aboutsummaryrefslogtreecommitdiffstats
path: root/perllib/Catalyst
Commit message (Collapse)AuthorAgeLines
* Update last_active on login/logout/session expiry.Matthew Somerville2018-05-23-0/+2
|
* Increase two-factor skew to 2 time periods.Matthew Somerville2018-02-07-1/+1
|
* Merge branch '2fa-superuser'Matthew Somerville2018-02-07-0/+141
|\
| * Allow two-factor to work during creation flow.Matthew Somerville2018-02-07-1/+19
| |
| * Add two-factor authentication for superusers.Matthew Somerville2018-02-07-0/+123
| |
* | Add admin ability to log user out.Matthew Somerville2018-02-06-0/+23
|/
* Add an access token authentication credential.Matthew Somerville2017-11-29-0/+144
| | | | This allows access if you have a token associated with your user.
* Add debug toolbar middleware.Matthew Somerville2017-08-29-82/+128
| | | | | | | | | | | | | | If debug is enabled, using the CATALYST_DEBUG/FIXMYSTREET_APP_DEBUG environment variables, add a debug toolbar to the output, including request/response details and a database query log. This uses Plack middleware, so works by switching our dev server to use Starman with plack directly, rather than via the script runner. We remove the GZip compression as this interferes, and take a local copy of the QueryLog::AdoptPlack trait as it needs a tweak to work. Make sure the CSP header is not output in debug mode, as that would prevent the toolbar JavaScript from running.
* Prevent dev sites auto-creating session.Matthew Somerville2016-04-06-7/+0
| | | | | We check for a session's existence before looking in it, as looking in it first would auto create a session.
* Fix lack of error logging in certain scenarios.Matthew Somerville2015-10-08-0/+1067
| | | | | | Upgrade Catalyst::Engine and Catalyst::Log to 5.90030 so that errors are logged via psgi.errors rather than printed to the (perhaps nulled) stderr. Fixes #404.
* Prevent potential recursion in session cookie.Matthew Somerville2015-09-21-0/+3
| | | | Unlikely to crop up, but this fixes #1077.
* Add Catalyst::Plugin::Compress::Gzip (locally, as CPAN version overloads ↵Matthew Somerville2013-03-19-0/+82
| | | | wrong function).
* Typo.Matthew Somerville2012-03-30-1/+1
|
* Also don't output cookie for JPEG files to prevent session loss.Matthew Somerville2012-03-30-2/+3
|
* Needed brackets, dur (bugfix to de7a31da).Matthew Somerville2012-03-23-1/+1
|
* Don't send cookie on JS files, as can cause session loss.Matthew Somerville2012-03-22-0/+3
|
* Get cookie expiry to work, and correct IDs on checkboxes.Matthew Somerville2011-06-29-0/+2
|
* Add the 'remember_me' checkbox on loginEdmund von der Burg2011-04-07-0/+357