aboutsummaryrefslogtreecommitdiff
path: root/gn_auth/auth/authorisation/users
AgeCommit message (Collapse)Author
11 daysBugfix: remove obsolete variable name.Frederick Muriuki Muriithi
11 daysBugfix: Get user IDs from objects.Frederick Muriuki Muriithi
11 daysBugfix: Retrieve the reasons, not the entire dict.Frederick Muriuki Muriithi
11 daysImprove messaging for deletion failures.Frederick Muriuki Muriithi
11 daysAdd note to self for possible "improvement" in user deletionFrederick Muriuki Muriithi
Add a note for considerations to make regarding recovery from error trying to delete users, so we can respond with more informative messages. Here, "improvement" is in quotes, because the priority leans more towards collecting more information for better feedback, which might be at the expense of speed of code.
12 daysBugfix: Handle possible missing json data.Frederick Muriuki Muriithi
2025-07-03Fix minor issues caught by mypy.Frederick Muriuki Muriithi
2025-07-03Bugfix: Fix clauses for user listing query.Frederick Muriuki Muriithi
2025-07-03Fix some linting issues.Frederick Muriuki Muriithi
2025-07-03Bugfix: Build up "WHERE" clauses correctlyFrederick Muriuki Muriithi
Have the email and name checked with "OR" where both are present.
2025-07-03Provide missing symbol.Frederick Muriuki Muriithi
2025-07-03Bugfix: Set the correct value.Frederick Muriuki Muriithi
2025-06-25Delete system users.Frederick Muriuki Muriithi
2025-06-24Search in names too. Fix query params.Frederick Muriuki Muriithi
2025-06-24Enable filtering of data, and limiting length.Frederick Muriuki Muriithi
2025-05-06Fix failing mypy.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-05-05Fix "C0301: Line too long" pylint error.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-03-14Add missing fix: Make display of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Make display of number of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Move expiry of auth-based emails into a config variable.Frederick Muriuki Muriithi
To ease setting up of value without changing code, move the value out into a configuration variable.
2025-02-26Fix pylint errors.Frederick Muriuki Muriithi
2024-10-09Linting: Fix minor linting errorsFrederick Muriuki Muriithi
2024-10-09Fix masquerading logicFrederick Muriuki Muriithi
Update the code to actually use JWT bearer tokens that the older plain authorisation tokens that were previously used.
2024-10-09Update Configs: Change `OAUTH2_SCOPE` => `OAUTH2_SCOPES_SUPPORTED`Frederick Muriuki Muriithi
Use the OAUTH2_SCOPES_SUPPORTED application configuration variable, that is used by the flask integration for the Authlib library to set up the supported scopes.
2024-10-09Pass on all GET parameters when redirecting.Frederick Muriuki Muriithi
2024-10-03Provide a way to change OAuth2 client secrets.Frederick Muriuki Muriithi
2024-08-30If config variables are not set, return empty string.Frederick Muriuki Muriithi
2024-08-21Only import anonymous collections if they contain traitszsloan
2024-08-21Update 'changed' field when traits are added or removed from collectionszsloan
2024-08-21Do actual password change.Frederick Muriuki Muriithi
2024-08-21Provide email and improve UI text/notification.Frederick Muriuki Muriithi
2024-08-20Save to DB then send emailFrederick Muriuki Muriithi
Separate the saving of the token from its sending.
2024-08-20Handle the "GET" part of the change-password requestFrederick Muriuki Muriithi
- Delete any expired tokens - Display the UI if token is valid, else redirect with error notification.
2024-08-20Pass GET parameters for correct redirection.Frederick Muriuki Muriithi
2024-08-20Fix query: Replace any existing token.Frederick Muriuki Muriithi
2024-08-19Generate token and send out "Forgot Password" emailFrederick Muriuki Muriithi
* Generate token to use for verifying the password-change request * Send out email with token
2024-08-15Fix a bunch of linting errors.Frederick Muriuki Muriithi
2024-08-15Reduce UI complexityFrederick Muriuki Muriithi
Providing both the "Enter Verification Token" and the "Send Verification Email" elements of the same user interface seems to confuse users. This commit ensures that the system will provide one or the other, but not both, depending on whether or not there is a pending verification token present for the user.
2024-08-15Import specific classes from the datetime module.Frederick Muriuki Muriithi
2024-08-15fix: bugs with generating auth tokensJohn Nduli
2024-08-15fix: bugs in masquerade apiJohn Nduli
2024-08-13Emails: Make "From" address configurableFrederick Muriuki Muriithi
We are running GeneNetwork in different environments. Each environment could have it's own separate domain, and need a different sender email to allow the underlying services to allow the emails through.
2024-08-08Bug: Prevent fall-through to verification if code is expired.Frederick Muriuki Muriithi
2024-08-08Forward email to email verification page.Frederick Muriuki Muriithi
2024-08-07Log out user registration errors at the `ERROR` log-level.Frederick Muriuki Muriithi
2024-07-31Enable registration of a public-jwks-uri for every clientFrederick Muriuki Muriithi
2024-07-31Enable external configuration of session expiry periodFrederick Muriuki Muriithi
Enable passing in the number of minutes that a session can be valid for. This enables the length of time that the session can last to be configurable rather than hard-coded.
2024-06-17Fix mypy errorsFrederick Muriuki Muriithi
2024-06-17Use the form's json attribute to retrieve sent dataFrederick Muriuki Muriithi
The system uses JSON as the default communication format, so we use the form's json attribute to get any data sent.
2024-06-04Redirect appropriately when verifying emails.Frederick Muriuki Muriithi