 Mikael Nordfeldth
|
0a2c51510c
FormAction wants getInstructions to be protected
|
9 years ago |
|
Mikael Nordfeldth
|
1ea876296d
A bunch of FormAction and ManagedAction synchronization
|
9 years ago |
|
Mikael Nordfeldth
|
d6423bbbc8
Sensitive-test _is_ done in index.php
|
9 years ago |
|
Mikael Nordfeldth
|
8dafce34c3
LoginAction somewhat converted to FormAction
|
10 years ago |
 Evan Prodromou
|
642901f4ae
No such path 'index', so redirect to home timeline
|
12 years ago |
|
Evan Prodromou
|
d594c83a5a
Merge commit 'refs/merge-requests/159' of git://gitorious.org/statusnet/mainline into merge-requests/159
|
12 years ago |
 Siebrand Mazeland
|
d906ee1bcb
Update translator documentation and L10n.
|
13 years ago |
|
Evan Prodromou
|
90eb09624c
let users login with email address
|
13 years ago |
 Sam Nicholls
|
4bf5158d43
Modified actions/login.php to redirect logged in users who hit login/ to
|
13 years ago |
|
Evan Prodromou
|
9b4533058c
no profileblock on login actions
|
13 years ago |
|
Evan Prodromou
|
a4b3edaf40
Login actions don't show the notice form
|
13 years ago |
|
Siebrand Mazeland
|
b37e12ed34
* translator documntation updated
|
13 years ago |
 Zach Copley
|
b7d0746694
Merge branch '0.9.x' into 1.0.x
|
13 years ago |
|
Siebrand Mazeland
|
a159352b65
* improve L10n consistency for English. For example proper punctuation for all button and label titles.
|
13 years ago |
 Craig Andrews
|
90c87553ee
Redirect to https when making an http request for a sensitive action
|
13 years ago |
|
Craig Andrews
|
3dd734b2c3
Remove CSRF protection from username/password login and from OpenID login.
|
13 years ago |
 Brion Vibber
|
14a76926a2
Redirect non-SSL hits to login & register actions to SSL if 'always' or 'sometimes' SSL modes are kicked in.
|
14 years ago |
|
Brion Vibber
|
e547a2f54c
Fix ticket #2289: registration links were showing in top nav bar, login page message when site set to invite-only or closed registration, when the 'register' action can't be used.
|
14 years ago |
|
Evan Prodromou
|
5ec25a9691
inject session before redirect for login
|
14 years ago |
|
Evan Prodromou
|
54d532e12f
remove redirect to OTP on login from login, register
|
14 years ago |
|
Evan Prodromou
|
8c6ec0b59e
fix check for ssl diff in login
|
14 years ago |
|
Evan Prodromou
|
304f3b4f18
correctly check for ssl enabled
|
14 years ago |
|
Evan Prodromou
|
ed5828f30e
Redirect to a one-time-password when ssl and regular server are different
|
14 years ago |
|
Craig Andrews
|
b36ec6da87
Fixed incorrect disabling of login_token.
|
14 years ago |
|
Craig Andrews
|
3b14b61fa7
Add a configuration option to disable the login command.
|
14 years ago |
|
Craig Andrews
|
75cac0fd6b
Added 'login' command that gives you a link that can be used to login to the website
|
14 years ago |
|
Evan Prodromou
|
224d82793c
Revert "Added 'login' command that gives you a link that can be used to login to the website"
|
14 years ago |
 Eric Helgeson
|
26a86402cd
Use the $user object nickname, as login name doesnt have to == nickname anymore with plugins such as ldap/etc
|
14 years ago |
|
Craig Andrews
|
745ea277d8
Should not canonicalize nickname before calling common_check_user
|
14 years ago |
|
Craig Andrews
|
3bff3b2b32
Improve the not authorized error message
|
14 years ago |
