 James Smith
|
10bfcbdaf4
|
rate limit omniauth callbacks
using the same rate as sessions controller
|
2025-11-26 17:17:55 +00:00 |
|
|
James Smith
|
9378c93078
|
OIDC: Don't match accounts by unverified emails
|
2025-11-26 15:40:18 +00:00 |
|
|
James Smith
|
0a98923a1e
|
Add sort order to user settings form
|
2025-11-05 15:17:22 +00:00 |
|
|
James Smith
|
acb42c29a4
|
remove pagination options from preferences form
|
2025-11-05 14:29:38 +00:00 |
|
|
James Smith
|
05a35ca2e6
|
DRY up first use check
|
2025-10-28 11:23:46 +00:00 |
|
|
James Smith
|
a5eef93694
|
Add ability to set tour completion state via XHR
|
2025-10-27 17:34:38 +00:00 |
|
|
James Smith
|
2ef209be49
|
Fix language name lookup when using a full language ISO code
|
2025-10-07 17:33:12 +01:00 |
|
|
James Smith
|
a2c39ac5bf
|
replace deprecated unprocessable_entity
|
2025-08-21 20:05:17 +01:00 |
|
|
James Smith
|
eea8c67f0c
|
set user handle even if creator slug is empty
|
2025-08-11 19:07:56 +01:00 |
|
|
Matthew Badeau
|
274365fd04
|
Throws 422 if current_user.update fails on first use
|
2025-07-13 11:54:25 +09:00 |
|
|
James Smith
|
98611f4cd9
|
fix form structure
|
2025-06-13 17:35:54 +01:00 |
|
|
James Smith
|
95fbc6d69a
|
check autocreate creator request, and autoset user username
|
2025-06-13 15:15:01 +01:00 |
|
|
James Smith
|
c1b12da48c
|
fix failure http codes across various controllers
|
2025-06-12 12:00:56 +01:00 |
|
|
James Smith
|
aefb18dea7
|
send straight to welcome page if approval not required, otherwise go to root
|
2025-06-11 10:07:48 +01:00 |
|
|
James Smith
|
cebd741837
|
add welcome page to controller and routes after signup
|
2025-06-11 08:54:58 +01:00 |
|
|
James Smith
|
9d131464a9
|
check captch on signup
|
2025-06-10 13:00:14 +01:00 |
|
|
James Smith
|
97f23c25b2
|
add rate limits for signup and login
|
2025-06-09 21:17:32 +01:00 |
|
|
James Smith
|
5e9962c62c
|
make use of "sign in" more consistent
|
2025-04-23 17:35:41 +01:00 |
|
|
Matthew Badeau
|
1486d6e870
|
Removes deprecated devise sign_in bypass method
|
2025-04-23 19:39:29 +09:00 |
|
|
Matthew Badeau
|
a01194c135
|
Updates tag cloud sorting setting and adds translation for form fields.. Resolves issue #3663
|
2025-04-05 17:08:53 +09:00 |
|
|
James Smith
|
0dfd3e3675
|
Fix signup validation failure bug
|
2025-03-26 09:52:11 +00:00 |
|
|
James Smith
|
f3e382f643
|
send modmail on signup if approval is required
|
2025-03-25 21:40:37 +00:00 |
|
|
James Smith
|
1647d1376b
|
Fix first use username setting
by allowing username in User#account_update_params
|
2025-02-27 12:25:13 +00:00 |
|
|
James Smith
|
4ccc492f96
|
stay on settings page after editing
|
2024-11-26 10:17:06 +00:00 |
|
|
James Smith
|
0795abad7e
|
check approval during signup
|
2024-11-22 13:57:40 +00:00 |
|
|
James Smith
|
83416be9b4
|
move random password generation into helper
|
2024-11-21 18:34:23 +00:00 |
|
|
James Smith
|
b38f93cb60
|
trasnform data before saving
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
69e06ab098
|
change update_*_settings method to just do value transforms
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
6e7c1b5bdb
|
no special handling needed for problem or general settings
|
2024-11-15 12:26:46 +00:00 |
|
|
James Smith
|
3202b5bf5c
|
add settings to devise strong param sanitization
|
2024-11-15 12:26:45 +00:00 |
|
|
James Smith
|
e6ef34dbad
|
allow updating non-security related settings without password
|
2024-11-15 12:26:45 +00:00 |
|
|
James Smith
|
a085dee970
|
Combine all user settings into one place
|
2024-11-15 12:26:32 +00:00 |
|
|
James Smith
|
613a25daf7
|
more useful omniauth error reporting
|
2024-10-16 12:18:26 +01:00 |
|
|
James Smith
|
f581b6ed8b
|
handle admin setup in forced OIDC mode
|
2024-10-15 16:38:18 +01:00 |
|
|
James Smith
|
3739d81662
|
add OIDC callback and user creation
|
2024-10-15 13:32:01 +01:00 |
|
|
James Smith
|
99bcfd01a2
|
swap flipper checks for SiteSettings checks
|
2024-08-09 11:26:18 +01:00 |
|
|
James Smith
|
4ba937e366
|
auto-login admin on first run in multiuser mode
|
2024-07-16 17:35:36 +01:00 |
|
|
James Smith
|
b1f5ef94d9
|
Stop username enumeration through password reset form
... by always "succeeding"
|
2024-06-18 16:18:32 +01:00 |
|
|
James Smith
|
cedff3719f
|
mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
|
2024-06-18 16:06:13 +01:00 |
|
|
James Smith
|
9910009d88
|
Completely reset session on logout
|
2024-06-18 13:35:11 +01:00 |
|
|
James Smith
|
81e7db3edf
|
lint
|
2024-04-11 17:10:23 +01:00 |
|
|
James Smith
|
dc441e7e73
|
set up access policy for password resets
|
2024-04-11 16:57:31 +01:00 |
|
|
James Smith
|
2abd5a070c
|
add trailing number and letters to admin password to force it to always pass requirements
|
2024-04-09 11:44:16 +01:00 |
|
|
James Smith
|
1e6072ed61
|
autogenerate a compliant password for admin user
|
2024-03-26 15:36:25 +00:00 |
|
|
James Smith
|
99029218ca
|
set up admin user fully on first use
|
2024-03-23 16:28:04 +00:00 |
|
|
James Smith
|
a20e881413
|
detect first use in registrations controller
|
2024-03-23 00:16:12 +00:00 |
|
|
James Smith
|
6fc5465eea
|
redirect to user edit page if this is the first use, to set up admin credentials
|
2024-03-22 23:49:59 +00:00 |
|
|
James Smith
|
5b337e247b
|
set reset password token to a known value for first use
for both new admin users, and old ones.
|
2024-03-22 15:04:15 +00:00 |
|
|
James Smith
|
575eb966ce
|
change admin status and checks to use new rolify role instead of boolean flag
|
2024-03-21 14:53:58 +00:00 |
|
|
James Smith
|
2b856aac80
|
improve autocreated user for single login and change to lazy creation
|
2024-03-21 14:26:30 +00:00 |
|