mdipierro
dce5fbb472
fixed validate maybe
2019-10-20 21:43:01 -07:00
Mirko Galimberti
1dec1b4358
Checks for user availability before accessing the registration key
2019-09-02 13:50:39 +02:00
jvanbraekel
251314ceb8
Only return get_vars after a failing login
...
Since the redirect is a GET action, there is no reason to return post vars from the failing attempt.
2019-07-24 09:43:03 +02:00
Tim Nyborg
99d3d1d465
prevent open redirects with no protocol specified
...
prevent_open_redirect doesn't currently handle a 'next' with a // but no protocol, e.g.: .../user/login?_next=//google.com
2019-05-20 11:27:21 +01:00
mdipierro
4a16a1c377
Fixes #1996 , thanks Paolo
2019-03-15 22:21:11 -07:00
jvanbraekel
b21cfb53f3
Fix redirect url when login failed (invalid login)
...
Hello,
This is broken since 1457e12f70 . 'self.url' does'nt have any get_vars,post_vars, only one parameter called vars. I suggest to pass all variables instead with request.vars that will encompass both get and post vars... Another possibility would be to change the self.url signature but I don't see the purpose of making the distinction between post and get vars in this case.
2019-02-21 15:17:40 +01:00
mdipierro
b3175d092e
Merge pull request #2088 from vinyldarkscratch/python-3
...
Introduce better Python 3 compatibility across all files
2019-02-10 20:09:27 -08:00
mdipierro
d8bdc47542
Merge pull request #2084 from vinyldarkscratch/fix-2083
...
Fix login form clearing after failed login
2019-02-10 20:09:14 -08:00
Vinyl Darkscratch
f434ebec8a
Update Python 3 compatibility
2019-02-09 00:01:11 -08:00
Vinyl Darkscratch
8852df7a7a
Delete password rather than simply clearing it
2019-02-04 09:56:58 -08:00
Vinyl Darkscratch
3269e1a3f5
Fix #2044
2019-01-29 20:39:16 -08:00
Vinyl Darkscratch
1457e12f70
Don't remember password on failed login
2019-01-29 17:30:10 -08:00
Vinyl Darkscratch
603f54fade
Fix login form clearing after failed login
2019-01-29 02:11:18 -08:00
mdipierro
9824ead2e7
Merge pull request #2041 from rif/master
...
fix recaptcha2 for python3
2018-11-01 08:21:11 -07:00
Radu Ioan Fericean
7de0a3b53f
fix recaptcha2 for python3
2018-10-18 16:27:15 +03:00
Ben Hagen
a5d7827fc7
Fix basic_auth with Python 3
...
`base64.b64decode` returns bytes and thus the separator needs to be a bytes-like object.
2018-10-08 15:47:13 +02:00
Leonel Câmara
50692a4fd3
Fixes #726
2018-09-20 18:59:41 +01:00
Mirko Galimberti
09c8b5eced
skip requires on custom userfield
2018-09-07 10:23:07 +02:00
Mirko Galimberti
55a2f4a6b2
Fixes request_reset_password w/ custom userfield
2018-09-06 14:58:03 +02:00
mdipierro
2203e0e49f
Merge pull request #1970 from web2py/jwt_allow_decorator_fix
...
Jwt allow decorator fix
2018-08-05 17:21:17 -07:00
Michele Comitini
6f2be48e25
generate HTTP error code also if jwt token parameter is missing in request
2018-07-26 20:01:38 +02:00
Gautham Pai
39dd86d6fb
Raise an error only if required is True and token is not present
2018-07-24 17:40:15 +05:30
Gautham
bc59d58a3e
Fixing a bug - the allows_jwt method does NOT throw any error if a token is not found at all.
...
This could cause potential security issues as developers decorate their methods with @allows_jwt and then not pass a token and the method allows the call.
Signed-off-by: Gautham <buzypi@gmail.com >
2018-07-24 15:12:20 +05:30
Mirko Galimberti
1aab089205
Fixes login_bare + register_bare w/ custom login_userfield
2018-07-19 17:13:38 +02:00
mdipierro
f0eb120bba
Merge pull request #1904 from n1k9/master
...
Modify dispacher for differente response element name
2018-04-29 19:49:10 -05:00
Nicola Gramola
43e2ed2fc7
Modify dispacher for differente response element name
2018-04-19 08:57:25 +02:00
mdipierro
1e450ed1d6
Merge pull request #1888 from BuhtigithuB/fix/recapchat-v1-deprecated
...
Close #1887 - remove Recaptcha V1
2018-04-18 21:59:13 -05:00
mdipierro
cec14c741a
fixed no-email edit in profile
2018-04-02 23:53:05 -05:00
Richard Vézina
ff44821f05
Close #1887 - remove Recaptcha V1
2018-03-26 16:21:21 -04:00
mdipierro
a679210649
fixed aws email
2018-03-20 09:14:05 -05:00
mdipierro
2752aba471
allow sending raw emails with server='aws'
2018-03-15 17:14:00 -05:00
ilvalle
ad3c69155b
fix few urllib.urlencode, close #1841
2018-02-04 09:58:16 +01:00
Roald Osinga
9bf8ca9c3b
made cas_provider response py3 compatible
2018-01-05 11:49:20 +01:00
mdipierro
4a2a02d1fe
fixed display of computed fields
2017-12-02 12:52:15 -06:00
mdipierro
551c19bcaf
Merge pull request #1761 from josedesoto/issue/update_role_on_update_profile
...
Update groups on edit profile
2017-11-13 21:14:02 -06:00
Leonel Câmara
925f928843
Copy all CRYPT attributes thanks @abastardi
2017-11-08 11:53:29 +00:00
Leonel Câmara
228d3c41b6
Fixes #1800
2017-11-07 23:34:35 +00:00
Jose de Soto
5f4c47729b
Removed a tab and replaced by spaces
2017-09-21 10:17:17 +02:00
Jose de Soto
e8cf50326d
When profile is updated self._update_session_user(user) set session.user_groups to None. self.update_groups() needs to be done.
2017-09-13 11:21:03 +02:00
mdipierro
213c4ee7d1
fixed use of whitespaces
2017-08-01 10:26:33 -05:00
mdipierro
7088b74d42
Merge pull request #1705 from josedesoto/enhancement/1557
...
Enhancement/1557
2017-08-01 09:46:55 -05:00
Jose de Soto
d5167f2ed6
change_password_url parameter for alternate login methods
2017-07-31 19:00:24 +02:00
Jose de Soto
1014d3e86e
new parameter to auto create or not users with alternate login methods
2017-07-31 18:33:15 +02:00
Jan Kotyz
19efbfecfa
Fixes 1700
2017-07-27 11:27:41 +02:00
Leonel Câmara
b7b8a009f2
Fixes #1680
2017-07-14 20:17:30 +01:00
mdipierro
453123a8ed
Merge pull request #1652 from BuhtigithuB/improve/pep8-tools-py
...
Enhance tools.py PEP8 compliancy
2017-07-10 14:11:11 -05:00
mdipierro
f657b42f65
fixed undefined variable
2017-07-02 01:34:05 -05:00
mdipierro
1c0b498880
fixed undefined variable
2017-07-02 01:32:25 -05:00
Richard Vézina
583d106104
Fix docstring py3 compatibility issues print -> print()
2017-06-21 11:33:00 -04:00
Richard Vézina
7ada2cf89a
Enhance tools.py PEP8 compliancy
2017-06-21 11:27:54 -04:00