176 Commits (a74d513226d15296b55d634573be581ccc7784d1)

Author	SHA1	Message	Date
Oliver Günther	44b93ddf04	Show consent in account/register form	7 years ago
Markus Kahl	2ac652efcd	user consent WIP	7 years ago
Markus Kahl	0b75df7464	handle expired invitation tokens, don't delete them without replacement	7 years ago
ulferts	f1b1aa7839	Fix/back url when already logged in (#6166) ... * use the provided back url when already logged in But check the validity of the back_url to not be used maliciously to redirect users to pages outside our host * minor coding style improvements [ci skip]	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Markus Kahl	622d51487f	save back_url in session	7 years ago
Markus Kahl	5667548b3e	consider back_url	7 years ago
Oliver Günther	518c255c1a	Fix API token usage and specs	7 years ago
Oliver Günther	1f2492bb8b	Implement HashedToken (ExtendedToken from MOTP) in Core	7 years ago
Markus Kahl	90558ca8f2	Authentication stages mechanism (#5998) ... * authentication stages mechanism * integration test for authentication stages * code climate * fixed omni auth and after activation * clean up session after registration finished * allow passing blocks to return stage paths * don't instance exec in controller * fixed registration without stages	7 years ago
Oliver Günther	4c210d786a	Fix different notices on lost password page (#5995) ... [ci skip]	7 years ago
Oliver Günther	4943cf31fe	[26229] Fix strip on non-string ... [ci skip]	7 years ago
Oliver Günther	83fcd1286a	[26229] Strip input from registration (#5895) ... https://community.openproject.com/wp/26229 [ci skip]	7 years ago
Markus Kahl	4b316ec470	LDAP Single Sign-on (#5888) ... * ldap sso * localise sso failure error * code climate * code climate 2 * code climate 3 * added missing login param * make spec work with SSO module prepended to ApplicationController * polish [ci skip]	7 years ago
Markus Kahl	816861e380	allow registration for invited users as it is no *self* registration (#5599) ... * allow registration for invited users as it is no *self* registration * allow post too [ci skip]	8 years ago
Jens Ulferts	3157bbb7a0	fix typo	8 years ago
Jens Ulferts	ae0ec96eb1	replace deprecated delete_all	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Markus Kahl	d8b44d0ebd	new settings: email_login, registration_footer ... localised text setting cell used in settings for registration footer; also used cell for email header and footer with a slight change in that there are now 2 language select boxes there	8 years ago
Oliver Günther	fe0e8dd919	Rename before_filter to before_action	8 years ago
Oliver Günther	e8497bd2fa	Pass the user's locale to the translation	8 years ago
Oliver Günther	caa07c5dd4	Initiate omniauth request with relative root url awereness	9 years ago
Markus Kahl	5324b2cc07	drop my first_login; redirect to work packages if possible	9 years ago
Mohamed Wael Khobalatte	8ec4b40b11	Restore own User#find_by_mail impl, as it was doing more than just find	9 years ago
Mohamed Wael Khobalatte	972b04d86e	Refactor to allow for strong params ... We no longer need attr_accessible.	9 years ago
Alexander Bach	2cff5e9864	Show user name when forcing password change	9 years ago
Markus Kahl	9af0e26623	make user creation/invitation work with plugins ...	9 years ago
Jan Sandbrink	2fb41301de	Fix activation in case a non-existing token is passed ... looks like the original author intended to use the method I am using now and just forgot to update the call...	9 years ago
Markus Kahl	871375bbc0	register: clear placeholder name(s); refactoring	9 years ago
Markus Kahl	47479ba28b	refactoring	9 years ago
Markus Kahl	ac8a096488	polish considering remarks through review and houndci	9 years ago
Markus Kahl	06f20c94b2	fixed self registration; manual activation of invited users	9 years ago
Markus Kahl	f37520ad19	feature spec for user creation and activation	9 years ago
Markus Kahl	b3176866f2	removed signup screen; show OmniAuth opts in register view	9 years ago
Markus Kahl	43e18dd00c	switch to user invitation by default ... this changes quite many flows. With this user self registration is a separate flow to what happens when an admin creates a user. Users created by admins are 'invited' instead of 'registered'.	9 years ago
Markus Kahl	98ba7ce333	basic user invitation prototype	9 years ago
Stefan Botzenhart	868d764a97	Use activejob deliver_now method (removes deprecation warning)	9 years ago
Alex Coles	ec1bb39f9b	Fix syntax (w/Rubocop) in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	57618b25ec	Replace dynamic finder usages with #find_by, etc. ... This patch replaces all dynamic finders, for the sake of consistency, although only some methods are deprecated. See: https://github.com/rails/activerecord-deprecated_finders#active-record-deprecated-finders * Revert some `User#find_by_login` usages in cuke steps accidentally removed in 74228b59. User Story # 20325 Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 ... [ci skip]	10 years ago
Alex Coles	0532e87a40	Minor spacing fixes in AccountController ... [ci skip] Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	bb0e6e6aa5	Fix syntax (w/Rubocop) in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	336446c59d	Use 1.9+ Hash syntax in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Markus Kahl	2ed52b163d	only use exit screen if login is required to view anything at all	10 years ago
Markus Kahl	d6401e79f5	polish	10 years ago
Markus Kahl	89731db2d1	some refactoring; test display of instructions	10 years ago
Markus Kahl	bbd4cad404	fix: #14385 (direct login infinite redirect loop)	10 years ago
Markus Kahl	c25f92576c	only append origin if back_url is given	10 years ago
Markus Kahl	9dc9d69000	redirect to last URL after direct omniauth login	10 years ago
Michael Frister	ee31c8de7d	Omniauth: Add after_login, remove on_success ... After a successfull login seems to be a much clearer description of when the callback will be executed than "on successful authorization". E.g. it's not clear whether ending up on the registration page also indicates successful authorization (which it does in the OmniAuth sense, but not in the OpenProject sense). The after login callback is called each time a user is logged in, no matter whether that happens via regular Omniauth login or after completing the registration process and being automatically logged in (when automated account activation is enabled).	10 years ago