18 Commits

Author	SHA1	Message	Date
Nick O'Leary	e3853ae402	Improve error reporting with oauth login strategies	2021-09-20 11:48:51 +01:00
Dominik Schmidt	630d2ca926	Give passport verfiy callback wrapper the same arity as the original callback passed in via options	2021-08-23 15:57:44 +02:00
Nick O'Leary	13406e76de	Ensure theme login image is passed through to api response ... Fixes #2929	2021-04-12 10:06:35 +01:00
Nick O'Leary	70b6674f44	Replace Math.random with crypto.getBytes for session tokens	2020-09-11 14:09:54 +01:00
Nick O'Leary	1df2f5e96a	Allow Comms websocket auth to be done via token header ... Fixes #2642	2020-07-09 19:07:51 +01:00
Nick O'Leary	05fc3c5eca	Merge branch 'master' into dev	2020-03-30 23:41:33 +01:00
KAZUHIRO ITO	83942c2551	Fix plugin only receives the actual token	2020-02-27 19:55:21 +09:00
KAZUHIRO ITO	458d794f52	Fix tokensStrategy order	2020-02-27 19:41:59 +09:00
KAZUHIRO ITO	bba6855872	Add admin api authentication function	2020-02-26 12:59:40 +09:00
Nick O'Leary	22de8855c1	Handle httpAdminRoot missing ending slash with login strategy ... Fixes #2473	2020-02-24 21:08:29 +00:00
Nick O'Leary	8bb7b2e88b	Ensure session expiry timeout doesn't exceed limit	2019-07-06 16:34:48 +01:00
Nick O'Leary	419f26db87	Fix use of custom auth strategy plugins	2019-02-12 10:45:38 +00:00
Nick O'Leary	e0bb03a53f	More api documentation updates	2019-01-28 14:40:42 +00:00
Nick O'Leary	a1f135bd66	Allow oauth strategy callback method to be customised ... Closes #1998 Method can be set via: `adminAuth.strategy.options.callbackMethod` Can be either GET (default) or POST.	2018-12-13 13:43:57 +00:00
Nick O'Leary	8c561e92c8	Actively expire login sesssions and notify user	2018-12-11 11:32:12 +00:00
Nick O'Leary	dabb2790c9	Fix up merge of auth token handling	2018-10-22 16:21:02 +01:00
Nick O'Leary	dc7e48dc53	Merge branch 'dev' into pr_1789	2018-10-22 10:46:47 +01:00
Nick O'Leary	e57d8ba0ef	pull out editor-client and editor-api	2018-08-17 22:10:54 +01:00