3 Commits

Author	SHA1	Message	Date
Chris Hill-Scott	da1fa2e61c	Make _attach_current_user a pure function ... Mutating dictionaries is gross and doesn’t work as you’d expect. Better to have the function return a new dictionary instead. Means we can be explicit that `created_by` is one of the allowed params when updating a service.	2016-08-11 17:07:55 +01:00
Nicholas Staples	2085792742	Add created_by to all appropriate requests.	2016-04-15 11:08:19 +01:00
Rebecca Law	a741c128da	108537814: Implementation of 3 factor authentication. ... The post register endpoint will send a random 5 digit code via sms and another via email. If either code fails to send, the user will not be created and the person can register again. The codes are saved to the session cookie, and expire in 1 hour. Another iteration of this story will save the codes to a database.	2015-12-04 16:27:11 +00:00