Commit Graph

147 Commits (e1dc960219fee5f46d5feb29ec0b565a5efbd947)

Author SHA1 Message Date
Matt Jankowski 61f0ce654f
Update `rubocop-rails` to version 2.33.0 (#35741) 5 months ago
Matt Jankowski b8982cb881
Use `around_action` to preserve stored location in `auth/sessions#destroy` (#35716) 5 months ago
Matt Jankowski 5c01ccc31f
Set flash options via redirect where possible (#35370) 6 months ago
Matt Jankowski 30344d6abf
Confirm `User#login_activities` in auth/sessions spec (#35372) 6 months ago
Matt Jankowski 1297ad759e
Update rubocop to version 1.76.0 (#34926) 8 months ago
Claire 8c51a8ba94
Add ability to translate server rules (#34494) 8 months ago
Claire f94b1fce41
Drop compatibility with Redis < 6.2 (#30413) 8 months ago
Eugen Rochko d213c585ff
Add age verification on sign-up (#34150) 10 months ago
Matt Jankowski c3419d146a
Remove duplicate cache header setting before action (#33833) 12 months ago
Matt Jankowski a1d9c3fb99
Use `expect` params wrapper for more "auth" and "2FA" "controllers" (#33717) 1 year ago
Matt Jankowski 45149cd5e1
Use `expect` for nested params in `auth/setup#update` (#33657) 1 year ago
Matt Jankowski 998cf0dd53
Convert `auth/setup` spec controller->system/request (#33604) 1 year ago
Eugen Rochko ca45f896dd
Fix various visual sign-up flow issues (#33206) 1 year ago
Matt Jankowski a397141d78
Move non-action public method controller callback to private methods (#31933) 1 year ago
Matt Jankowski a9d0b48b65
Set "admin" body class from `admin` nested layout (#31269) 1 year ago
Renaud Chaput c3e1d86d58
Fix log out from user menu not working on Safari (#31402) 1 year ago
Claire 2ec1181ee5
Fix contrast between background and form elements on some pages (#31266) 1 year ago
Matt Jankowski 929b9fdaff
Remove exclusion for `Rails/LexicallyScopedActionFilter` cop (#30697) 2 years ago
Matt Jankowski 9b5055d34d
Fix `Style/SuperArguments` cop (#30406) 2 years ago
Claire d4d0565b0f
Fix user creation failure handling in OAuth paths (#29207) 2 years ago
Claire b31af34c97
Merge pull request from GHSA-vm39-j3vx-pch3
* Prevent different identities from a same SSO provider from accessing a same account

* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`

* Rename methods to avoid confusion between OAuth and OmniAuth
2 years ago
Claire eeabf9af72
Fix compatibility with Redis <6.2 (#29123) 2 years ago
Matt Jankowski 17ea22671d
Fix `Style/GuardClause` cop in app/controllers (#28420) 2 years ago
Claire e2d9635074
Add notification email on invalid second authenticator (#28822) 2 years ago
Claire 3593ee2e36
Add rate-limit of TOTP authentication attempts at controller level (#28801) 2 years ago
Matt Jankowski 0e5b8fc46b
Fix `Style/RedundantReturn` cop (#28391) 2 years ago
Claire 963354978a
Add `Account#unavailable?` and `Account#permanently_unavailable?` aliases (#28053) 2 years ago
Matt Jankowski 1f1c75bba5
File cleanup/organization in `controllers/concerns` (#27846) 2 years ago
Claire 07a4059901
Add support for invite codes in the registration API (#27805) 2 years ago
Claire 49b8433c56
Fix confusing screen when visiting a confirmation link for an already-confirmed email (#27368) 2 years ago
Claire 379115e601
Add SELF_DESTRUCT env variable to process self-destructions in the background (#26439) 2 years ago
Matt Jankowski 340f1a68be
Simplify instance presenter view access (#26046) 2 years ago
Matt Jankowski 50ff3d3342
Coverage for `Auth::OmniauthCallbacks` controller (#26147) 3 years ago
Claire b629e21515
Fix unexpected redirection to /explore after sign-in (#26143) 3 years ago
Matt Jankowski 5134fc65e2
Fix `Naming/AccessorMethodName` cop (#25924) 3 years ago
Claire e6a8faae81
Add users index on unconfirmed_email (#25672) 3 years ago
Claire 180f0e6715
Fix inefficient query when requesting a new confirmation email from a logged-in account (#25669) 3 years ago
Eugen Rochko f20698000f
Fix always redirecting to onboarding in web UI (#25396) 3 years ago
Frankie Roberto 36a77748b4
Order sessions by most-recent to least-recently updated (#25005) 3 years ago
Claire bec6a1cad4
Add hCaptcha support (#25019) 3 years ago
Matt Jankowski 6e226f5a32
Fix Rails/ActionOrder cop (#24692) 3 years ago
Eugen Rochko e98c86050a
Refactor `Cache-Control` and `Vary` definitions (#24347) 3 years ago
Eugen Rochko e5c0b16735
Add progress indicator to sign-up flow (#24545) 3 years ago
Claire 280fa3b2c0
Fix invalid/expired invites being processed on sign-up (#24337) 3 years ago
CSDUMMI d258ec8e3b
Prefer the stored location as after_sign_in_path in Omniauth Callback Controller (#24073) 3 years ago
Nick Schonning aef0051fd0
Enable Rubocop HTTP status rules (#23717) 3 years ago
Nick Schonning e2a3ebb271
Autofix Rubocop Style/IfUnlessModifier (#23697) 3 years ago
David Vega 1b5d207131
Fix single name variables on controller folder (#20092)
Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>

Co-authored-by: petrokoriakin1 <116151189+petrokoriakin1@users.noreply.github.com>
Co-authored-by: Effy Elden <effy@effy.space>
3 years ago
Francis Murillo 5fb1c3e934
Revoke all authorized applications on password reset (#21325)
* Clear sessions on password change

* Rename User::clear_sessions to revoke_access for a clearer meaning

* Add reset paassword controller test

* Use User.find instead of User.find_for_authentication for reset password test

* Use redirect and render for better test meaning in reset password

Co-authored-by: Effy Elden <effy@effy.space>
3 years ago
Claire 48e136605a
Fix form-action CSP directive for external login (#20962) 3 years ago