Hivert Quentin
c3234882eb
feat(openID): second part with a lot of fixes and cleaning
2025-03-13 15:25:56 +01:00
smizrahi
178b1a3a0e
feat(core): Check password strength on login (SQL Source). Closes #6025 .
2024-12-02 11:08:39 +01:00
smizrahi
930a06e520
feat(core): Add URL encryption for GDPR compliancy
2024-01-09 11:01:17 +01:00
smizrahi
d505b874f7
Merge branch 'master' into feature-gdpr
2023-12-20 18:01:40 +01:00
smizrahi
37379ba416
fix(preferences): Fix error 500 when changing password
2023-12-18 14:24:50 +01:00
smizrahi
31c6f78913
feat(core): Add URL encryption for GDPR compliancy
2023-10-17 16:17:25 +02:00
smizrahi
5d6b40c8cf
fix(core(js)): Removed es6 'const' for build issues with grunt
2022-12-12 09:14:23 +01:00
smizrahi
9b023f43d5
feat(password-recovery): Avoid removing XSRF token cookie on passwordRecoveryCheck request
2022-10-25 14:50:12 +02:00
smizrahi
440a15ba98
feat(password-recovery): Clean session cookies on password change
2022-10-24 13:49:13 +02:00
smizrahi
656807b77d
feat(password-recovery): Add password recovery with secret question or secondary email
2022-10-03 08:56:41 +02:00
Francis Lachapelle
d4da1facf9
fix(web): use a distinct salt for TOTP authentication
...
If TOTP is enabled for a user, it will be disabled until the user
configure it again, which will generate a new private salt.
2021-10-15 16:18:23 -04:00
Francis Lachapelle
7e63452141
fix(login(js)): fix domain in redirect URL
2021-08-17 15:59:33 -04:00
Francis Lachapelle
20b2fd5e45
refactor(web): replace SOGoGoogleAuthenticatorEnabled with
...
SOGoTOTPEnabled
Fixes #5294
2021-06-16 14:59:02 -04:00
olivierperes
9ae9fa094e
refactor(mail): replace "Google Authenticator" with more general vocabulary
...
The 2FA feature is not specific to one application, rewording makes this more clear.
Fixes #5294
2021-06-16 09:49:30 -04:00
Francis Lachapelle
0c1f9fdb02
fix(web): restore support of ppolicy OpenLDAP overlay
2021-05-05 12:41:08 -04:00
Nicolas
2300fe8aab
fix(core): Require current password on password change ( #285 )
...
Increase security by requiring the current password when changing the
password. This increases the security for cases such as XSS, or just a
forgotten browser window left open.
Fixes #4140
2020-07-27 10:12:22 -04:00
Ludovic Marcotte
f78300a12e
feat(core): initial Google Authenticator support for 2FA
2020-05-07 07:22:24 -04:00
Francis Lachapelle
828d773b49
Add security flags to cookies (HttpOnly, secure)
...
Fixes #4525
2018-08-21 14:02:01 -04:00
Francis Lachapelle
a65e96bdb5
(js) follow requested URL after authentication
2017-08-29 16:03:19 -04:00
Francis Lachapelle
ab4118fb29
Show user's name upon successful login
2016-08-31 14:32:30 -04:00
Ludovic Marcotte
582baf2960
(feat) added AngularJS's XSRF support ( #3246 )
2016-04-26 11:07:22 -04:00
Francis Lachapelle
5e8f65738a
(js) Integrate ngCookies
2016-04-25 15:16:49 -04:00
Ludovic Marcotte
decda96697
(fix) password change ( fixes #3496 )
2016-02-11 13:46:18 -05:00
Francis Lachapelle
5499746b3a
(js) Fix promise of $http in Resource service
2015-12-14 13:16:11 -05:00
Francis Lachapelle
bbb9f31c29
(js) Remove calls to deprecated methods
...
$http.success and $http.error are deprecated.
2015-12-14 12:16:47 -05:00
Francis Lachapelle
fb7d5b628f
(js) Make use of 'controllerAs' in MainUI module
2015-08-07 11:04:04 -04:00
Francis Lachapelle
dc9a0896e5
(js) Fix possible errors (help from jsjint)
2015-07-24 16:14:53 -04:00
Francis Lachapelle
618d3d9cc0
(js) Fix dependency injections
2015-06-12 12:02:12 -04:00
Francis Lachapelle
1dc5f0d412
(js) New file structure for Angular modules
...
JavaScript files are now merged by the 'js' Grunt task.
2015-06-12 12:01:21 -04:00
