 Peter Thomassen
|
f89cf2651a
feat(api): explain link expiration in emails
|
5 years ago |
|
Peter Thomassen
|
fed585f810
chore(api): code style
|
5 years ago |
|
Peter Thomassen
|
4057ac58d7
feat(api): add user ID to outgoing emails
|
5 years ago |
|
Peter Thomassen
|
4136abc442
feat(api): require POST for authenticated action links
|
5 years ago |
|
Nils Wisiol
|
1e79142480
feat(api): passwd reset when acti. user without domain and passwd
|
5 years ago |
|
Peter Thomassen
|
5e3c8eb84a
feat(api): add domain information to activation response
|
5 years ago |
|
Peter Thomassen
|
1b686913cb
feat(api): redirect to frontend before performing authenticated action
|
5 years ago |
|
Peter Thomassen
|
198d03854f
feat(tests): allow passing headers to client.verify
|
5 years ago |
|
Peter Thomassen
|
dd5a104eed
fix(api): move and simplify AuthenticatedActionAuthenticator
|
5 years ago |
|
Peter Thomassen
|
a753f2222e
fix(api): authenticate actions after validating HTTP method
|
5 years ago |
|
Peter Thomassen
|
169ca429a8
feat(tests): improve change email test
|
5 years ago |
|
Nils Wisiol
|
f94e0fdd52
feat(webapp): adds front and sign up pages, reworks sign-up flow
|
5 years ago |
|
Nils Wisiol
|
2b43c15175
feat(api): require CAPTCHA for password request reset
|
5 years ago |
|
Nils Wisiol
|
339c19a219
fix(api): remove dead code
|
5 years ago |
|
Peter Thomassen
|
25676430fc
feat(api): encrypt-then-authenticate action codes, closes #250
|
5 years ago |
|
Peter Thomassen
|
fc067e4d9b
feat(api): migrate User ID datatype from int to UUID, closes #249
|
5 years ago |
|
Peter Thomassen
|
65d0cdd8ee
feat(api): add logout endpoint (for current token)
|
5 years ago |
|
Peter Thomassen
|
158be3f8b2
feat(api): store tokens in hashed format and with UUID
|
5 years ago |
|
Peter Thomassen
|
d62ecef398
feat(api): simply call exposed field 'token' instead of 'auth_token'
|
5 years ago |
|
Peter Thomassen
|
aa4ec2f52b
fix(api): set correct minimum TTL on domains created via auth action
|
5 years ago |
|
Peter Thomassen
|
12075fe50e
feat(api): allow account registration without a password
|
5 years ago |
|
Peter Thomassen
|
e9359f2f3a
fix(api): raise validation error for invalid login payload
|
5 years ago |
|
Peter Thomassen
|
8dfbf7f4fc
fix(api): move dyn welcome email to Domain post_save signal, add test
|
5 years ago |
|
Nils Wisiol
|
12ce495194
fix(api): return 409 on delete requests if user still has domains
|
5 years ago |
|
Nils Wisiol
|
5e3a8ecd40
fix(api): use LOCAL_PUBLIC_SUFFIX setting in tests
|
5 years ago |
|
Peter Thomassen
|
dc948e97ce
fix(api): improvements for authenticated actions
|
5 years ago |
|
Nils Wisiol
|
a7d54148a9
feat(api): require locally generated captcha for user registration
|
5 years ago |
|
Nils Wisiol
|
9d1b545d82
feat(api): improve domain name and PSL validation
|
5 years ago |
|
Nils Wisiol
|
5794ff3985
chore(): re-organize imports, fix erronous imports
|
5 years ago |
|
Nils Wisiol
|
7c4dc77ddc
feat(api): rework user management
|
5 years ago |
