Commit graph

83 commits

Author SHA1 Message Date
Jyri-Petteri Paloposki
d4c9041ccd More code style fixes 2021-01-06 03:47:35 +02:00
Jyri-Petteri Paloposki
2d02f2f262 Update last login field when validating existing login. Show 25 users in the user list instead of just ten. 2020-10-10 16:17:04 +03:00
Jyri-Petteri Paloposki
67a426a2e9 More code climate style fixes 2020-10-10 15:24:01 +03:00
Jyri-Petteri Paloposki
d8acf60049 Code style fixes 2020-10-10 05:14:24 +03:00
Jyri-Petteri Paloposki
0e5da18b71
Merge pull request #2453 from TracksApp/dependabot/bundler/aasm-5.1.1
Bump aasm from 4.12.3 to 5.1.1
2020-08-25 17:55:28 +03:00
Jyri-Petteri Paloposki
a0768636c3 Try fixing a few test deprecations 2020-08-20 19:33:46 +03:00
Jyri-Petteri Paloposki
f8cf140bf4 Show 10 users at a time instead of just five, the user list has plenty space. 2020-08-10 23:19:13 +03:00
Jyri-Petteri Paloposki
efee4976b0 Make email address voluntary in preferences; update tests to handle the added email field better 2020-07-20 20:08:18 +03:00
Jyri-Petteri Paloposki
dbaa9a85cb Add a field for user email address 2020-07-20 18:41:10 +03:00
Jyri-Petteri Paloposki
5394973346 #1955: Migrate tags to belong to named users for enhanced privacy. 2019-06-25 11:37:34 +03:00
Matt Rogers
596096b8d5
Prefer find_by over detect
Uses a better SQL query to pull a single object vs. pulling a full set
and then iterating over it.
2019-05-04 14:51:22 -05:00
Matt Rogers
0e21d64890
Convert to ApplicationRecord
Rails 5 requires the use of this superclass for all database backed
model objects now.
2018-11-03 15:57:14 -05:00
Matt Rogers
6e70fcbe5e
Update how the sorting is done in the User model
Use the `sort_by` method to do the sorting rather than converting to an
array and then calling `sort`

Co-Authored-By: Dan Rice <dnrce@users.noreply.github.com>
2018-10-27 11:27:22 -05:00
Nascher
dd6698b8a1 Update the maximum password length 2015-08-29 23:58:02 +00:00
Nascher
4632208699 Increase the maximum password length 2015-08-29 18:36:12 +00:00
Reinier Balt
d3aa73f783 first select than sort
sorting on a smaller collection is faster
2015-08-19 15:21:11 +02:00
Reinier Balt
405ad5a79f Fasterer: Enumerable#sort is slower
Enumerable#sort is slower than Enumerable#sort_by
2015-08-19 15:19:47 +02:00
Reinier Balt
2bd68fecb7 Create attachment model and hook it up to todo
An attachment has write permissions on group so that managing
attachments work from different users in same group, i.e. user apache
and user mail.
2015-08-05 16:05:19 +02:00
Dan Rice
7f1246f42f Make User.projects.actionize deterministic
Add project.id to the comparison to ensure consistent order when
counts are identical.
2015-01-03 18:12:11 -05:00
Dan Rice
ea0d40060a Remove support for deprecated password-hashing algorithm
* Remove all methods implementing and checking for the old algorithm
* Document a pre-upgrade step to check for remaining obsolete passwords
* Remove config.salt
2014-11-15 10:28:29 -05:00
Reinier Balt
18b7a467c1 fix #1400 where deleting a user will clean up tags and dependencies too 2014-09-23 16:35:45 +02:00
Matt Rogers
aa41e20e46 Remove trailing whitespace and tabs 2014-08-14 21:05:05 -05:00
Dan Rice
622291d98d Purge UserTime from app/* 2014-06-12 21:24:31 -04:00
Reinier Balt
2430fcb906 fix failing tests
not sure if the to_a fixes to get collections from activerecord is the right way
2014-05-16 14:33:18 +02:00
Mindaugas Mozūras
a97848f0ba Refactor negative blank? into present? 2013-09-13 15:19:25 +03:00
Matt Rogers
96777c2e3a Replace User#time with UserTime#time 2013-07-30 16:21:04 -05:00
Matt Rogers
8512e8db3b rename DateUtils to UserTime 2013-07-29 21:51:15 -05:00
Matt Rogers
a1aaa283f1 Remove User#at_midnight
Replace it with a class called DateUtils with a method called
`#midnight_for` that takes a preference instance and date to convert to
midnight.
2013-07-29 16:34:23 -05:00
Reinier Balt
671f64b419 move to strong_parameters of rails4. 2013-05-27 12:44:31 +02:00
Reinier Balt
54b106d96b remove use of .all on model 2013-05-13 12:33:01 +02:00
Reinier Balt
ebff4cfc0c start fixing deprecation warnings 2013-05-11 23:13:32 +02:00
Reinier Balt
bf3a1e653a increate test coverage for user and project model 2013-03-01 16:22:29 +01:00
Reinier Balt
ef91dd0c64 another set of dynamic finder migrations. All non-cucumber tests pass 2013-02-27 11:50:49 +01:00
Dan Rice
5b6cbf566a Don't sort todos when counting them
Grouping isn't as lax in PostgreSQL as it is in MySQL or SQLite. All
sort fields also need to be in the GROUP BY, or be aggregated. The order
isn't relevant when counting, so simply don't order in that case.

Fix #1336
2012-10-04 10:43:22 -04:00
Reinier Balt
13b58f3a10 all unit and functional tests are passing 2012-04-30 13:56:40 +02:00
Reinier Balt
fd433d76d8 fix all upgrade warnings from the rails_upgrade plugin 2012-04-30 13:56:38 +02:00
Reinier Balt
fd4fb6df9e get all unit tests running again. Seems we have some pretty old code in there :-) 2012-04-30 13:56:37 +02:00
Reinier Balt
86afd42148 Work in progress: has_many_polymorphs does not work with rails 3.2 because of intrusive changes in rails internals. I think we need to rip out this dependency... 2012-04-30 13:56:34 +02:00
Stefan Richter
d03928ef4c making cryptography stuff in user public 2011-10-10 22:31:51 +02:00
Stefan Richter
08fb85ef0d fixing issues with user creation 2011-10-05 16:25:30 +02:00
Reinier Balt
eb26f4f7b9 fix error on end of each request at cleanup_application
declaring self.method caused rails to error

Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-30 19:49:18 +02:00
Jan Stępień
342b8ab4ef Require 'bcrypt' on top of app/models/user.rb 2011-09-07 17:19:04 +02:00
Jan Stępień
e5708f5ce7 Authenticate users with deprecated SHA-1 passwords 2011-09-07 16:06:02 +02:00
Jan Stępień
8e23d11054 Added User.uses_deprecated_password? method 2011-09-07 16:06:02 +02:00
Jan Stępień
e7301608a6 Salting is unnecessary, BCrypt takes care of it
Source: http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
2011-09-07 16:06:02 +02:00
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Reinier Balt
8546ae5dfa fix test failures after the changes and refactorings 2011-07-09 17:19:12 +02:00
Reinier Balt
01057af684 start modifying done view and do some refactoring 2011-07-09 17:19:11 +02:00
Reinier Balt
0ccf42d08c fix #1157 and fix #1158 by changing the way empty projects are included in the sorting and by fixing the dutch translation for sorting titles 2011-04-29 23:17:17 +02:00
Stefan Richter
2c0cf2e457 fix bug with empty identity URL 2011-01-24 16:14:57 +08:00