Commit Graph

79 Commits

Author SHA1 Message Date
Alasdair Smith e129172553 Fix ordering of boolean check to be more readable 2018-10-08 11:25:24 +01:00
Alasdair Smith 04572f61bb Fix copy/paste error 2018-10-08 10:44:26 +01:00
Alasdair Smith 676557a051 Refactor to validate in AuthenticationManager 2018-10-08 10:44:25 +01:00
Alasdair Smith 44c86b3769 Refactor to use password strength options 2018-10-08 10:44:25 +01:00
Shane Kilkelly 2c47da553b Add an error log if activating sudo-mode on login fails 2018-10-04 15:05:40 +01:00
Shane Kilkelly 2ef23194df WIP: trying to get acceptance tests to pass 2018-10-04 15:05:40 +01:00
Shane Kilkelly c95d925d56 When regenerating session, don't copy the __tmp key 2018-09-19 09:28:59 +01:00
hugh-obrien 1e04a09ec6 remove unnecessary error returns and ip fetching 2018-09-07 18:15:32 +01:00
hugh-obrien 8ef90a0dcb move call for creating ip matched notifcation to project controller 2018-09-05 15:40:59 +01:00
hugh-obrien bf2ea4e7b3 test against ip matcher for notification on login if different from previous ip 2018-09-05 11:22:26 +01:00
Nate Stemen 4d991aa176 Merge branch 'master' into ns-use-regex-test 2018-08-27 14:26:51 -04:00
Nate Stemen ebea8a8633 use regex test instead of match when only bool needed 2018-08-27 14:25:01 -04:00
Alasdair Smith 9bc3fa2df0 Pass req to preDoPassportLogin module hook 2018-08-17 12:04:05 +01:00
Shane Kilkelly d8c9a96619 If we're creating v1 accounts, don't allow login for users already linked up 2018-08-03 14:58:29 +01:00
Shane Kilkelly 299de369e5 Refactor the way logins are finished off and sessions established 2018-07-17 16:27:24 +01:00
Shane Kilkelly b4f8108277 Move the pre-login async code into a helper function 2018-07-13 11:51:11 +01:00
Douglas Lovell 1df5b0b942 Fixup mixed indentation 2018-06-29 19:36:59 -03:00
Shane Kilkelly 0f131d940d Enforce stricter password policy.
- Check minimum password lengths
- Set default policy to 6-128 chars
2017-07-24 11:06:47 +01:00
Shane Kilkelly 0e26222551 Don't redirect to images, icons, etc, in login workflow 2017-05-12 15:46:16 +01:00
Shane Kilkelly 043520fc28 Remove the Metrics module, use metrics-sharelatex 2017-04-03 16:18:30 +01:00
Henry Oswald cff922a0f5 idendify -> identify 2017-03-22 16:01:26 +00:00
Henry Oswald ebdce6169e idendifyUser on login 2017-03-22 15:50:49 +00:00
Shane Kilkelly 1137ab0715 Don't record redirect to static asset paths 2017-01-17 14:35:37 +00:00
Shane Kilkelly f5ced03074 Set redirect when sending user to login page.
Allows smart redirecting to work when public access is turned off.
2017-01-10 15:42:36 +00:00
Shane Kilkelly 395135a655 Merge branch 'sk-post-login-redirect' 2016-11-28 09:52:14 +00:00
Henry Oswald f130470971 log ip address of user when logging in 2016-11-25 11:59:50 +00:00
Shane Kilkelly 167f01857a Remove stray next params. 2016-11-24 14:15:01 +00:00
Shane Kilkelly 22101d0305 If user is sent to login page with explicit redirect, obey 2016-11-24 11:38:13 +00:00
Shane Kilkelly cee3326ce3 fix omission of 'length' 2016-11-22 17:06:05 +00:00
Shane Kilkelly 8a4352fff2 Set redirect when redirecting from restricted 2016-11-22 16:54:03 +00:00
Shane Kilkelly 8089bb55a4 use session for the post-login redirect, remove redir query string. 2016-11-22 14:24:36 +00:00
Shane Kilkelly bfa0e7cf89 WIP: start moving web sessions to cluster 2016-11-08 15:32:36 +00:00
Shane Kilkelly 9cb3d8c4b8 Enable hook from module into passport init. 2016-11-01 14:06:54 +00:00
Henry Oswald 3141f91b59 Merge pull request #322 from sharelatex/ho-password-limits
Ho password limits
2016-10-05 10:03:54 +01:00
Shane Kilkelly dd14e51713 Handle null, undefined and false in isUserLoggedIn 2016-09-23 16:53:07 +01:00
Henry Oswald 8a2b7d0461 server side protect passwords which are too long 2016-09-23 16:51:46 +01:00
Henry Oswald 0d0f0e8604 wip 2016-09-23 16:38:46 +01:00
Shane Kilkelly dbac4bd008 update session when user settings change 2016-09-22 16:58:25 +01:00
Shane Kilkelly 636b1fe9e2 Copy to session.user, for compatibility 2016-09-22 15:49:09 +01:00
Shane Kilkelly c959e0c65d Set req.user 2016-09-22 13:54:13 +01:00
Shane Kilkelly dde5b7b830 Regenerate session on login, protect against session-fixation attack. 2016-09-21 13:03:37 +01:00
Shane Kilkelly bb71433727 Remove getLoggedInUser 2016-09-21 09:27:51 +01:00
Henry Oswald 777cbf1c80 move comment for user is false next to if statment 2016-09-20 14:51:51 +01:00
Shane Kilkelly 2119dcbb58 Finalise login workflow, works with login form again. 2016-09-15 14:36:11 +01:00
Shane Kilkelly 8e0103a1bc wip: fix unit tests for AuthenticationController 2016-09-07 14:05:51 +01:00
Shane Kilkelly 3a5b3a8e8d wip: acceptance tests working 2016-09-06 15:55:34 +01:00
Shane Kilkelly b0a10c948c wip refactor 2016-09-06 15:22:13 +01:00
Shane Kilkelly 749658a916 WIP: fixing acceptance tests 2016-09-06 13:21:22 +01:00
Shane Kilkelly ab2c1e82fb WIP: refactor 2016-09-05 15:58:31 +01:00
Shane Kilkelly e6c7aa25ec barely functional login and logout 2016-09-05 10:28:47 +01:00