• last updated 5 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
fixing typo: ad_abort_transaction should be db_abort_transaction

Allow auth::update_local_account to update authority_id and username

Took out the code to prevent editing of username for non-local accounts to let site-wide admins do it

Fixed bug #893: 'screen name already taken' complaint when updating basic info without changing own screen name

Adding a line to the api-doc of auth::create_user that it returns the user_id also.

Fixed account registration framework

Make sure we set a password_message

Fixed problem with usernames being not really case-sensitive, nor case-insensitive

Tweaking test cases

defaulting UseEmailForLoginP to 1

moving the password question parameters to acs-kernel. Updating parameter::get calls in local-procs to always provide a package_id (either current subsite or acs-kernel)

  1. … 2 more files in changeset.
changing test case to use auth::create_user instead of ad_user_new

Fixed problem with chaning password for a user causing the connection's authentication to change

Changed local_account_ok_p to get_local_account_status, which can also return no_account. Helps prevents problems with old cookies that do no longer have a corresponding user_id

  1. … 1 more file in changeset.
Do not dynamically build message key -- this makes it impossible to track down where, if at all, the message key is used

Fixed email sent out when user registers without a password

  1. … 1 more file in changeset.
Check that screen_name is unique when validating user info

  1. … 1 more file in changeset.
Changing user's auth_token on password change fix didn't refresh the user's login cookies

Fixed bug #74: Invalidate login cookie when password changes

Fixed bug #829 again, this time moved the username-defaulting logic out of ad_user_new and into auth::create_local_account

  1. … 2 more files in changeset.
Works with ad_user_new, which now auto-generates a username if none exists, guaranteed to be unqiue -- a little complicated, but it works

Removed old debugging log message

Changed message for needs approval

Support for account_url

removing file that was added by mistake

Fixed password expiration and approval expiration

  1. … 8 more files in changeset.
Better account closed message

Show message when test fails

Rewrite cookie handling

    • -163
    • +286
    ./authentication-procs.tcl
  1. … 8 more files in changeset.
ext-auth #20: adding support for Login over HTTPS. New acs-kernel parameter RestrictLoginToSSLP. New API in security-procs.tcl for casting requests into HTTPS mode etc. Requiring secure connection in scripts passing password (registration, login, password-update)

  1. … 8 more files in changeset.