| Commit message (Collapse) | Author | Age | Lines | |
|---|---|---|---|---|
| * | Switch to internal QR code generator. | Matthew Somerville | 2019-11-23 | -2/+2 |
| | | ||||
| * | Record time of password change. | Matthew Somerville | 2019-11-04 | -1/+2 |
| | | ||||
| * | Allow enforcement of 2FA for staff users. | Matthew Somerville | 2019-10-30 | -0/+1 |
| | | ||||
| * | Require code to be entered when activating 2FA. | Matthew Somerville | 2019-10-28 | -10/+24 |
| | | ||||
| * | Allow non-superusers to store 2FA secrets. | Matthew Somerville | 2019-10-28 | -1/+1 |
| | | ||||
| * | Allow OIDC auth to provide its own ‘change password’ URI | Dave Arter | 2019-08-16 | -0/+22 |
| | | ||||
| * | Preserve partial report if resetting password during OIDC login | Dave Arter | 2019-08-16 | -1/+10 |
| | | ||||
| * | Add test for OIDC logout redirection | Dave Arter | 2019-08-16 | -8/+9 |
| | | ||||
| * | Improve checking of OIDC ID tokens, and handle OIDC forgotten password flow ↵ | Dave Arter | 2019-08-16 | -3/+25 |
| | | | | | correctly | |||
| * | Handle forgotten password OIDC flow | Dave Arter | 2019-08-16 | -3/+21 |
| | | ||||
| * | Add support for OIDC logout | Dave Arter | 2019-08-16 | -0/+9 |
| | | ||||
| * | Allow cobrand to store extra fields on user when logging in via oauth | Dave Arter | 2019-08-16 | -2/+19 |
| | | ||||
| * | Add OpenID Connect login functionality | Dave Arter | 2019-08-16 | -7/+122 |
| | | ||||
| * | Set user’s name when creating user via OAuth | Dave Arter | 2019-08-16 | -0/+1 |
| | | ||||
| * | Merge branch '2fa-superuser' | Matthew Somerville | 2018-02-07 | -3/+23 |
| |\ | ||||
| | * | Add two-factor authentication for superusers. | Matthew Somerville | 2018-02-07 | -3/+23 |
| | | | ||||
| * | | Merge branch 'password-tests' | Matthew Somerville | 2018-02-06 | -2/+7 |
| |\ \ | ||||
| | * | | Add length/common password checking. | Matthew Somerville | 2018-02-06 | -2/+7 |
| | |/ | ||||
| * / | Ask for current pw/send email on password change. | Matthew Somerville | 2018-02-01 | -6/+28 |
| |/ | | | | | If they have a current password, ask for it; if they don't, send a confirmation email. | |||
| * | Staff user page for generating an access token. | Struan Donald | 2017-11-29 | -0/+22 |
| | | | | | | Adds a link from /my to a page for generating an access token which is then stored in the user's extra field. | |||
| * | Factor the three SMS code checking fns together. | Matthew Somerville | 2017-10-12 | -3/+5 |
| | | ||||
| * | Spot errors coming back when sending text. | Matthew Somerville | 2017-10-12 | -0/+6 |
| | | ||||
| * | Accept +1 geographic numbers as possibly mobile. | Matthew Somerville | 2017-10-05 | -6/+6 |
| | | | | | | We have no way of knowing whether a +1 geographic number is fixed line or mobile, so accept them all as potentially mobile. | |||
| * | Allow verify/change/add email/phone in profile. | Matthew Somerville | 2017-09-30 | -3/+65 |
| | | | | | | | This expands the 'change email' functionality to work with phone number also, allow addition of missing details, and verifying of unverified details. | |||
| * | Add ability to log in on /auth via text. | Matthew Somerville | 2017-09-30 | -1/+97 |
| | | | | | A confirmation code is sent via Twilio to be entered on the site. | |||
| * | Add 'verified' database columns for email/phone. | Matthew Somerville | 2017-09-30 | -1/+1 |
| | | | | | | These are so we can state whether a user's email address or phone number have been verified by confirmation email/text. | |||
| * | Move some auth functions to their own controllers. | Matthew Somerville | 2017-09-30 | -0/+296 |
| Move the social auth functions to Auth::Social, and the change email/password functions to Auth::Profile. There are no actual code changes. | ||||
