Nicholas Staples
2d35f5f36a
All tests passing and merged with master.
2016-01-27 16:30:33 +00:00
Nicholas Staples
6959d695d3
Working tests, hopefully all code changes done.
2016-01-27 12:22:32 +00:00
Adam Shimali
b394a18b4e
Incrementing of failed logins happens on api side
2016-01-26 12:36:05 +00:00
Adam Shimali
ba0d0d49e1
Fixed tests
2016-01-22 19:32:08 +00:00
Adam Shimali
f8fc8e951a
If user is logged in and visits / /sign-in or /register they will
...
be redirected to choose service.
2016-01-22 17:24:14 +00:00
Adam Shimali
856b6adb56
First slice full sign in flow
2016-01-21 11:33:53 +00:00
Adam Shimali
ca3d3240a6
Verify activate and login user with sms and email code
2016-01-20 15:34:42 +00:00
Rebecca Law
05695a1c03
Updated generate_token to use encrypt the entire url.
...
Created notify_client.sender to hold the methods to send notifications.
2016-01-11 15:18:37 +00:00
Nicholas Staples
7001d8261d
Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.
2016-01-07 12:43:10 +00:00
Nicholas Staples
4a43163603
Removed redundancy of removed included macro.
2016-01-06 11:10:23 +00:00
Nicholas Staples
4fcc4efea2
Small comments.
2016-01-05 17:11:44 +00:00
Nicholas Staples
0ebacd6929
Refactor for code_not_received, sign_in, two_factor and verify.
2016-01-05 17:08:50 +00:00
Nicholas Staples
1f520116f0
Sign in view, form and template refactored.
2016-01-05 14:30:06 +00:00
Rebecca Law
e9383b733e
109898688: Implement get method for email-not-received and text-not-received
2015-12-17 14:33:20 +00:00
Chris Hill-Scott
2f980ab622
Move all pages into their own directory
...
There are a lot of pages. It seems like a good idea to keep them in one place,
so they don’t get mixed up with partials and layouts.
2015-12-11 09:48:52 +00:00
Rebecca Law
2b4097dd2d
109526036: Updates as per comments made on pull request.
2015-12-10 15:21:06 +00:00
Rebecca Law
20fa259316
109526036: Removed sms code from the session on sign-in
2015-12-10 14:51:20 +00:00
Rebecca Law
588730d594
109526036: Persist the verify code to the db.
...
The codes are hashed and saved to the db.
The code is marked as used once a valid code is submitted.
The code is valid for 1 hour.
The codes are no longer saved to the session.
2015-12-10 14:48:01 +00:00
Rebecca Law
c946f85f9d
109638656: Send sms code from sign-in post.
2015-12-09 10:16:30 +00:00
Rebecca Law
9923c14e73
109526520: Changed the code form fields to StringField
...
When the codes were IntegerFields and the code started with zero, the zero was trimmed, resulting in a failed match.
2015-12-09 10:12:21 +00:00
Rebecca Law
60ed0c541b
Remove the temporary endpoint to create users.
2015-12-08 09:03:48 +00:00
Rebecca Law
e8d2a81597
108536490: Fix bug when user does not exist and tries to sign in
2015-12-01 10:35:49 +00:00
Rebecca Law
edfc1d6efc
108536490: Implement User.is_active()
...
If the state of the user is inactive the user.is_active() returns false.
2015-12-01 10:00:07 +00:00
Rebecca Law
3b27db98ff
108536490: Implement locked out function.
...
User is locked if they fail to login 10 times or more.
2015-12-01 10:00:07 +00:00
Rebecca Law
ff9e98907e
108536490: Update encryption for password
2015-12-01 10:00:07 +00:00
Rebecca Law
3f017b30f2
108536490: add the proxy_fix
2015-12-01 10:00:07 +00:00
Rebecca Law
6f61906fd4
108536490: Implement LoginManager for the admin app.
...
Also added csrf error handler, will make the session unauthorized if the csrf token is invalid.
2015-12-01 10:00:06 +00:00
Rebecca Law
48b7a7dc37
108536490: Adding the login manager and csrf token.
...
Still need to figure out how to override the load_user method, currently it is not working.
2015-12-01 10:00:06 +00:00
Rebecca Law
7f96ef5a25
108536490: Initial effort to implement log in
...
Add endpoint for post to /sign-in
Initialise role data
2015-12-01 10:00:06 +00:00
