122 Commits (f9e937f85af2091e36f264a1d21ccc10d5cf65b5)

Author SHA1 Message Date
  Go MAEDA f9e937f85a Users without two-factor authentication enabled cannot sign out when two-factor authentication is required (#35087). 3 years ago
  Go MAEDA 3e36b5c452 Update copyright year in source files to 2021 (#33069). 3 years ago
  Go MAEDA 1dcebf8ce0 Changes User.try_to_login to catch and log AuthSourceExceptions, and introduces User.try_to_login! replicating the original behavior (#34071). 3 years ago
  Toshi MARUYAMA a82bf2c42a fix source indent of AccountController 3 years ago
  Go MAEDA 8900eb6eb5 Backup codes for 2fa auth (#1237). 3 years ago
  Go MAEDA 560bca344a Adds two factor authentication support (#1237). 3 years ago
  Toshi MARUYAMA ad97b5afec remove spaces inside {} of AccountController 3 years ago
  Go MAEDA 907e0173e4 Update copyright year in source files to 2020 (#33069). 4 years ago
  Go MAEDA 4082069c75 Update copyright year. 5 years ago
  Go MAEDA 07b3087fda Enable frozen_string_literal for some files under app and lib directory (#26561). 5 years ago
  Go MAEDA 5861160ffc Add "frozen_string_literal: false" for all files (#26561). 5 years ago
  Go MAEDA 57a4fedd34 Handles the case when an expired token is in the users session (#29781). 5 years ago
  Jean-Philippe Lang 0c78056a69 Send emails asynchronously (#26791). 5 years ago
  Jean-Philippe Lang 0e362e84ab Security notification on password recovery is empty (#28302). 6 years ago
  Go MAEDA 01085249ab Fix: Strip whitespace from email addresses on lost password page (#27754). 6 years ago
  Jean-Philippe Lang 7fd04e1f8d Update copyright. 6 years ago
  Jean-Philippe Lang 0bf1e4ee2d Render register page on all non-POST requests to account#register (#25653). 7 years ago
  Jean-Philippe Lang fee959675d Only perform login action on explicit POST (#25653). 7 years ago
  Jean-Philippe Lang b9ee00a8c8 Adds methods to User model to handle tokens. 7 years ago
  Toshi MARUYAMA 6139e0033a spelling fixes (#25495) 7 years ago
  Jean-Philippe Lang 89daf0f16a Password reset should count as a password change for User#must_change_passwd (#25253). 7 years ago
  Jean-Philippe Lang 9e1723c537 Redirect with token in session (#24416). 7 years ago
  Jean-Philippe Lang 124a459d55 Use the main menu for project related actions that support cross-project display. 7 years ago
  Jean-Philippe Lang 43d8ab8288 Use safe_attributes for user preferences. 7 years ago
  Jean-Philippe Lang c55dd52b07 Handle admin and login with safe_attributes. 7 years ago
  Jean-Philippe Lang 2457f5914d Use .skip_before_action instead of .skip_before_filter. 7 years ago
  Jean-Philippe Lang a47eab8868 Let the mailer set the email content (#21421). 8 years ago
  Jean-Philippe Lang cda9c63d9c Updates copyright for 2016. 8 years ago
  Jean-Philippe Lang 5d70fce6ce Security notifications when password or email adress is changed (#21421). 8 years ago
  Jean-Philippe Lang 668570b6a2 Typo: s/creditentials/credentials/ (#21861). 8 years ago
  Jean-Philippe Lang f4c3700702 Adds the "Hide my email address" option on the registration form (#21500). 8 years ago
  Jean-Philippe Lang 703d8a4782 Use config.relative_url_root as the default path for session and autologin cookies (#21169). 8 years ago
  Jean-Philippe Lang 8369b6b133 Set autologin cookie as secure by default when using https (#20935). 8 years ago
  Jean-Philippe Lang 16cc9ec06a Activate sudo mode after password based login (#20589). 8 years ago
  Toshi MARUYAMA 918a412fd4 use String#casecmp for case insensitive comparison (#20369) 8 years ago
  Jean-Philippe Lang 2a7795ab52 Escape flash messages (#19117). 9 years ago
  Jean-Philippe Lang a3a8fee8ad Send password reset email to the email used in lost password form (#4244). 9 years ago
  Jean-Philippe Lang 000124f44f Copyright update. 9 years ago
  Toshi MARUYAMA 35cc911192 update copyright year (#15977) 10 years ago
  Jean-Philippe Lang a2f869b43e Redirect to back_url or referer when clicking "Sign in" while already logged-in (#15926). 10 years ago
  Jean-Philippe Lang 5ee277fa22 Fixed that OpenID authentication fails with 422 error due to token verification (#15735). 10 years ago
  Jean-Philippe Lang b764e39847 Option to force a user to change his password (#3872). 10 years ago
  Jean-Philippe Lang 52af9a1766 Adds the email address to the flash message after registeration. 11 years ago
  Jean-Philippe Lang 4bd874ab46 Adds a way for a registered user to get a new action email (#14228). 11 years ago
  Toshi MARUYAMA 5984adc3df code layout cleanup AccountController#open_id_authenticate 11 years ago
  Jean-Philippe Lang d5ca514688 Adds autologin param in openid return_to url (#3371). 11 years ago
  Jean-Philippe Lang 08ef201cec Fixed that autologin is broken when using a custom cookie name (#13335). 11 years ago
  Jean-Philippe Lang 812da860b3 Adds token finder methods. 11 years ago
  Jean-Philippe Lang f2fd78f7b8 Use POST instead of GET for logging out (#13022). 11 years ago
  Jean-Philippe Lang e355a55e3c Don't use && return. 11 years ago