Rebecca Law
64812c1614
109898688: All codes are valid until one code is used, then they are all marked used.
...
Fixed the is_active() method on the Users model, if the user was pending they would come back as active, allowing a user to sign in before being active.
There is still a problem with the validate_sms_code and validate_email_code method.
2015-12-17 14:33:20 +00:00
Rebecca Law
588730d594
109526036: Persist the verify code to the db.
...
The codes are hashed and saved to the db.
The code is marked as used once a valid code is submitted.
The code is valid for 1 hour.
The codes are no longer saved to the session.
2015-12-10 14:48:01 +00:00
Rebecca Law
975aaf58ff
109638656: Add mocker for api client, which tries to send sms
2015-12-09 12:11:43 +00:00
Rebecca Law
229935c050
Remove test for temp_create_user, removed in previous commit.
2015-12-08 13:04:20 +00:00
Rebecca Law
e8d2a81597
108536490: Fix bug when user does not exist and tries to sign in
2015-12-01 10:35:49 +00:00
Rebecca Law
de0efcb508
108536490: Add test that post with bad password when account is locked results in 401
2015-12-01 10:00:07 +00:00
Rebecca Law
edfc1d6efc
108536490: Implement User.is_active()
...
If the state of the user is inactive the user.is_active() returns false.
2015-12-01 10:00:07 +00:00
Rebecca Law
3b27db98ff
108536490: Implement locked out function.
...
User is locked if they fail to login 10 times or more.
2015-12-01 10:00:07 +00:00
Rebecca Law
6f61906fd4
108536490: Implement LoginManager for the admin app.
...
Also added csrf error handler, will make the session unauthorized if the csrf token is invalid.
2015-12-01 10:00:06 +00:00
Rebecca Law
48b7a7dc37
108536490: Adding the login manager and csrf token.
...
Still need to figure out how to override the load_user method, currently it is not working.
2015-12-01 10:00:06 +00:00
Rebecca Law
7f96ef5a25
108536490: Initial effort to implement log in
...
Add endpoint for post to /sign-in
Initialise role data
2015-12-01 10:00:06 +00:00
