2013-06-24refactor: separate account from sessionAzul
2013-06-24refactor: rename constants to calculate and clean up hash usageAzul
2013-06-24refactor: separate calculations from sessionAzul
2013-06-24fix bug wrt zero padding of hashesAzul
2013-03-20use a proper random a for the handshakeAzul
2012-11-26API: update instead of addToFormAzul
addToForm was an attempt to not use ajax but just the normal form submit. Turns out it's easy to add hidden fields to the form but quite cumbersome to remove the password fields from teh form so they are not submitted over the eventually untrusted channel. So we use ajax for updates just like for signup.
2012-11-23addToForm: add the srp signup data to an existing formAzul
2012-11-22don't cache password and loginAzul
2012-11-22catch empty responsesAzul
2012-11-22using done/fail instead of success/error, handing all properties to failAzul
2012-11-20all request should go to absolute pathsAzul
They should be independent of the url we're serving the page from
2012-11-20make sure we get the current password and loginAzul
2012-11-20make sure srp.login also works as a callbackAzul
2012-11-20sending the parsed json object to the error handlerAzul
2012-11-19further cleanupAzul
2012-11-19removed the SRP class - using just a plain srp object nowAzul
2012-11-19first step at cleaning up the srpAzul
2012-11-19works - but not quite what i want. Exposing jqXHR to error functionAzul
2012-11-14cleaned up unused parser functionsAzul
2012-11-14removed outdated django remote and all related filesAzul
Also cleaned up the specs a bit
2012-11-09Merge branch 'master' into feature-updated_json_apiAzul
2012-10-30we're expecting json responses - so put .json in the urlAzul
2012-10-19don't expect create to return an okAzul
* it returns the user * it will return errors if sth. goes wrong.
2012-10-19added success and error callbacks to registerAzul
2012-10-17hand success and error messages to identify by defaultAzul
also cleaned up some other parts that were not needed anymore
2012-10-16use M2 as the key for the server authAzul
2012-10-16not caching x,V,salt to avoid conflictsAzul
2012-10-16added unit tests for session calculationsAzul
2012-10-15expecting the salt to be send with key saltAzul
2012-10-15all rest tests passing, using proper verbsAzul
2012-10-14calculating the right M and M2!Azul
still missing some error handling, this in Django specs and the right http verbs
2012-10-14got SRP v6a test setup and basic rest flow to workAzul
* still need to fix the algo for auth * Also need to get the http verbs right
2012-10-12got signup to work in accordance with py srpAzul
2012-10-02using jquery for signup post now. login still pendingAzul
2012-08-21first round of making jslint happyAzul
2012-08-21moved srp-js files from lib to srcAzul
2012-07-20added an index file to use with sprocketsAzul
2012-07-20INCOMPATIBLE: major restructuring of the repositoryAzul
* removed Django code - we're keeping the tests - so I hope the two can still be used together * removed js packer - everyone has their own packaging strategy these days * cleaned up the repository - we only have js so javascript directory does not make much sense