authserver.git
5 years agoBug 396 - Localize the Auth service (in German); including some fixes to make code...
Robert Kaiser [Fri, 18 Nov 2016 17:08:06 +0000 (18:08 +0100)]
Bug 396 - Localize the Auth service (in German); including some fixes to make code code (better) localizable

5 years agoadd some base work for KaiRo bug 396 - adding L10n to the auth system
Robert Kaiser [Fri, 18 Nov 2016 04:57:28 +0000 (05:57 +0100)]
add some base work for KaiRo bug 396 - adding L10n to the auth system

5 years agonew locations for utilities to include, do not track those in this git repo
Robert Kaiser [Fri, 18 Nov 2016 04:07:57 +0000 (05:07 +0100)]
new locations for utilities to include, do not track those in this git repo

5 years agomove actual application into a subdirectory so we can deliver other things in the...
Robert Kaiser [Fri, 18 Nov 2016 04:01:38 +0000 (05:01 +0100)]
move actual application into a subdirectory so we can deliver other things in the same repository

5 years agoextract domains from redirect URIs, fall back to client ID when that is not present
Robert Kaiser [Wed, 16 Nov 2016 20:55:50 +0000 (21:55 +0100)]
extract domains from redirect URIs, fall back to client ID when that is not present

5 years agoremove remember button until bug 394 can be implemented
Robert Kaiser [Wed, 16 Nov 2016 19:34:05 +0000 (20:34 +0100)]
remove remember button until bug 394 can be implemented

5 years agoKaiRo bug 393 - Create a grouping mechanism for user names so people with multiple...
Robert Kaiser [Wed, 16 Nov 2016 19:29:13 +0000 (20:29 +0100)]
KaiRo bug 393 - Create a grouping mechanism for user names so people with multiple logins can chose; also move some session handling functions into the utilities

5 years agoKaiRo bug 392 - Create an interstitial page to confirm the user to log in
Robert Kaiser [Wed, 16 Nov 2016 03:54:45 +0000 (04:54 +0100)]
KaiRo bug 392 - Create an interstitial page to confirm the user to log in

5 years agoSecond part of KaiRo bug 371 - Make design somewhat more appealing, make it work...
Robert Kaiser [Mon, 14 Nov 2016 21:35:10 +0000 (22:35 +0100)]
Second part of KaiRo bug 371 - Make design somewhat more appealing, make it work decently/responsively on mobile

5 years agoKaiRo bug 371 - Make design somewhat more appealing
Robert Kaiser [Mon, 14 Nov 2016 21:02:18 +0000 (22:02 +0100)]
KaiRo bug 371 - Make design somewhat more appealing

5 years agoadd some links back to the top page so we don't get stuck on subpages
Robert Kaiser [Mon, 14 Nov 2016 21:01:44 +0000 (22:01 +0100)]
add some links back to the top page so we don't get stuck on subpages

5 years agoadd a comment for debugging - we may want to add an insecure local domain name for...
Robert Kaiser [Mon, 14 Nov 2016 21:00:57 +0000 (22:00 +0100)]
add a comment for debugging - we may want to add an insecure local domain name for testing temporarily

5 years agomake the JS compatible with older IE versions, though this is a hack that hardcodes...
Robert Kaiser [Mon, 14 Nov 2016 20:59:56 +0000 (21:59 +0100)]
make the JS compatible with older IE versions, though this is a hack that hardcodes unrelated class names

5 years agoset some security flags recommended by the Mozilla Observatory
Robert Kaiser [Wed, 2 Nov 2016 21:15:06 +0000 (22:15 +0100)]
set some security flags recommended by the Mozilla Observatory

5 years agomake rewrites actually work correctly so that even for JSON we do not have to supple...
Robert Kaiser [Sat, 29 Oct 2016 18:04:19 +0000 (20:04 +0200)]
make rewrites actually work correctly so that even for JSON we do not have to supple the .php ending

5 years agosuppress error as result will be fine
Robert Kaiser [Sat, 29 Oct 2016 17:18:31 +0000 (19:18 +0200)]
suppress error as result will be fine

5 years agocreate an API to retrieve emails and set new clients, add very rudimentary client...
Robert Kaiser [Sat, 29 Oct 2016 16:29:39 +0000 (18:29 +0200)]
create an API to retrieve emails and set new clients, add very rudimentary client management so master clients for the systems can be set, auto-authorize email scope, allow refresh tokens, give them 90 days validity

5 years agoremove the saved redirect when it's being used, always accept email scope
Robert Kaiser [Fri, 28 Oct 2016 18:56:13 +0000 (20:56 +0200)]
remove the saved redirect when it's being used, always accept email scope

5 years agosecure token requests
Robert Kaiser [Fri, 28 Oct 2016 17:12:54 +0000 (19:12 +0200)]
secure token requests

5 years agomake login on authorize actually work and redirect back to the authorize form after...
Robert Kaiser [Fri, 28 Oct 2016 17:08:02 +0000 (19:08 +0200)]
make login on authorize actually work and redirect back to the authorize form after login

5 years agocheck session and login in authorize request
Robert Kaiser [Fri, 28 Oct 2016 15:44:49 +0000 (17:44 +0200)]
check session and login in authorize request

5 years agomove session init into utils, re-fetch session after login
Robert Kaiser [Fri, 28 Oct 2016 15:42:57 +0000 (17:42 +0200)]
move session init into utils, re-fetch session after login

5 years agofirst step in making the authorize target work correctly, move check for secure conne...
Robert Kaiser [Fri, 28 Oct 2016 01:18:07 +0000 (03:18 +0200)]
first step in making the authorize target work correctly, move check for secure connection into utils

5 years agolog failures and some other actions
Robert Kaiser [Thu, 27 Oct 2016 00:54:33 +0000 (02:54 +0200)]
log failures and some other actions

5 years agoactually use the on-disk site-specific nonce to 'pepper' passwords before hashing...
Robert Kaiser [Wed, 26 Oct 2016 23:49:06 +0000 (01:49 +0200)]
actually use the on-disk site-specific nonce to 'pepper' passwords before hashing so that stealing the database won't even reveal weak passwords

5 years agoconvert AuthUtils to a non-static class and instantiate it as an object, support...
Robert Kaiser [Wed, 26 Oct 2016 23:18:24 +0000 (01:18 +0200)]
convert AuthUtils to a non-static class and instantiate it as an object, support site-wide nonces in settings

5 years agomove password functions into utils class
Robert Kaiser [Wed, 26 Oct 2016 22:32:28 +0000 (00:32 +0200)]
move password functions into utils class

5 years agomove helper functions to an abstract class
Robert Kaiser [Wed, 26 Oct 2016 21:28:16 +0000 (23:28 +0200)]
move helper functions to an abstract class

5 years agomake password reset work and verify timecodes
Robert Kaiser [Wed, 26 Oct 2016 20:17:37 +0000 (22:17 +0200)]
make password reset work and verify timecodes

5 years agomake password change work and add a time-based code to our forms (still needs to...
Robert Kaiser [Mon, 24 Oct 2016 20:58:24 +0000 (22:58 +0200)]
make password change work and add a time-based code to our forms (still needs to be verified)

5 years agomake creating users and verifying emails actually work
Robert Kaiser [Mon, 24 Oct 2016 16:29:31 +0000 (18:29 +0200)]
make creating users and verifying emails actually work

5 years agorequire JS, set cookies, make parts of login flow work
Robert Kaiser [Mon, 24 Oct 2016 01:58:00 +0000 (03:58 +0200)]
require JS, set cookies, make parts of login flow work

5 years agosome steps to get an actual authentication going, consolidate includes, put DB config...
Robert Kaiser [Sun, 23 Oct 2016 19:04:55 +0000 (21:04 +0200)]
some steps to get an actual authentication going, consolidate includes, put DB configuration into /etc to not expose password

5 years agoadd example files to auth server
Robert Kaiser [Fri, 30 Sep 2016 14:46:09 +0000 (16:46 +0200)]
add example files to auth server