- Mar 19, 2012
-
-
Shane Tomlinson authored
* Fix the tests that had to do with the assertion_generated. * Update the XHR mock to pass back the userid on authentication. * Do the closing animation just before the dialog is actually ready to close.
-
- Mar 17, 2012
-
-
Lloyd Hilaiel authored
ask a question in a code comment about the implementation of getSilentAssertion which we now use in the comm iframe for the event api implementation
-
Lloyd Hilaiel authored
fix bug where when authentication state is changed in-dialog the comm iframe wouldn't notice, and would conclude the user is not authenticated based on a cached session_context response
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
- Mar 16, 2012
-
-
Shane Tomlinson authored
* state.js - rename "publish" to "redirectToState", rename "gotoState" to "startAction" and "subscribe" to "handleState" for clarity. * state.js - do the "is this your computer" check from "assertion_generated" so that it is taken care of for all types of assertions (primary, secondary, required).
-
Shane Tomlinson authored
-
Shane Tomlinson authored
* Add a unit test harness for is_this_your_computer * When the user authenticates, set them as seen. * In storage.js, Use an object to store the usersComputer info instead of arrays for developer grok. * Add storage.js->clearUsersComputerOwnershipStatus for testing. * Clean up user.js->logout a little bit. * Completely clear localStorage between every test. * Add tests to check for when the user should see the "is this your computer" screen.
-
Lloyd Hilaiel authored
enforce that deprecated APIs aren't combined with new apis. optimize away comm iframe when deprecated APIs are in use. emit a message to the console when deprecated apis are in use
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
(aws deploy) another bug in deployer support for multiple keys - call copyNext() to start key copying
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Austin King authored
-
Lloyd Hilaiel authored
-
- Mar 15, 2012
-
-
Austin King authored
-
Lloyd Hilaiel authored
rework how we decide when to ask about computer ownership: no is sticky for 24 hours. only ask if it's been 1 minute since we first saw the user (not on the first login). also defend against garbage in localstorage.
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
fix bug where we wouldn't know the userid immediately after authentication. return userid from authenticate_user api and set it upon successful auth.
-
Shane Tomlinson authored
* Adding checks for all expected navigator.id based functions. * pick_email.js - Get rid of the "remember" tests * state.js - Check that authenticated redirects off to "email_chosen" * user.js - get rid of the setPersistentSignin, change removePersistentSignin to logout. * xhr.js - Look in the stringified JSON for the csrf token.
-
Shane Tomlinson authored
-
Lloyd Hilaiel authored
fix unit tests - autenticate_user and cert_key now require a boolean 'ephemeral' value which will affect duration of authentication and certificate validity respectively.
-
Lloyd Hilaiel authored
fix transition after answering the 'is this your computer' question - automatically complete signin after answering
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
when certifying secondary certs and the user has not confirmed their ownership of the given computer, certify with a short validity period
-
Lloyd Hilaiel authored
wire up buttons of 'is this your computer' - functional but needs work (an extra click, figuring out all the places to ask the question, etc)
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
use a 'wait' screen for the is this your computer question, needs styling and yes and no buttons to do the right thing
-
- Mar 14, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Austin King authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
at authentication time, if the user has not confirmed ownership of a computer, set a shorter auth period.
-
Lloyd Hilaiel authored
send up ephemeral bit when authenticating with primary-issued assertion as well as when authenticating with a password
-
Lloyd Hilaiel authored
keep a list in local storage mapping email addresses to userids so that we can understand what the appropriate authentication duration should be before a user authenticates (thanks @ozten for the idea)
-
Lloyd Hilaiel authored
upon return from session context with a set userid, remember that the user has used browserid on this computer so the next time we can ask them if they'd like to stay signed in.
-
Lloyd Hilaiel authored
add to storage.js functions related to managing our knowledge of users that have used this computer and users that have confirmed ownership of this computer - for the purposes of setting optimal authentication durations
-