 Eugen Rochko
|
6e418bf346
Fix cookies secure flag being set when served over Tor (#17992)
|
vor 2 Jahren |
|
Eugen Rochko
|
8e84ebf0cb
Remove IP tracking columns from users table (#16409)
|
vor 2 Jahren |
 Claire
|
6da135a493
Fix reviving revoked sessions and invalidating login (#16943)
|
vor 2 Jahren |
|
Claire
|
21fb3f3684
Drop dependency on secure_headers, fix response headers (#15712)
|
vor 3 Jahren |
 Cecylia Bocovich
|
e79f8dd85c
Onion service related changes to HTTPS handling (#15560)
|
vor 3 Jahren |
|
Eugen Rochko
|
acc1c03861
Fix cookies not having a SameSite attribute (#15098)
|
vor 3 Jahren |
 Mathieu Brunot
|
bd8dc9bd0c
:sparkles: Add an LDAP Mail attribute config (#12053)
|
vor 4 Jahren |
|
Mathieu Brunot
|
d70268f099
:sparkles: Convert LDAP username (#12461)
|
vor 4 Jahren |
|
Eugen Rochko
|
a1f04c1e34
Fix authentication before 2FA challenge (#11943)
|
vor 4 Jahren |
|
Eugen Rochko
|
c707ef49d9
Fix 2FA challenge and password challenge for non-database users (#11831)
|
vor 4 Jahren |
 Moritz Heiber
|
ecf40d09ed
Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819)
|
vor 5 Jahren |
 Sorin Davidoi
|
6f3d934bc1
feat(cookies): Use the same-site attribute to lax (#8626)
|
vor 5 Jahren |
 Immae
|
b0f4fe456b
Add ldap search filter (#8151)
|
vor 5 Jahren |
 abcang
|
69bf116345
Add secure option to additional cookie (#8069)
|
vor 6 Jahren |
|
Eugen Rochko
|
ac49c7932d
Add LDAP_TLS_NO_VERIFY option, don't require LDAP_ENABLED outside .env (#6845)
|
vor 6 Jahren |
 Alexander
|
33ee347c99
rename pam email environment variable to something more understandable and default to LOCAL_DOMAIN (better fallback) (#6833)
|
vor 6 Jahren |
|
Alexander
|
42fe05dea1
fix logic for pam_controlled_service (#6599)
|
vor 6 Jahren |
|
Eugen Rochko
|
47bdb9b33b
Fix #942: Seamless LDAP login (#6556)
|
vor 6 Jahren |
|
Eugen Rochko
|
38e0133e1b
Make PAM gem optional, allow configuration over environment (#6415)
|
vor 6 Jahren |
|
Alexander
|
04fef7b888
pam authentication (#5303)
|
vor 6 Jahren |
 Patrick Figel
|
04ecf44c2f
Add confirmation step for email changes (#6071)
|
vor 6 Jahren |
|
Eugen Rochko
|
40be4ea239
Extend Devise remember_me longevity to 1 year instead of 2 weeks (#4587)
|
vor 6 Jahren |
|
Eugen Rochko
|
8d6c3cd48a
Fix sessions being replaced needlessly (#4292)
|
vor 7 Jahren |
|
Eugen Rochko
|
00df69bc89
Fix #4058 - Use a long-lived cookie to keep track of user-level sessions (#4091)
|
vor 7 Jahren |
|
Eugen Rochko
|
f7301bd5b9
Add overview of active sessions (#3929)
|
vor 7 Jahren |
 Sorin Davidoi
|
2211e8d1cd
Revocable sessions (#3616)
|
vor 7 Jahren |
|
Patrick Figel
|
df4ff9a8e1
Add recovery code support for two-factor auth (#1773)
|
vor 7 Jahren |
 Yann GUERN
|
a85d4473aa
Avoid user enumeration with devise paranoid mode (#1527)
|
vor 7 Jahren |
|
Eugen Rochko
|
76e970c856
Do not automatically login after password reset, as it would circumvent two-factor auth (if enabled)
|
vor 7 Jahren |
|
Eugen Rochko
|
ba192f12e3
Added optional two-factor authentication
|
vor 7 Jahren |
