8 Commits

Author	SHA1	Message	Date
Adam Shimali	b5cdf86b40	User registration now creates user via api. ... Verification flow is still to be completed. Foreign key constraint on verify codes to user table removed.	2016-01-19 22:49:46 +00:00
Nicholas Staples	7001d8261d	Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.	2016-01-07 12:43:10 +00:00
Rebecca Law	010be66d31	109898688: Complete the implementation of the did not receive code.	2015-12-17 14:33:20 +00:00
Rebecca Law	64812c1614	109898688: All codes are valid until one code is used, then they are all marked used. ... Fixed the is_active() method on the Users model, if the user was pending they would come back as active, allowing a user to sign in before being active. There is still a problem with the validate_sms_code and validate_email_code method.	2015-12-17 14:33:20 +00:00
Rebecca Law	bd8bb3c926	109898688: Implementation of text-not-received and email-not-received	2015-12-17 14:33:20 +00:00
Rebecca Law	bbecc03531	109526036: Fix bug. ... If one of the codes was invalid and one was valid on the verify page the valid code would be marked as used.	2015-12-10 16:34:29 +00:00
Rebecca Law	2b4097dd2d	109526036: Updates as per comments made on pull request.	2015-12-10 15:21:06 +00:00
Rebecca Law	588730d594	109526036: Persist the verify code to the db. ... The codes are hashed and saved to the db. The code is marked as used once a valid code is submitted. The code is valid for 1 hour. The codes are no longer saved to the session.	2015-12-10 14:48:01 +00:00