• last updated 3 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Fixed bug #924: Second password is ignored during registration.

Fixed bug #910: If https isn't available, requiring secure authentication is identical to just require authentication

Implemented on-demand sync

  1. … 2 more files in changeset.
fixing typo: ad_abort_transaction should be db_abort_transaction

Allow auth::update_local_account to update authority_id and username

Fixed bug #893: 'screen name already taken' complaint when updating basic info without changing own screen name

Adding a line to the api-doc of auth::create_user that it returns the user_id also.

Fixed account registration framework

  1. … 2 more files in changeset.
defaulting UseEmailForLoginP to 1

Changed local_account_ok_p to get_local_account_status, which can also return no_account. Helps prevents problems with old cookies that do no longer have a corresponding user_id

  1. … 1 more file in changeset.
Check that screen_name is unique when validating user info

  1. … 1 more file in changeset.
Fixed bug #829 again, this time moved the username-defaulting logic out of ad_user_new and into auth::create_local_account

  1. … 2 more files in changeset.
Works with ad_user_new, which now auto-generates a username if none exists, guaranteed to be unqiue -- a little complicated, but it works

Changed message for needs approval

Support for account_url

Fixed password expiration and approval expiration

  1. … 8 more files in changeset.
Better account closed message

Rewrite cookie handling

    • -163
    • +286
    ./authentication-procs.tcl
  1. … 9 more files in changeset.
ext-auth #20: adding support for Login over HTTPS. New acs-kernel parameter RestrictLoginToSSLP. New API in security-procs.tcl for casting requests into HTTPS mode etc. Requiring secure connection in scripts passing password (registration, login, password-update)

  1. … 8 more files in changeset.
validation error with authority_id and username moved out

Support updating username

- Code reviewed authority UI

- UseEmailForLoginP

- Refactored snapshot_p out of auth_authorities table and into auth_sync_retrieve service contract

- Email account owner on password change

    • -104
    • +126
    ./authentication-procs.tcl
  1. … 12 more files in changeset.
implementing the proc get_register_authority

  1. … 1 more file in changeset.
Made local accounts accept and store screen_name

    • -107
    • +117
    ./authentication-procs.tcl
  1. … 5 more files in changeset.
Improved error logging when driver returns bad code

Use error message from the catch

changing pretty names, auto-generating short_name of authorities, adding the can_admin_system_without_authority_p proc

  1. … 2 more files in changeset.
Fixed account message on creation; fixed email verification

Bug in sending out email verification email

Fixed handling of account messages