 James Smith
|
99bcfd01a2
|
swap flipper checks for SiteSettings checks
|
2024-08-09 11:26:18 +01:00 |
|
|
James Smith
|
4ba937e366
|
auto-login admin on first run in multiuser mode
|
2024-07-16 17:35:36 +01:00 |
|
|
James Smith
|
b1f5ef94d9
|
Stop username enumeration through password reset form
... by always "succeeding"
|
2024-06-18 16:18:32 +01:00 |
|
|
James Smith
|
cedff3719f
|
mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
|
2024-06-18 16:06:13 +01:00 |
|
|
James Smith
|
9910009d88
|
Completely reset session on logout
|
2024-06-18 13:35:11 +01:00 |
|
|
James Smith
|
81e7db3edf
|
lint
|
2024-04-11 17:10:23 +01:00 |
|
|
James Smith
|
dc441e7e73
|
set up access policy for password resets
|
2024-04-11 16:57:31 +01:00 |
|
|
James Smith
|
2abd5a070c
|
add trailing number and letters to admin password to force it to always pass requirements
|
2024-04-09 11:44:16 +01:00 |
|
|
James Smith
|
1e6072ed61
|
autogenerate a compliant password for admin user
|
2024-03-26 15:36:25 +00:00 |
|
|
James Smith
|
99029218ca
|
set up admin user fully on first use
|
2024-03-23 16:28:04 +00:00 |
|
|
James Smith
|
a20e881413
|
detect first use in registrations controller
|
2024-03-23 00:16:12 +00:00 |
|
|
James Smith
|
6fc5465eea
|
redirect to user edit page if this is the first use, to set up admin credentials
|
2024-03-22 23:49:59 +00:00 |
|
|
James Smith
|
5b337e247b
|
set reset password token to a known value for first use
for both new admin users, and old ones.
|
2024-03-22 15:04:15 +00:00 |
|
|
James Smith
|
575eb966ce
|
change admin status and checks to use new rolify role instead of boolean flag
|
2024-03-21 14:53:58 +00:00 |
|
|
James Smith
|
2b856aac80
|
improve autocreated user for single login and change to lazy creation
|
2024-03-21 14:26:30 +00:00 |
|
|
James Smith
|
7060e3e07c
|
verification of multiuser is now done through policy
|
2024-03-19 13:47:46 +00:00 |
|
|
James Smith
|
d58da33b87
|
use UserPolicy for registration controller, just as we do with settings
|
2024-03-19 10:47:06 +00:00 |
|
|
James Smith
|
dc6ef6b4ee
|
enable cancel method
|
2024-03-19 09:42:39 +00:00 |
|
|
James Smith
|
4f8faecdf7
|
fix registration filters and redirects
|
2024-03-18 16:15:06 +00:00 |
|
|
James Smith
|
3f0362d843
|
add env var to enable open registrations
|
2024-03-18 16:12:32 +00:00 |
|
|
James Smith
|
aa3e96c21f
|
set up authorization for sessions controller and move autologin into there
|
2024-03-18 16:12:00 +00:00 |
|
|
James Smith
|
3429d4623e
|
use pundit policy to enforce multiuser mode on registrations
|
2024-03-18 15:26:03 +00:00 |
|
|
James Smith
|
90c24b38d6
|
add feature flag for multiuser support
|
2024-03-06 12:16:37 +00:00 |
|
|
James Smith
|
e05fe97ce5
|
require username during signup
|
2024-03-05 22:41:38 +00:00 |
|
|
James Smith
|
d5507fe1a6
|
remove controllers we don't actually need to override
|
2024-03-05 22:41:05 +00:00 |
|
|
James Smith
|
12041297ed
|
generate devise controllers and views
we're going to need to customise
|
2024-03-05 15:49:55 +00:00 |
|