Activity OpenACS/openacs-4/packages/acs-tcl/tcl/security-procs.tcl

Tree
Accordion

Stats

Commits this week: 0

Total Committers:	23
Last Commit:	29 Jul
Commits this week:	0
Total Lines of Code (LoC):	3,761
Net change in LoC this week:	0

Commit Activity

last updated 10 mins ago

Constraints

Constraints: committers

Committer:

Log Comment:

Constraints: files

File Extension:

File Name:

Constraints: dates

Start Date:

End Date:

Friday 05 Mar 2004

11:33 am

peterm

changing the proc security::RestrictLoginToSSLP to only return 1 if https is available on the server.

- -1
- +7
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Tuesday 02 Mar 2004

11:44 am

lars

More
oacs-5-0:lars:20040302104436
changed 1 file
oacs-5-0

- Fixed bug that caused logins to timeout very quickly if you had LoginTimeout set to 0 (infinite - logins never expire), but the user did not check 'Remember me' checkbox. This is a fix that sacrifices some security, but fixes the unacceptable usability problem. See bboard posting at http://openacs.org/forums/message-view?message_id=167212. Also cleaned up debugging statements

- -24
- +45
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Thursday 26 Feb 2004

4:28 pm

jeffd

More
MAIN:jeffd:20040226152834
changed 294 files
MAIN

merge of all changes on oacs-5-0 branch between tag openacs-5-0-0-final and jcd-merge-pre503 (except those in lars-blogger).

- -13
- +28
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 293 more files in changeset.

Wednesday 25 Feb 2004

3:33 pm

peterm

adding db_release_unused_handles after each db statement in the security procs. The server would sometimes hang while in the sec_handler proc, supposedly because db handles were not being released and threads were held up waiting for them. Thanks Lars for tracking this down.

- -13
- +28
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Wednesday 31 Dec 2003

12:09 am

lars

More
MAIN:lars:20031230230925
changed 1 file
MAIN

Experimental fix for login timeout problem

- -1
- +1
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Thursday 16 Oct 2003

10:26 pm

lars

More
MAIN:lars:20031016202641
changed 1 file
MAIN

Logout goes to nearest subsite, which will then determine where to redirect next

- -4
- +9
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Friday 03 Oct 2003

11:21 am

peterm

More
MAIN:peterm:20031003092139
changed 3 files
MAIN

deprecating proc ad_ssl_available_p and replacing it with security::https_available_p. Making sure we do not redirect to HTTPS if AOLserver is not configured to support it

- -0
- +18
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 2 more files in changeset.

Monday 29 Sep 2003

4:09 pm

lars

More
MAIN:lars:20030929140935
changed 1 file
MAIN

Removed LARS debugging log notices

- -3
- +1
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Sunday 28 Sep 2003

3:22 am

lars

More
MAIN:lars:20030928012239
changed 2 files
MAIN

Changed local_account_ok_p to get_local_account_status, which can also return no_account. Helps prevents problems with old cookies that do no longer have a corresponding user_id

- -3
- +8
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 1 more file in changeset.

Thursday 25 Sep 2003

3:50 pm

lars

More
MAIN:lars:20030925135005
changed 1 file
MAIN

Added debug log statements to auth_token stuff

- -0
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Wednesday 24 Sep 2003

5:18 pm

lars

More
MAIN:lars:20030924151815
changed 1 file
MAIN

- Changed calls to ad_secure_conn_p to security::secure_conn_p

- Changed logic for ad_get_login_url, so it's more intelligent about the return_url

- -12
- +22
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Thursday 18 Sep 2003

7:08 pm

lars

More
MAIN:lars:20030918170838
changed 10 files
MAIN

Rewrote cookie handling

- -691
- +516
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 9 more files in changeset.

3:44 pm

peterm

More
MAIN:peterm:20030918134430
changed 9 files
MAIN

ext-auth #20: adding support for Login over HTTPS. New acs-kernel parameter RestrictLoginToSSLP. New API in security-procs.tcl for casting requests into HTTPS mode etc. Requiring secure connection in scripts passing password (registration, login, password-update)

- -15
- +200
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 8 more files in changeset.

Wednesday 17 Sep 2003

4:50 pm

lars

More
MAIN:lars:20030917145018
changed 1 file
MAIN

Cleaned up proc definitions

- -53
- +81
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Tuesday 16 Sep 2003

3:02 pm

lars

More
MAIN:lars:20030916130209
changed 1 file
MAIN

Require user_id in ad_change_password

- -0
- +5
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Monday 15 Sep 2003

6:06 pm

lars

More
MAIN:lars:20030915160615
changed 2 files
MAIN

Marking ad_acs_kernel_id public and ad_acs_kernel_id_mem private (was opposite)

- -2
- +6
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 1 more file in changeset.

Wednesday 03 Sep 2003

9:46 pm

lars

More
MAIN:lars:20030903194603
changed 1 file
MAIN

Let login URL include username/authority_id

- -1
- +16
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Tuesday 02 Sep 2003

4:20 pm

lars

More
MAIN:lars:20030902142006
changed 2 files
MAIN

Moved ad_maybe_redirect_for_registration over to auth::require_login

- -9
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 1 more file in changeset.

Thursday 28 Aug 2003

11:41 am

lars

More
MAIN:lars:20030828094137
changed 817 files
MAIN

Merged 4.6.4d1 (unreleased) to HEAD. This marks the end of the life of the oacs-4-6 branch.

- -30
- +77
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 816 more files in changeset.

Thursday 14 Aug 2003

10:38 pm

frankn

More
MAIN:frankn:20030814203803
changed 2 files
MAIN

Patch #138: Various fixes to ensure people can be 'immersed' in a subsite.

Please see the patch description for all details.

- -16
- +18
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 1 more file in changeset.

Wednesday 02 Jul 2003

9:35 pm

lars

More
oacs-4-6:lars:20030702193506
changed 1 file
oacs-4-6

Made the redirect for registration redirect to the current subsite's register page. Also added ad_get_login_url and ad_get_logout_url procs to let you get the URL for login/logout, which direct the user to the current subsite's pages, and, optionally, can preseve the current page, including query variables/form.