 Shane Kilkelly
|
1137ab0715
Don't record redirect to static asset paths
|
vor 9 Jahren |
|
Shane Kilkelly
|
f5ced03074
Set redirect when sending user to `login` page.
|
vor 9 Jahren |
|
Shane Kilkelly
|
22101d0305
If user is sent to login page with explicit redirect, obey
|
vor 10 Jahren |
|
Shane Kilkelly
|
8a4352fff2
Set redirect when redirecting from restricted
|
vor 10 Jahren |
|
Shane Kilkelly
|
8089bb55a4
use session for the post-login redirect, remove `redir` query string.
|
vor 10 Jahren |
|
Shane Kilkelly
|
a373868862
Fix unit tests
|
vor 10 Jahren |
|
Shane Kilkelly
|
9cb3d8c4b8
Enable hook from module into passport init.
|
vor 10 Jahren |
|
Shane Kilkelly
|
dd14e51713
Handle null, undefined and false in `isUserLoggedIn`
|
vor 10 Jahren |
|
Shane Kilkelly
|
dbac4bd008
update session when user settings change
|
vor 10 Jahren |
|
Shane Kilkelly
|
7e449c60ed
fix tests
|
vor 10 Jahren |
|
Shane Kilkelly
|
dde5b7b830
Regenerate session on login, protect against session-fixation attack.
|
vor 10 Jahren |
|
Shane Kilkelly
|
bb71433727
Remove `getLoggedInUser`
|
vor 10 Jahren |
|
Shane Kilkelly
|
2119dcbb58
Finalise login workflow, works with login form again.
|
vor 10 Jahren |
|
Shane Kilkelly
|
8e0103a1bc
wip: fix unit tests for AuthenticationController
|
vor 10 Jahren |
 Paulo Reis
|
228de5332e
Unit test tracking code.
|
vor 10 Jahren |
|
Shane Kilkelly
|
0ac9b05d02
Add `ip_address` and `session_created` to the session user object.
|
vor 10 Jahren |
|
Shane Kilkelly
|
f1653d01b7
Refactor method names in `UserSessionsManager`
|
vor 10 Jahren |
 James Allen
|
3e03164ed4
Remove dead auth_token code
|
vor 10 Jahren |
 Henry Oswald
|
bd54cc722a
fixed broken tests in AuthenticationController
|
vor 10 Jahren |
|
Henry Oswald
|
7fd29b18a8
destroy users session before creating a new one for them after login
|
vor 11 Jahren |
|
Henry Oswald
|
a7640b5bbd
changed authentication controller to use req.parsedUrl.pathname as query strings on req.url were breaking the whitelist
|
vor 11 Jahren |
|
James Allen
|
5c30a7de67
Add in option for global login requirement (defaults to on)
|
vor 11 Jahren |
|
James Allen
|
8e13ded360
Regenerate the session id after logging in or registering
|
vor 11 Jahren |
|
Henry Oswald
|
804bc16bc8
redirect users to /register when coming from templates or share url
|
vor 12 Jahren |
|
Henry Oswald
|
66ba6e612d
Revert "send 401 when login fails"
|
vor 12 Jahren |
|
Henry Oswald
|
7976f2f0fe
send 401 when login fails
|
vor 12 Jahren |
|
Henry Oswald
|
d047d44079
Changed the error messages which are sent down to the client to be translated first
|
vor 12 Jahren |
|
James Allen
|
c1afbc66d9
Don't error if user is not logged in when compiling
|
vor 12 Jahren |
|
Henry Oswald
|
479b37a48c
null check user when getting user id from session
|
vor 12 Jahren |
|
James Allen
|
8715690ce9
Intial open source comment
|
vor 12 Jahren |
