d08aac6d35
Fix pymongo version issue
2015-05-02 14:34:31 -04:00
72d3a4b5e3
Merge branch 'develop' of github.com:mattupstate/flask-security into develop
2015-05-02 13:57:29 -04:00
6541640ee8
Merge pull request #373 from lnielsen/anonymoususer
...
Add support for custom AnonymousUser class.
2015-05-02 13:57:20 -04:00
9cda8baff3
Fix #367
2015-05-02 13:55:05 -04:00
8a62b5f193
Merge pull request #361 from nfvs/add_headers_to_auth_required
...
Include WWW-Authenticate headers in @auth_required.
2015-05-02 13:50:23 -04:00
2e08ec87a6
Merge pull request #352 from fuhrysteve/develop
...
X-Forwarded-For can contain multiple IP addresses
2015-05-02 13:46:21 -04:00
4d3c1c0bdc
Merge pull request #347 from Jaza/slash-url-suffix
...
re #343 : Add slash before or after token in flask-security URLs correctly
2015-05-02 13:43:36 -04:00
cd8982fa65
Merge pull request #342 from alexef/patch-1
...
Fail silently for get_user(None)
2015-05-02 13:30:01 -04:00
c8a3549e2d
Merge pull request #331 from Diaoul/patch-2
...
Fix ActivateUserCommand docstring
2015-05-02 13:29:21 -04:00
03d9cf2f0d
Merge pull request #330 from Diaoul/patch-1
...
Fix RemoveRoleCommand docstring
2015-05-02 13:29:07 -04:00
e4d9d3ad17
Merge pull request #322 from waltaskew/develop
...
Add configuration for token expiration
2015-05-02 13:27:11 -04:00
f2a5e4b614
Normalize import paths. Fixes #313
2015-05-02 13:25:26 -04:00
916f5ee012
Use StringField instead of TextField. Fixes #312
2015-05-02 13:05:46 -04:00
bc1f5dd7f9
Stricter tests for signals and a small docs update. Fixes #308
2015-05-02 12:59:02 -04:00
4659d10c5c
forgot password endpoint should be for anonymous users only. Fixes #291
2015-05-02 12:11:05 -04:00
a4581681e5
Fix PEP8 error.
2015-03-06 13:09:05 +01:00
248ea5d272
Custom AnonymousUser support.
...
(addresses #362 )
2015-03-06 12:45:17 +01:00
3681823fcf
Include WWW-Authenticate headers in @auth_required.
...
When using @http_auth_required, the WWW-Authenticate header is included,
but when using @auth_required('basic'), it is not. This change includes
that header in every @auth_required call that contains the 'basic'
method.
2015-01-30 11:27:53 +01:00
923ad720a1
X-Forwarded-For can contain multiple IP addresses
...
From the nginx docs:
http://nginx.org/en/docs/http/ngx_http_proxy_module.html
> $proxy_add_x_forwarded_for
> the “X-Forwarded-For” client request header field with the $remote_addr
> variable appended to it, separated by a comma. If the “X-Forwarded-For”
> field is not present in the client request header, the
> $proxy_add_x_forwarded_for variable is equal to the $remote_addr
> variable.
Use the last IP address in X-Forwarded-For. For this to work properly
behind a trusted proxy, you must be using ProxyFix as described in the
flask & werkzeug documentation.
2014-12-29 08:31:19 -05:00
665b164618
split docstring into multiple lines to make travis CI happy
2014-11-28 13:50:25 +11:00
4d70f016ad
re #343 : Add slash before or after token in flask-security URLs correctly
2014-11-28 10:36:31 +11:00
7e4fc94601
Fail silently for get_user(None)
...
get_user(identifier) checks if the identifier is a number by trying to convert it to int. This works for strings, but in a particular case, when identifier is None, it fails. Checking for both TypeError and ValueError fixes it.
2014-11-19 14:11:58 +02:00
6cfe662dc6
Fix ActivateUserCommand docstring
2014-10-21 11:26:17 +02:00
8c45271bf9
Fix RemoveRoleCommand docstring
2014-10-21 10:27:17 +02:00
c7d0ea9cce
Add additional item to CHANGES
2014-10-13 13:47:35 -04:00
94c7c09dc2
Bump version number to 1.7.4
2014-10-13 13:38:44 -04:00
f6405797f1
Update CHANGES
2014-10-13 13:38:16 -04:00
2cffb6634d
Fix case sensitivity when searching for users by email address. Fixes #323 .
2014-10-13 13:34:11 -04:00
824a52b883
Merge branch 'develop' of github.com:mattupstate/flask-security into develop
2014-10-13 13:25:08 -04:00
fe7e4c4afc
Add additional steps to the test_change_hash_type and make change to verify_and_update_password to make the test pass. Fixes #328 .
2014-10-13 13:25:01 -04:00
591bc27a5e
Merge pull request #318 from boydgreenfield/develop
...
Prevent open redirects when a malformed URL is passed to ?next=
2014-10-13 11:54:32 -04:00
897b2fceab
Add configuration for token expiration
2014-10-01 15:59:28 -04:00
5bc37add88
Update to use (url_next.netloc or url_next.scheme) in the validate_redirect_url open redirect patch.
2014-10-01 09:49:00 -07:00
8b036f2a3e
Prevent open redirects when a malformed URL is passed to ?next=
...
Example: "/login?next=http:///google.com " (note 3rd slash)
2014-09-26 11:08:58 -07:00
76ad77a233
Compare a string (not bytes) for PY3 support
2014-09-17 11:39:19 -04:00
679cee7969
Add default/global context processor. Fixes #306
2014-09-17 11:27:44 -04:00
3d7b97ac31
Forgot password form should not validate if user has not confirmed their email address yet. Fixes #298
2014-09-17 11:21:31 -04:00
3a0af73231
Merge pull request #281 from sjml/patch-1
...
Fixing typo in documentation
2014-09-17 10:03:53 -04:00
3458391791
Merge pull request #284 from tony/patch-1
...
Typo
2014-09-17 10:02:27 -04:00
37908ca335
Merge pull request #303 from graup/patch-1
...
Docs: Fixed typo and made punctuation more consistent.
2014-09-17 10:02:16 -04:00
f83cd56ff2
Merge pull request #311 from moorereason/develop
...
Fix small issues in docs
2014-09-17 10:01:57 -04:00
c10ec29fe5
Fix small issues in docs
2014-09-07 21:37:33 -05:00
d2fe7aefcb
Merge pull request #307 from mickey06/develop
...
Save changes to db after removal of role from user
2014-08-29 12:19:26 -04:00
708ddeb6c4
Merge pull request #309 from gregeinfrank/develop
...
Fix two typos in docstrings
2014-08-29 12:15:20 -04:00
2aeee348d4
Fix two typos in docstrings
2014-08-27 23:37:58 -04:00
52b177cd2e
Save changes to db after removal of role from user
2014-08-26 16:43:23 +01:00
dab2fc8c8b
Docs: Fixed typo and made punctuation more consistent.
2014-08-19 18:01:03 +09:00
31e3ab5470
Merge pull request #289 from scollinson/fix_menu_typo
...
Fix a typo in the menu template
2014-08-13 15:44:20 -04:00
6bdcd2930d
Merge pull request #278 from dokterbob/post_register_redirect
...
Enable ‘next’ redirection after registration.
2014-07-29 13:23:42 -04:00
1076887900
fix typo in menu template
2014-07-21 19:07:12 +12:00
Matt Wright