Donovan Daniels
32a1367cfe
[Users] Consolidate password confirmation into singular route ( #813 )
2024-12-18 06:02:02 -08:00
Earlopain
fc7d84affd
[RuboCop] Enable Style/FrozenStringLiteralComment
...
This reduces allocations on the posts page by about 5%, from basic testing
2024-02-25 18:15:55 +01:00
Earlopain
56e849695b
[Cleanup] Remove readonly only
...
Since its introduction 3 years ago, it got used once I believe
I can't even say if this properly works anymore.
If something like that is actually desired in the future, it should just be a whitelist instead
2024-02-23 16:48:56 +01:00
Earlopain
e3256bb313
[Prod] Add instrumentation to login attempts
2023-10-10 17:00:59 +02:00
Earlopain
5528f43b0d
[Sessions] Remove GET logout route
...
No more accidentally logging out just because you clicked on a link
https://e621.net/forum_topics/31292
2022-04-09 22:45:00 +02:00
Zwagoth
da4a3eaccf
Update sessions_controller.rb
2022-01-16 01:23:03 -05:00
Kira
bd53271c78
[Login] Fix errors in previous commit.
2022-01-09 16:34:28 -08:00
Kira
d532cd28c5
[Login] Add captcha to login page.
2022-01-09 12:39:53 -08:00
Earlopain
bd93c61e77
[ReadOnly] Add basic read-only mode
2021-07-18 17:50:57 +02:00
Kira
0baa8a2129
username/password is incorrect
2019-12-16 02:35:50 -08:00
Kira
e71888a01a
Add session remember support
2019-10-31 06:41:21 -07:00
Kira
a460b91641
Remove unused session[:previous_uri] code
2019-08-10 05:09:40 -07:00
Kira
f4f030f726
Password migration/upgrade
...
NOTE: All existing passwords in development no longer work after
this change! Change your users password using the rails console.
Automatically convert and ugrade old passwords to using bcrypt
Removed the seemingly pointless transformation and hashing on top
of the actual password with a static salt.
Disabled logging in using password hashes, because that's just not
secure in any way, and negates cracking passwords at all.
Disabled sending the password hash to the client as a cookie, even
if it was signed.
Disabled legacy API logins.
2019-02-21 21:10:20 -08:00
r888888888
f138eeef1d
fixes #2619 : Delete password_hash cookie on sign out
2016-07-11 16:38:00 -07:00
r888888888
5b3a4b768c
fixes #2557
2015-12-17 14:29:17 -08:00
r888888888
80c1c13ce3
fixes #1851
2013-07-26 17:37:44 -07:00
Toks
51a7e36509
fix tests
2013-06-30 11:37:15 -04:00
Kevin Xiwei Zheng
0f768d144a
Restrict post-login redirection targets to local URLs
2013-06-26 12:15:08 -04:00
小太
cba839ba76
Kill trailing whitespace in ruby files
2013-03-19 23:10:10 +11:00
albert
e7da9b2a37
sign out no longer requires http delete, can open up in new window
2013-02-23 11:01:33 -05:00
albert
f07bf9b2cc
deleted posts are now hidden
2011-10-22 13:25:22 -04:00
albert
d324f4a071
refactored login process, added remember option for login
2011-10-15 16:36:07 -04:00
albert
124403a921
implemented last-forum-read-at
2011-08-23 17:11:21 -04:00
albert
f8b1bd3142
work on comments
2010-10-20 19:24:53 -04:00
albert
9f29ffc8c3
work on post views
2010-03-12 12:32:31 -05:00
albert
15c134b270
work on controllers/views started
2010-03-11 19:42:04 -05:00
albert
ac98d7db37
stubbed in blank controllers/helpers/functional tests
2010-03-10 18:21:43 -05:00
