2284 Commits (504237f08dfe7673879e9536ead6c4516c406f6f)

Author	SHA1	Message	Date
Ion Biziiac	269edca911	Fix default work package status destroy	11 years ago
Michael Frister	98f81665db	CSRF Protection: Prevent login CSRF	11 years ago
Michael Frister	ed7ffdc616	CSRF Protection: Don't attempt to catch unused InvalidAuthenticityToken ... Rails doesn't raise InvalidAuthenticityToken since 3.0.4 For more information, see http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails/	11 years ago
Michael Frister	c2fdfd0f1d	Fix API requests without CSRF token being rejected	11 years ago
Richard	4b6b4d83f7	Put in some very half-arsed error handling for create/update queries.	11 years ago
Richard	272cbb947e	WIP wired up query save/update. Need error handling and such.	11 years ago
Richard	649026ce5b	Wired up saveas, updating title on save.	11 years ago
Richard	fb54ba5fc9	WIP Basic saveas dialog which saves query. doesn't sync with the view yet.	11 years ago
Till Breuer	adeb2e4a27	Don't render ok in bulk#delete if clean up is required	11 years ago
Till Breuer	d67bc8b975	Temporarily allow for ajax calls to bulk controller ... Undo when API V3 is ready	11 years ago
Richard	300f8e5627	Using with-dropdown for selectable title. Grabbing available queries from api.	11 years ago
Alex Coles	43c1415039	Remove tangential code from WorkPackagesController ... This code now belongs elsewhere, e.g. ProjectsController. Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Alex Coles	d30ce48539	Begin replacement of server-rendered context menu ... Removes WorksPackages::ContextMenusController, its views and specs, and ContextMenuHelpers. This patch begins the work needed to serialise a given WorkPackage's 'actions' in the v3 API response, based on a user's permissions. This should support a client-rendered context menu (or any other contextual UI for that matter). Much code was simply copy-and-pasted from ContextMenusController into Api::V3::WorkPackagesController. This code still requires considerable refactoring and optimisation. Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Hagen Schink	f0768b1dd1	Fix work package time entries sorting	11 years ago
Markus Kahl	c714ac7102	added #reported_work_package_count to user [DRYing]	11 years ago
Hagen Schink	8233dc21bb	Sort messages asychronously	11 years ago
Hagen Schink	8cca5d54f4	Add pagination support	11 years ago
Hagen Schink	1b18513d89	Move sorting to service	11 years ago
Hagen Schink	84fbd19ab0	Show flash message on deletion	11 years ago
Hagen Schink	6465830499	Delete time entries asychronously	11 years ago
Hagen Schink	9651eb944f	Render timelog entries to view	11 years ago
Hagen Schink	c7e2cdad47	Add RABL message templates	11 years ago
Markus Kahl	e624f84c87	log login directly during omniauth procedure	11 years ago
Markus Kahl	8c94da8d89	log last login for omniauth too ... added tests	11 years ago
Philipp Tessenow	d3e6a5b284	better handle handle_unverified_request	11 years ago
Martin Linkhorst	fb096b0c86	infer content type from contents of file instead of its file extension ... * defaults to application/binary as its more secure than octet-stream * set nosniff header to instruct browsers not to guess content type	11 years ago
Alex Coles	2cf855a467	Teach #column_data_type to handle CurrencyQueryColumn ... Since this class is only available in a plugin, we need to handle match against its class name as a String. A better long-term solution should be found for plugins to add their own data type. User Story # 5225 Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Michael Frister	d02fde7c40	Fix flash message shown when an account is inactive ... Show different messages depending on whether the user is locked or registered. In the latter case, also show different messages depending on the self_registration setting (manual activation vs. mail).	11 years ago
Jonas Heinrich	162480c6e0	limits reported count to the visible scope of the current user ... limits reported count to the visible scope of the current user	11 years ago
Jonas Heinrich	9a9fd9f235	shows work packages with the correct author	11 years ago
Michael Frister	d29f5b8421	Fix flash message shown when an account is inactive ... Show different messages depending on whether the user is locked or registered. In the latter case, also show different messages depending on the self_registration setting (manual activation vs. mail).	11 years ago
Philipp Tessenow	145fb9c5cb	remove duplicated method from moves_controller ... The find_work_package method was present in work_packages/moves_controller.rb as well as in application_controller.rb. As the MovesController inherits from Application controller and the methods in both controllers are identical, it can be removed from the MovesController.	11 years ago
Philipp Tessenow	3c5fb24d8c	rubocopify most parts of the application controller	11 years ago
Toshi MARUYAMA	5233d6d0f0	remove Rails2 Ruby1.9 utf8nize!	11 years ago
Michael Frister	c91d04981e	Show error on attempt to register with disabled self registration ... This happens for normal registration as well as registration via omniauth. This also changes the redirect to not go to / and go to signin_url instead.	11 years ago
Toshi MARUYAMA	4775f66e77	fix non-ascii attachment file name get corrupted in IE11 (#16711) ... Contributed by Go MAEDA. git-svn-id: http://svn.redmine.org/redmine/trunk@13101 e93f8b46-1217-0410-a6f0-8f06a7374b81	11 years ago
Michael Frister	88818a3103	Registration Form: Remove omniauth-provider-specific title ... Not necessary and allows authentication plugins to be simpler.	11 years ago
Philipp Tessenow	07ecf4b038	honor timestamp in auth_hash	11 years ago
Michael Frister	09c46ee96c	Omniauth: Return 400 on invalid auth_hash	11 years ago
Michael Frister	2ea6b141d2	Omniauth: Check auth_hash validity via valid? instead of manual check	11 years ago
Philipp Tessenow	4e6a14c8fd	linted AccountControllerSpec	11 years ago
Philipp Tessenow	9eb3fbe537	refactor fill_user_fields_from_omniauth	11 years ago
Philipp Tessenow	281b8d8e5b	extract omniauth logic from AccountController into separate omniauth concern	11 years ago
Philipp Tessenow	49c8bec8ec	extract methods from omniauth_login	11 years ago
Philipp Tessenow	759775b37a	small refactorings in ApplicationController#omniauth_login	11 years ago
kgalli	a0af103553	Removal of unnecessary CGI.unescape for back url	11 years ago
kgalli	2a43d74e88	Bugfix for back url if registration is performed via omniauth	11 years ago
Michael Frister	40982532b0	Omniauth: Fix user redirect after pending account and login ... When registering an account, the account was pending and the user logged in from the same login page after activation, the user was redirected to the authentication provider (at least that's what the back_url was being set to, this would probably have been blocked later by redirect_back_or_default). Setting the back_url explicitly has the advantage of redirecting the user to the original page where the user clicked on the Omniauth link.	11 years ago
Michael Frister	cd6fb1dcd4	Redirect user back to original page when logging in via omniauth	11 years ago
Michael Frister	e00d26d604	AccountController: Remove unused open_id_authenticate	11 years ago