34 Commits (b3176866f2201a57caf11ea15a0226df75e6a7b8)

Author	SHA1	Message	Date
Markus Kahl	43e18dd00c	switch to user invitation by default ... this changes quite many flows. With this user self registration is a separate flow to what happens when an admin creates a user. Users created by admins are 'invited' instead of 'registered'.	9 years ago
Markus Kahl	98ba7ce333	basic user invitation prototype	9 years ago
Alex Coles	57618b25ec	Replace dynamic finder usages with #find_by, etc. ... This patch replaces all dynamic finders, for the sake of consistency, although only some methods are deprecated. See: https://github.com/rails/activerecord-deprecated_finders#active-record-deprecated-finders * Revert some `User#find_by_login` usages in cuke steps accidentally removed in 74228b59. User Story # 20325 Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	54ff7af6e7	Add/update Copyright headers in app code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	336446c59d	Use 1.9+ Hash syntax in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Oliver Günther	ccc32629cf	OmniAuth: optional attribute mapping in strategies ... OpenProject currently employs a fixed attribute mapping schema for userdata extracted from OmniAuth::AuthHash. For some strategies (e.g., LDAP), various attribute names are used to determine user attributes. Thus, an override to the fixed mapping from within a strategy is desirable. This commit allows the attribute mapping hash to be merged with attribute overrides from within an OmniAuth strategy.	10 years ago
Martin Linkhorst	a2754921dd	make Hound happy (and Markus)	10 years ago
Martin Linkhorst	c43f84ad1b	#after_login can now receive a context variable (usually the controller)	10 years ago
Markus Kahl	9dc9d69000	redirect to last URL after direct omniauth login	10 years ago
Michael Frister	ee31c8de7d	Omniauth: Add after_login, remove on_success ... After a successfull login seems to be a much clearer description of when the callback will be executed than "on successful authorization". E.g. it's not clear whether ending up on the registration page also indicates successful authorization (which it does in the OmniAuth sense, but not in the OpenProject sense). The after login callback is called each time a user is logged in, no matter whether that happens via regular Omniauth login or after completing the registration process and being automatically logged in (when automated account activation is enabled).	10 years ago
Markus Kahl	c798ebe878	pass auth_hash to #on_success. Call it upon bumpy registration too.	10 years ago
Markus Kahl	41603b0f43	on_success callback for Authorization	10 years ago
Markus Kahl	8b53158127	made rest of support methods private	10 years ago
Markus Kahl	e7c2f5097b	spell out decision variable's name	10 years ago
Markus Kahl	fd1f8315cf	do not pass user into authorization callback	10 years ago
Markus Kahl	c9a3dd87bd	put #disable_password_login? into OP Configuration	10 years ago
Markus Kahl	3303126657	OmniAuth Authorization API	10 years ago
Till Breuer	2c4483544c	Merge branch 'dev' into feature/adding-and-removing-watchers ... Conflicts: app/assets/javascripts/angular/work_packages/controllers/work-package-details-controller.js karma/tests/controllers/work-package-details-controller-test.js lib/api/v3/work_packages/work_package_representer.rb	10 years ago
Markus Kahl	4ec21c7cde	enable override through env of disable password login ... and omniauth_direct_login_provider	10 years ago
Markus Kahl	92138d7af4	make omniauth developer strategy work again	10 years ago
Markus Kahl	4dba21f002	added disable password option	10 years ago
Jens Ulferts	9a2268cc7a	fixes references to OmniauthLogin	10 years ago
Markus Kahl	902654a91d	omniauth direct login	10 years ago
Markus Kahl	e624f84c87	log login directly during omniauth procedure	11 years ago
Markus Kahl	8c94da8d89	log last login for omniauth too ... added tests	11 years ago
Michael Frister	c91d04981e	Show error on attempt to register with disabled self registration ... This happens for normal registration as well as registration via omniauth. This also changes the redirect to not go to / and go to signin_url instead.	11 years ago
Michael Frister	88818a3103	Registration Form: Remove omniauth-provider-specific title ... Not necessary and allows authentication plugins to be simpler.	11 years ago
Philipp Tessenow	07ecf4b038	honor timestamp in auth_hash	11 years ago
Michael Frister	09c46ee96c	Omniauth: Return 400 on invalid auth_hash	11 years ago
Michael Frister	2ea6b141d2	Omniauth: Check auth_hash validity via valid? instead of manual check	11 years ago
Philipp Tessenow	4e6a14c8fd	linted AccountControllerSpec	11 years ago
Philipp Tessenow	9eb3fbe537	refactor fill_user_fields_from_omniauth	11 years ago
Philipp Tessenow	281b8d8e5b	extract omniauth logic from AccountController into separate omniauth concern	11 years ago