Pēteris Caune
725be65bdd
Add the PROMETHEUS_ENABLED setting
4 years ago
Shea Polansky
54a95a0ee2
Add http header auth ( #457 )
* Add HTTP header authentiation backend/middleware
* Add docs for remote header auth
* Improve docs on external auth
* Add warning for unknown REMOTE_USER_HEADER_TYPE
* Move active check for header auth to middleware
Add extra header type sanity check to the backend
* Add test cases for remote header login
* Improve header-based authentication
- remove the 'ID' mode
- add CustomHeaderBackend to AUTHENTICATION_BACKENDS conditionally
- rewrite CustomHeaderBackend and CustomHeaderMiddleware to
use less inherited code
- add more test cases
Co-authored-by: Pēteris Caune <[email protected] >
4 years ago
Pēteris Caune
0b4251bdee
Add logic to handle exceptions thrown by the fido2 library
4 years ago
Pēteris Caune
3cfc31610a
Add extra security checks in the login_webauthn view
4 years ago
Pēteris Caune
8dbf9e02af
Fix capitalization, Webauthn -> WebAuthn
4 years ago
Pēteris Caune
7124383a53
Add checks for RP_ID, add a 2FA section in README
4 years ago
Pēteris Caune
9401bc3987
Update the "Close Account" function to use confirmation codes
4 years ago
Pēteris Caune
fb79948759
Update the "Change Email" function to use confirmation codes
4 years ago
Pēteris Caune
ed6b15bfa9
Update the "Set Password" function to use confirmation codes
4 years ago
Pēteris Caune
adb7702f39
Rename login_tfa to login_webauthn
4 years ago
Pēteris Caune
7639f0dd69
Add test cases for the login_tfa view
4 years ago
Pēteris Caune
d0f327b213
Add Base64Field field (base64-encoded binary data)
4 years ago
Pēteris Caune
839c309cf7
Refactor for testability, add more test cases
4 years ago
Pēteris Caune
155a1f132b
Simplify super() calls in tests
4 years ago
Pēteris Caune
155226d82a
Add tests for sudo mode
4 years ago
Pēteris Caune
0a85c5ed12
In Account Settings > My Projects, indicate read-only memberships as read-only
4 years ago
Pēteris Caune
d73de68f70
Specify the read-write/read-only flag when inviting a team member.
4 years ago
Pēteris Caune
adb004b333
Read-only users cannot change project settings.
4 years ago
Pēteris Caune
2346ac3e80
Bugfix: don't allow duplicate team memberships
4 years ago
Pēteris Caune
c7af52637a
Less verbose output in the `senddeletionnotices` command
4 years ago
Pēteris Caune
697cb19bde
Handle excessively long email addresses in the team member invite form.
4 years ago
Pēteris Caune
ffafc16fe5
Handle excessively long email addresses in the signup form.
4 years ago
Pēteris Caune
f131123e0e
In the test_it_sends_link testcase, explicitly set the USE_PAYMENTS setting. This way tests work regardless of what's in the environment variable or local_settings.py file.
4 years ago
Ronald Ip
c476f042ba
Fix logic bug in test_signup ( #408 )
Resolves #408 by fixing the test_signup logic bug introduced in 8c13457
.
4 years ago
Pēteris Caune
8c13457037
Use separate counters for SMS and phone calls.
4 years ago
Pēteris Caune
ca715dd8d4
Check membership when initiating project's transfer. Use transaction.atomic() when completing the transfer.
5 years ago
Pēteris Caune
57da17b8e2
Send an "Ownership Transfer Request" email notification.
5 years ago
Pēteris Caune
3bf1ad9746
Fix invite suggestions.
5 years ago
Pēteris Caune
f7acaa57af
Adding tests.
5 years ago
Pēteris Caune
4bcfba728e
Use unittest.mock
5 years ago
Pēteris Caune
0c9c453ea0
Profile.current_project not used any more, remove last remaining references. cc: #336
5 years ago
Pēteris Caune
157711bc95
Reduce usage of Profile.current_project cc: #336
5 years ago
Pēteris Caune
bb808852d9
Reduce usage of request.project cc: #336
5 years ago
Pēteris Caune
acce0808ce
Project code in URL for the "Add Slack" page. cc: #336
5 years ago
Pēteris Caune
0ff4bd01e0
Improved UI to invite users from account's other projects. Fixes #258 .
The team size limit is applied to the number of distinct users across all projects. Fixes #332 .
5 years ago
Pēteris Caune
15b9611c5a
Show a warning in project's top navigation if the project has no configured integrations. Fixes #327
5 years ago
Pēteris Caune
f51a0a257e
Don't delete customer data in braintree when closing account.
Need customer data to stay in braintree until the end of each month for tax reports.
5 years ago
Pēteris Caune
4ee2646539
Show a red "!" in project's top navigation if any integration is not working
5 years ago
Pēteris Caune
0d2c6217d3
Auto-submit the unsubscribe confirmation form only if signature is more than 5 minutes old. Idea from https://stackoverflow.com/questions/59281750/strategies-to-prevent-email-scanners-from-activating-unsubscribe-links/59381066#59381066
5 years ago
Pēteris Caune
d6be955fa7
Silence stdout output from management commands during tests
5 years ago
Pēteris Caune
15ba415298
`senddeletionnotices` command skips profiles with recent last_active_date
5 years ago
Pēteris Caune
2a8e7ee766
Django 3.0
5 years ago
Pēteris Caune
8d81d27af3
Unsubscribe links serve a form, and require HTTP POST to actually unsubscribe
5 years ago
Pēteris Caune
163b020116
Signup form sets the "auto-login" cookie to avoid an extra click during first login
5 years ago
Pēteris Caune
dfee69584b
Don't show the "Sign Up" link in the login page if registration is closed. Fixes #280
5 years ago
Pēteris Caune
2489f86b38
Delete customer from Braintree when closing account.
5 years ago
Pēteris Caune
cdfc9840a7
Source formatted with Black
6 years ago
Pēteris Caune
b528b23996
Fix badges for tags containing special characters. Fixes #240 , #237
6 years ago
Pēteris Caune
23b197526c
Password strength meter and length check in the "Set Password" form
6 years ago
Pēteris Caune
afaa8767cd
Rate limit login-with-password attempts.
6 years ago