38 Commits

Author	SHA1	Message	Date
Hideki Nakamura	716aa74004	Fix code not to change settings.adminAuth	2018-09-17 10:18:36 -07:00
Hideki Nakamura	cb0e631b85	Update the implementation according to the Design notes	2018-09-11 09:44:18 -07:00
Hideki Nakamura	b14a0e0dde	Merge the logic for api access token to tokens.js so as not to change strategies.js	2018-07-10 17:25:01 -07:00
Hideki Nakamura	50e2dcbcd5	Add a processing to check specified API Access Tokens	2018-07-05 18:58:02 -07:00
Nick O'Leary	e250a91f09	Merge branch '0.18' into projects	2018-01-24 23:06:27 +00:00
Nick O'Leary	3cb5cbd8d5	Allow adminAuth.user to be a Function ... Fixes #1461	2018-01-23 23:08:11 +00:00
Nick O'Leary	25f4a018d9	Merge branch '0.18' into projects	2018-01-16 11:21:54 +00:00
Rocco Musolino	2c4d5fa38d	add express-session memorystore without leaks (#1435) ... * add express-session memorystore without leaks * Bump memorystore to v1.6.0	2018-01-11 22:51:05 +00:00
Nick O'Leary	5e128f89f6	Ensure strategy login button uses relative URL ... Fixes #1481	2017-12-04 21:13:07 +00:00
Henri Bouvier	140ea683a6	[fix] github oauth strategy when Root is not / (#1430)	2017-10-10 21:24:44 +01:00
Nick O'Leary	41af5187aa	Reorganise red/api layout to better componentise	2017-08-22 22:26:29 +01:00
Kazuhito Yokoi	d7d13c12fe	Modify messages to refer to language files (#1361)	2017-08-07 10:00:28 +01:00
Nick O'Leary	78076122ba	Remove console.log	2017-06-30 10:39:28 +01:00
Nick O'Leary	72da7e6c54	Rename oauth auth scheme to strategy as it works for openid	2017-04-21 21:54:48 +01:00
Nick O'Leary	fb05960d79	Allow oauth schemes provide a custom verify function	2017-04-21 21:17:18 +01:00
Nick O'Leary	5cb37148c6	Add editorTheme.logout.redirect to allow redirect on logout ... Closes #1213	2017-04-12 21:41:16 +01:00
Nick O'Leary	c54cf26848	Add support for oauth adminAuth configs	2017-04-12 10:09:03 +01:00
Nick O'Leary	0a96259ddf	Update copyright header for JS Foundation	2017-01-11 15:24:33 +00:00
Nick O'Leary	44693dd23a	Enable finer grained permissions in adminAuth	2016-04-10 15:30:13 +01:00
Nick O'Leary	f43738446e	WIP: separate runtime and api components	2016-01-06 17:01:11 +00:00
Nick O'Leary	d668d43a0a	Move to express 4.x	2015-10-02 21:27:31 +01:00
Nick O'Leary	7de0216976	Add audit log entries on API calls ... Closes #627	2015-05-14 14:22:56 +01:00
Nick O'Leary	6ff540ed08	Customise login image	2015-04-13 10:37:30 +01:00
Nick O'Leary	2a8a885271	Standardise API error response format	2015-03-30 14:16:04 +01:00
Nick O'Leary	7adefd6ee0	Add access_token expiry	2015-03-30 14:14:32 +01:00
Nick O'Leary	f967a5ecdc	Fix auth on comms link and for anon user ... The move to honour scope level of token broke the comms link checking as well as the permissions checking for anon users.	2015-03-29 22:27:07 +01:00
Nick O'Leary	c8d6dc2531	Auth permission should honour the token scope	2015-03-29 21:59:48 +01:00
Nick O'Leary	2a57d0b6d0	auth/login should return empty object when insecure	2015-03-25 20:33:29 +00:00
Nick O'Leary	be61cf6a88	Add node.error handling to core nodes	2015-03-16 13:58:01 +00:00
Nick O'Leary	51e891ff88	Move sessionStorageModule into main storageModule ... Fixes #586 - add get/saveSessions to main storage module - handle storage modules without those functions - store .session file in userDir	2015-03-13 23:37:59 +00:00
Nick O'Leary	c31ffb98b0	Tie auth middleware to needsPermission api	2015-02-05 23:43:35 +00:00
Nick O'Leary	fbf7ee50eb	Increase unit test coverage of auth code	2015-02-05 13:00:56 +00:00
Nick O'Leary	b2aae93fa6	Hide user profile menu	2015-02-05 13:00:55 +00:00
Nick O'Leary	a494954275	Add permissions and user menu	2015-02-05 13:00:55 +00:00
Nick O'Leary	f3eb85c449	Move over to settings.adminAuth	2015-02-05 13:00:54 +00:00
Nick O'Leary	982997c3df	Add auth awareness to ui	2015-02-05 13:00:49 +00:00
Nick O'Leary	28823802ea	Prompt login if auth enabled	2015-02-05 13:00:16 +00:00
Nick O'Leary	2128b57ab2	Add oauth grant	2015-02-05 13:00:07 +00:00