Konstantin Haase
|
cd9d84783d
|
fix regex
|
2012-12-06 15:20:23 +01:00 |
|
Konstantin Haase
|
3b84b83699
|
post data for targets we know
|
2012-12-06 15:08:27 +01:00 |
|
Konstantin Haase
|
497eebab94
|
simplify popup check
|
2012-12-05 15:10:28 +01:00 |
|
Konstantin Haase
|
811aa47098
|
rewrite post message login
|
2012-12-05 14:09:56 +01:00 |
|
Konstantin Haase
|
d3ed96f165
|
trigger redirect
|
2012-12-04 14:39:50 +01:00 |
|
Henrik Hodne
|
6f534d388e
|
Note endpoints that are not yet implemented
|
2012-11-28 18:10:55 -06:00 |
|
Konstantin Haase
|
31da89380a
|
implement auth timeout
|
2012-11-18 21:10:49 +01:00 |
|
Konstantin Haase
|
448501be3a
|
add logging
|
2012-11-18 19:53:05 +01:00 |
|
Piotr Sarnacki
|
a787f32e52
|
Use document.createElement('iframe') instad of document.write
|
2012-11-18 14:47:56 +01:00 |
|
Piotr Sarnacki
|
07d965307f
|
Remove actions for cookie check, we don't use them anymore
|
2012-11-18 14:47:13 +01:00 |
|
Piotr Sarnacki
|
3cb9dd89cd
|
Use third-party-cookies.herokuapp.com for cookie check
|
2012-11-18 14:39:34 +01:00 |
|
Piotr Sarnacki
|
33dced826b
|
Popup should be open only if thirdPartyCookies are disabled
|
2012-11-18 13:32:36 +01:00 |
|
Konstantin Haase
|
bbbe0e0c67
|
fix typo
|
2012-11-18 13:18:20 +01:00 |
|
Konstantin Haase
|
a7c0b84c35
|
fix urls
|
2012-11-18 13:08:24 +01:00 |
|
Konstantin Haase
|
b5760abd2b
|
fix template
|
2012-11-18 12:59:33 +01:00 |
|
Konstantin Haase
|
46c55bc400
|
sinatrafy
|
2012-11-18 12:06:57 +01:00 |
|
Piotr Sarnacki
|
707b2c68e8
|
Check if third party cookies are enabled to choose login method
|
2012-11-17 21:12:02 +01:00 |
|
Konstantin Haase
|
2b3579e6dd
|
first stab at a popup flow
|
2012-11-17 17:55:21 +01:00 |
|
Konstantin Haase
|
eabc178dec
|
allow post message login from a pop-up
|
2012-11-17 14:59:21 +01:00 |
|
Konstantin Haase
|
946e734d98
|
need to check scopes before storing token
|
2012-11-15 16:59:17 +01:00 |
|
Piotr Sarnacki
|
f0f471f1c6
|
Fix updating github oauth token after signing in
|
2012-11-12 17:15:28 +01:00 |
|
Piotr Sarnacki
|
662697953e
|
Pass also travis token in /auth/post_message
|
2012-11-11 20:39:59 +01:00 |
|
Konstantin Haase
|
6c911407f0
|
make allowed_targets an option
|
2012-10-29 18:51:27 +01:00 |
|
Sven Fuchs
|
c2e06293a0
|
fix target_ok? regexp
|
2012-10-21 18:21:15 +02:00 |
|
Konstantin Haase
|
720cbef577
|
allow underscore and dash in subdomains
|
2012-10-18 23:49:15 +02:00 |
|
Sven Fuchs
|
6e343099b4
|
set the scope for /post_message to :public (@rkh: confim?)
|
2012-10-13 03:31:08 +02:00 |
|
Sven Fuchs
|
ac8dd768ec
|
fix sign in
|
2012-10-03 02:44:07 +02:00 |
|
Konstantin Haase
|
6d1b6c0a82
|
Merge branch 'master' of github.com:travis-ci/travis-api
|
2012-09-27 22:28:39 +02:00 |
|
Sven Fuchs
|
fbd89ceeb0
|
fix accounts and hooks endpoints
|
2012-09-27 17:14:50 +02:00 |
|
Sven Fuchs
|
f2e8ccafc1
|
remove /profile, add /user and /accounts
|
2012-09-27 16:19:21 +02:00 |
|
Konstantin Haase
|
4808981f4f
|
allow using an oauth proxy
|
2012-09-27 15:27:26 +02:00 |
|
Konstantin Haase
|
07038cd7a5
|
better origin check
|
2012-09-22 17:39:42 +02:00 |
|
Konstantin Haase
|
742583e8e9
|
make sure we don't leak the github oauth code via a referrer
|
2012-09-19 16:29:11 +02:00 |
|
Konstantin Haase
|
3ddb2da33b
|
better docs for authorization
|
2012-09-19 15:30:46 +02:00 |
|
Konstantin Haase
|
a67b8bf1de
|
create use if missing
|
2012-09-18 23:33:35 +02:00 |
|
Konstantin Haase
|
01e19e2888
|
use id rather than login for user
|
2012-09-18 22:21:38 +02:00 |
|
Sven Fuchs
|
d7095ea030
|
Merge branch 'sf-use-services' of github.com:travis-ci/travis-api into sf-use-services
Conflicts:
lib/travis/api/app/endpoint/authorization.rb
|
2012-09-18 21:05:59 +02:00 |
|
Sven Fuchs
|
e8ab020af0
|
use Api for generating the user payload
|
2012-09-18 21:04:54 +02:00 |
|
Konstantin Haase
|
1a7a9daf46
|
add endpoint for initial authorization
|
2012-09-18 20:37:52 +02:00 |
|
Konstantin Haase
|
3a64c87a7f
|
send user data with post message
|
2012-09-18 19:15:12 +02:00 |
|
Konstantin Haase
|
759ad4d113
|
send messages after oauth handshake
|
2012-09-18 18:27:26 +02:00 |
|
Konstantin Haase
|
e9523dc21d
|
use state to avoid handshake spoofing
|
2012-09-18 16:36:06 +02:00 |
|
Konstantin Haase
|
6606af4b43
|
start working on post_message auth flow
Conflicts:
Gemfile.lock
|
2012-09-18 00:04:50 +02:00 |
|
Konstantin Haase
|
f05ea7198b
|
fully implement access tokens
|
2012-08-15 00:52:22 +02:00 |
|
Konstantin Haase
|
afccec1037
|
use AccessToken
|
2012-07-28 19:48:53 +02:00 |
|
Konstantin Haase
|
29e387140a
|
first stab at authorization
|
2012-07-28 19:47:45 +02:00 |
|