2256 Commits (d8175fea2a8edee5b2b362f232d4a46ab28d5f12)

Author	SHA1	Message	Date
Alex Coles	43c1415039	Remove tangential code from WorkPackagesController ... This code now belongs elsewhere, e.g. ProjectsController. Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Alex Coles	d30ce48539	Begin replacement of server-rendered context menu ... Removes WorksPackages::ContextMenusController, its views and specs, and ContextMenuHelpers. This patch begins the work needed to serialise a given WorkPackage's 'actions' in the v3 API response, based on a user's permissions. This should support a client-rendered context menu (or any other contextual UI for that matter). Much code was simply copy-and-pasted from ContextMenusController into Api::V3::WorkPackagesController. This code still requires considerable refactoring and optimisation. Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Markus Kahl	e624f84c87	log login directly during omniauth procedure	11 years ago
Markus Kahl	8c94da8d89	log last login for omniauth too ... added tests	11 years ago
Philipp Tessenow	d3e6a5b284	better handle handle_unverified_request	11 years ago
Martin Linkhorst	fb096b0c86	infer content type from contents of file instead of its file extension ... * defaults to application/binary as its more secure than octet-stream * set nosniff header to instruct browsers not to guess content type	11 years ago
Alex Coles	2cf855a467	Teach #column_data_type to handle CurrencyQueryColumn ... Since this class is only available in a plugin, we need to handle match against its class name as a String. A better long-term solution should be found for plugins to add their own data type. User Story # 5225 Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Michael Frister	d02fde7c40	Fix flash message shown when an account is inactive ... Show different messages depending on whether the user is locked or registered. In the latter case, also show different messages depending on the self_registration setting (manual activation vs. mail).	11 years ago
Jonas Heinrich	162480c6e0	limits reported count to the visible scope of the current user ... limits reported count to the visible scope of the current user	11 years ago
Jonas Heinrich	9a9fd9f235	shows work packages with the correct author	11 years ago
Michael Frister	d29f5b8421	Fix flash message shown when an account is inactive ... Show different messages depending on whether the user is locked or registered. In the latter case, also show different messages depending on the self_registration setting (manual activation vs. mail).	11 years ago
Philipp Tessenow	145fb9c5cb	remove duplicated method from moves_controller ... The find_work_package method was present in work_packages/moves_controller.rb as well as in application_controller.rb. As the MovesController inherits from Application controller and the methods in both controllers are identical, it can be removed from the MovesController.	11 years ago
Philipp Tessenow	3c5fb24d8c	rubocopify most parts of the application controller	11 years ago
Toshi MARUYAMA	5233d6d0f0	remove Rails2 Ruby1.9 utf8nize!	11 years ago
Michael Frister	c91d04981e	Show error on attempt to register with disabled self registration ... This happens for normal registration as well as registration via omniauth. This also changes the redirect to not go to / and go to signin_url instead.	11 years ago
Toshi MARUYAMA	4775f66e77	fix non-ascii attachment file name get corrupted in IE11 (#16711) ... Contributed by Go MAEDA. git-svn-id: http://svn.redmine.org/redmine/trunk@13101 e93f8b46-1217-0410-a6f0-8f06a7374b81	11 years ago
Michael Frister	88818a3103	Registration Form: Remove omniauth-provider-specific title ... Not necessary and allows authentication plugins to be simpler.	11 years ago
Philipp Tessenow	07ecf4b038	honor timestamp in auth_hash	11 years ago
Michael Frister	09c46ee96c	Omniauth: Return 400 on invalid auth_hash	11 years ago
Michael Frister	2ea6b141d2	Omniauth: Check auth_hash validity via valid? instead of manual check	11 years ago
Philipp Tessenow	4e6a14c8fd	linted AccountControllerSpec	11 years ago
Philipp Tessenow	9eb3fbe537	refactor fill_user_fields_from_omniauth	11 years ago
Philipp Tessenow	281b8d8e5b	extract omniauth logic from AccountController into separate omniauth concern	11 years ago
Philipp Tessenow	49c8bec8ec	extract methods from omniauth_login	11 years ago
Philipp Tessenow	759775b37a	small refactorings in ApplicationController#omniauth_login	11 years ago
kgalli	a0af103553	Removal of unnecessary CGI.unescape for back url	11 years ago
kgalli	2a43d74e88	Bugfix for back url if registration is performed via omniauth	11 years ago
Michael Frister	40982532b0	Omniauth: Fix user redirect after pending account and login ... When registering an account, the account was pending and the user logged in from the same login page after activation, the user was redirected to the authentication provider (at least that's what the back_url was being set to, this would probably have been blocked later by redirect_back_or_default). Setting the back_url explicitly has the advantage of redirecting the user to the original page where the user clicked on the Omniauth link.	11 years ago
Michael Frister	cd6fb1dcd4	Redirect user back to original page when logging in via omniauth	11 years ago
Michael Frister	e00d26d604	AccountController: Remove unused open_id_authenticate	11 years ago
kgalli	2dbff1fbb2	Log warning if omniauth error occurs but show generic message to user	11 years ago
Michael Frister	c5d1d58fad	AccountController: Refactor registration via AuthSource into own method	11 years ago
Michael Frister	09cbe712b2	Login: Fix log warning being shown on not allowed password change	11 years ago
Michael Frister	0978e24dc0	AccountController#register: Refactor omniauth part into own method	11 years ago
kgalli	9e4f84844b	Removal of trailing white spaces	11 years ago
Michael Frister	43c21cf09a	User: Make sure force_password_change can only be activated if allowed	11 years ago
Michael Frister	50b4942377	User: Move auth_source_id filtering to PermittedParams	11 years ago
kgalli	a4b155eef2	Removal of unnecessary auth_hash method	11 years ago
kgalli	8f0c7cbfcd	bugfix for register method and refactoring of specs ... Bugfix register method was missing user.save for exteranl authentication other than omniauth. Refactoring of omniauth specs to use let method to set omniauth hash.	11 years ago
kgalli	5cb176124a	add omniauth failure callback and specs for omniauth login/registration	11 years ago
Michael Frister	068c04b1d1	AccountController: Rename method	11 years ago
kgalli	decc834ea6	Replace of flash notice for registration scenarios with automatic login	11 years ago
kgalli	35c334c6c5	redirect to first_login page for all new users to set accessibility mode	11 years ago
Michael Frister	d16e062b41	Omniauth: Fix lost_password deciding whether to allow reset	11 years ago
Michael Frister	530facf740	Refactor UsersController#update a little	11 years ago
Michael Frister	dd738fb5cf	Omniauth: Hide authentication fields for users with external source ... This removes identity_url from safe_attributes and permitted_params and prevents admins from setting it as we are using identity_url now to identify users with an external authentication provider.	11 years ago
Michael Frister	475d0b33c5	Omniauth: Allow correcting validation errors via registration form ... This also sets User#password_change_allowed? to false for users authenticated via Omniauth and thus hides login and passwords fields from the register form when using Omniauth.	11 years ago
Michael Frister	673c620306	Begin to replace OpenID with omniauth ... Only UI yet is a link on the dedicated login page, a lot of OpenID remains are still in there and things are absolutely not secure or nice.	11 years ago
Martin Linkhorst	34a4653c28	manipulating asynchronicity with Delayed::Worker.delay_jobs should work by now	11 years ago
Richard	1849e826ff	Throwing exception if unknown column name is passed to column_data.	11 years ago