aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Switch ciphers to output urlsafe base64.Michał Górny2013-08-211-1/+1
* Move crypto-related stuff to okupy.crypto.Michał Górny2013-08-213-4/+4
* Move RevokedToken to common and make it more universal.Michał Górny2013-08-211-3/+3
* Move session ID encryption, decryption & validation to SessionRefCipher.Michał Górny2013-08-212-29/+8
* ssl_auth: check decrypted session ID validity.Michał Górny2013-08-202-10/+12
* SSL auth: decrypt session ID in forms cleanup.Michał Górny2013-08-202-4/+14
* Add @anonymous_required decoratorTheo Chatzimichos2013-08-191-1/+3
* Improvements in signup/activate views:Theo Chatzimichos2013-08-191-15/+24
* Remove try/except block, ldap connection check is performed alreadyTheo Chatzimichos2013-08-191-6/+1
* check if the passwords match in form.is_valid()Theo Chatzimichos2013-08-192-3/+8
* Revoke OTP tokens in views rather than backends.Michał Górny2013-08-191-0/+8
* login: ask only for password when upgrading auth.Michał Górny2013-08-192-5/+21
* login: give a proper info() message when asking for strong auth.Michał Górny2013-08-191-7/+10
* Merge pull request #69 from mgorny/otp-ldapTheo Chatzimichos2013-08-191-5/+7
|\
| * Bind properly for *OTP setup.Michał Górny2013-08-181-5/+7
* | update models with the new attributesPavlos Ratis2013-08-181-5/+8
|/
* rename accounts_lists view to listsPavlos Ratis2013-08-182-4/+4
* add url tag to templatesPavlos Ratis2013-08-181-5/+5
* Merge pull request #66 from mgorny/otp-ldapTheo Chatzimichos2013-08-172-2/+3
|\
| * Use LDAP as secret backend for OTP.Michał Górny2013-08-182-2/+3
* | Merge pull request #63 from dastergon/improve_lists_viewTheo Chatzimichos2013-08-172-16/+14
|\ \ | |/ |/|
| * add per-view caching on listsPavlos Ratis2013-08-171-0/+2
| * improved dev lists viewPavlos Ratis2013-08-172-16/+12
* | Add @strong_auth_required decorator.Michał Górny2013-08-171-2/+7
* | Reuse @require_POST decorator from django.Michał Górny2013-08-171-4/+2
* | OpenID: make nonce creation atomic.Michał Górny2013-08-171-6/+8
* | Fix handling timedeltas in use_nonce().Michał Górny2013-08-171-1/+1
* | Merge pull request #61 from mgorny/openid-auto-logoutTheo Chatzimichos2013-08-172-5/+26
|\ \
| * | OpenID: always enable auto-logout for SSL cert auth.Michał Górny2013-08-141-0/+6
| * | OpenID: add 'auto logout' option.Michał Górny2013-08-142-5/+20
| |/
* | Replace get_ldap_connection with LDAPUserTheo Chatzimichos2013-08-171-47/+27
* | Add support for secondary passwordPavlos Ratis2013-08-171-2/+15
|/
* Move SSL verification into a dedicated backend.Michał Górny2013-08-121-28/+7
* SSL auth: authenticate directly into session.Michał Górny2013-08-123-40/+66
* Merge pull request #47 from dastergon/prof_page_ldapdbTheo Chatzimichos2013-08-121-35/+2
|\
| * use LDAPUser and ldapdb in profile pagePavlos Ratis2013-08-081-35/+2
* | Support SOTP recovery keys.Michał Górny2013-08-091-0/+18
* | Support displaying QRCode for TOTP URI.Michał Górny2013-08-092-1/+17
* | Introduce 'otp-setup', to set TOTP up.Michał Górny2013-08-092-0/+44
* | Introduce a dummy token input.Michał Górny2013-08-092-12/+40
* | Introduce initial code for two-phase auth support.Michał Górny2013-08-091-4/+9
* | urls: import the whole module rather than single views.Michał Górny2013-08-081-14/+14
|/
* Merge branch 'get_ldap_connection'Theo Chatzimichos2013-08-082-17/+8
|\
| * Use get_ldap_connection instead of ldap.initializeTheo Chatzimichos2013-08-081-10/+4
| * pep8Theo Chatzimichos2013-08-082-9/+6
* | login: reorder the conditionals to keep it cleaner.Michał Górny2013-08-081-17/+17
* | login: Reuse request.user.is_authenticated() after login.Michał Górny2013-08-081-5/+2
* | login: Use OkupyError in wider scope.Michał Górny2013-08-081-24/+25
* | login: Commonize the after-auth login code.Michał Górny2013-08-081-6/+4
* | login: Drop duplicate 'Cancel' code.Michał Górny2013-08-081-30/+24