openproject

Commit Graph

Author	SHA1	Message	Date
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Michael Frister	38cdf2e2dd	Add option to log user for all requests Also remove before filter that worked around some session cookie bug in Rails. This workaround wasn't effective anyway, since our session cookie names don't contain chiliproject any more.	11 years ago
Michael Frister	45749f02ec	Authentication Settings: Add option to set password validity period	12 years ago
Michael Frister	40f75b23dd	Add settings for brute force prevention	12 years ago
Michael Frister	34f432ce32	Fix _authentication.html.erb syntax	12 years ago
Michael Frister	f884fbf4c2	Add option to prevent former passwords from being reused Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog	12 years ago
Christian Ratz	1298b0f7f4	more reliable session lifetime - allow only integer value for session ttl - disable session lifetime for ttl < 5 min - added hint to settings	12 years ago
Christian Ratz	d4ed4d72c1	Added session lifetime settings - default session lifetime settings - configurable in admin area	12 years ago
Michael Frister	089db98541	Improve password complexity requirements Add a new Passwords module, which evaluates and generates passwords. Adapt User to use this module. In addition to checking the length, the module verifies that a password contains a certain number of character classes like uppercase/lowercase. These classes can be configured in the authentication settings. Also increase the default minimum password length from 4 to 10.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice This was done using the rake task: rake copyright:update	12 years ago
Philipp Tessenow	b94a9e071c	be careful with nested namespace'd controllers in all our views	12 years ago
Martin Linkhorst	d81ce2a530	DEPRECATION FIX: the saga begins: adding equal signs to form helpers in view. we start with form_tag	12 years ago
Jens Ulferts	b40a2b5204	renames rhtml to html.erb	12 years ago
Jean-Baptiste Barth	1cf67b3a1d	Fixed: disabling autologin not persisted. #6438 Contributed by Felix Schäfer git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4306 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Eric Davis	be52ccf01f	Merged r3859 from trunk. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/branches/1.0-stable@3862 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Eric Davis	4fef8b601d	Added icon for the LDAP authentication menu item. #5775 git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3859 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Eric Davis	715c9d16ef	Refactor AuthSourcesController to support non-LDAP sources. #1131 git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3744 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Eric Davis	c5f30fde28	Refactor: Merged AuthSourcesController#list and #index git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3436 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Jean-Philippe Lang	ff36245f3e	Move API setting to Authentication tab and add translations strings. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3222 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Jean-Philippe Lang	6ccbcfb589	Adds helpers for setting field tags. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3198 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Eric Davis	7b0cb6aba8	Upgraded to Rails 2.3.4 (#3597 ) * Ran the Rails upgrade * Upgraded to Rails Engines 2.3.2 * Added a plugin to let Engines override application views. * Converted tests to use the new classes: ActionController::TestCase for functional ActiveSupport::TestCase for units * Converted ActiveRecord::Error message to a string. * ActiveRecord grouping returns an ordered hash which doesn't have #sort! * Updated the I18n storage_units format. * Added some default initializers from a fresh rails app * Changed the order of check_box_tags and hidden_field_tags. The hidden tag needs to appear first in Rails 2.3, otherwise it will override any value in the check_box_tag. * Removed the custom handler for when the cookie store is tampered with. Rails 2.3 removed the TamperedWithCookie exception and instead Rails will not load the data from it when it's been tampered with (e.g. no user login). * Fixed mail layouts, 2.3 has problems with implicit multipart emails that use layouts. Also removed some custom Redmine mailer code. * Fixed a bug that occurred in tests where the "required" span tag would be added to the :field_status translation. This resulted in an email string of: <li>Status<span class="required"> </span><span class="required"> </span> Instead of: <li>Status: New</li> git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2887 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Jean-Philippe Lang	31cf9be7ab	Makes minimum password length configurable. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2678 e93f8b46-1217-0410-a6f0-8f06a7374b81	16 years ago
Jean-Philippe Lang	fe28193e4e	Merged Rails 2.2 branch. Redmine now requires Rails 2.2.2. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2493 e93f8b46-1217-0410-a6f0-8f06a7374b81	16 years ago
Jean-Philippe Lang	ff9da0bab0	Removes the fat ruby-openid gem. Simply use 'gem install ruby-openid' to enable openid support. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2458 e93f8b46-1217-0410-a6f0-8f06a7374b81	16 years ago
Eric Davis	8d53e433c5	Added a system setting for allowing OpenID logins and registrations * Defaults to off * Is set in the Administration panel under Authentication #699 git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2449 e93f8b46-1217-0410-a6f0-8f06a7374b81	16 years ago
Jean-Philippe Lang	abb0b15407	Added translation support for project modules names and a few other strings. git-svn-id: http://redmine.rubyforge.org/svn/trunk@1151 e93f8b46-1217-0410-a6f0-8f06a7374b81	17 years ago
Jean-Philippe Lang	a80dbc49b1	Admin settings screen split to tabs. Email notification options moved to this view as a tab and LDAP list is accessible from the 'Authentication' tab. git-svn-id: http://redmine.rubyforge.org/svn/trunk@1046 e93f8b46-1217-0410-a6f0-8f06a7374b81	17 years ago

13 Commits (03f7ecfe47802fb2e6d93c494fef2a83b4a0ee18)