Nicholas Staples
62150e5596
Added fixes for forms to hide potential email philshing scams.
2016-01-28 16:36:36 +00:00
Adam Shimali
91465520a0
Call to client for password check incorrectly passed user instead
...
of user.id
2016-01-28 12:31:24 +00:00
Nicholas Staples
2d35f5f36a
All tests passing and merged with master.
2016-01-27 16:30:33 +00:00
Nicholas Staples
6959d695d3
Working tests, hopefully all code changes done.
2016-01-27 12:22:32 +00:00
Adam Shimali
4674bd6b68
Reintroduce some tests. A bit of cleanup of mocks.
...
User object fields made a bit clearer and simple test to
verify user added.
2016-01-23 23:14:50 +00:00
Adam Shimali
ba0d0d49e1
Fixed tests
2016-01-22 19:32:08 +00:00
Adam Shimali
f8fc8e951a
If user is logged in and visits / /sign-in or /register they will
...
be redirected to choose service.
2016-01-22 17:24:14 +00:00
Adam Shimali
167c7b0f13
Fixed some tests. Some broken mocked tests commented out until later
2016-01-21 12:31:09 +00:00
Adam Shimali
856b6adb56
First slice full sign in flow
2016-01-21 11:33:53 +00:00
Nicholas Staples
3b1d521c10
Tests added for dao.
2016-01-15 15:15:35 +00:00
Nicholas Staples
d42ee85f93
Added new notification-python-client removed check on old one, fixed tests, live service will be broken.
2016-01-14 14:55:07 +00:00
Nicholas Staples
0ebacd6929
Refactor for code_not_received, sign_in, two_factor and verify.
2016-01-05 17:08:50 +00:00
Nicholas Staples
1f520116f0
Sign in view, form and template refactored.
2016-01-05 14:30:06 +00:00
Rebecca Law
64812c1614
109898688: All codes are valid until one code is used, then they are all marked used.
...
Fixed the is_active() method on the Users model, if the user was pending they would come back as active, allowing a user to sign in before being active.
There is still a problem with the validate_sms_code and validate_email_code method.
2015-12-17 14:33:20 +00:00
Rebecca Law
588730d594
109526036: Persist the verify code to the db.
...
The codes are hashed and saved to the db.
The code is marked as used once a valid code is submitted.
The code is valid for 1 hour.
The codes are no longer saved to the session.
2015-12-10 14:48:01 +00:00
Rebecca Law
975aaf58ff
109638656: Add mocker for api client, which tries to send sms
2015-12-09 12:11:43 +00:00
Rebecca Law
229935c050
Remove test for temp_create_user, removed in previous commit.
2015-12-08 13:04:20 +00:00
Rebecca Law
e8d2a81597
108536490: Fix bug when user does not exist and tries to sign in
2015-12-01 10:35:49 +00:00
Rebecca Law
de0efcb508
108536490: Add test that post with bad password when account is locked results in 401
2015-12-01 10:00:07 +00:00
Rebecca Law
edfc1d6efc
108536490: Implement User.is_active()
...
If the state of the user is inactive the user.is_active() returns false.
2015-12-01 10:00:07 +00:00
Rebecca Law
3b27db98ff
108536490: Implement locked out function.
...
User is locked if they fail to login 10 times or more.
2015-12-01 10:00:07 +00:00
Rebecca Law
6f61906fd4
108536490: Implement LoginManager for the admin app.
...
Also added csrf error handler, will make the session unauthorized if the csrf token is invalid.
2015-12-01 10:00:06 +00:00
Rebecca Law
48b7a7dc37
108536490: Adding the login manager and csrf token.
...
Still need to figure out how to override the load_user method, currently it is not working.
2015-12-01 10:00:06 +00:00
Rebecca Law
7f96ef5a25
108536490: Initial effort to implement log in
...
Add endpoint for post to /sign-in
Initialise role data
2015-12-01 10:00:06 +00:00
