Nicholas Staples
4e2019c949
Work in progress, all tests passing and implemented mocks for services_dao.
2016-01-15 17:46:09 +00:00
Nicholas Staples
3b1d521c10
Tests added for dao.
2016-01-15 15:15:35 +00:00
Nicholas Staples
7001d8261d
Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.
2016-01-07 12:43:10 +00:00
Nicholas Staples
0ebacd6929
Refactor for code_not_received, sign_in, two_factor and verify.
2016-01-05 17:08:50 +00:00
Rebecca Law
010be66d31
109898688: Complete the implementation of the did not receive code.
2015-12-17 14:33:20 +00:00
Rebecca Law
64812c1614
109898688: All codes are valid until one code is used, then they are all marked used.
...
Fixed the is_active() method on the Users model, if the user was pending they would come back as active, allowing a user to sign in before being active.
There is still a problem with the validate_sms_code and validate_email_code method.
2015-12-17 14:33:20 +00:00
Rebecca Law
295dbeb7d1
Create unit tests that test the forms.
2015-12-14 13:25:27 +00:00
Rebecca Law
c0550d2c61
Refactor unit tests
2015-12-14 13:25:27 +00:00
Rebecca Law
588730d594
109526036: Persist the verify code to the db.
...
The codes are hashed and saved to the db.
The code is marked as used once a valid code is submitted.
The code is valid for 1 hour.
The codes are no longer saved to the session.
2015-12-10 14:48:01 +00:00
Rebecca Law
9ba229820a
109638656: Implementation of two factor verification
...
Validation of the code is done in the form, when the form.validate_on_submit is called the validate code methods are called as well.
2015-12-09 11:36:57 +00:00
Rebecca Law
ae19161b32
109526520: Use Regex validator to test the code is 5 digits.
2015-12-09 10:12:21 +00:00
Rebecca Law
9923c14e73
109526520: Changed the code form fields to StringField
...
When the codes were IntegerFields and the code started with zero, the zero was trimmed, resulting in a failed match.
2015-12-09 10:12:21 +00:00
Rebecca Law
bef2258803
109526520: Add custom validators for the VerifyForm
...
If the email_code or sms_code entered does not pass check password, then add errors to the form.
2015-12-09 10:12:21 +00:00
Rebecca Law
16618e80f9
109526520: Implement verify flow
...
When a person registers with a valid mobile number and email address,
a code will be sent to each. That person can enter the verify codes and continue to the add-service page.
2015-12-09 10:12:21 +00:00
Rebecca Law
56db1ad400
109526520: fix code style
2015-12-09 10:12:21 +00:00
Rebecca Law
6d47c01117
109526520: Implememt verify post method.
2015-12-09 10:12:20 +00:00
Rebecca Law
69da9f8f32
109526520: render verify template with VerifyForm
2015-12-09 10:12:20 +00:00
