summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Use factory pattern to create appAlexander Sulfrian2016-02-023-22/+29
|
* manage.py: Add ListUsers commandAlexander Sulfrian2016-02-021-1/+29
|
* utils/login: Add create_login_managerAlexander Sulfrian2016-02-022-15/+21
|
* manage.py: Remove reference to appAlexander Sulfrian2016-02-021-7/+5
|
* utils/sessions: Automatic permanent sessionsAlexander Sulfrian2016-02-022-15/+15
|
* login: Customize login_messageAlexander Sulfrian2016-02-021-0/+1
|
* backend/user/ldap: New LdapBackendAlexander Sulfrian2016-02-022-156/+120
| | | | | | | | | | | | | | Change the schema used in the LDAP server. The service passwords are now associated by the hierarchy: dn: uid=test,ou=users,... dn: cn=service1,uid=test,ou=users,... dn: cn=service2,uid=test,ou=users,... ... This is the new structure used with the new Slapi plugin. Additional to that, the new backend uses the python-ldap3 module, because python-ldap has no python3 compatibility.
* Account: Support direct setting of attributesAlexander Sulfrian2016-02-023-3/+11
| | | | | | | | | | | | | | | Direct access to additional attributes was possible before, but setting the same value, created a new local property: >>> acc = Account(...) >>> acc.mail == acc.attributes['mail'] True >>> acc.mail = "foobar" >>> acc.mail == acc.attributes['mail'] False Not also assignments are possible and all assignments to unknown properties will create new attributes.
* backend/user: Delete requires an Account nowAlexander Sulfrian2016-02-023-4/+3
| | | | | | delete does not support deletion by uid anymore. It requires an Account instance and get the password from the object. So we drop the additional password argument.
* manage: Add list-services commandAlexander Sulfrian2016-02-022-1/+78
|
* Use better defaults in settingsAlexander Sulfrian2016-02-021-2/+2
|
* Code styleAlexander Sulfrian2016-02-021-3/+3
|
* Get services from configAlexander Sulfrian2016-02-024-26/+31
|
* Create new login blueprintAlexander Sulfrian2016-02-027-45/+67
| | | | The login and logout view are now in the login blueprint.
* Redirect to login pageAlexander Sulfrian2016-02-023-5/+2
|
* Rename views: settings->index, index->loginAlexander Sulfrian2016-02-025-97/+97
|
* Fix commentAlexander Sulfrian2016-02-021-3/+2
|
* Fix sorting of importsAlexander Sulfrian2016-02-021-1/+1
|
* Update account password on change in dummy backendAlexander Sulfrian2016-02-021-5/+5
|
* Use Flask-Login for login handlingAlexander Sulfrian2016-02-029-104/+102
|
* Simplify configuration loadingAlexander Sulfrian2016-02-021-3/+1
|
* Use URLSafeTimedSerializer for confirmation tokenAlexander Sulfrian2016-02-023-90/+34
|
* Create models.py with Account and ServiceAlexander Sulfrian2016-02-024-76/+76
|
* Use consistent exceptions for all user backendsAlexander Sulfrian2016-02-025-11/+25
| | | | | | Now all backends raise custom exception types and does not forward the internal exception types. So there is no need to import the ldap module in other modules.
* Encrypt the session data by defaultAlexander Sulfrian2016-02-027-34/+71
| | | | | Before we just encrypted the password, now we encrypt the whole session information by default.
* Create utils packageAlexander Sulfrian2016-02-021-0/+0
|
* Bump flask versionAlexander Sulfrian2016-02-021-1/+1
| | | | Flask-0.10 has better support for signed sessions based on itsdangerous.
* Drop before first requestAlexander Sulfrian2016-02-021-7/+5
| | | | @app.before_first_request is the same as duing it runing app creation
* Remove context_processor with single useAlexander Sulfrian2016-02-022-7/+3
| | | | | If we need the variable only in a single view, we can simply supply this value for this single view.
* Remove blueprint name for "blueprint-local" urlsAlexander Sulfrian2016-02-022-5/+5
|
* Move general views into blueprintAlexander Sulfrian2016-02-0213-268/+269
| | | | The use of a default blueprint allows more independence of the app object.
* Do not disbale csrfAlexander Sulfrian2016-01-251-5/+5
|
* Use validate_on_submit helperAlexander Sulfrian2016-01-251-6/+6
| | | | | There is no need to validate the request.method by hand, the validate_on_submit helper does that.
* Remove unused importAlexander Sulfrian2016-01-251-1/+0
|
* backend/user: Allow different backends for usersAlexander Sulfrian2016-01-259-344/+476
|
* backend/mail: Allow different backends for mailAlexander Sulfrian2016-01-258-38/+115
|
* Account: Allow direct access to attribuesAlexander Sulfrian2016-01-251-0/+7
|
* All forms should contain a non-empty actionAlexander Sulfrian2016-01-252-2/+2
|
* Render most forms automatically, csrf is also only a fieldAlexander Sulfrian2016-01-259-54/+54
| | | | | | Most forms could be rendered in a loop, so that it automatically contains all fields. The csrf field is only a field, too. So that it could be rendered with render_field, too.
* Moved everything into a packageAlexander Sulfrian2016-01-2530-2/+2
|
* Add flask-scriptAlexander Sulfrian2016-01-252-0/+19
|
* Move admin interface into a blueprintAlexander Sulfrian2016-01-259-85/+104
|
* Bump flask versionAlexander Sulfrian2016-01-225-138/+8
|
* improve wording about service passwordsMarian Sigler2015-12-071-4/+10
|
* utils: also set envelop sender for mailsAlexander Sulfrian2014-01-101-1/+7
|
* Added in about 'Wie kann ich einen Spline-Account löschen?'Nico von Geyso2013-11-021-0/+7
|
* Re-Enabled jabber service entrymk2013-10-211-1/+1
|
* remove a line I forgot to remove ... :/Marian Sigler2013-05-231-2/+0
|
* use a constant time compare when verifying confirmation linksMarian Sigler2013-05-231-1/+27
|
* add possibility to disable accountsMarian Sigler2013-05-095-3/+84
|