aboutsummaryrefslogtreecommitdiffstats
path: root/perllib/FixMyStreet/App/Controller/Auth.pm
Commit message (Expand)AuthorAgeLines
* Add option to check password on Have I Been Pwned.Matthew Somerville2020-07-07-14/+40
* [fixmystreet.com] Add option for recaptcha.Matthew Somerville2020-06-04-0/+3
* Allow cobrands to skip 2FA requirement.Matthew Somerville2019-12-09-4/+7
* Include areas in query param for inspector post-login redirect to all reportsDave Arter2019-12-09-18/+5
* Switch to internal QR code generator.Matthew Somerville2019-11-23-2/+2
* Fix password reset on 2FA accounts again.Matthew Somerville2019-11-05-2/+5
* Add optional enforced password expiry.Matthew Somerville2019-11-04-2/+21
* If 2FA enforced, do it for an email login as well.Matthew Somerville2019-10-30-0/+31
* Fix password reset on 2FA accounts.Matthew Somerville2019-10-30-4/+21
* Allow enforcement of 2FA for staff users.Matthew Somerville2019-10-30-0/+5
* Allow non-superusers to store 2FA secrets.Matthew Somerville2019-10-28-1/+1
* Always return a name string if login successful.Matthew Somerville2019-08-22-1/+2
* Allow OIDC auth to provide its own ‘change password’ URIDave Arter2019-08-16-4/+6
* Add test for OIDC logout redirectionDave Arter2019-08-16-1/+7
* Add support for OIDC logoutDave Arter2019-08-16-0/+6
* Allow cobrand to store extra fields on user when logging in via oauthDave Arter2019-08-16-1/+6
* Add OpenID Connect login functionalityDave Arter2019-08-16-11/+19
* Set user’s name when creating user via OAuthDave Arter2019-08-16-0/+3
* Simplify /auth sign in page.Matthew Somerville2018-11-09-6/+14
* Move all test endpoints under /_dev.Zarino Zappia2018-08-29-5/+0
* add a send login email button to user edit pageStruan Donald2018-06-25-1/+2
* Use CSV escaping for categories in URLs.Matthew Somerville2018-06-21-1/+1
* Merge branch '2fa-superuser'Matthew Somerville2018-02-07-0/+8
|\
| * Allow two-factor to work during creation flow.Matthew Somerville2018-02-07-0/+5
| * Add two-factor authentication for superusers.Matthew Somerville2018-02-07-0/+3
* | Merge branch 'password-tests'Matthew Somerville2018-02-06-2/+56
|\ \
| * | Add length/common password checking.Matthew Somerville2018-02-06-2/+56
| |/
* / Increase bcrypt cost.Matthew Somerville2018-02-01-0/+6
|/
* Add an access token authentication credential.Matthew Somerville2017-11-29-0/+2
* Accept +1 geographic numbers as possibly mobile.Matthew Somerville2017-10-05-1/+1
* Allow verify/change/add email/phone in profile.Matthew Somerville2017-09-30-13/+15
* Adapt things that assume email will be present.Matthew Somerville2017-09-30-1/+2
* Add ability to log in on /auth via text.Matthew Somerville2017-09-30-47/+66
* Add 'verified' database columns for email/phone.Matthew Somerville2017-09-30-2/+2
* Move some auth functions to their own controllers.Matthew Somerville2017-09-30-249/+2
* Add SIGNUPS_DISABLED config flagDave Arter2017-08-31-0/+20
* Don't redirect if logged in & auth form submitted.Matthew Somerville2017-08-08-1/+1
* Make sure all MapIt tests can run offline.Matthew Somerville2017-03-23-1/+1
* Use Token params for redirect on loginpezholio2017-02-15-3/+7
* Redirect to category-filtered /reports on loginDave Arter2017-02-14-1/+20
* Follow redirect to /admin after login if allowedDave Arter2017-02-14-1/+1
* Lowercase email when signing in.Matthew Somerville2017-01-26-0/+1
* Make sure csrf_time is deleted after use.Matthew Somerville2017-01-12-2/+3
* Return 400/500 for some client/server errors.Matthew Somerville2016-12-16-8/+5
* Use normal user authentication to control access to /adminMatthew Somerville2016-07-19-1/+1
* Fix CSRF issue with new login during process.Matthew Somerville2016-07-05-0/+3
* Allow users to update their email address.Matthew Somerville2016-06-20-6/+56
* Improve CSRF tokens and add to more forms.Matthew Somerville2016-06-20-3/+37
* Improve auth flow taken when return key used.Matthew Somerville2016-06-20-5/+6
* Add Twitter social login.Matthew Somerville2016-04-08-16/+93