Shannon
9e931b84db
U4-7925 Add dependency injection to Umbraco.Web.Trees.TreeController*
2016-02-10 10:26:09 +01:00
Shannon
9978b0d8ea
Merge branch 'dev-v7' into temp-U4-3447
2016-02-04 18:30:58 +01:00
Shannon
5d5c6ed33a
fixes ysod with media types and member types
2016-02-03 11:21:01 +01:00
Shannon
08e9579481
U4-7863 Remove Nuget requirement: Microsoft.Net.Http - this is not used, nor is it required (it also installs a bunch of other packages we don't need)
2016-02-03 10:14:53 +01:00
Shannon
e8dfa056b0
U4-2670 Add event to modify the model before being sent to render
2016-01-27 13:20:13 +01:00
Shannon
26b70a4a4e
Merge remote-tracking branch 'origin/dev-v7' into 7.4.0
...
Conflicts:
build/UmbracoVersion.txt
src/SolutionInfo.cs
src/Umbraco.Core/Configuration/UmbracoVersion.cs
src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
src/Umbraco.Web.UI/umbraco/config/lang/de.xml
2015-12-15 10:40:52 +01:00
Shannon
8598ab565c
Fixes: U4-7536 Sign-out in back office will call all ASP.Net identity middleware sign out methods
...
publicises a few things too.
2015-12-15 10:34:11 +01:00
Sebastiaan Janssen
9949e2676d
Merge branch 'dev-v7' into 7.4.0
...
Conflicts:
build/UmbracoVersion.txt
src/SolutionInfo.cs
src/Umbraco.Core/Configuration/UmbracoVersion.cs
src/Umbraco.Web.UI.Client/bower.json
src/Umbraco.Web.UI.Client/src/less/main.less
src/Umbraco.Web.UI.Client/src/views/common/dialogs/mediapicker.html
src/Umbraco.Web.UI.Client/src/views/common/dialogs/user.html
src/Umbraco.Web.UI.Client/src/views/propertyeditors/contentpicker/contentpicker.controller.js
src/Umbraco.Web.UI.Client/src/views/propertyeditors/contentpicker/contentpicker.html
src/Umbraco.Web.UI.Client/src/views/propertyeditors/listview/listview.html
src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
src/Umbraco.Web.UI/config/Dashboard.Release.config
src/Umbraco.Web/Umbraco.Web.csproj
2015-12-01 15:16:57 +01:00
Shannon
d300146cf6
trips content/media names, makes sure that the content type editor when rendering template names html encodes the names.
2015-11-25 20:44:53 +01:00
Shannon
18c3345e47
Fixes U4-7459 XSRF protection bypass - ensures tokens are checked for the non-editor api controllers
2015-11-25 19:39:24 +01:00
Shannon
555b520a0c
Cleans up the usages of auth cookies. OWIN is in charge of auth cookies but because we have Webforms, WebApi, MVC and OWIN, they all like to deal with cookies differently. OWIN should still be solely in charge of the auth cookies, so the auth extensions are cleaned up, the renewal now works by queuing the renewal and we have custom middleware detect if a force renewal has been queued and we renew the auth cookie there. Have obsoleted a few methods that should not be used that write auth tickets directly (this is purely for backwards compat with webforms). All of these changes now ensure that the auth cookie is renewed consistently between Webforms, WebApi, MVC and OWIN. Some changes also include ensuring that OWIN is used to sign out.
2015-11-19 18:12:21 +01:00
Shannon
f472f5d950
Ensures that OWIN signout method is called - this ensures that any auth middleware configured for the current user is called for sign out. Updates our cookie middleware provider to also ensure that our custom cookies are cleared when signing out with OWIN.
2015-11-19 11:57:24 +01:00
Shannon
4ce0e6bac3
Starts fixing up the doc type folders stuff, fixes permissions settings on the trees, adds error messaging for duplicating folders, removes the click handler for folder nodes
2015-11-12 18:59:38 +01:00
Shannon
c477f7a840
Gets more validation bits wired up. Server side validation is now working which is based on val-server-field since we can use this natively with the asp.net ModelState result instead of the val-server which is actually to be used with PropertyType (Property Editors). Next up is validation for the different tabs of the editor.
2015-10-08 17:13:38 +02:00
Shannon
4d012ee1e1
Ensures that any stale old temp upload files are removed any time media is uploaded.
2015-09-08 18:33:43 +02:00
Shannon
cd3c17d73f
Obsoletes AllowAll on MemberAuthorizeAttribute
2015-08-21 12:15:45 +02:00
Shannon
6d8ffb903f
Ensures events for deleting, trashing and unpublishing are done using the event messages, updates UI to support showing these messages in the list view, Since we cannot change the
...
method results on a service, we've created a new temporary service that we will explicitly implement with an extension method to get it. This is temporary until v8 where we will just replace
the original methods on the service with these methods and then remove this class.
2015-07-29 15:12:12 +02:00
Shannon
aa08a4ca37
Gets the messages being pumped out to the UI. Updates the ContentService and MediaServices to have a SaveWithStatus in order to determine the response, we'll need to update most of the methods to also have this OperationStatus. Now messages can be added to the UI for Saving & publishing for media and content services, we'll need to update more to support everything.
2015-07-24 11:44:09 +02:00
Shannon
9606cab81e
Fixes: U4-4669 Required checkbox is overruled by regex on document type
2015-07-23 14:44:02 +02:00
Shannon
7c96f95491
Fixes: U4-6723 User timeout in the back office is an issue with new ASP.Net identity implementation
2015-06-18 19:16:49 +02:00
Shannon
11b5123bbb
fixes datatokens dictionary check and ensures that webapi is initialized at the very end of the boot cycle.
2015-05-08 19:13:58 +10:00
Shannon
f87764f9d5
a bit better support for unit testing controllers with ctor overloads
2015-04-13 20:13:57 +10:00
Shannon
9d4e0f1e3d
Changes UmbracoApiControllerBase to lazily create properties which helps with unit testing
2015-04-13 16:08:34 +10:00
Shannon
800b8b5f7e
updates nuspec, creates new UmbracoApiControllerBase which is not auto-routed but contains the base services
2015-04-13 15:06:40 +10:00
Shannon
f2e319a01f
Updates the UmbracoBackOfficeIdentity to have better support for claims and adds unit tests for it. Creates OwinLogger's and methods to apply them. Updates security methods to ensure that a UmbracoBackOfficeIdentity is returned even from a normal ClaimsIdentity which will be the case with bearer tokens. Updates the angular anti-forgery checker to be ignore if the auth type is not cookie based. Adds a simple token server provider that people can use if they want. Now token authentication is working.
2015-04-10 14:22:09 +10:00
Shannon
90b562a0a1
Update the PostLogin method to write the auth ticket the way that webapi is supposed to, not sure how this was actually working before because writing cookies directly with HttpContext and then also using WebApi normally doesn't work (maybe in very specific circumstances), so now the cookie writing is done consistently and it is working, prior to this i was getting lots of issues with the xsrf tokens. Updated some user model mappings for convenience and update naming conventions for some properties of the BackOfficeIdentityUser for consistency.
2015-04-01 13:42:07 +11:00
Shannon
52c4d80cfc
more identity awesome
2015-04-01 13:41:33 +11:00
Shannon
428df7ae4a
Merge branch 'dev-v7' into 7.3.0
...
Conflicts:
src/Umbraco.Core/Umbraco.Core.csproj
src/Umbraco.Web.UI/packages.config
src/Umbraco.Web/Umbraco.Web.csproj
2015-02-17 15:11:10 +01:00
Sebastiaan Janssen
25cfceadc0
Merge branch 'dev-v7-upgradablemvc5webapi2' of https://github.com/Shazwazza/Umbraco-CMS into Shazwazza-dev-v7-upgradablemvc5webapi2
...
Conflicts:
build/UmbracoVersion.txt
src/Umbraco.Core/Configuration/UmbracoVersion.cs
2015-02-17 10:46:36 +01:00
Shannon
1cb0cd296c
Decoupling more things, mostly to do with the PluginManager and logging which now requires an IServiceProvider so have created a simple instance of that.
2015-01-16 15:47:44 +11:00
Shannon
b3a93e369a
WIP - bit of a refactor on the IFile stuff, moves all validation to the service level and obsoletes the IFile.IsValid methods. Adds v5 style CSS property parsing, but might integrate that with this zany css parser in the core for 'safer' parsing.
2015-01-14 12:09:30 +11:00
Shannon
77e672aec1
Exposes an ILogger property called Logger on all relevant base classes
2015-01-07 17:38:25 +11:00
Shannon
282550f402
Fixes: U4-6080 Server side email validation doesn't occur on existing members when they are saved
2015-01-07 13:17:44 +11:00
Shannon
4a72e8c3df
Creates ReflectedFixedRazorViewEngine and version checkers to dynamically update code depending on the major versions of MVC and WebApi
2015-01-06 17:40:28 +11:00
Shannon
95f68b8bde
Another attempt at fixing: U4-4049 Some images fail when uploading multiple media files
2015-01-06 11:45:08 +11:00
Shannon
485621b03a
Revert "Merge branch '7.2.0-U4-4049' into dev-v7"
...
This reverts commit 2ad86ec83d , reversing
changes made to 70ddf646be .
2015-01-06 11:22:40 +11:00
Shannon
3f1b031789
fixes OverridableAuthorizationAttribute to ensure that the class level filter is applied if there are no child filters
2015-01-06 11:19:44 +11:00
Shannon
459d9b34e7
Fixes: U4-5974 User which is not administrator getting logged out when clicking recycle bin
2015-01-05 12:22:49 +11:00
Shannon
6555fd5791
Updated U4-4049 - we now use media formatters instead of IModelBinder (this is actually the preferred way anyways). The validation is then moved to just a filter instead of done in the model binder. This way a media formatter is pure async, so we can ReadFromStreamAsync in a completely native async operation which should hopefuly fix this issue.
2014-12-03 21:06:01 +11:00
Shannon
dc27368397
Fixes: U4-5891
2014-11-27 17:57:33 +11:00
Shannon
302e9ec11c
renames to GetModelAsync
2014-10-24 17:15:21 +10:00
Shannon
e8a2ddb2a4
Simplifies NamespaceHttpControllerSelector and should be better with regards to locking instead of enumerating over a concurrent collection.
2014-10-23 10:51:33 +10:00
filipw
9e7d2884b9
do not recreate HttpControllerDescriptor every time
2014-10-21 08:39:21 +02:00
filipw
fe31ed5cb2
changed NamespaceHttpControllerSelector to use a helper class NamespaceHttpControllerMetadata rather than raw Type caching
2014-10-21 08:37:40 +02:00
Shannon
2ec8d124fd
renames new ssl attribute and updates proj
2014-10-01 16:06:19 +10:00
Brian Powell
8aa9326e10
Add UmbracoUseSSL filter to redirect to HTTPS if umbracoUseSSL is set. Fixes U4-4737
2014-09-30 20:58:12 -04:00
Shannon
4230668c8b
creates new UmbracoTreeAuthorizeAttribute which helps make tree and editor security with webapi a bit more flexible with a different option to authorize against an assigned app based on a tree alias.
2014-09-05 16:08:41 +10:00
Shannon
39987d5f7d
Fixes: U4-5384 Custom ApiController routes not working after upgrade to 7.1.5
2014-08-25 16:24:23 +10:00
Sebastiaan Janssen
dba180d809
Merge remote-tracking branch 'origin/7.1.5' into 7.2.0
...
Conflicts:
src/Umbraco.Web.UI.Client/gruntFile.js
src/Umbraco.Web.UI.Client/lib/lazyload/lazyload.min.js
src/Umbraco.Web.UI.Client/src/views/content/content.edit.controller.js
src/Umbraco.Web/Umbraco.Web.csproj
src/Umbraco.Web/packages.config
2014-08-04 13:32:44 +02:00
Shannon
ad4135f629
does a toarray to make sure it doesn't reiterate
2014-06-27 14:04:35 +10:00