- Jul 31, 2012
-
-
Lloyd Hilaiel authored
-
- Jul 21, 2012
-
-
Lloyd Hilaiel authored
audit and simplify logic in email_for_token to return proper hint to frontend on whether they should get a password from the user and forward it along with the 'complete' request during verification process for acct creation, password reset, email addition, and email re-verificaiton
-
- Jul 20, 2012
-
-
Dan Callahan authored
Rather than going straight to the quick setup, we should link to somewhere that gives a little more context.
-
Zachary Carter authored
-
Zachary Carter authored
-
- Jul 19, 2012
-
-
Zachary Carter authored
Ensure that when a user verifies in a different browser than what they reset their password with, they must authenticate to complete the verification
-
Lloyd Hilaiel authored
add access-control-allow-origin to all static resources (excluding views), to allow fonts to be requested cross domain. fixes a regression introduced during the merge of router, for issue #1973
-
- Jul 18, 2012
-
-
Zachary Carter authored
-
- Jul 16, 2012
-
-
Lloyd Hilaiel authored
Allow assertions issued by person to be used to authenticate. This makes it possible for "proxy idps" to work without the implementation details leaking out into others verifier implementations.
-
Lloyd Hilaiel authored
-
- Jul 14, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Shane Tomlinson authored
gettextify the last portion of the about page.
-
Lloyd Hilaiel authored
add test coverage of origins that start with digits, and relax validation regex a bit - closes #2042
-
- Jul 13, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
extensive testing of i18n mechanism - including english fallback, string substition from .json files, and debug locale
-
Lloyd Hilaiel authored
-
Shane Tomlinson authored
* in each top level layout or ejs template, include a link to a partial that contains the license. * The bottom of the license contains a link to the repo and the current SHA's commit.
-
- Jul 12, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Zachary Carter authored
-
Zachary Carter authored
-
- Jul 11, 2012
-
-
Lloyd Hilaiel authored
-
Zachary Carter authored
perform rigorous validation on all API parameters, cleanup redundancy in sanitize.js and validate.js - issue #1526 Signed-off-by:
Lloyd Hilaiel <lloyd@hilaiel.com>
-
- Jul 10, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
Remove email throttling from stage_reverify. Because authentication is required for this call it is not neccesary
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
rename the 'add email' email we send out to 'confirm', and use it in both the email addition case, and the email reverification case. This is more about semantics than behavior change
-
Lloyd Hilaiel authored
-
- Jul 09, 2012
-
-
Lloyd Hilaiel authored
-
Shane Tomlinson authored
Generalize error-display to extended-info. For every "screen" that is shown, create an extendedInfo and instantiate it. Remove the "error-display.show" code that was in page_helpers and page_module. issue #1916
-
- Jul 07, 2012
-
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-
Lloyd Hilaiel authored
-