Commit graph

24 commits

Author SHA1 Message Date
Carl Chenet ecc97fb30a login: provide specific error messages for certain failures - merged with i18n 2017-05-23 14:33:59 +02:00
Carl Chenet 24909604b5 login: when resetting a password, if user has 2fa, make them login again - merged with i18n 2017-05-23 12:42:48 +02:00
Carl Chenet 2fcacd5074 login: allow password to contain totp code 2017-05-19 13:59:58 +02:00
Carl Chenet bf5967b93e add a /login.json endpoint, just returns success or failure for now - merged with i18n 2017-05-19 13:52:37 +02:00
Carl Chenet ae60d827c6 i18n of 2FA login 2017-05-17 18:34:19 +02:00
Carl Chenet fd1148dc6b add TOTP-based two-factor authentication option 2017-05-17 11:29:54 +02:00
Carl Chenet 14cf05a4c4 i18n of invalid login/pass 2016-11-24 16:11:41 +01:00
joshua stein c354485916 when a non-banned, deleted user logs in, reactivate their account 2015-11-18 12:08:45 -06:00
joshua stein 677da599f2 login: if user password hash is not at current rounds, re-encrypt it 2015-10-11 13:04:16 -05:00
joshua stein 5567bb0b7e when resetting a password, if user is deleted but not banned, undelete
Also mention on the login screen that a deleted account can be
recovered this way.

Closes #221
2015-09-06 15:00:20 -05:00
joshua stein 624096a481 use _path instead of _url in a few redirect_to's 2015-01-02 18:33:13 -06:00
joshua stein bdbfedfb23 for normal requests to /login, save the referrer and redir back there
properly closes #164
2014-08-08 10:31:06 -05:00
joshua stein 243b29240a when redirecting to /login, save the url and params to redirect back to
closes #164
2014-08-08 10:16:06 -05:00
joshua stein aab34a9936 embed timestamp in password reset token, only work for 24 hours 2014-04-15 00:46:14 -05:00
joshua stein e12d91cd43 allow users to delete their own accounts
not much can actually be deleted, but it can be put into a deleted
state
2014-01-13 10:12:17 -06:00
joshua stein 287be48187 add stuff to deal with banning users 2014-01-12 15:09:32 -06:00
Serge Paquet 8fbf76b484 use activerecord query interface instead of deprecated finder methods 2013-12-25 16:43:50 -05:00
joshua stein 75570194ac sprinkle some to_s paranoia on params where it matters 2013-02-08 10:39:51 -06:00
joshua stein 1987a24a2a properly set @title/@heading everywhere 2012-09-07 09:18:15 -05:00
joshua stein d9b95b2a1d email and pushover reply notifications 2012-08-24 11:41:30 -05:00
joshua stein 282f505cf2 pass around root_url from view/controller into model when needed 2012-08-24 10:57:41 -05:00
joshua stein ada1571a53 invitation system, user settings 2012-08-24 10:57:11 -05:00
joshua stein 473a026a0e how did all of these tabs get here 2012-08-24 10:57:10 -05:00
joshua stein 093747b796 initial work on conversion from php tree 2012-06-16 20:15:46 -05:00