aboutsummaryrefslogtreecommitdiffstats
path: root/perllib/FixMyStreet/App/Controller/Auth
Commit message (Collapse)AuthorAgeLines
* Switch to internal QR code generator.Matthew Somerville2019-11-23-2/+2
|
* Record time of password change.Matthew Somerville2019-11-04-1/+2
|
* Allow enforcement of 2FA for staff users.Matthew Somerville2019-10-30-0/+1
|
* Require code to be entered when activating 2FA.Matthew Somerville2019-10-28-10/+24
|
* Allow non-superusers to store 2FA secrets.Matthew Somerville2019-10-28-1/+1
|
* Allow OIDC auth to provide its own ‘change password’ URIDave Arter2019-08-16-0/+22
|
* Preserve partial report if resetting password during OIDC loginDave Arter2019-08-16-1/+10
|
* Add test for OIDC logout redirectionDave Arter2019-08-16-8/+9
|
* Improve checking of OIDC ID tokens, and handle OIDC forgotten password flow ↵Dave Arter2019-08-16-3/+25
| | | | correctly
* Handle forgotten password OIDC flowDave Arter2019-08-16-3/+21
|
* Add support for OIDC logoutDave Arter2019-08-16-0/+9
|
* Allow cobrand to store extra fields on user when logging in via oauthDave Arter2019-08-16-2/+19
|
* Add OpenID Connect login functionalityDave Arter2019-08-16-7/+122
|
* Set user’s name when creating user via OAuthDave Arter2019-08-16-0/+1
|
* Merge branch '2fa-superuser'Matthew Somerville2018-02-07-3/+23
|\
| * Add two-factor authentication for superusers.Matthew Somerville2018-02-07-3/+23
| |
* | Merge branch 'password-tests'Matthew Somerville2018-02-06-2/+7
|\ \
| * | Add length/common password checking.Matthew Somerville2018-02-06-2/+7
| |/
* / Ask for current pw/send email on password change.Matthew Somerville2018-02-01-6/+28
|/ | | | | If they have a current password, ask for it; if they don't, send a confirmation email.
* Staff user page for generating an access token.Struan Donald2017-11-29-0/+22
| | | | | Adds a link from /my to a page for generating an access token which is then stored in the user's extra field.
* Factor the three SMS code checking fns together.Matthew Somerville2017-10-12-3/+5
|
* Spot errors coming back when sending text.Matthew Somerville2017-10-12-0/+6
|
* Accept +1 geographic numbers as possibly mobile.Matthew Somerville2017-10-05-6/+6
| | | | | We have no way of knowing whether a +1 geographic number is fixed line or mobile, so accept them all as potentially mobile.
* Allow verify/change/add email/phone in profile.Matthew Somerville2017-09-30-3/+65
| | | | | | This expands the 'change email' functionality to work with phone number also, allow addition of missing details, and verifying of unverified details.
* Add ability to log in on /auth via text.Matthew Somerville2017-09-30-1/+97
| | | | A confirmation code is sent via Twilio to be entered on the site.
* Add 'verified' database columns for email/phone.Matthew Somerville2017-09-30-1/+1
| | | | | These are so we can state whether a user's email address or phone number have been verified by confirmation email/text.
* Move some auth functions to their own controllers.Matthew Somerville2017-09-30-0/+296
Move the social auth functions to Auth::Social, and the change email/password functions to Auth::Profile. There are no actual code changes.