Rebecca Law
0c1592905f
Update sign_out to go to the index page not sign-in
2016-01-11 12:23:08 +00:00
Rebecca Law
f7373ee5fc
Fix wording
...
Changed forgot-password so that it does not expose to the user that the email address does not exist.
2016-01-11 12:23:08 +00:00
Chris Hill-Scott
677f8891b2
Fix layout and wrong word
2016-01-11 12:23:08 +00:00
Rebecca Law
9ca2f2017f
Fix argument
2016-01-11 12:23:08 +00:00
Rebecca Law
c858869a52
Removed exceptions, found a better way to handle them.
...
Refactored the forms so that fields like email_address can be used in multiple forms.
Refactored form validation so that a query function is passed into the form to be run, this
way the form is not exposed to the dao layer and the query is more efficient.
This PR still requires some frontend attention. Will work with Chris to update the templates.
2016-01-11 12:23:08 +00:00
Rebecca Law
ceb78f49b4
Take out the Canadian politeness.
...
Make the error message more consistent.
Extracted common fields for the forms.
2016-01-11 12:23:08 +00:00
Rebecca Law
35619553c8
Added NoDataFoundException
2016-01-11 12:23:07 +00:00
Rebecca Law
a860f713d2
Implementation of the new_password endpoint.
...
Found a way to create the token that does not need to persist it to the database.
This requires proper error messages, written by people who speak menglis good.
2016-01-11 12:23:07 +00:00
Rebecca Law
8057a138a8
Update two_factor redirect endpoint
2016-01-11 12:23:07 +00:00
Rebecca Law
b5901a1ac7
New-password endpoints are implemented.
...
There should be a better way to validate the token.
2016-01-11 12:23:07 +00:00
Rebecca Law
f94966154d
Fix code style. Remove duplicate endpoints
2016-01-11 12:23:07 +00:00
Rebecca Law
39970144b6
fix code style
2016-01-11 12:23:07 +00:00
Rebecca Law
2cb896fa81
Completion of forgot-password endpoints.
...
Start implementation for new-password endpoints.
Created PasswordResetToken model
ToDo: create and save token, send valid url to user,
check validity of token, update user's password, redirect to /two-factor.
2016-01-11 12:23:07 +00:00
Rebecca Law
6696426dbc
Add endpoints for forgot-password.
2016-01-11 12:22:39 +00:00
Chris Hill-Scott
567ac123e3
Merge pull request #51 from alphagov/service-settings-flow
...
Add pages for service settings flow
2016-01-11 11:55:46 +00:00
Martyn Inglis
7efa513777
Ensured credstash is located only with the wsgi/gunicorn code.
2016-01-11 09:59:31 +00:00
Martyn Inglis
ba4dac051b
Integrated credstash as a live properties setting in the app.py class
...
- initial versions kept it out of this class but updated as lots of duplication and errors as config
set up in multiple places and not all picking up credstash.
2016-01-11 09:32:49 +00:00
Martyn Inglis
af713b1583
Removed flask config property lookup.
2016-01-10 21:38:53 +00:00
Chris Hill-Scott
86db5fa0b9
Make wording on 2nd-level pages match prev. commit
2016-01-08 17:17:34 +00:00
Chris Heathcote
11ea68e471
Wording changes on service settings page
2016-01-08 16:45:48 +00:00
Chris Hill-Scott
a289335661
Merge pull request #49 from alphagov/error-pages
...
Error pages
2016-01-08 15:13:44 +00:00
Chris Hill-Scott
4d10eec1e2
Rename submit_form component to page_footer
...
Submit form was
- a confusing name in itself
- not descriptive, because it also has an optional ‘back’ link
This commit also puts this component in as many pages as possible, stripping
out any hard-coded buttons and links.
It replaces any usage of buttons for ‘back’, because these are links, not
buttons (ie they don’t change any data).
2016-01-08 15:02:08 +00:00
Chris Hill-Scott
0b62d1e755
Add confirm loop
...
For pages where
- we want you to be sure that you want to do what you’re about to do
- we want to be sure it’s you trying to do the thing
This adds a page that asks the user to confirm their password.
2016-01-08 14:59:30 +00:00
Chris Hill-Scott
3989d1b576
Add pages for ‘service settings’ flow
...
Adds the pages and wires them together, so that it’s possible to click
through them.
The wording is not quite English, but attempts to be an rough description of
what the consequences are for each of the four actions.
2016-01-08 14:56:14 +00:00
Adam Shimali
1d038c1021
Better page title
2016-01-08 09:44:00 +00:00
Martyn Inglis
35fe1ae5a3
Live was set to debug mode
2016-01-07 16:24:10 +00:00
Adam Shimali
dfbcfa9d49
Removed redundant return of None
2016-01-07 16:12:29 +00:00
Rebecca Law
548d086cbf
Merge pull request #47 from alphagov/integrate-logging
...
Integrated logging from the utils repo
2016-01-07 15:58:05 +00:00
Adam Shimali
479ecbd699
pep8 suggested name change
2016-01-07 15:55:55 +00:00
Adam Shimali
d64e3b81fb
Add basic error pages
2016-01-07 15:54:05 +00:00
Rebecca Law
afd03ea5bf
Merge pull request #46 from alphagov/add-useful-headers
...
Add some useful owasp suggested headers
2016-01-07 15:39:51 +00:00
Martyn Inglis
ef8964284c
Integrated logging from the utils repo
2016-01-07 15:39:36 +00:00
Adam Shimali
78b8aed96b
Add some useful owasp suggested headers
2016-01-07 13:58:38 +00:00
Nicholas Staples
7001d8261d
Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.
2016-01-07 12:43:10 +00:00
Nicholas Staples
10c2978f85
Merge with master and test fix.
2016-01-06 17:17:02 +00:00
Nicholas Staples
0a4ea6ca2e
Merge branch 'master' into provide_logout_link
2016-01-06 17:06:04 +00:00
NIcholas Staples
c7f130e503
Merge pull request #40 from alphagov/form_views_refactor
...
Form views refactor
2016-01-06 17:03:36 +00:00
Nicholas Staples
52df795743
Review fix.
2016-01-06 17:00:01 +00:00
Nicholas Staples
79c15ec9cf
Code checks and all tests passing.
2016-01-06 16:51:35 +00:00
Nicholas Staples
5905229714
Logout functionality and test added.
2016-01-06 16:40:38 +00:00
Martyn Inglis
03d81e5b47
Unicoded the £ sign and the ' needed to render the job page.
2016-01-06 13:22:15 +00:00
Martyn Inglis
416fa30929
Make the £ string a unicode string
2016-01-06 12:57:09 +00:00
Nicholas Staples
34bf03bae2
Readded git submodules.
2016-01-06 12:36:04 +00:00
Nicholas Staples
546b0b68b2
Merge branch 'master' into form_views_refactor
2016-01-06 11:46:58 +00:00
Nicholas Staples
6fc39d1814
Add in macro import to our template, not govuk_template
2016-01-06 11:37:59 +00:00
Nicholas Staples
4a43163603
Removed redundancy of removed included macro.
2016-01-06 11:10:23 +00:00
Martyn Inglis
b9895a805c
Added encoding to file
2016-01-06 11:03:29 +00:00
Nicholas Staples
921c10a1fa
Merge with master.
2016-01-06 10:55:45 +00:00
Nicholas Staples
f2732eed14
Added back in span element in form.
2016-01-06 10:22:36 +00:00
Nicholas Staples
9d7c3566aa
Removed validation check for unique mobile number on the system.
2016-01-06 09:54:10 +00:00