135 Commits

Author	SHA1	Message	Date
bergquist	a1b3986532	always delete session cookie even if db delete fails	2019-02-01 09:59:53 +01:00
bergquist	91bd908e03	adds more tests signing out session	2019-01-31 22:24:04 +01:00
bergquist	11c4967bdc	changes some info logging to debug	2019-01-31 21:51:14 +01:00
bergquist	88ca54eba9	renames signout function	2019-01-31 16:26:36 +01:00
bergquist	43ac79685a	delete auth token on signout	2019-01-31 16:13:35 +01:00
bergquist	75760aa892	dont specify domain for auth cookies	2019-01-25 10:40:50 +01:00
bergquist	d6edaa1328	moves cookie https setting to [security]	2019-01-24 19:04:58 +01:00
bergquist	516037fbdd	makes sure rotation is always higher than urgent rotation	2019-01-24 13:54:45 +01:00
bergquist	fd0f9f2dd2	fixes broken test	2019-01-24 12:06:44 +01:00
bergquist	ff483f3782	removes old cookie auth configuration	2019-01-24 10:55:10 +01:00
bergquist	56a521b264	makes auth token rotation time configurable	2019-01-24 10:50:18 +01:00
Carl Bergquist	766122856b	Merge pull request #14995 from bergquist/token_oauth ... Stores hashed state code in cookie for OAuth logins.	2019-01-23 10:39:12 +01:00
bergquist	c3ff3d644c	fixes nil ref in tests	2019-01-22 16:16:32 +01:00
bergquist	64124b5042	add setting for how to long we should keep expired tokens	2019-01-22 15:31:43 +01:00
bergquist	12f8338977	stores hashed state code in cookie	2019-01-22 15:22:24 +01:00
bergquist	d3ec8e1ccb	creates new config section for login settings	2019-01-22 15:22:11 +01:00
Marcus Efraimsson	4096449aec	extract auth token interface and remove auth token from context	2019-01-22 12:00:33 +01:00
Marcus Efraimsson	366e356e08	more auth token tests	2019-01-21 21:48:18 +01:00
bergquist	777bd9ea18	adds cleanup job for old session tokens	2019-01-21 19:03:32 +01:00
Marcus Efraimsson	f040f9a400	fix tests after renaming now	2019-01-21 16:53:00 +01:00
Marcus Efraimsson	38efc1d7d2	s/print/log	2019-01-21 15:53:40 +01:00
bergquist	92620af75f	avoid calling now() multiple times	2019-01-21 15:48:17 +01:00
Marcus Efraimsson	dd8476d81a	passing auth token tests	2019-01-21 15:06:33 +01:00
Marcus Efraimsson	565408194a	handle expired tokens	2019-01-21 13:22:20 +01:00
bergquist	697ddccd8e	set userToken on request when logging in	2019-01-21 11:42:10 +01:00
bergquist	55b3013eb3	moves initWithToken to auth package	2019-01-21 11:37:44 +01:00
Marcus Efraimsson	734a7d38b2	set cookie name from configuration	2019-01-21 11:21:43 +01:00
Marcus Efraimsson	766cfab374	change rotate time	2019-01-21 10:22:18 +01:00
Marcus Efraimsson	0d1e3759eb	mixor fixes	2019-01-21 10:20:23 +01:00
bergquist	2e97d39abe	removes commented code	2019-01-21 10:01:48 +01:00
bergquist	47a7d93fd9	moves rotation into auth since both happens before c.Next()	2019-01-21 08:59:01 +01:00
bergquist	fd937e3d95	remove maxage from session token	2019-01-17 21:03:27 +01:00
bergquist	c2accfa4c0	inital code for rotate	2019-01-17 17:11:52 +01:00
bergquist	aba6148c43	login users based on token cookie	2019-01-16 16:44:40 +01:00
Marcus Efraimsson	b0df7280be	begin user auth token implementation	2019-01-15 15:16:20 +01:00