Commit graph

669 commits

Author SHA1 Message Date
Laurent Peuch
98b1b53fbf Merge pull request #87 from YunoHost/hash_algo
[fix] Auto-update user password hashes with new algo
2017-08-18 02:42:00 +02:00
Laurent Peuch
d440d06ae7 [fix] be paranoid and prevent shell injections here also while input is supposed to be safe 2017-08-18 02:35:08 +02:00
Laurent Peuch
c8c7fe7fc7 [fix] prevent shell injections 2017-08-18 02:34:46 +02:00
Laurent Peuch
37938fd0f4 Merge pull request #86 from MCMic/unstable
Fixed support for incomplete translations
2017-08-17 23:13:34 +02:00
Laurent Peuch
d16f3f81d0 [enh] auto rehash in sha-512 users passwords on login 2017-08-15 11:41:24 +02:00
Laurent Peuch
2ff2fb92f3 [enh] encode password using sha512 on user modification of password 2017-08-15 11:11:35 +02:00
MCMic
97df24e794 [i18n] Translated using Weblate (Esperanto)
Currently translated at 26.8% (11 of 41 strings)
2017-08-11 18:35:42 +02:00
Côme Chilliet
47f01b3f6f Fixed support for incomplete translations (fallback to default language for missing strings) 2017-08-10 16:31:00 +02:00
Alexandre Aubin
044aa1d8eb Update changelog for 2.7.0 release 2017-08-07 12:59:52 -04:00
YunoHost Bot
3ecdb97bf6 Update from Weblate. (#85)
* Added translation using Weblate (Russian)
* [i18n] Translated using Weblate (Russian)
Currently translated at 12.1% (5 of 41 strings)
2017-08-07 18:24:55 +02:00
Evgeniy Ozhiganov
a4445a862b [i18n] Translated using Weblate (Russian)
Currently translated at 12.1% (5 of 41 strings)
2017-08-07 18:20:56 +02:00
Ozhiganov
c7bc762ea3 Added translation using Weblate (Russian) 2017-07-21 05:20:01 +02:00
Laurent Peuch
50fcc831bf [mod] comment didn't matched reality 2017-05-27 19:19:48 +02:00
opi
aca5f054ab Update changelog for 2.6.8 release 2017-05-23 21:46:14 +02:00
Laurent Peuch
c1a388ccf0 Merge pull request #84 from YunoHost/caching_for_hash
[enh] uses caching for hash to avoid heavy recalculation and process spawning
2017-05-23 21:40:30 +02:00
Laurent Peuch
5157415ce3 [fix] remove tabs 2017-05-23 07:26:41 +02:00
Laurent Peuch
76677fab0d [enh] uses caching for hash to avoid heavy recalculation and process spawning 2017-05-22 23:01:18 +02:00
opi
37c0980155 Update changelog for 2.6.7 release 2017-05-18 09:14:33 +02:00
opi
d105b28ccf [fix] sidddy takes 3 d 2017-05-18 08:56:48 +02:00
opi
25ce273120 [love] Add siddy to contributors file.
Thanks for you security reviews !
2017-05-18 08:54:45 +02:00
sidddy
fc52f05459 Quick fix for CDA security issue 2017-05-18 08:45:20 +02:00
Laurent Peuch
98a6879ab4 [fix] don't include ip in token, this is useless and make infinite redirection\n\nIt has been confirmed by a security friend that this was nearly useless here since the token is marked as Secure and can only be exchanged on https so if someone managed to steal it the user have way more important problems. 2017-05-18 08:40:33 +02:00
Laurent Peuch
2456eda200 [fix] Use hmac_sha512 instead of md5 for cookie hashing. Don't store the key in token anymore (#80)
* [fix] uses hmac_sha512 for hasing the token and don't store the key in it anymore
* [mod] remove python script and talk directly to openssl
2017-05-18 08:34:36 +02:00
Laurent Peuch
96b077fe02 Merge pull request #79 from YunoHost/crypto_random
[fix] uses a cryptographically secure source of randomness
2017-05-17 21:37:55 +02:00
Laurent Peuch
c5bb6ef2ae [fix] uses a cryptographically secure source of randomness 2017-05-15 03:29:34 +02:00
Laurent Peuch
054b7d1752 [mod] remove things not related to logging 2017-05-13 15:08:56 +02:00
sidddy
ad39e3ded5 Added access log, ignore IP, check acl for basic auth 2017-05-13 15:06:18 +02:00
opi
46b6d1048e Update changelog for 2.6.6 release 2017-05-12 22:51:24 +02:00
opi
737ebba474 Merge branch 'acl_on_basic_http_auth' into stable 2017-05-12 22:49:12 +02:00
Laurent Peuch
c019f9d208 [fix] check users ACL on http basic auth 2017-05-12 22:45:19 +02:00
Alexandre Aubin
442147bbbe Update changelog for 2.6.5 release 2017-05-12 22:45:19 +02:00
Jeroen Keerl
2a648b8475 [i18n] Translated using Weblate (Dutch)
Currently translated at 95.1% (39 of 41 strings)
2017-05-12 22:45:19 +02:00
Fabian Gruber
4450ba8f95 [i18n] Translated using Weblate (German)
Currently translated at 100.0% (41 of 41 strings)
2017-05-12 22:45:19 +02:00
Alexandre Aubin
d0709ff1f3 Adding link to bugtracker 2017-05-12 22:45:19 +02:00
JimboJoe
5228bf4f0c [fix] Fix tile not displayed when app is installed on root (bug #285) (#71)
* Fix proposal for bug #285 (YunoHost tile is not displayed when the app is installed on root path)
* Fix access to administration page
2017-05-12 22:45:19 +02:00
Alexandre Aubin
3a04c42ae6 Update changelog for 2.6.5 release 2017-04-24 13:03:07 -04:00
opi
eba9c6ede2 Merge pull request #76 from yunohost-bot/weblate-yunohost-ssowat
Update from Weblate.
2017-04-24 17:34:20 +02:00
Jeroen Keerl
d7ed67a586 [i18n] Translated using Weblate (Dutch)
Currently translated at 95.1% (39 of 41 strings)
2017-04-24 17:29:57 +02:00
Fabian Gruber
ad274017d9 [i18n] Translated using Weblate (German)
Currently translated at 100.0% (41 of 41 strings)
2017-04-03 01:35:23 +02:00
Alexandre Aubin
25eeff041d Adding link to bugtracker 2017-04-03 01:35:16 +02:00
JimboJoe
b1a1d55e66 [fix] Fix tile not displayed when app is installed on root (bug #285) (#71)
* Fix proposal for bug #285 (YunoHost tile is not displayed when the app is installed on root path)
* Fix access to administration page
2017-04-02 23:47:54 +02:00
opi
edb1ea079c Update changelog for 2.6.4 release 2017-03-14 15:39:44 +01:00
opi
f68c7f9e44 [fix] Remove help-link in portal as they don't link to nothing. Fix #68 2017-03-14 15:32:49 +01:00
opi
ee971b453d Update changelog for 2.6.3 release 2017-03-08 11:13:50 +01:00
opi
16923ffc95 Merge pull request #75 from yunohost-bot/weblate-yunohost-ssowat
Update from Weblate.
2017-03-08 11:12:29 +01:00
opi
a6911d9037 [i18n] Translated using Weblate (French)
Currently translated at 100.0% (41 of 41 strings)
2017-03-08 11:11:29 +01:00
opi
9956a7c1c1 [fix] Validate domain & url before redirection on login. 2017-03-08 11:08:33 +01:00
opi
e6631df5b1 Update changelog for 2.6.2 release 2017-03-02 12:19:11 +01:00
opi
773d7a2830 [enh] Add Trollken to contributors list. 2017-03-02 12:17:40 +01:00
opi
2a8bf7c0a3 Merge pull request #74 from yunohost-bot/weblate-yunohost-ssowat
Update from Weblate.
2017-03-02 12:14:25 +01:00