aboutsummaryrefslogtreecommitdiffstats
path: root/perllib/FixMyStreet/App/Controller/Tokens.pm
Commit message (Collapse)AuthorAgeLines
* Move all test endpoints under /_dev.Zarino Zappia2018-08-29-26/+0
|
* Add ability to confirm reports/updates via text.Matthew Somerville2017-09-30-90/+6
|
* Add 'verified' database columns for email/phone.Matthew Somerville2017-09-30-4/+4
| | | | | These are so we can state whether a user's email address or phone number have been verified by confirmation email/text.
* Return 400/500 for some client/server errors.Matthew Somerville2016-12-16-0/+1
|
* Restructure & clarify problem confirmation pageDave Arter2016-07-08-2/+2
| | | | | | | The message shown to the user if the report was sent to a council other than the cobrand owner was confusing so the wording has been clarified. Also added a call to action to view the report on FMS.com or the cobranded FMS.
* Add Twitter social login.Matthew Somerville2016-04-08-0/+2
|
* Merge branch '1146-social-login'Matthew Somerville2016-01-27-0/+2
|\ | | | | | | | | | | Conflicts: templates/web/base/report/new/fill_in_details_form.html templates/web/base/report/update-form.html
| * Add login by Facebook when updating.Matthew Somerville2016-01-22-0/+1
| | | | | | | | Makes the flow more like new reporting.
| * Add login by Facebook when reporting.Matthew Somerville2016-01-22-0/+1
| |
* | Improve some error pages.Matthew Somerville2016-01-26-5/+1
|/ | | | | Use design of auth/token in generic error, 404, and token server error pages, and use the same error for too old/ token not found errors.
* [fixmystreet.com] Don't show app step if used app.Matthew Somerville2016-01-06-0/+1
| | | | Fixes #1305.
* Remove ms_current_timestamp() override function.Matthew Somerville2015-08-13-4/+4
| | | | | This override is not used anywhere, it dates from a very old long-gone test script, and causes issues with database query planning.
* Alter token logging in and timeout behaviour.Matthew Somerville2015-07-10-28/+79
| | | | | | | Restrict email_sign_in token to one day, unused confirmation tokens to one month. Used tokens will redirect to the created thing but not log in; don't log in with alert links (unsubscribe link never expires, reply link will still show "reopen" tickbox).
* Factor out all uses of param()/params.Matthew Somerville2015-07-07-1/+1
| | | | | | | Use a central get_param and get_param_list functions dependent on whether we're after a scalar or a list (almost always a scalar). This prevents any possibility of confusion where param() could return a list, or params->{} an arrayref.
* Add Extra role to ease use of {extra} field.Hakim Cassimally2015-03-20-3/+1
| | | | | | | | | Historically, the extra field has been used in two different ways by different cobrands, both as a list (e.g. Open311 category fields) and a hash (e.g. the Zurich cobrand). This commit consolidates usage, adding an API to make use of the field easier and always returning a hash for the code to use. Fixes #1018.
* Add URLs for easy looking at confirmation pages.Matthew Somerville2015-02-19-0/+25
|
* Always show confirmation page for reports/updates.Matthew Somerville2015-02-19-2/+1
| | | | | Rather than redirecting to the report if they're already logged in. Fixes #1003.
* alter pave url sent to analytics on report completionStruan Donald2014-04-16-1/+1
| | | | | | | | | | | | | | | | In order to allow us to do funnel analysis in google analytics we need to send a differnt page url when a user completes a report. To do this we add a report_created=1 to the query string on either the report page or the report confirmation page for logged in and confirm by email users respectively. There's a bit of complication as we don't want to set a session cookie everywhere as that will break caching so we set a stash variable, although if the user is logged in this is controlled by a variable in the flash as there is already a session cookie at this point. also, removes the code that sends an event upon report completion as this was no use for funnel analysis.
* Fire a google analytics event on report completionStruan Donald2014-04-09-0/+1
| | | | | | | | At the moment it's hard to use google analytics to track when someone has completed a report due to the various redirects which can occur too quickly for the analytics javascript to fire. So now we fire an event if we've set a flash value. This also allows us to track how they created the report.
* If a comment is already confirmed then just log the user in and forward them toStruan Donald2013-04-11-1/+6
| | | | | the report page rather than reconfirming the report, which may alter the status of reports
* Don't need to create update alert for reports in Zurich.Matthew Somerville2013-03-18-3/+0
|
* Move to using problem.extra for internal notes, email confirmation, and ↵Matthew Somerville2013-01-08-1/+3
| | | | public nature of photo.
* Create reporter alert in Zurich, for receiving update notice.Matthew Somerville2012-12-21-0/+3
|
* Zurich always has email confirmation, and that just sets a flag (as report ↵Matthew Somerville2012-12-20-0/+17
| | | | is already 'public').
* Improve on 73da842, few more places where cobrand specific report URL is needed.Matthew Somerville2012-07-18-1/+1
|
* Tokens can look at all reports.Matthew Somerville2012-07-16-1/+2
|
* store title in users table so we can persist it for bromleyStruan Donald2012-05-01-0/+1
|
* Stop warnings if org is not provided.Matthew Somerville2011-10-10-0/+1
|
* avoid warnings about uninitalized valuesStruan Donald2011-08-18-1/+1
|
* remove hard coded references to fixedStruan Donald2011-08-18-1/+1
|
* Only allow problem confirmation up to a month after creation.Matthew Somerville2011-08-05-10/+23
|
* Rename questionnaire index function so GET doesn't find it.Matthew Somerville2011-08-05-1/+1
|
* Carry through name/phone/password updates through report/update creation via ↵Matthew Somerville2011-07-04-3/+15
| | | | token. Only store encrypted password, and override EncodedColumn to prevent double encrypting.
* Log someone in following questionnaire link.Matthew Somerville2011-06-29-2/+12
|
* Sign in over login; tidy CSS.Matthew Somerville2011-06-24-1/+1
|
* Generate /reports data on cron.Matthew Somerville2011-06-16-1/+1
|
* Switch to using c->cobrand->problems to return all problems for a cobrand ↵Matthew Somerville2011-06-08-1/+1
| | | | (so on Barnet only return Barnet problems).
* Fix bug whereby lat/lon were being stored the wrong way round in local alerts.Matthew Somerville2011-06-03-2/+0
|
* Sign up new report to email alert if logged in as well as when confirmed by ↵Matthew Somerville2011-06-03-9/+2
| | | | email. Allow disabling rather than deleting of alerts. Revert quoting as it breaks timestamps and literal SQL.
* expire non login sessions with browser sessionStruan Donald2011-06-01-0/+7
|
* make sure you are allowed to answer the questionnaire asked when a problem ↵Struan Donald2011-05-27-2/+2
| | | | reporter marks the problem as fixed.
* Start of questionnaire migration, displays mostly okay, submission not done, ↵Matthew Somerville2011-05-21-1/+19
| | | | nor problem display.
* update confirmation from tokensStruan Donald2011-05-20-0/+36
|
* use models to sign up problem reporter to new update alertsStruan Donald2011-05-12-4/+9
|
* confirm alert subscriptionStruan Donald2011-05-11-1/+31
|
* Corrected tests and docs. Still need to fix code.Edmund von der Burg2011-04-14-1/+3
|
* Change '/reports/new' to '/report/new'Edmund von der Burg2011-04-01-1/+1
| | | | | Fix broken links to '/reports/<<id>>' Get correct base under CGI and FastCGI
* Ported import.cgi to catalystEdmund von der Burg2011-03-31-1/+16
|
* Handle problem confirmation tokens in catalyst and get all tests workingEdmund von der Burg2011-03-28-0/+114