4411470202
test: invalidate used password reset tokens
...
Also pep8 compliance and suggested changes.
2015-05-11 23:12:05 -07:00
a0e2037747
invalidate password reset tokens when the passwords changes
...
Check that the previous password is the same as it was when this
password reset request was generated.
2015-05-11 21:52:57 -07:00
7884d637c5
prevent password reset from breaking if you have no password
...
If you've just been invited, or are using social auth, you have no
password set, so the reset password feature causes a crash. This
doesn't need to happen.
2015-05-11 21:52:57 -07:00
f2a5e4b614
Normalize import paths. Fixes #313
2015-05-02 13:25:26 -04:00
bc1f5dd7f9
Stricter tests for signals and a small docs update. Fixes #308
2015-05-02 12:59:02 -04:00
11b8222ec5
Add SECURITY_SEND_PASSWORD_RESET_NOTICE_EMAIL config option to optionally send password reset notice emails. Addresses #199
2013-12-19 13:56:34 -05:00
d87765fc3b
PEP8 polish
2013-07-22 12:37:44 -04:00
26045fc4dc
Use the _external parameter when generating links for emails
2013-05-28 11:11:19 -04:00
f1cca43d9c
sending signals fixed
2013-04-03 12:36:53 +02:00
1092ffc9ea
Fix #45
2012-11-26 16:21:05 -05:00
514d27fd66
Ability to manage email subjects from configuration.
2012-11-19 21:13:52 -05:00
f928db298d
Refactor datastore implementation
2012-08-24 11:38:25 -04:00
6e754ed356
Major refactoring. Got rid of exceptions/errors in favor of using simple return values. Update tests to ensure full coverage according to nose coverage plugin
2012-08-23 17:58:33 -04:00
53257c17a9
Update send_mail api and add welcome email for user registration. Also add security state to template context for emails for more complex template rendering.
2012-08-22 15:15:39 -04:00
d3c23c1994
Polish
2012-08-21 17:34:38 -04:00
fa4668aa3f
Use default values for encrypt_password and verify_password
2012-08-20 17:44:20 -04:00
c36fee7fda
Clean up
2012-08-17 15:05:22 -04:00
2bd19f999d
Code cleanup
2012-08-17 14:46:30 -04:00
009671090f
Clean up and bug improvements
2012-08-16 18:20:42 -04:00
8b139890b4
Add useful decorator for ensuring anonymous users on particular endpoints
2012-08-16 17:53:41 -04:00
2fcfb80e8e
Refactor templates and added url_for_security utility. Can also configure the blueprint name.
2012-08-16 13:41:13 -04:00
0524271573
Clean up
2012-08-14 16:38:31 -04:00
f3dff9e496
Clean up
2012-08-14 16:37:56 -04:00
78b2eb8b18
Remove stray print statement
2012-07-19 17:39:47 -04:00
68dd972bfa
Add more secure password storage via salt value and hmac
2012-07-18 13:27:30 -04:00
f170cb434c
Use a stateful object instead of arbitrary assignment of extension on app object
2012-07-16 19:07:19 -04:00
18c7a838b0
Make most messages configurable
2012-07-12 15:24:57 -04:00
ed8082868f
Simplify exceptions
2012-07-12 14:40:20 -04:00
da031b8d15
Simplify routing a tiny bit
2012-07-12 11:29:42 -04:00
b3de4a76d5
refactor a bit
2012-07-11 15:14:20 -04:00
b9a6a9c5a8
Use itsdangerous for activation and password reset tokens so they do not need to be stored in the database
2012-07-11 15:06:54 -04:00
815c8695fc
Code clean upr
2012-07-10 17:24:39 -04:00
2ea835ec9f
Add a bunch of doc strings and add some more configuration values
2012-06-29 12:37:22 -04:00
a902530773
Refactor forms and import other commonly used functions into package
2012-06-19 11:55:23 -04:00
f8cb2a413f
Merge branch 'develop' of github.com:mattupstate/flask-security into develop
2012-06-18 16:52:00 -04:00
c20f244d66
Big code cleanup
2012-06-18 16:51:43 -04:00
2655d67f52
Bugfix for generate_reset_password_token
...
reset_password_token was being mixed with reset_password_sent_at
2012-06-15 16:01:49 -04:00
5fdfa544db
Polish up some code and add some signals
2012-06-15 12:13:49 -04:00
a47c6b9d55
Polish
2012-05-24 21:07:29 -04:00
09aa7e113c
Heavy work on confirmation and reset
2012-05-22 18:08:38 -04:00
2b587f7047
Starting a large refactor and adding confirmation abilities
2012-05-11 13:23:42 -04:00
Nick Retallack