24 Commits (6fc3db7a73a385fcbda5f46566f1d2fe81007415)

Author	SHA1	Message	Date
Sebastian Schuster	e18c18ccf0	Rewrote admin integration test into spec and cukes	11 years ago
Sebastian Schuster	2f8596533f	Rewrote lost password integration test into cuke ... and added route for lost password action	11 years ago
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Jens Ulferts	dfc1662434	improve spec and cuke performance	11 years ago
Sebastian Schuster	ee6c9f792e	Added missing copyright notice for various files	11 years ago
Hagen Schink	86b9a2ca58	Fix cukes after merge of #067a45c	11 years ago
Michael Frister	1a848ee2f5	Add password expiry check ... Conflicts: doc/CHANGELOG.md	11 years ago
Hagen Schink	6dc2439b63	Revert commit 4057bb0 and fix cukes instead	11 years ago
Michael Frister	bca95a9844	Add cuke for testing random password assignment	12 years ago
Michael Frister	19155db133	Allow disabling brute force prevention	12 years ago
Michael Frister	adb8558200	Add cuke for changing user status from index page	12 years ago
Michael Frister	6e5f250e22	User index: add links for changing user status	12 years ago
Michael Frister	116d13330a	Add spec and cukes	12 years ago
Michael Frister	bd41eacb10	Add cuke for brute force prevention; also add timecop	12 years ago
Michael Frister	35e2e43a56	Fix users index status filtering, status_name now returns string	12 years ago
Michael Frister	f884fbf4c2	Add option to prevent former passwords from being reused ... Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog	12 years ago
Michael Frister	85eeaa0a3b	Fix username not being shown on my/password page ... Also add test for username on forced password change form.	12 years ago
Michael Frister	7ba90102a7	Add option to force a user to change password on next login ... * Add force_password_reset field to user * Add force_password_reset field to user edit form Also, reindent the form HTML. * Rename force_password_reset to force_password_change * Force password change: Show form on login, allow change * Remove unused step definitions for setting RAILS_ENV * Fix forced password change, add cuke * Don't reveal whether user exists when not authenticated * Also add spec for testing reaction when user is not allowed to change the password. * Improve force password change code after review * Fix MyController password test and change to spec * Fix AccountController force password change spec	12 years ago
Michael Frister	ab6ab750df	Improve password complexity cukes, add copyright	12 years ago
Michael Frister	089db98541	Improve password complexity requirements ... Add a new Passwords module, which evaluates and generates passwords. Adapt User to use this module. In addition to checking the length, the module verifies that a password contains a certain number of character classes like uppercase/lowercase. These classes can be configured in the authentication settings. Also increase the default minimum password length from 4 to 10.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice ... This was done using the rake task: rake copyright:update	12 years ago
Jens Ulferts	d2a411e9e9	adds a step for using the action menu	12 years ago
Michael Frister	14e9ba85ec	Fix users/deletability settings scenario ... Also fix cuke path for 'the settings page'	12 years ago
Martin Linkhorst	106ed83b1c	add features from coretests plugin as of revision 2f2aff7 of github remote	12 years ago