Shannon
|
95f632e1ea
|
Adds notes and overrides SendTwoFactorCodeAsync and checks for -1 instead of null
|
2017-11-08 17:16:11 +11:00 |
|
Shannon
|
2538e2e9c9
|
additional null check
|
2017-11-08 16:06:23 +11:00 |
|
Sebastiaan Janssen
|
9a94ac5317
|
Implement TwoFactorSignInAsync from Identity repo to make sure our custom GetVerifiedUserIdAsync fires
U4-10620 Umbraco 2FA implementation issues
|
2017-11-07 16:51:40 +01:00 |
|
Sebastiaan Janssen
|
0b904e82b5
|
Get user by id instead of loginname
U4-9857 Umbraco 7.6 - Exception after changing user login name
|
2017-11-07 16:36:15 +01:00 |
|
Shannon
|
019147c1a1
|
Moves the session generation to the BackOfficeCookieAuthenticationProvider which is where it should be, so it only gets generated before the cookie is written. Writes the checking cookie inside of a lock to prevent multiple db and cookie writes that are unecessary.
|
2017-11-03 18:07:17 +11:00 |
|
Shannon
|
782d6100f0
|
Gets user session management tracking via the database including detecting stale sessions, generating and removing them along with cleaning them up. This takes into account legacy code too. The session is revalidated on a one minute threshold per user so that it's not hammering the databse on every request.
|
2017-11-03 17:27:23 +11:00 |
|
Shannon
|
5b19d5e0d8
|
WIP on login ids
|
2017-11-02 15:04:54 +11:00 |
|
Shannon
|
22ff362521
|
Changes email validation in c# to use the email address attribute like we do elsewhere in the codebase, adds unit test assertions to verify it validates the new odd email addresses
|
2017-09-27 22:50:47 +10:00 |
|
Shannon Deminick
|
3bbeb6670b
|
Merge pull request #2215 from umbraco/temp-U4-10439
U4-10439 Email validation in installer, User and Member editor need t…
|
2017-09-27 22:34:47 +10:00 |
|
Sebastiaan Janssen
|
8a52865d22
|
U4-10439 Email validation in installer, User and Member editor need to be the same
|
2017-09-26 15:23:47 +02:00 |
|
Stephan
|
5ba2ffcbf3
|
CrLfTab
|
2017-09-23 10:08:18 +02:00 |
|
Stephan
|
c43bf6c741
|
Get tests green
|
2017-09-22 15:23:46 +02:00 |
|
Sam Sperling
|
201ac076c3
|
Fix for: U4-10444 - External Logins have stopped working since the 7.7.1 update when using auto linking
|
2017-09-22 13:55:15 +10:00 |
|
Stephan
|
ca0d5e365a
|
Port 7.7 - WIP
|
2017-09-19 16:46:49 +02:00 |
|
Stephan
|
9ed6576908
|
Port 7.7 - WIP
|
2017-09-19 15:51:47 +02:00 |
|
Stephan
|
d54658009c
|
Port 7.7 - WIP
|
2017-09-18 15:33:13 +02:00 |
|
Shannon
|
029ace796d
|
Merge remote-tracking branch 'origin/dev-v7' into dev-v7.7
# Conflicts:
# src/Umbraco.Core/Security/BackOfficeUserManager.cs
# src/Umbraco.Web/Security/Providers/UsersMembershipProvider.cs
|
2017-09-18 20:04:05 +10:00 |
|
Shannon
|
8b39f495e5
|
Simplifies the UnlockUser method so we don't have to have it in the BackOfficeUserManager
|
2017-09-18 19:59:23 +10:00 |
|
Shannon
|
e8e0664129
|
Merge remote-tracking branch 'origin/dev-v7' into dev-v7.7, removes the UnlockUser method of BackOfficeUserManager since the membership provider is no longer used to perform any unlocking
|
2017-09-18 19:38:10 +10:00 |
|
Shannon
|
4ec04c779a
|
Adds notes about the UnlockUser method as we'll need to change this in 7.7
|
2017-09-18 16:29:29 +10:00 |
|
Shannon
|
26034fa33f
|
Changes ResetAccessFailedCountAsync in BackOfficeUserManager to use Identity APIs
|
2017-09-18 16:24:23 +10:00 |
|
Shannon
|
97ddbdb1f0
|
Makes IdentityAuditEventArgs immutable and injects all required values, makes the events strongly typed.
|
2017-09-18 16:17:54 +10:00 |
|
Sebastiaan Janssen
|
bb88eb155f
|
Merge remote-tracking branch 'origin/dev-v7' into dev-v7.7
# Conflicts:
# src/Umbraco.Core/Security/BackOfficeSignInManager.cs
# src/Umbraco.Core/Security/BackOfficeUserManager.cs
# src/Umbraco.Web/Editors/AuthenticationController.cs
# src/Umbraco.Web/Security/MembershipHelper.cs
# src/Umbraco.Web/umbraco.presentation/umbraco/users/EditUser.aspx.cs
|
2017-09-15 16:34:51 +02:00 |
|
Sebastiaan Janssen
|
b6dbc245e2
|
Merge branch 'dev-v7' into temp-U4-8634
|
2017-09-15 13:57:46 +02:00 |
|
Shannon
|
703c3eefe8
|
Fixes issue with trying to log in as a user that is disabled.
|
2017-09-14 19:00:59 +10:00 |
|
Stephan
|
e6de96cb90
|
Port 7.7 - WIP
|
2017-09-13 14:40:10 +02:00 |
|
Shannon
|
4b7bd6482e
|
Creates new EmailSender which should take the place throughout the codebase for sending emails in the Core. Have replaced most places where SMTP is used directly (but not the notifications part since that is more complicated right now). Added the internal event and special usage so we can raise an event to send an email if smtp is not configured.
|
2017-09-05 18:52:03 +10:00 |
|
Shannon
|
a0306f9d55
|
Fixes ability to reset your own password in the user section
|
2017-09-04 20:15:46 +10:00 |
|
Shannon
|
a608577a4f
|
Merge branch 'dev-v7' into dev-v7.7
# Conflicts:
# src/Umbraco.Core/Constants-Security.cs
# src/Umbraco.Core/Security/BackOfficeUserStore.cs
# src/Umbraco.Core/Services/ContentService.cs
# src/Umbraco.Core/Services/UserService.cs
# src/Umbraco.Tests/App.config
# src/Umbraco.Web/umbraco.presentation/umbraco/users/EditUser.aspx.cs
|
2017-09-04 16:51:20 +10:00 |
|
Shannon
|
13e2112c3c
|
U4-10361 Creating new member when AllowManuallyChangingPassword="false" - can't set a password
|
2017-08-29 11:56:38 +10:00 |
|
Stephan
|
ac1e4bdfe3
|
Port 7.7 - WIP
|
2017-08-25 17:55:26 +02:00 |
|
Shannon
|
1b369b5ba9
|
Adds back a backwards compatibility API
|
2017-08-24 19:45:48 +10:00 |
|
Shannon
|
1de79cf473
|
updated to use ASPNET Identity APIs for managing lockouts
|
2017-08-15 12:31:32 +10:00 |
|
Shannon
|
31ea03a7cc
|
adds notes
|
2017-08-02 17:06:57 +10:00 |
|
Shannon
|
150e2b12e8
|
adding back the functionality to install a machine key during installation
|
2017-08-02 16:16:59 +10:00 |
|
Stephan
|
e52adfdd07
|
Merge branch user-group-permissions into temp-U4-8643
|
2017-07-28 10:38:43 +02:00 |
|
Shannon
|
5ba07d56e7
|
Fixes model mapping for calculated start nodes and how that data gets into the user ticket.
|
2017-07-28 14:27:32 +10:00 |
|
Shannon
|
960cc32da1
|
Ensures the user validator doesn't execute unless the username or email addres is changed (since that is all the validator validates)
|
2017-07-28 12:20:10 +10:00 |
|
Shannon
|
a92288cd61
|
Fixes implementation of the role store on the BackOfficeUserStore
|
2017-07-20 22:12:13 +10:00 |
|
Shannon
|
97471f667d
|
Updates the BackOfficeIdentityUser to property support ASP.NET Identity Roles
|
2017-07-20 22:02:32 +10:00 |
|
Shannon
|
7aca656919
|
Merge branch 'user-group-permissions' into temp-U4-10138
# Conflicts:
# src/Umbraco.Core/Models/Identity/BackOfficeIdentityUser.cs
# src/Umbraco.Core/Models/Identity/IdentityModelMappings.cs
|
2017-07-20 20:00:05 +10:00 |
|
Stephan
|
c76403077f
|
Normalize cr/lf/tab
|
2017-07-20 11:21:28 +02:00 |
|
Shannon
|
b58799eb3d
|
Gets everything implemented and it all works - still uses the old hashing mechanism but everything is ready to be plugged in to support any new types of hashing.
|
2017-07-20 13:58:42 +10:00 |
|
Shannon
|
85e5b023b7
|
Gets UserAwareMembershipProviderPasswordHasher there, updates defaults for MembershipProvider, updates default web.config so the new hashing can be used
|
2017-07-20 13:44:37 +10:00 |
|
Shannon
|
63befa55d5
|
Updates password changing for users to use ASP.NET Identity, there's still some more work here to do to implement the IUserAwarePasswordHashing and to result some of the TODOs. Also moved all password changing logic to PasswordChanger even for legacy membership providers.
|
2017-07-20 12:53:09 +10:00 |
|
Shannon
|
8df00d5525
|
Fixes U4-10111 Changing email on a user doesn't show the username field
|
2017-07-19 19:22:43 +10:00 |
|
Shannon
|
ba46430ad1
|
Adds notes for ActiveDirectoryBackOfficeUserPasswordChecker and throws an exception since it doesn't support auto-linking yet
|
2017-07-19 14:24:57 +10:00 |
|
Shannon
|
b32325bbaa
|
Adds all change tracking to the BackOfficeIdentityUser ensures values are not persisted that are not changed, adds required null checks, removes internal method GetOrCreateBackOfficeUser
|
2017-07-19 14:13:42 +10:00 |
|
Shannon
|
73b107ee2a
|
Fixing U4-10138 Cannot upgrade to 7.7 due to user groups and U4-7907 With non OAuth external login providers we should have an 'auto-link' / 'auto-create' callback option
|
2017-07-18 19:53:34 +10:00 |
|
Shannon
|
50a896a6cc
|
Doesn't send async if not using a network based SMTP server
|
2017-07-11 15:06:18 +10:00 |
|