Robert Speicher
a602df3031
Pass the "Remember me" value to the 2FA token form
...
Prior, if a user had 2FA enabled and checked the "Remember me" field,
the setting was ignored because the OTP input was on a new form and the
value was never passed.
Closes #18000
2016-05-30 22:25:35 -04:00
Robert Speicher
3e3463218d
New confirmation email 🔥
2016-05-25 16:56:06 -04:00
Robert Speicher
66ae3897e2
Make the standard Devise confirmation email our new plaintext version
2016-05-25 16:56:06 -04:00
Andrei Gliga
28da3a88de
show only the eanbled oauth providers
2016-05-12 13:44:46 +03:00
Andrei Gliga
284eccb5e6
render the omniauth_box if there are any button_based_providers
2016-05-12 13:44:46 +03:00
Douwe Maan
622ad2355a
Merge branch 'rs-unique-signup-fields' into 'master'
...
Improve uniqueness of field names on the signup form
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075
See merge request !3826
2016-05-04 13:33:15 +00:00
connorshea
b898810c8d
Improve the Two-factor Authentication sign-in text [ci skip]
...
Resolves #14543 .
2016-05-03 13:55:19 -06:00
Phil Hughes and Robert Speicher
50ed43e490
Improved confirmation UX
...
Closes #4228
2016-04-21 20:20:09 -04:00
Robert Speicher
a6ba8647f9
Improve uniqueness of field names on the signup form
...
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075
2016-04-19 16:00:45 -04:00
Timothy Andrew
d5f44d8a4b
Don't retrieve default values from params
...
- In the signup page.
2016-04-13 13:03:11 +05:30
Timothy Andrew
e57a9551df
Don't populate the password field on signup validation errors.
...
- Previously, we were pulling `params[:user][:password] as the default
value for the password field. This is incorrect; we should be pulling
it from `@user.password` or the like.
2016-04-13 12:02:20 +05:30
Arinde Eniola
367818d293
change the css class has_tooltip to has-tooltip universally
2016-03-20 21:37:22 +01:00
Robert Speicher
b95ef77e23
Move "I should see Crowd login form" feature to a view spec
...
We were doing all kinds of code gymnastics to "enable" Crowd in the
feature spec and this would sometimes cause a transient failure.
Really what it's testing is if the Crowd login form shows when Crowd's
enabled, so this is much better suited to a view spec.
2016-02-24 17:38:13 -05:00
Peter Hudec and Rémy Coutable
dcaeee4579
Show Crowd login even when sign-in is disabled
2016-02-23 15:13:50 +01:00
Dmitriy Zaporozhets
3238b0bc9f
Replace nav-tabs with nav-links
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2016-01-13 17:13:36 +01:00
Gabriel Mazetto
a3469d914a
reCAPTCHA is configurable through Admin Settings, no reload needed.
2015-12-28 18:50:29 -02:00
Stan Hu
4c6591c922
Make sign-up form retain fields after failed CAPTCHA test
2015-12-27 19:47:21 -08:00
Stan Hu
9f7d379c2a
Add support for Google reCAPTCHA in user registration to prevent spammers
2015-12-27 09:04:11 -08:00
Drew Blessing
be41d84fb0
Allow account unlock via email
2015-12-14 15:35:02 -06:00
Robert Speicher
9337da7864
Revert "Merge pull request #9812 from chrspeich/hide-tabs-lone-auth-provider"
...
This reverts commit 84999611d8 , reversing
changes made to 0d9fb211f3 .
2015-11-15 21:37:13 -05:00
Christian Speich
b14198a5e7
Hide tab-bar in login-box when only one tabs is shown.
2015-11-07 12:40:14 +01:00
Robert Speicher
5c80ceee0d
Autofocus the email field on the password reset form
2015-09-30 15:39:59 -04:00
Valery Sizov
3700e5a960
Crowd integration
2015-09-02 12:42:01 +03:00
Daryl Chan
e72a9685f3
Added tags to disable autocapitalize and autocorrect on login field
...
- Updated CHANGELOG
2015-07-29 15:42:52 +08:00
Douwe Maan
70a3c165a9
Allow custom label to be set for authentication providers.
2015-07-23 15:20:12 +02:00
Douwe Maan
44458f3ca2
Add "Remember me" checkbox to LDAP signin form.
2015-06-05 14:37:01 +02:00
Vinnie Okada
af428b1259
Fill in email on the new password form
2015-05-16 14:03:18 -06:00
Dmitriy Zaporozhets
c2ee828c19
Merge branch 'omniauth-csrf' into 'master'
...
Protect OmniAuth request phase against CSRF.
Addresses #2268 .
See merge request !1793
2015-05-14 14:22:26 +00:00
Robert Speicher
76873ce4a4
Move "invalid 2FA code" error message to the flash
...
This makes it consistent with the Invalid email/password error message
from the previous step.
2015-05-09 17:32:49 -04:00
Robert Speicher
a4267033f2
Add a hint on login form about using a recovery code
2015-05-09 17:32:09 -04:00
Robert Speicher
32971b0af4
Refactor SessionsController
...
Also adds test case for providing an invalid 2FA code and then a valid
one without re-entering username and password.
2015-05-09 17:32:09 -04:00
Robert Speicher
6fa2942920
Update login views for two-factor auth
2015-05-09 17:31:40 -04:00
Robert Speicher
bd680999f9
Be consistent with what we call the 2FA feature
...
"Two-factor" vs. "2-Factor"
2015-05-09 17:31:39 -04:00
Dmitriy Zaporozhets and Robert Speicher
de9e1c3bad
Turn 2-factor authentication into 2 steps process. Disabled 2fa UI for ldap users since it is not supported
2015-05-09 17:31:10 -04:00
Dmitriy Zaporozhets and Robert Speicher
7302395142
Init 2 factor authentication for user model
2015-05-09 17:31:07 -04:00
Douwe Maan
26ad250989
Add a page title to every page.
2015-04-30 19:12:15 +02:00
Douwe Maan
571ba5a7fe
Protect OmniAuth request phase against CSRF.
2015-04-24 17:03:18 +02:00
Dmitriy Zaporozhets
ac4968b97e
Merge pull request #9062 from fgimian/omniauth-disable-turbolink
...
Disable turbolinks for omniauth link to avoid rendering problems
2015-04-23 16:11:21 +03:00
Robert Speicher
8714038410
Improve wording below signup box
...
[ci skip]
2015-04-07 17:46:00 -04:00
Fotis Gimian
cbe9654abe
Disable turbolinks for omniauth link to avoid rendering problems
2015-03-31 21:04:47 +11:00
Dmitriy Zaporozhets
9e554a5223
Update views to single form of address. Change "my" to "your"
2015-03-22 20:10:12 -07:00
Dmitriy Zaporozhets
777c119fd2
Restyle oauth accounts at profile page and add ability to unlink account
2015-03-21 17:46:00 -07:00
Douwe Maan
09791774a5
Use custom LDAP label in LDAP signin form.
2015-03-13 15:42:31 +01:00
Dmitriy Zaporozhets
12581f15ee
Merge pull request #7473 from sodabrew/patch-1
...
Improve login screen when only OmniAuth providers are enabled
2015-03-02 15:18:59 -08:00
Dmitriy Zaporozhets
ee26dae63e
Update bootstrap-sass gem
2015-02-19 15:02:49 -08:00
Aaron Stone
252ee4e7e5
Improve login screen when only OmniAuth providers are enabled
...
Avoids an empty Sign in box when signup_enabled? is false, and avoids
showing "No authentication methods configured" unless there really are none.
OmniAuth signin gets its own file for consistency with signin and signup and LDAP.
2015-02-13 23:49:12 -08:00
Douwe Maan
7c39e728ef
Move OAuth signin options just below signin box.
2015-02-13 15:16:17 +01:00
Douwe Maan
da1608196b
Add headings to signin/signup blocks on signin page.
2015-02-13 15:16:00 +01:00
Douwe Maan
485e55f88c
Clean up devise views.
2015-02-05 19:12:47 +01:00
Jacob Vosmaer
b79ada97bb
Remove password strength indicator
...
We were having the following issues:
- the indicator would sometimes stay red even if the password that was
entered was long enough;
- the indicator had a middle yellow signal: what does that mean?
- the red/green backgrounds were not color-blind-friendly.
2015-01-15 14:10:13 +01:00