Commit Graph
42 Commits
Author SHA1 Message Date
James Smith baaf4c4ea6 fall back to default tour state if nil 2026-01-05 15:15:07 +00:00
James Smith 0a98923a1e Add sort order to user settings form 2025-11-05 15:17:22 +00:00
James Smith acb42c29a4 remove pagination options from preferences form 2025-11-05 14:29:38 +00:00
James Smith 05a35ca2e6 DRY up first use check 2025-10-28 11:23:46 +00:00
James Smith a5eef93694 Add ability to set tour completion state via XHR 2025-10-27 17:34:38 +00:00
James Smith 2ef209be49 Fix language name lookup when using a full language ISO code 2025-10-07 17:33:12 +01:00
James Smith a2c39ac5bf replace deprecated unprocessable_entity 2025-08-21 20:05:17 +01:00
James Smith eea8c67f0c set user handle even if creator slug is empty 2025-08-11 19:07:56 +01:00
Matthew Badeau 274365fd04 Throws 422 if current_user.update fails on first use 2025-07-13 11:54:25 +09:00
James Smith 98611f4cd9 fix form structure 2025-06-13 17:35:54 +01:00
James Smith 95fbc6d69a check autocreate creator request, and autoset user username 2025-06-13 15:15:01 +01:00
James Smith c1b12da48c fix failure http codes across various controllers 2025-06-12 12:00:56 +01:00
James Smith aefb18dea7 send straight to welcome page if approval not required, otherwise go to root 2025-06-11 10:07:48 +01:00
James Smith cebd741837 add welcome page to controller and routes after signup 2025-06-11 08:54:58 +01:00
James Smith 9d131464a9 check captch on signup 2025-06-10 13:00:14 +01:00
James Smith 97f23c25b2 add rate limits for signup and login 2025-06-09 21:17:32 +01:00
Matthew Badeau 1486d6e870 Removes deprecated devise sign_in bypass method 2025-04-23 19:39:29 +09:00
Matthew Badeau a01194c135 Updates tag cloud sorting setting and adds translation for form fields.. Resolves issue #3663 2025-04-05 17:08:53 +09:00
James Smith 0dfd3e3675 Fix signup validation failure bug 2025-03-26 09:52:11 +00:00
James Smith f3e382f643 send modmail on signup if approval is required 2025-03-25 21:40:37 +00:00
James Smith 1647d1376b Fix first use username setting
by allowing username in User#account_update_params
2025-02-27 12:25:13 +00:00
James Smith 4ccc492f96 stay on settings page after editing 2024-11-26 10:17:06 +00:00
James Smith 0795abad7e check approval during signup 2024-11-22 13:57:40 +00:00
James Smith b38f93cb60 trasnform data before saving 2024-11-15 12:26:46 +00:00
James Smith 69e06ab098 change update_*_settings method to just do value transforms 2024-11-15 12:26:46 +00:00
James Smith 6e7c1b5bdb no special handling needed for problem or general settings 2024-11-15 12:26:46 +00:00
James Smith 3202b5bf5c add settings to devise strong param sanitization 2024-11-15 12:26:45 +00:00
James Smith e6ef34dbad allow updating non-security related settings without password 2024-11-15 12:26:45 +00:00
James Smith a085dee970 Combine all user settings into one place 2024-11-15 12:26:32 +00:00
James Smith cedff3719f mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
2024-06-18 16:06:13 +01:00
James Smith 99029218ca set up admin user fully on first use 2024-03-23 16:28:04 +00:00
James Smith a20e881413 detect first use in registrations controller 2024-03-23 00:16:12 +00:00
James Smith 6fc5465eea redirect to user edit page if this is the first use, to set up admin credentials 2024-03-22 23:49:59 +00:00
James Smith 7060e3e07c verification of multiuser is now done through policy 2024-03-19 13:47:46 +00:00
James Smith d58da33b87 use UserPolicy for registration controller, just as we do with settings 2024-03-19 10:47:06 +00:00
James Smith dc6ef6b4ee enable cancel method 2024-03-19 09:42:39 +00:00
James Smith 4f8faecdf7 fix registration filters and redirects 2024-03-18 16:15:06 +00:00
James Smith 3f0362d843 add env var to enable open registrations 2024-03-18 16:12:32 +00:00
James Smith 3429d4623e use pundit policy to enforce multiuser mode on registrations 2024-03-18 15:26:03 +00:00
James Smith 90c24b38d6 add feature flag for multiuser support 2024-03-06 12:16:37 +00:00
James Smith e05fe97ce5 require username during signup 2024-03-05 22:41:38 +00:00
James Smith 12041297ed generate devise controllers and views
we're going to need to customise
2024-03-05 15:49:55 +00:00