 Shane Kilkelly
|
0e26222551
Don't redirect to images, icons, etc, in login workflow
|
9 years ago |
|
Shane Kilkelly
|
043520fc28
Remove the Metrics module, use metrics-sharelatex
|
9 years ago |
 Henry Oswald
|
cff922a0f5
idendify -> identify
|
9 years ago |
|
Henry Oswald
|
ebdce6169e
idendifyUser on login
|
9 years ago |
|
Shane Kilkelly
|
1137ab0715
Don't record redirect to static asset paths
|
9 years ago |
|
Shane Kilkelly
|
f5ced03074
Set redirect when sending user to `login` page.
|
9 years ago |
|
Shane Kilkelly
|
22101d0305
If user is sent to login page with explicit redirect, obey
|
10 years ago |
|
Shane Kilkelly
|
8a4352fff2
Set redirect when redirecting from restricted
|
10 years ago |
|
Shane Kilkelly
|
8089bb55a4
use session for the post-login redirect, remove `redir` query string.
|
10 years ago |
|
Shane Kilkelly
|
a373868862
Fix unit tests
|
10 years ago |
|
Shane Kilkelly
|
9cb3d8c4b8
Enable hook from module into passport init.
|
10 years ago |
|
Shane Kilkelly
|
dd14e51713
Handle null, undefined and false in `isUserLoggedIn`
|
10 years ago |
|
Shane Kilkelly
|
dbac4bd008
update session when user settings change
|
10 years ago |
|
Shane Kilkelly
|
7e449c60ed
fix tests
|
10 years ago |
|
Shane Kilkelly
|
dde5b7b830
Regenerate session on login, protect against session-fixation attack.
|
10 years ago |
|
Shane Kilkelly
|
bb71433727
Remove `getLoggedInUser`
|
10 years ago |
|
Shane Kilkelly
|
2119dcbb58
Finalise login workflow, works with login form again.
|
10 years ago |
|
Shane Kilkelly
|
8e0103a1bc
wip: fix unit tests for AuthenticationController
|
10 years ago |
 Paulo Reis
|
228de5332e
Unit test tracking code.
|
10 years ago |
|
Shane Kilkelly
|
0ac9b05d02
Add `ip_address` and `session_created` to the session user object.
|
10 years ago |
|
Shane Kilkelly
|
f1653d01b7
Refactor method names in `UserSessionsManager`
|
10 years ago |
 James Allen
|
3e03164ed4
Remove dead auth_token code
|
10 years ago |
|
Henry Oswald
|
bd54cc722a
fixed broken tests in AuthenticationController
|
10 years ago |
|
Henry Oswald
|
7fd29b18a8
destroy users session before creating a new one for them after login
|
11 years ago |
|
Henry Oswald
|
a7640b5bbd
changed authentication controller to use req.parsedUrl.pathname as query strings on req.url were breaking the whitelist
|
11 years ago |
|
James Allen
|
5c30a7de67
Add in option for global login requirement (defaults to on)
|
11 years ago |
|
James Allen
|
8e13ded360
Regenerate the session id after logging in or registering
|
11 years ago |
|
Henry Oswald
|
804bc16bc8
redirect users to /register when coming from templates or share url
|
12 years ago |
|
Henry Oswald
|
66ba6e612d
Revert "send 401 when login fails"
|
12 years ago |
|
Henry Oswald
|
7976f2f0fe
send 401 when login fails
|
12 years ago |
