Commit Graph

24 Commits

Author SHA1 Message Date
Henry Oswald 9764ab258b added complex password validation to password resets 2015-04-30 12:05:46 +01:00
Henry Oswald 312c56a24e allow password resets to be performed when site is not public by adding routes into white list 2015-04-30 11:58:26 +01:00
James Allen 893ff85521 Don't allow password resets for holding accounts 2015-04-14 13:11:49 +01:00
James Allen 9b8cf7bcfa Remove public registration and require that a user be registered by an admin 2015-03-19 14:22:48 +00:00
Henry Oswald 56efefd6d4 renamed variable 2014-10-30 08:33:18 +00:00
James Allen accd8207b2 Show password reset expired message rather than server error if that's what has happened 2014-10-08 17:18:24 +01:00
Henry Oswald f73629f8d9 v1 of sentinal support 2014-09-26 14:52:00 +01:00
James Allen 10021986c5 Don't error on password reset if no email found, and translate error messages 2014-08-08 11:41:54 +01:00
Henry Oswald d047d44079 Changed the error messages which are sent down to the client to be translated first
fixed up tests from titles we check when rendering, deleted them as they never
catch anything important, more hastle than they are worth imo.
2014-08-01 14:03:38 +01:00
Henry Oswald 1b8c8b8c48 sorted out titles 2014-08-01 13:47:14 +01:00
James Allen 5aa7daa951 Fix password reset rate limit to work on ip, not email which changes every request 2014-06-25 10:46:58 +01:00
Henry Oswald dabed896be lowercase password reset email 2014-06-10 17:54:29 +01:00
Henry Oswald 50df82697a Merge branch 'master' of github.com:sharelatex/web-sharelatex 2014-05-16 11:27:09 +01:00
Henry Oswald 9419d3a0e5 hooked up the frount end ui to show the email can not be found,
added client side valdidation on password, removed server side min
length check. Just check that it is not 0 len
2014-05-16 11:26:29 +01:00
James Allen 240dc2e319 Use crypto.randomBytes 2014-05-16 10:52:31 +01:00
Henry Oswald 9c3c57f2a8 renamed TokenGenerator to PasswordResetTokenHandler and added Expire to function name 2014-05-16 10:43:55 +01:00
Henry Oswald bf1bb22afd added rate limiting to password reset endpoint 2014-05-16 10:31:33 +01:00
Henry Oswald 133c4759f8 fix tests, whoops 2014-05-15 18:26:00 +01:00
Henry Oswald e1b3f3542c added some logging 2014-05-15 18:14:05 +01:00
Henry Oswald 96d98329f1 token based reset works 2014-05-15 17:58:25 +01:00
Henry Oswald 1ffd19099b writen getUserIdFromToken 2014-05-15 17:20:42 +01:00
Henry Oswald 9f901fb1ba added the token generator and its getNewToken function 2014-05-15 17:16:20 +01:00
Henry Oswald 64688e661d written password reset controller 2014-05-15 16:50:38 +01:00
Henry Oswald 551e1d465a written password reset handler 2014-05-15 16:20:23 +01:00