Konstantin Haase
|
1b3bbca5a5
|
have auth not freak out on GH error
|
2015-03-12 17:54:36 +01:00 |
|
Sven Fuchs
|
7643a253fa
|
notes about failing spec in auth handshake
|
2014-10-07 16:48:21 +02:00 |
|
Sven Fuchs
|
f383a2e1b3
|
allow disabling the 3rd party cookies check
|
2014-10-07 16:47:10 +02:00 |
|
Sven Fuchs
|
f3a2cc2f40
|
use Travis.config.github.ssl when fetching an oauth access token
|
2014-10-07 16:46:31 +02:00 |
|
Sven Fuchs
|
8cfbe642a0
|
to_s target_origin config to be safe
|
2014-10-07 16:46:30 +02:00 |
|
Sven Fuchs
|
9a4b2b8e99
|
allow whitelisting target_origin in Travis.config
|
2014-10-07 16:45:47 +02:00 |
|
Piotr Sarnacki
|
f91c54725e
|
Add a feature flip for education field update
|
2014-09-02 10:44:31 +02:00 |
|
Piotr Sarnacki
|
9b07efa5e9
|
Check for user education status on signin/signup
|
2014-08-28 17:18:07 +02:00 |
|
Thais Camilo and Konstantin Haase
|
6e12bed1b5
|
store oauth state in cookie to verify it corresponds to current client
|
2014-04-08 15:17:23 -04:00 |
|
Puneeth Chaganti
|
fdc4e47bd1
|
Fix entry point url for /auth/github in docs
|
2014-02-27 09:45:04 +05:30 |
|
Konstantin Haase
|
a7df899adc
|
be more forgiving with scopes for /auth/github
|
2014-02-26 19:28:20 +01:00 |
|
Piotr Sarnacki
|
87674f52bb
|
Redirect to web client on insufficient oauth scopes
|
2013-10-29 14:27:21 +01:00 |
|
Henrik Hodne
|
c64a006f1d
|
Handle race condition with creating users more nicely
|
2013-10-26 08:33:57 -05:00 |
|
Henrik Hodne
|
8f4dd0d2df
|
Respond with 422 if /auth/github does not get a token
Fix #77
|
2013-10-23 19:35:03 -05:00 |
|
Piotr Sarnacki
|
207a6e3e04
|
Explicitly use self when using info in Authorization
|
2013-07-27 01:42:14 +02:00 |
|
Piotr Sarnacki
|
3508f25bdf
|
Nullify logins and rename repos owner when updating/creating user
|
2013-07-10 01:38:10 +02:00 |
|
Henrik Hodne
|
277f0c2f72
|
Whitelist travis-lite for authentication
|
2013-06-04 21:57:09 +02:00 |
|
Konstantin Haase
|
6b2a1a0da8
|
do not use client credentials for /auth/github
|
2013-04-24 16:47:52 +02:00 |
|
Konstantin Haase
|
cc2a1cd50e
|
do not require user scope for /auth/github
|
2013-01-11 17:48:30 +01:00 |
|
Konstantin Haase
|
3d6defe3b1
|
do not store token from /auth/github
|
2013-01-11 16:49:08 +01:00 |
|
Konstantin Haase
|
ada6ee0f2c
|
fix scope check
|
2013-01-11 16:20:53 +01:00 |
|
Konstantin Haase
|
e7be49dcb1
|
fix the payload
|
2012-12-17 20:22:51 +01:00 |
|
Konstantin Haase
|
f878eee987
|
fix logging
|
2012-12-17 20:06:45 +01:00 |
|
Konstantin Haase
|
b3b5476076
|
first think, then commit
|
2012-12-17 19:26:58 +01:00 |
|
Konstantin Haase
|
9a1988d586
|
fix template
|
2012-12-17 19:22:33 +01:00 |
|
Konstantin Haase
|
f5fdcc41c6
|
fix token logic
|
2012-12-17 15:35:35 +01:00 |
|
Konstantin Haase
|
8c8f031259
|
have travis token added to user payload on the server
|
2012-12-17 15:13:38 +01:00 |
|
Sven Fuchs
|
c44445d8e2
|
use the api serializer to serialize a user record
|
2012-12-17 01:40:16 +01:00 |
|
Konstantin Haase
|
b005047d95
|
rename token parameter to github_token for /auth/github
|
2012-12-12 18:30:55 +01:00 |
|
Konstantin Haase
|
44d6c02591
|
actually check if github sent a token
|
2012-12-10 15:49:37 +01:00 |
|
Konstantin Haase
|
3d8c9ed914
|
use localStorage after handshake
|
2012-12-10 14:03:31 +01:00 |
|
Piotr Sarnacki
|
88363423f4
|
Fix whitelist auth check for localhost
|
2012-12-09 23:46:18 +01:00 |
|
Konstantin Haase
|
83e42adc65
|
that did not work
|
2012-12-06 16:55:58 +01:00 |
|
Konstantin Haase
|
2250d1ba5c
|
only send user payload
|
2012-12-06 16:51:33 +01:00 |
|
Konstantin Haase
|
981a32f877
|
fix setTimeout
|
2012-12-06 16:24:37 +01:00 |
|
Konstantin Haase
|
24ea1ca7c0
|
cheap escape
|
2012-12-06 16:05:36 +01:00 |
|
Konstantin Haase
|
7b4fe5dab3
|
no inspect
|
2012-12-06 15:52:49 +01:00 |
|
Konstantin Haase
|
af1aeb8147
|
set action and method
|
2012-12-06 15:40:29 +01:00 |
|
Konstantin Haase
|
afad81f927
|
Addressable::URI.parse might return nil
|
2012-12-06 15:34:13 +01:00 |
|
Konstantin Haase
|
ee1f9d899d
|
set content type
|
2012-12-06 15:24:46 +01:00 |
|
Konstantin Haase
|
cd9d84783d
|
fix regex
|
2012-12-06 15:20:23 +01:00 |
|
Konstantin Haase
|
3b84b83699
|
post data for targets we know
|
2012-12-06 15:08:27 +01:00 |
|
Konstantin Haase
|
497eebab94
|
simplify popup check
|
2012-12-05 15:10:28 +01:00 |
|
Konstantin Haase
|
811aa47098
|
rewrite post message login
|
2012-12-05 14:09:56 +01:00 |
|
Konstantin Haase
|
d3ed96f165
|
trigger redirect
|
2012-12-04 14:39:50 +01:00 |
|
Henrik Hodne
|
6f534d388e
|
Note endpoints that are not yet implemented
|
2012-11-28 18:10:55 -06:00 |
|
Konstantin Haase
|
31da89380a
|
implement auth timeout
|
2012-11-18 21:10:49 +01:00 |
|
Konstantin Haase
|
448501be3a
|
add logging
|
2012-11-18 19:53:05 +01:00 |
|
Piotr Sarnacki
|
a787f32e52
|
Use document.createElement('iframe') instad of document.write
|
2012-11-18 14:47:56 +01:00 |
|
Piotr Sarnacki
|
07d965307f
|
Remove actions for cookie check, we don't use them anymore
|
2012-11-18 14:47:13 +01:00 |
|