1
0
mirror of https://github.com/volatiletech/authboss.git synced 2025-01-26 05:27:33 +02:00

50 Commits

Author SHA1 Message Date
Aaron L
b7cec028b9 Use io.ReadFull to read from crypto/rand
There have been bugs filed in other libraries where rand.Read()
simply returns all 0s, instead use io.ReadFull to ensure that we get
the amount of bytes we want.

- Use io.ReadFull(rand.Reader, ...) instead of rand.Read() for getting
  randomness from crypto/rand.
2018-07-17 10:10:07 -07:00
Aaron L
ae5a471cf2 Don't use magic numbers 2018-05-18 06:49:21 -07:00
Aaron L
852508259c Add split tokens for confirm and recover 2018-05-16 11:51:55 -07:00
Aaron L
bf1eb39403 Port FromName fix from master
Originally contributed by Max Howald <maxhowald@gmail.com>
2018-05-14 11:47:34 -07:00
Aaron L
06630eda7b Make sure recover allows form validation
This allows validation of password complexity or confirm_password form
fields.
2018-05-07 12:34:22 -07:00
Aaron L
d9b0dfd51c Change register and recover to use error maps 2018-04-30 18:25:30 -07:00
Aaron L
0eff53792f Fully re-implement recover
- Add back the feature to log in after password recovery
- Add new storer functionality to mocks
- Add RecoveringServerStorer
- Add RecoverableUser
- Add RecoverStartValuer, RecoverMiddleValuer, RecoverEndValuer
- Change storers to differentiate between tokens (recover vs confirm)
- Change BCryptCost to be a generic module configuration (doesn't belong
  to register)
2018-03-05 17:47:11 -08:00
Aaron L
ad5230a303 Bring back events
- Rename callbacks -> events
- Regenerate stringers.go with later version of stringer
2018-02-01 16:31:08 -08:00
Aaron L
2b5c85ee16 Import path fixes 2017-07-30 19:42:05 -07:00
Aaron L
f65d9f6bb6 Fix errors package
- Fix many compilation errors
2017-02-21 15:04:30 -08:00
Aaron L
0c3d6d26ca Remove gopkg.in 2016-12-19 22:47:12 -08:00
Ryan Lester
96c55ccaaa no DisableGoroutines (just check for -Maker); no ModuleNames; test fix 2016-05-09 13:20:10 -04:00
Ryan Lester
48f0e8a75a Merge remote-tracking branch 'upstream/master' 2016-05-09 12:14:18 -04:00
Aaron L
e76838cc1e Fix go vet errors 2016-05-08 12:37:02 -07:00
Ryan Lester
588c21260c final App-Engine-related fixes 2016-05-07 02:12:20 -04:00
Aaron L
be041cbae6 remember: Context+Request separation ripple
- Re-add the age-old "Values" from the Context. This was originally
  there for exactly the documented purpose. However the Context holding
  the request form values negated it's use. It's back because of this
  new separation.
- Make the auth success path set the authboss.CookieRemember value in
  the context before calling it's callback.
2015-08-02 14:02:14 -07:00
Aaron L
b8a8d772f7 recover: Context+Request separation ripple
- Modify the request mock to create query strings in the event that
  we're not using a POST request.
2015-08-02 12:54:53 -07:00
Kris Runzer
61a344b75a Added missing line. Sublime text save ftw. 2015-04-21 08:14:53 -07:00
Kris Runzer
f928282dec Remove password repopulation on recover complete. 2015-04-21 08:12:41 -07:00
Aaron
c98ef93e06 Fix modules after refactor. 2015-04-01 13:08:08 -07:00
Aaron
f12f10fa43 Stop reliance on global scope.
- This change was necessary because multi-tenancy sites could not use
  authboss properly.
2015-03-31 12:34:03 -07:00
Kris Runzer
5bdcddd9da Rename internal/render to internal/response 2015-03-28 09:08:05 -07:00
Kris Runzer
db1eb3a9a8 Add redir override. All redirects now occur through render.Redirect 2015-03-28 08:53:32 -07:00
Aaron L
99d0af8b72 Destroy a list of go lint errors. 2015-03-16 14:42:45 -07:00
Aaron
f93fb38181 Change documentation a little bit, and fix one bug. 2015-03-15 08:06:08 -07:00
Aaron
dccabb0754 Rename HostName to RootURL 2015-03-12 19:20:28 -07:00
Kris Runzer
bb1bae6778 Test recoverComplete handlerFunc 2015-03-07 20:46:37 -08:00
Kris Runzer
e784e79fb5 Fixed recover email urls 2015-03-07 19:45:48 -08:00
Aaron L
aaf9c71f3c Add new PasswordReset event.
- Make remember clear it's tokens on password reset.
- Fix #14
2015-03-05 20:06:44 -08:00
Kris Runzer
7ff35efe54 Split emails to have seperate HTML and Text layouts. 2015-03-03 11:23:49 -08:00
Kris Runzer
57797a703b Proper naming of all templates. Rebuild bindata. 2015-02-26 12:52:45 -08:00
Kris Runzer
60620361c8 Testing WIP 2015-02-26 12:34:05 -08:00
Aaron
fa3cd5ef4f Fix confirm fields. 2015-02-25 23:20:02 -08:00
Aaron
bf0a8b098c Add mountedpath so forms work on mounted paths.
- Refactor naming for config "redirect" variables.
- Removed flash messages from config, Fix #19
2015-02-25 23:05:14 -08:00
Kris Runzer
1ad9351b8c Recover now builds. Start adding tests. 2015-02-25 10:23:18 -08:00
Aaron
c723f46a3e Refactor storers into modules. 2015-02-24 11:04:27 -08:00
Kris Runzer
468113a398 Working auth and recover 2015-02-24 10:12:23 -08:00
Kris Runzer
199d0ec0b3 Rework recover 2015-02-23 16:01:56 -08:00
Kris Runzer
bab1475b72 Change config to be global. Updated most modules and tests. 2015-02-15 20:07:36 -08:00
Kris Runzer
db6738cb23 Split giant Recover files 2015-02-11 13:44:36 -08:00
Kris Runzer
dbf726b1e1 Finish recover module reworking 2015-02-10 23:03:02 -08:00
Kris Runzer
57c9282cbd First part of recover module reworking 2015-02-08 23:12:29 -08:00
Aaron
d86fac49ac Add confirm module beginnings.
- Fix some inconsistencies in expire and lock.
- Add bool type to storer.
2015-02-07 04:27:12 -08:00
Kris Runzer
c52f90b0a9 WIP commit 2015-02-05 10:31:32 -08:00
Kris Runzer
2b043b78fa More work on cleaning up recover
- Add email layouts
2015-02-01 14:17:18 -08:00
Kris Runzer
4b1ce859fb Reworking recover module 2015-01-31 22:51:00 -08:00
Kris Runzer
e660edd428 Safety commit
- Add new validation methods
- Cleaned up interactions with validation
- Add required validation
- Add confirm fields to validation
2015-01-25 23:02:43 -08:00
Kris Runzer
934ddf5531 Move all html to internal packge views 2015-01-18 14:24:20 -08:00
Kris Runzer
339050a3ab Recover emailing WIP 2015-01-16 21:49:44 -08:00
Kris Runzer
59454bf909 Began work on recover module 2015-01-12 22:28:42 -08:00