• last updated 5 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Fixed bug #924: Second password is ignored during registration.

Fixed bug #910: If https isn't available, requiring secure authentication is identical to just require authentication

Fixed header of file (said workflow)

Implemented on-demand sync

auth_password_change proc: stubbing ns_sendmail and checking that email is sent to user on password change.

    • -3
    • +16
    ./test/acs-authentication-procs.tcl
fixing typo: ad_abort_transaction should be db_abort_transaction

Allow auth::update_local_account to update authority_id and username

Took out the code to prevent editing of username for non-local accounts to let site-wide admins do it

Fixed bug #893: 'screen name already taken' complaint when updating basic info without changing own screen name

Adding a line to the api-doc of auth::create_user that it returns the user_id also.

Fixed account registration framework

Make sure we set a password_message

Fixed problem with usernames being not really case-sensitive, nor case-insensitive

Tweaking test cases

defaulting UseEmailForLoginP to 1

moving the password question parameters to acs-kernel. Updating parameter::get calls in local-procs to always provide a package_id (either current subsite or acs-kernel)

  1. … 2 more files in changeset.
changing test case to use auth::create_user instead of ad_user_new

Fixed problem with chaning password for a user causing the connection's authentication to change

Changed local_account_ok_p to get_local_account_status, which can also return no_account. Helps prevents problems with old cookies that do no longer have a corresponding user_id

  1. … 1 more file in changeset.
Do not dynamically build message key -- this makes it impossible to track down where, if at all, the message key is used

Fixed email sent out when user registers without a password

  1. … 1 more file in changeset.
Check that screen_name is unique when validating user info

  1. … 1 more file in changeset.
Changing user's auth_token on password change fix didn't refresh the user's login cookies

Fixed bug #74: Invalidate login cookie when password changes

Fixed bug #829 again, this time moved the username-defaulting logic out of ad_user_new and into auth::create_local_account

  1. … 2 more files in changeset.
Works with ad_user_new, which now auto-generates a username if none exists, guaranteed to be unqiue -- a little complicated, but it works

Removed old debugging log message

Changed message for needs approval

Support for account_url

removing file that was added by mistake