57 Commits (3717f6e0d340263e6d6a0efb164931d384dd26ea)

Author	SHA1	Message	Date
Markus Kahl	4e4ed9bbe8	verify authenticity of stage complete calls (#6014) ... * verify authenticity of stage complete calls * fixed path helper name [ci skip]	7 years ago
Oliver Günther	518c255c1a	Fix API token usage and specs	7 years ago
Oliver Günther	1f2492bb8b	Implement HashedToken (ExtendedToken from MOTP) in Core	7 years ago
Markus Kahl	90558ca8f2	Authentication stages mechanism (#5998) ... * authentication stages mechanism * integration test for authentication stages * code climate * fixed omni auth and after activation * clean up session after registration finished * allow passing blocks to return stage paths * don't instance exec in controller * fixed registration without stages	7 years ago
Markus Kahl	4b316ec470	LDAP Single Sign-on (#5888) ... * ldap sso * localise sso failure error * code climate * code climate 2 * code climate 3 * added missing login param * make spec work with SSO module prepended to ApplicationController * polish [ci skip]	7 years ago
Markus Kahl	37ac1b8d22	added after_login redirect URL configurations	7 years ago
Markus Kahl	aad898439c	added after_login redirect URL configurations	7 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	c77309b8b8	Review remarks	8 years ago
Oliver Günther	11794feed1	Handle invitation flow	8 years ago
Oliver Günther	fe0e8dd919	Rename before_filter to before_action	8 years ago
Oliver Günther	3f4388816e	Replace setting with a configuration variable	8 years ago
Oliver Günther	97678334ee	Extend My Account specs	8 years ago
Oliver Günther	7ecad5e0ca	Make global setting for password confirmation ... Implements a check to request password confirmation only when: 1. `Setting.internal_password_confirmation` is set 2. The user is internally authenticated (`user.uses_external_authentication?` is false) [ci skip]	8 years ago
Oliver Günther	4773ce1f9a	Implement confirmation confern for my/account	8 years ago
Henriette Dinger	bb5d0750a2	[22987] [Onboarding] Getting started video screen (2) (#4464) ... * enable foundation.js * built foundation-apps.js using webpack * Add onboarding modal on button click * Fix specs and little bugs * Add show behavior for modal * Pass template data from Rails to zf-modal * Add closing cross and fix style bugs * Re-add onboarding menu * Change ID to class * Fix styling and avatar problems * Fix broken specs caused by foundation && improve implementation * Require openproject-global.css and fix tests	9 years ago
Markus Kahl	38547e6454	don't prevent omniauth_login in case of expired session	9 years ago
Oliver Günther	caa07c5dd4	Initiate omniauth request with relative root url awereness	9 years ago
Markus Kahl	b83d76fe35	show proper error on failure instead of 500	9 years ago
Markus Kahl	a9382e8802	resend invitation feature	9 years ago
Markus Kahl	0abc54d5ab	don't fail invitation on long email addresses	9 years ago
Markus Kahl	4bc8365075	don't fail invitation on long email addresses	9 years ago
Markus Kahl	5324b2cc07	drop my first_login; redirect to work packages if possible	9 years ago
Markus Kahl	9af0e26623	make user creation/invitation work with plugins ...	9 years ago
Markus Kahl	42506dacf6	moved invitation email sub to initializer	9 years ago
Markus Kahl	43e18dd00c	switch to user invitation by default ... this changes quite many flows. With this user self registration is a separate flow to what happens when an admin creates a user. Users created by admins are 'invited' instead of 'registered'.	9 years ago
Markus Kahl	98ba7ce333	basic user invitation prototype	9 years ago
Alex Coles	57618b25ec	Replace dynamic finder usages with #find_by, etc. ... This patch replaces all dynamic finders, for the sake of consistency, although only some methods are deprecated. See: https://github.com/rails/activerecord-deprecated_finders#active-record-deprecated-finders * Revert some `User#find_by_login` usages in cuke steps accidentally removed in 74228b59. User Story # 20325 Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	54ff7af6e7	Add/update Copyright headers in app code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	336446c59d	Use 1.9+ Hash syntax in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Oliver Günther	ccc32629cf	OmniAuth: optional attribute mapping in strategies ... OpenProject currently employs a fixed attribute mapping schema for userdata extracted from OmniAuth::AuthHash. For some strategies (e.g., LDAP), various attribute names are used to determine user attributes. Thus, an override to the fixed mapping from within a strategy is desirable. This commit allows the attribute mapping hash to be merged with attribute overrides from within an OmniAuth strategy.	10 years ago
Martin Linkhorst	a2754921dd	make Hound happy (and Markus)	10 years ago
Martin Linkhorst	c43f84ad1b	#after_login can now receive a context variable (usually the controller)	10 years ago
Markus Kahl	9dc9d69000	redirect to last URL after direct omniauth login	10 years ago
Michael Frister	ee31c8de7d	Omniauth: Add after_login, remove on_success ... After a successfull login seems to be a much clearer description of when the callback will be executed than "on successful authorization". E.g. it's not clear whether ending up on the registration page also indicates successful authorization (which it does in the OmniAuth sense, but not in the OpenProject sense). The after login callback is called each time a user is logged in, no matter whether that happens via regular Omniauth login or after completing the registration process and being automatically logged in (when automated account activation is enabled).	10 years ago
Markus Kahl	c798ebe878	pass auth_hash to #on_success. Call it upon bumpy registration too.	10 years ago
Markus Kahl	41603b0f43	on_success callback for Authorization	10 years ago
Markus Kahl	8b53158127	made rest of support methods private	10 years ago
Markus Kahl	e7c2f5097b	spell out decision variable's name	10 years ago
Markus Kahl	fd1f8315cf	do not pass user into authorization callback	10 years ago
Markus Kahl	c9a3dd87bd	put #disable_password_login? into OP Configuration	10 years ago
Markus Kahl	3303126657	OmniAuth Authorization API	10 years ago
Till Breuer	2c4483544c	Merge branch 'dev' into feature/adding-and-removing-watchers ... Conflicts: app/assets/javascripts/angular/work_packages/controllers/work-package-details-controller.js karma/tests/controllers/work-package-details-controller-test.js lib/api/v3/work_packages/work_package_representer.rb	10 years ago
Markus Kahl	4ec21c7cde	enable override through env of disable password login ... and omniauth_direct_login_provider	10 years ago
Markus Kahl	92138d7af4	make omniauth developer strategy work again	10 years ago
Markus Kahl	4dba21f002	added disable password option	10 years ago
Jens Ulferts	9a2268cc7a	fixes references to OmniauthLogin	10 years ago
Markus Kahl	902654a91d	omniauth direct login	10 years ago
Markus Kahl	e624f84c87	log login directly during omniauth procedure	11 years ago
Markus Kahl	8c94da8d89	log last login for omniauth too ... added tests	11 years ago