summary refs log tree commit diff
path: root/tests/rest/client/v1/test_login.py (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Allow expired accounts to logout (#7443)Andrew Morgan2020-05-141-1/+68
|
* Do not allow a deactivated user to login via SSO. (#7240)Patrick Cloke2020-04-091-3/+39
|
* Always whitelist the login fallback for SSO (#7153)Richard van der Hoff2020-03-271-1/+8
| | | | | | | That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's.
* Add a whitelist for the SSO confirmation step.Richard van der Hoff2020-03-021-3/+29
|
* Add a confirmation step to the SSO login flowBrendan Abolivier2020-03-021-0/+85
|
* Implement access token expiry (#5660)Richard van der Hoff2019-07-121-0/+108
| | | | Record how long an access token is valid for, and raise a soft-logout once it expires.
* Run Black on the tests again (#5170)Amber Brown2019-05-101-27/+9
|
* Add admin api for sending server_notices (#5121)Richard van der Hoff2019-05-021-1/+1
|
* Move admin api impl to its own packageRichard van der Hoff2019-05-011-2/+3
| | | | It doesn't really belong under rest/client/v1 any more.
* Add ratelimiting on failed login attempts (#4865)Brendan Abolivier2019-03-181-0/+45
|
* Add ratelimiting on login (#4821)Brendan Abolivier2019-03-151-0/+118
Add two ratelimiters on login (per-IP address and per-userID).