Commit Graph

15 Commits

Author SHA1 Message Date
Florent Vilmart
3603b82eac Properly sets installationId on creating session with 3rd party auth 2016-03-20 15:58:16 -04:00
Florent Vilmart
1ed868b99c Fixes #935, cleans up authData null keys on login for android crash 2016-03-11 11:14:58 -05:00
Florent Vilmart
3ecaa0aa4b Sends verification email upon set and update email
- nits
2016-02-29 18:58:34 -05:00
Florent Vilmart
91d9724182 Adds reset password logic 2016-02-29 18:55:15 -05:00
Florent Vilmart
f3bb2c99e0 Refactor and advancements
- Drops mailController, centralized in UserController
- Adds views folder for change_password
- Improves PromiseRouter to support text results
- Improves PromiseRouter to support empty responses for redirects
- Adds options to AdaptableController
- UsersController gracefully fails when no adapter is set
- Refactors GlobalConfig into same style for Routers
2016-02-29 18:55:14 -05:00
Florent Vilmart
7dd765256c Refactors verify_email, adds public html 2016-02-29 18:52:11 -05:00
Florent Vilmart
0b307bc22f Improves AdapterLoader, enforces configuraiton on Adapters 2016-02-29 18:52:10 -05:00
Drew Gross
8dc37b9d30 Exploring the interface of a mail adapter
Add some tests and demonstrate the adapter loading interface
2016-02-29 18:52:10 -05:00
Nikita Lutsenko
daa5f11122 Remove 'database' field from request and make all database requests go through config. 2016-02-26 22:48:53 -08:00
Nikita Lutsenko
bc90effd32 Send a sessionToken back on /users/me. 2016-02-24 12:54:04 -08:00
Florent Vilmart
3c4d5159b4 Refactors routers 2016-02-20 00:08:54 -05:00
Florent Vilmart
86c502c702 Removes installationId from _User 2016-02-16 12:38:45 -05:00
Florent Vilmart
ea07eb506d Clears session on password change
- Fixes error type when passing an invalid session token
2016-02-15 10:15:47 -05:00
Dmitry Chestnykh
62cbc451aa Generate tokens and ids with cryptoUtils module.
Move object ID, token, and random string generation into their own
module, cryptoUtils.

Remove hat dependency, which was used to generate session and some other
tokens, because it  used non-cryptographic random number generator.
Replace it with the cryptographically secure one. The result has the
same format (32-character hex string, 128 bits of entropy).

Remove randomstring dependency, as we already have this functionality.

Add tests.
2016-02-12 21:16:50 +01:00
Nikita Lutsenko
ab841b5ab4 Refactor and deduplicate logic in UsersRouter. 2016-02-11 23:17:38 -08:00