38 Commits

Author	SHA1	Message	Date
Nick O'Leary	5e128f89f6	Ensure strategy login button uses relative URL ... Fixes #1481	2017-12-04 21:13:07 +00:00
Henri Bouvier	140ea683a6	[fix] github oauth strategy when Root is not / (#1430)	2017-10-10 21:24:44 +01:00
Kazuhito Yokoi	d7d13c12fe	Modify messages to refer to language files (#1361)	2017-08-07 10:00:28 +01:00
Nick O'Leary	78076122ba	Remove console.log	2017-06-30 10:39:28 +01:00
Nick O'Leary	72da7e6c54	Rename oauth auth scheme to strategy as it works for openid	2017-04-21 21:54:48 +01:00
Nick O'Leary	fb05960d79	Allow oauth schemes provide a custom verify function	2017-04-21 21:17:18 +01:00
Nick O'Leary	5cb37148c6	Add editorTheme.logout.redirect to allow redirect on logout ... Closes #1213	2017-04-12 21:41:16 +01:00
Nick O'Leary	c54cf26848	Add support for oauth adminAuth configs	2017-04-12 10:09:03 +01:00
Nick O'Leary	0a96259ddf	Update copyright header for JS Foundation	2017-01-11 15:24:33 +00:00
Nick O'Leary	b5d3f505e3	Defer loading of token sessions until they are accessed ... Fixes #895	2016-05-31 14:39:50 +01:00
Nick O'Leary	44693dd23a	Enable finer grained permissions in adminAuth	2016-04-10 15:30:13 +01:00
Nick O'Leary	f43738446e	WIP: separate runtime and api components	2016-01-06 17:01:11 +00:00
Nick O'Leary	d668d43a0a	Move to express 4.x	2015-10-02 21:27:31 +01:00
Nick O'Leary	9fb81b2814	Permit login with blank scope ... Required for the editor, which doesn't know the appropriate scope for the user logging in. The user will adopt their default permission scope once logged in.	2015-07-15 10:12:45 +01:00
Nick O'Leary	7de0216976	Add audit log entries on API calls ... Closes #627	2015-05-14 14:22:56 +01:00
Nick O'Leary	6ff540ed08	Customise login image	2015-04-13 10:37:30 +01:00
Nick O'Leary	2a8a885271	Standardise API error response format	2015-03-30 14:16:04 +01:00
Nick O'Leary	7adefd6ee0	Add access_token expiry	2015-03-30 14:14:32 +01:00
Nick O'Leary	f967a5ecdc	Fix auth on comms link and for anon user ... The move to honour scope level of token broke the comms link checking as well as the permissions checking for anon users.	2015-03-29 22:27:07 +01:00
Nick O'Leary	c8d6dc2531	Auth permission should honour the token scope	2015-03-29 21:59:48 +01:00
Nick O'Leary	2a57d0b6d0	auth/login should return empty object when insecure	2015-03-25 20:33:29 +00:00
dceejay	a9789697e7	add bcrypt as optional dependency to speed up Pi, ... but not force compile on Windows. Fix to close Issue #585	2015-03-19 11:36:48 +00:00
Nick O'Leary	be61cf6a88	Add node.error handling to core nodes	2015-03-16 13:58:01 +00:00
Nick O'Leary	51e891ff88	Move sessionStorageModule into main storageModule ... Fixes #586 - add get/saveSessions to main storage module - handle storage modules without those functions - store .session file in userDir	2015-03-13 23:37:59 +00:00
Nick O'Leary	0f3cc3196c	Log-in window incorrect ... fixes #583	2015-03-09 20:02:13 +00:00
dceejay	acc0e0875b	few more tests for permissions and strategies ... reset log flags at end of log test	2015-03-07 13:22:21 +00:00
Nick O'Leary	c31ffb98b0	Tie auth middleware to needsPermission api	2015-02-05 23:43:35 +00:00
Nick O'Leary	26c42e500f	Allow user.default to be an api function	2015-02-05 13:01:00 +00:00
Nick O'Leary	53a515176b	Remove unused token expiry code	2015-02-05 13:01:00 +00:00
Nick O'Leary	fbf7ee50eb	Increase unit test coverage of auth code	2015-02-05 13:00:56 +00:00
Nick O'Leary	b2aae93fa6	Hide user profile menu	2015-02-05 13:00:55 +00:00
Nick O'Leary	a494954275	Add permissions and user menu	2015-02-05 13:00:55 +00:00
Nick O'Leary	f5d7903ecb	Stop lost connection message bouncing when not authed	2015-02-05 13:00:55 +00:00
Nick O'Leary	9bbe0799bd	Allow adminAuth setting to provide functions	2015-02-05 13:00:55 +00:00
Nick O'Leary	f3eb85c449	Move over to settings.adminAuth	2015-02-05 13:00:54 +00:00
Nick O'Leary	982997c3df	Add auth awareness to ui	2015-02-05 13:00:49 +00:00
Nick O'Leary	28823802ea	Prompt login if auth enabled	2015-02-05 13:00:16 +00:00
Nick O'Leary	2128b57ab2	Add oauth grant	2015-02-05 13:00:07 +00:00