 Shane Kilkelly
|
dde5b7b830
Regenerate session on login, protect against session-fixation attack.
|
10 lat temu |
|
Shane Kilkelly
|
bb71433727
Remove `getLoggedInUser`
|
10 lat temu |
 Henry Oswald
|
777cbf1c80
move comment for user is false next to if statment
|
10 lat temu |
|
Shane Kilkelly
|
2119dcbb58
Finalise login workflow, works with login form again.
|
10 lat temu |
|
Shane Kilkelly
|
8e0103a1bc
wip: fix unit tests for AuthenticationController
|
10 lat temu |
|
Shane Kilkelly
|
3a5b3a8e8d
wip: acceptance tests working
|
10 lat temu |
|
Shane Kilkelly
|
b0a10c948c
wip refactor
|
10 lat temu |
|
Shane Kilkelly
|
749658a916
WIP: fixing acceptance tests
|
10 lat temu |
|
Shane Kilkelly
|
ab2c1e82fb
WIP: refactor
|
10 lat temu |
|
Shane Kilkelly
|
e6c7aa25ec
barely functional login and logout
|
10 lat temu |
|
Shane Kilkelly
|
e4f4325150
Basic passport integration
|
10 lat temu |
 Paulo Reis
|
9bf9df9a4a
Track login events.
|
10 lat temu |
|
Shane Kilkelly
|
0ac9b05d02
Add `ip_address` and `session_created` to the session user object.
|
10 lat temu |
|
Shane Kilkelly
|
f1653d01b7
Refactor method names in `UserSessionsManager`
|
10 lat temu |
|
Shane Kilkelly
|
db213c0621
Begin keeping record of user sessions in reds.
|
10 lat temu |
 James Allen
|
b556d57f40
Remove missed console.log debugging lines in AuthenticationController.coffee
|
10 lat temu |
|
James Allen
|
71ef045728
Implement authorization guards in Authorization{Manager,Controller}
|
10 lat temu |
|
James Allen
|
3e03164ed4
Remove dead auth_token code
|
10 lat temu |
|
Henry Oswald
|
c8084406d3
user notifications auto created on login for joinging groups
|
10 lat temu |
|
Henry Oswald
|
690b195f1a
move login success to .json as it sends json over
|
10 lat temu |
|
James Allen
|
1e8ab5357b
Improve pre-registered account activation process
|
11 lat temu |
|
Henry Oswald
|
7fd29b18a8
destroy users session before creating a new one for them after login
|
11 lat temu |
|
Henry Oswald
|
665bdcf538
v1 of express4 conversion
|
11 lat temu |
|
Henry Oswald
|
a7640b5bbd
changed authentication controller to use req.parsedUrl.pathname as query strings on req.url were breaking the whitelist
|
11 lat temu |
|
James Allen
|
5c30a7de67
Add in option for global login requirement (defaults to on)
|
11 lat temu |
|
James Allen
|
000f01fbeb
Remove unneeded uid module
|
11 lat temu |
|
James Allen
|
8e13ded360
Regenerate the session id after logging in or registering
|
11 lat temu |
|
Henry Oswald
|
804bc16bc8
redirect users to /register when coming from templates or share url
|
12 lat temu |
|
James Allen
|
dbd85a05f1
Send user features and features switches to views where needed
|
12 lat temu |
|
Henry Oswald
|
66ba6e612d
Revert "send 401 when login fails"
|
12 lat temu |
