• last updated 4 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Set user message when login is expired

merge of changes between oacs-5-0-0b4 and oacs-5-0-0-final to HEAD

  1. … 286 more files in changeset.
Fixed bug #1398 with fix from Christian Eva

Fixing auto-generation of usernames when email was already taken. Since (username) is empty on that point the following query never returned any rows and xxx-2 was always created, so it failed if xxx-2 was already existing.

Fixing an obvious typo - it still doesn't seem to work right when email is used as username and the email is taken already, but it's a step closer.

merge of changes on oacs-5-0 branch to oacs-5-0-0b4 tag

  1. … 598 more files in changeset.
Fixed bug #906: trim email (and username)

  1. … 2 more files in changeset.
Accidentally commited a debug log statement

Fixed bug #1090, thanks to Tracy for digging up the root cause

make some Notices either warnings or debug and made them more descriptive by generally including the proc name as well bug #1032

  1. … 74 more files in changeset.
removing ns_log LARS: debug printouts. Retaining those in the APM dependency check on debug level

  1. … 3 more files in changeset.
Fixed bug #924: Second password is ignored during registration.

Fixed bug #910: If https isn't available, requiring secure authentication is identical to just require authentication

Implemented on-demand sync

  1. … 2 more files in changeset.
fixing typo: ad_abort_transaction should be db_abort_transaction

Allow auth::update_local_account to update authority_id and username

Fixed bug #893: 'screen name already taken' complaint when updating basic info without changing own screen name

Adding a line to the api-doc of auth::create_user that it returns the user_id also.

Fixed account registration framework

  1. … 2 more files in changeset.
defaulting UseEmailForLoginP to 1

Changed local_account_ok_p to get_local_account_status, which can also return no_account. Helps prevents problems with old cookies that do no longer have a corresponding user_id

  1. … 1 more file in changeset.
Check that screen_name is unique when validating user info

  1. … 1 more file in changeset.
Fixed bug #829 again, this time moved the username-defaulting logic out of ad_user_new and into auth::create_local_account

  1. … 2 more files in changeset.
Works with ad_user_new, which now auto-generates a username if none exists, guaranteed to be unqiue -- a little complicated, but it works

Changed message for needs approval

Support for account_url

Fixed password expiration and approval expiration

  1. … 8 more files in changeset.
Better account closed message

Rewrite cookie handling

    • -163
    • +286
    ./authentication-procs.tcl
  1. … 9 more files in changeset.
ext-auth #20: adding support for Login over HTTPS. New acs-kernel parameter RestrictLoginToSSLP. New API in security-procs.tcl for casting requests into HTTPS mode etc. Requiring secure connection in scripts passing password (registration, login, password-update)

  1. … 8 more files in changeset.