Commit Graph

107 Commits

Author SHA1 Message Date
Martyn Inglis
5040affc64 upstart puts FLASK_CONFIG into env on AWS.
If present then read the config file pointed at by this property to do environment specific overrides
2015-12-07 13:39:56 +00:00
Martyn Inglis
49aaa116bc Look in environ for AWS properties 2015-12-07 12:10:04 +00:00
Martyn Inglis
7aacd9f1bd Read config file if in AWS 2015-12-07 11:53:14 +00:00
Martyn Inglis
f7cc266546 If there is a FLASK_CONFIG set then use file at that location 2015-12-07 11:35:46 +00:00
Martyn Inglis
d5ea99ee7b Merge branch 'master' of github.com:alphagov/notifications-admin 2015-12-07 11:30:37 +00:00
Martyn Inglis
66537fca30 Setting ENV to live and read config on non-dev environments from a file. 2015-12-07 11:30:29 +00:00
Rebecca Law
2935485977 108537814: Set session expiry to 1 hour 2015-12-04 16:27:11 +00:00
Rebecca Law
a741c128da 108537814: Implementation of 3 factor authentication.
The post register endpoint will send a random 5 digit code via sms and another via email.
If either code fails to send, the user will not be created and the person can register again.
The codes are saved to the session cookie, and expire in 1 hour.

Another iteration of this story will save the codes to a database.
2015-12-04 16:27:11 +00:00
minglis
abd344fc57 Merge pull request #12 from alphagov/blacklist_password
Blacklist password
2015-12-04 15:53:13 +00:00
Lorena Sutherland
e9c9b8c271 Amend text 2015-12-04 15:12:48 +00:00
Lorena Sutherland
619df26690 Amend text 2015-12-04 15:08:41 +00:00
Lorena Sutherland
30f55321b2 Amend text 2015-12-04 15:07:21 +00:00
Lorena Sutherland
aadad35d71 Amend text and add password prompt 2015-12-04 15:05:51 +00:00
Lorena Sutherland
e8839c3300 Amend text 2015-12-04 15:02:00 +00:00
Lorena Sutherland
3c99eb2d3a Amend text 2015-12-04 14:57:16 +00:00
Lorena Sutherland
dc313a601c Amend text 2015-12-04 14:56:23 +00:00
Lorena Sutherland
9be1612c09 Amend text 2015-12-04 14:54:40 +00:00
Lorena Sutherland
7836241f48 Amend text 2015-12-04 14:50:23 +00:00
Lorena Sutherland
b2cae0d162 Amend text 2015-12-04 14:46:01 +00:00
Lorena Sutherland
0af88bb99f Amend intro text & delete email/phone prompts 2015-12-04 12:53:25 +00:00
Lorena Sutherland
7c3ff23ee2 Amend intro text and add password prompt 2015-12-04 12:51:06 +00:00
Lorena Sutherland
8ade276c3c Amend intro and sign-in text 2015-12-04 12:49:38 +00:00
Lorena Sutherland
437e4f52bd Amend intro and sign-in text 2015-12-04 12:47:23 +00:00
Chris Heathcote
15e5d8f145 Fixed flask-assets to look for css changes and rebuild 2015-12-03 16:01:21 +00:00
Chris Heathcote
da80013ec9 Adding beta phase banner 2015-12-03 16:01:00 +00:00
Lorena Sutherland
ff1c35e7a0 Amend line of text 2015-12-02 16:03:31 +00:00
Lorena Sutherland
47a7b79b21 Amend heading text
New heading corresponds to design pattern for confirming accounts
2015-12-02 15:44:07 +00:00
Lorena Sutherland
71f9be2b7e Amend line of text 2015-12-02 15:33:24 +00:00
Lorena Sutherland
f4140ea49b Amend line of text 2015-12-02 15:32:21 +00:00
Lorena Sutherland
571f09881e Amend name & password labels 2015-12-02 15:23:03 +00:00
Lorena Sutherland
058d7c5f96 Change password label 2015-12-02 13:57:03 +00:00
Lorena Sutherland
f6967a8f23 Amend line of text 2015-12-02 11:56:59 +00:00
Rebecca Law
9d9b80bab7 Login user after they register 2015-12-01 16:45:11 +00:00
Rebecca Law
3b96b6e5ca 108536374: Implement a validator to exclude passwords on a blacklist 2015-12-01 16:45:11 +00:00
Rebecca Law
9e2cf2fa4c 108536366: Implement register flow
Includes validation for gov.uk email address, mobile number with +44, password at least 10 char.
Form validation errors will be added to template in a later story.
User is created when form validates.
2015-12-01 16:45:11 +00:00
Rebecca Law
a4cd1c644d 108536374: Change to a generic message for database errors.
Need a story to handle db exceptions in the dao layer
2015-12-01 16:41:49 +00:00
Rebecca Law
64d2cbb927 108536366: Implement register flow
Includes validation for gov.uk email address, mobile number with +44, password at least 10 char.
Form validation errors will be added to template in a later story.
User is created when form validates.
2015-12-01 16:41:49 +00:00
Rebecca Law
5879e59f34 remove login_required for register page 2015-12-01 15:59:10 +00:00
Pete Herlihy
eb5de52f39 Adding route for text not received 2 view 2015-12-01 12:41:19 +00:00
Rebecca Law
9bb683bb21 Merge branch 'master' of github.com:alphagov/notifications-admin 2015-12-01 10:36:35 +00:00
Rebecca Law
e8d2a81597 108536490: Fix bug when user does not exist and tries to sign in 2015-12-01 10:35:49 +00:00
Chris Heathcote
00efed12ec Merge pull request #9 from alphagov/ph-title
Updates to the page titles, removed hello world things.
2015-12-01 10:24:35 +00:00
Rebecca Law
edfc1d6efc 108536490: Implement User.is_active()
If the state of the user is inactive the user.is_active() returns false.
2015-12-01 10:00:07 +00:00
Rebecca Law
3b27db98ff 108536490: Implement locked out function.
User is locked if they fail to login 10 times or more.
2015-12-01 10:00:07 +00:00
Rebecca Law
ff9e98907e 108536490: Update encryption for password 2015-12-01 10:00:07 +00:00
Rebecca Law
3f017b30f2 108536490: add the proxy_fix 2015-12-01 10:00:07 +00:00
Rebecca Law
af382885d3 108536490: Use ItsDangerousSessionInterface in the app.
Start using http://flask.pocoo.org/snippets/51/
2015-12-01 10:00:06 +00:00
Rebecca Law
6f61906fd4 108536490: Implement LoginManager for the admin app.
Also added csrf error handler, will make the session unauthorized if the csrf token is invalid.
2015-12-01 10:00:06 +00:00
Rebecca Law
48b7a7dc37 108536490: Adding the login manager and csrf token.
Still need to figure out how to override the load_user method, currently it is not working.
2015-12-01 10:00:06 +00:00
Rebecca Law
7f96ef5a25 108536490: Initial effort to implement log in
Add endpoint for post to /sign-in
Initialise role data
2015-12-01 10:00:06 +00:00