 Shane Kilkelly
|
dde5b7b830
Regenerate session on login, protect against session-fixation attack.
|
10 years ago |
|
Shane Kilkelly
|
bb71433727
Remove `getLoggedInUser`
|
10 years ago |
|
Shane Kilkelly
|
2119dcbb58
Finalise login workflow, works with login form again.
|
10 years ago |
|
Shane Kilkelly
|
8e0103a1bc
wip: fix unit tests for AuthenticationController
|
10 years ago |
 Paulo Reis
|
228de5332e
Unit test tracking code.
|
10 years ago |
|
Shane Kilkelly
|
0ac9b05d02
Add `ip_address` and `session_created` to the session user object.
|
10 years ago |
|
Shane Kilkelly
|
f1653d01b7
Refactor method names in `UserSessionsManager`
|
10 years ago |
 James Allen
|
3e03164ed4
Remove dead auth_token code
|
10 years ago |
 Henry Oswald
|
bd54cc722a
fixed broken tests in AuthenticationController
|
10 years ago |
|
Henry Oswald
|
7fd29b18a8
destroy users session before creating a new one for them after login
|
11 years ago |
|
Henry Oswald
|
a7640b5bbd
changed authentication controller to use req.parsedUrl.pathname as query strings on req.url were breaking the whitelist
|
11 years ago |
|
James Allen
|
5c30a7de67
Add in option for global login requirement (defaults to on)
|
11 years ago |
|
James Allen
|
8e13ded360
Regenerate the session id after logging in or registering
|
11 years ago |
|
Henry Oswald
|
804bc16bc8
redirect users to /register when coming from templates or share url
|
12 years ago |
|
Henry Oswald
|
66ba6e612d
Revert "send 401 when login fails"
|
12 years ago |
|
Henry Oswald
|
7976f2f0fe
send 401 when login fails
|
12 years ago |
|
Henry Oswald
|
d047d44079
Changed the error messages which are sent down to the client to be translated first
|
12 years ago |
|
James Allen
|
c1afbc66d9
Don't error if user is not logged in when compiling
|
12 years ago |
|
Henry Oswald
|
479b37a48c
null check user when getting user id from session
|
12 years ago |
|
James Allen
|
8715690ce9
Intial open source comment
|
12 years ago |
