Rebecca Law
a741c128da
108537814: Implementation of 3 factor authentication.
...
The post register endpoint will send a random 5 digit code via sms and another via email.
If either code fails to send, the user will not be created and the person can register again.
The codes are saved to the session cookie, and expire in 1 hour.
Another iteration of this story will save the codes to a database.
2015-12-04 16:27:11 +00:00
Rebecca Law
9d9b80bab7
Login user after they register
2015-12-01 16:45:11 +00:00
Rebecca Law
3b96b6e5ca
108536374: Implement a validator to exclude passwords on a blacklist
2015-12-01 16:45:11 +00:00
Rebecca Law
64d2cbb927
108536366: Implement register flow
...
Includes validation for gov.uk email address, mobile number with +44, password at least 10 char.
Form validation errors will be added to template in a later story.
User is created when form validates.
2015-12-01 16:41:49 +00:00
Rebecca Law
e8d2a81597
108536490: Fix bug when user does not exist and tries to sign in
2015-12-01 10:35:49 +00:00
Rebecca Law
de0efcb508
108536490: Add test that post with bad password when account is locked results in 401
2015-12-01 10:00:07 +00:00
Rebecca Law
edfc1d6efc
108536490: Implement User.is_active()
...
If the state of the user is inactive the user.is_active() returns false.
2015-12-01 10:00:07 +00:00
Rebecca Law
3b27db98ff
108536490: Implement locked out function.
...
User is locked if they fail to login 10 times or more.
2015-12-01 10:00:07 +00:00
Rebecca Law
ff9e98907e
108536490: Update encryption for password
2015-12-01 10:00:07 +00:00
Rebecca Law
6f61906fd4
108536490: Implement LoginManager for the admin app.
...
Also added csrf error handler, will make the session unauthorized if the csrf token is invalid.
2015-12-01 10:00:06 +00:00
Rebecca Law
48b7a7dc37
108536490: Adding the login manager and csrf token.
...
Still need to figure out how to override the load_user method, currently it is not working.
2015-12-01 10:00:06 +00:00
Rebecca Law
7f96ef5a25
108536490: Initial effort to implement log in
...
Add endpoint for post to /sign-in
Initialise role data
2015-12-01 10:00:06 +00:00
Rebecca Law
9e27ef964a
Make users.name unique.
2015-11-26 11:53:49 +00:00
Rebecca Law
af9e2cf0fa
108536234: Added a dao method to get all users.
2015-11-26 09:59:23 +00:00
Rebecca Law
abe1d8ae17
108536234: created users and roles data and domain model.
...
You will need to run the /scripts/bootstrap.sh to create the database for test and the app.
2015-11-25 15:29:12 +00:00
