 James Smith
|
c8c82e30fc
|
handle failed invite signups
|
2026-01-22 12:22:14 +00:00 |
|
|
James Smith
|
fa62107421
|
Require setting of username when invited
|
2026-01-22 11:55:18 +00:00 |
|
|
James Smith
|
02105ae551
|
fix altcha failure message key
|
2026-01-20 17:36:30 +00:00 |
|
|
James Smith
|
4b418fd17d
|
style invitation accept form and add altcha
|
2026-01-20 16:11:09 +00:00 |
|
|
James Smith
|
3e83b0ea3e
|
override invitations controller to configure authorization
|
2026-01-20 15:55:39 +00:00 |
|
|
James Smith
|
baaf4c4ea6
|
fall back to default tour state if nil
|
2026-01-05 15:15:07 +00:00 |
|
|
James Smith
|
c5d3d65aea
|
remove unnecessary CSRF change from #5114
|
2025-11-28 11:06:15 +00:00 |
|
|
James Smith
|
ea6ada9617
|
Disable CSRF protection for omniauth callbacks
Just isn't needed there, probably should have always been off.
|
2025-11-28 09:08:08 +00:00 |
|
|
James Smith
|
10bfcbdaf4
|
rate limit omniauth callbacks
using the same rate as sessions controller
|
2025-11-26 17:17:55 +00:00 |
|
|
James Smith
|
9378c93078
|
OIDC: Don't match accounts by unverified emails
|
2025-11-26 15:40:18 +00:00 |
|
|
James Smith
|
0a98923a1e
|
Add sort order to user settings form
|
2025-11-05 15:17:22 +00:00 |
|
|
James Smith
|
acb42c29a4
|
remove pagination options from preferences form
|
2025-11-05 14:29:38 +00:00 |
|
|
James Smith
|
05a35ca2e6
|
DRY up first use check
|
2025-10-28 11:23:46 +00:00 |
|
|
James Smith
|
a5eef93694
|
Add ability to set tour completion state via XHR
|
2025-10-27 17:34:38 +00:00 |
|
|
James Smith
|
2ef209be49
|
Fix language name lookup when using a full language ISO code
|
2025-10-07 17:33:12 +01:00 |
|
|
James Smith
|
a2c39ac5bf
|
replace deprecated unprocessable_entity
|
2025-08-21 20:05:17 +01:00 |
|
|
James Smith
|
eea8c67f0c
|
set user handle even if creator slug is empty
|
2025-08-11 19:07:56 +01:00 |
|
|
Matthew Badeau
|
274365fd04
|
Throws 422 if current_user.update fails on first use
|
2025-07-13 11:54:25 +09:00 |
|
|
James Smith
|
98611f4cd9
|
fix form structure
|
2025-06-13 17:35:54 +01:00 |
|
|
James Smith
|
95fbc6d69a
|
check autocreate creator request, and autoset user username
|
2025-06-13 15:15:01 +01:00 |
|
|
James Smith
|
c1b12da48c
|
fix failure http codes across various controllers
|
2025-06-12 12:00:56 +01:00 |
|
|
James Smith
|
aefb18dea7
|
send straight to welcome page if approval not required, otherwise go to root
|
2025-06-11 10:07:48 +01:00 |
|
|
James Smith
|
cebd741837
|
add welcome page to controller and routes after signup
|
2025-06-11 08:54:58 +01:00 |
|
|
James Smith
|
9d131464a9
|
check captch on signup
|
2025-06-10 13:00:14 +01:00 |
|
|
James Smith
|
97f23c25b2
|
add rate limits for signup and login
|
2025-06-09 21:17:32 +01:00 |
|
|
James Smith
|
5e9962c62c
|
make use of "sign in" more consistent
|
2025-04-23 17:35:41 +01:00 |
|
|
Matthew Badeau
|
1486d6e870
|
Removes deprecated devise sign_in bypass method
|
2025-04-23 19:39:29 +09:00 |
|
|
Matthew Badeau
|
a01194c135
|
Updates tag cloud sorting setting and adds translation for form fields.. Resolves issue #3663
|
2025-04-05 17:08:53 +09:00 |
|
|
James Smith
|
0dfd3e3675
|
Fix signup validation failure bug
|
2025-03-26 09:52:11 +00:00 |
|
|
James Smith
|
f3e382f643
|
send modmail on signup if approval is required
|
2025-03-25 21:40:37 +00:00 |
|
|
James Smith
|
1647d1376b
|
Fix first use username setting
by allowing username in User#account_update_params
|
2025-02-27 12:25:13 +00:00 |
|
|
James Smith
|
4ccc492f96
|
stay on settings page after editing
|
2024-11-26 10:17:06 +00:00 |
|
|
James Smith
|
0795abad7e
|
check approval during signup
|
2024-11-22 13:57:40 +00:00 |
|
|
James Smith
|
83416be9b4
|
move random password generation into helper
|
2024-11-21 18:34:23 +00:00 |
|
|
James Smith
|
b38f93cb60
|
trasnform data before saving
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
69e06ab098
|
change update_*_settings method to just do value transforms
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
6e7c1b5bdb
|
no special handling needed for problem or general settings
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
3202b5bf5c
|
add settings to devise strong param sanitization
|
2024-11-15 12:26:45 +00:00 |
|
|
James Smith
|
e6ef34dbad
|
allow updating non-security related settings without password
|
2024-11-15 12:26:45 +00:00 |
|
|
James Smith
|
a085dee970
|
Combine all user settings into one place
|
2024-11-15 12:26:32 +00:00 |
|
|
James Smith
|
613a25daf7
|
more useful omniauth error reporting
|
2024-10-16 12:18:26 +01:00 |
|
|
James Smith
|
f581b6ed8b
|
handle admin setup in forced OIDC mode
|
2024-10-15 16:38:18 +01:00 |
|
|
James Smith
|
3739d81662
|
add OIDC callback and user creation
|
2024-10-15 13:32:01 +01:00 |
|
|
James Smith
|
99bcfd01a2
|
swap flipper checks for SiteSettings checks
|
2024-08-09 11:26:18 +01:00 |
|
|
James Smith
|
4ba937e366
|
auto-login admin on first run in multiuser mode
|
2024-07-16 17:35:36 +01:00 |
|
|
James Smith
|
b1f5ef94d9
|
Stop username enumeration through password reset form
... by always "succeeding"
|
2024-06-18 16:18:32 +01:00 |
|
|
James Smith
|
cedff3719f
|
mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
|
2024-06-18 16:06:13 +01:00 |
|
|
James Smith
|
9910009d88
|
Completely reset session on logout
|
2024-06-18 13:35:11 +01:00 |
|
|
James Smith
|
81e7db3edf
|
lint
|
2024-04-11 17:10:23 +01:00 |
|
|
James Smith
|
dc441e7e73
|
set up access policy for password resets
|
2024-04-11 16:57:31 +01:00 |
|