Commit Graph

167 Commits

Author SHA1 Message Date
a38a1be4b7 Update devDepencencies for vulnerability in browserify-sign 2023-10-29 08:46:11 +00:00
ec5359de48 0.8.2 2023-10-08 18:35:57 +01:00
b3ffdd0890 Merge pull request #39 from Bortseb/patch-2
Update social.coffee
2023-10-08 18:26:11 +01:00
7449fdab44 Update social.coffee
We got syntax wrong. Use isnt instead of !==
2023-10-08 11:46:45 -04:00
70cebf5ab2 0.8.1 2023-10-03 19:29:16 +01:00
1e443f2934 update package lock 2023-10-03 19:28:49 +01:00
95e2c76b5f Merge pull request #38 from Bortseb/patch-1
Thanks to @Bortseb , @3-w-c , @nrn for looking into this problem.
2023-10-03 19:24:42 +01:00
cae4118bc9 Update social.coffee
don't allow unclaimed sites to be viewed by authors not in allowed_domains.
2023-10-03 13:37:59 -04:00
d43cbe7ff6 0.8.0 2023-08-22 10:12:31 +01:00
ebcfe9cc42 Merge pull request #37 from fedwiki/paul90/login2view
Updating login to view
2023-08-22 10:09:44 +01:00
5137dd86ac backing off protecting assets
- breaks too many things.
2023-08-21 16:54:55 +01:00
3305674597 reload after login, if login was required. 2023-08-21 12:19:08 +01:00
ec05842d31 protect assets and sitemap hints that login is required 2023-08-21 12:17:48 +01:00
cec8c04417 0.7.0 2023-05-01 11:29:56 +01:00
88c15c0cef update Authors 2023-04-27 11:11:49 +01:00
53f8da4d4b 0.7.0-rc.0 2023-04-19 11:24:11 +01:00
8f304374cf Merge pull request #36 from fedwiki/paul90/jQuery
update jQuery click handlers
2023-04-19 11:22:06 +01:00
ff69116fbf Merge branch 'master' into paul90/jQuery 2023-04-19 11:21:49 +01:00
30a339f49a Merge pull request #35 from fedwiki/paul90/remove-persona
remove persona
2023-04-19 11:20:12 +01:00
f7da864fdb Merge pull request #33 from Bortseb/master
Example of admin parameter in config.json for generic OAuth
2023-04-19 11:19:51 +01:00
b2927e47c9 Better claim log message 2023-04-18 10:37:42 +01:00
7e4e1e940d remove modernizr 2023-04-18 10:28:00 +01:00
a0ef92ec8e removing old persona code 2023-04-18 09:55:41 +01:00
1d4c5d51df update jQuery click handlers 2023-04-17 09:45:28 +01:00
f6dcb5425e 0.6.2 2023-02-07 14:49:17 +00:00
e648bf64a7 Merge pull request #34 from fedwiki/paul90/twitter-update
use @passport-js/passport-twitter
2023-02-07 14:47:22 +00:00
32ef602460 use successRedirect
- the other documented way doesn't redirect.
2023-02-07 11:56:39 +00:00
40afd20e4f use @passport-js/passport-twitter 2023-02-07 11:24:58 +00:00
f04c99a73d 0.6.1 2022-11-08 12:14:01 +00:00
752ba44f1d update package lock 2022-11-08 12:13:42 +00:00
6b735ae712 0.6.0 2022-07-26 11:20:45 +01:00
b1da9175b4 remove grunt-retire 2022-07-25 18:17:57 +01:00
23a513b38a Switch to locally maintained passport-twitter to address security issue 2022-07-19 11:39:58 +01:00
351d52c1f8 update devDependencies 2022-07-14 14:09:17 +01:00
f914667efe Example of admin parameter
Expands on config example to show how to specify admin ID
2022-06-10 10:58:52 -04:00
5f9ceaaef0 0.5.0 2021-11-11 10:21:32 +00:00
8abeb3633d update package lock 2021-11-11 10:18:56 +00:00
831fe4b836 move to using passport-github2
this is rather than using our own fork of passport-github, and will resolve fedwiki/wiki#136
2021-11-11 10:14:23 +00:00
89adbb5dc0 Update Authors 2021-11-04 10:19:53 +00:00
647f0cb1b0 Merge #32 'Add generic OAuth support' 2021-11-04 10:15:29 +00:00
88b0e2b825 callbackURL has fix location, rather than being a parameter. 2021-11-04 10:12:59 +00:00
7eba6ba411 replacing eval() with function using property accessors 2021-11-02 18:56:21 +00:00
3wc
001def2fea Custom callback and user profile URLs for OAuth2
For parsing `oauth2_UsernameField` values like
`profile.preferred_username`, this makes use of `eval()` which is
generally Evil™, but I'm assuming that anyone with permission to edit
config.json likely has permission to make changes to the fedwiki source
code already anyway, so it's fragile rather than increasing a security
attack surface. An alternative would be using  a small function to look
up properties of the `params` / `profile` objects using the same
dotted-path notation.
2021-10-23 16:56:08 +02:00
3wc
f4f44afa35 Add passport-oauth2 to package.json 2021-10-22 00:29:07 +02:00
3wc
5f2164cb12 Add generic OAuth support 2021-10-18 21:13:18 +02:00
a369822b0f Update package-lock 2021-05-18 15:37:16 +01:00
41549779bd 0.4.9 2021-02-16 19:18:51 +00:00
dc9dc8f2a5 Update package-lock 2021-02-16 12:10:05 +00:00
867896520c Update package-lock 2020-08-01 16:08:27 +01:00
d62b844ae0 0.4.8 2020-07-16 14:21:27 +01:00