Commit Graph

5629 Commits

Author SHA1 Message Date
Nimisha Asthagiri
75a739e252 Merge pull request #19123 from edx/arch/email-profile-scopes
Add email and profile scopes in JWT Cookies
2018-10-18 09:35:41 -04:00
Brian Mesick
4ca6169131 Merge pull request #19083 from edx/bmedx/add_retirement_delete_api
Adds an API to bulk delete completed retirements
2018-10-18 08:54:34 -04:00
Nimisha Asthagiri
45dadca18b Add email and profile scopes in JWT Cookies 2018-10-18 08:11:04 -04:00
Matthew Piatetsky
3c47d19a52 add redirect behavior when accessing expired course and add tests 2018-10-17 21:37:28 -04:00
J Eskew
6d6dc459d6 Merge pull request #19116 from edx/jeskew/add_test_for_bulk_email_optout
Add test for bulk email optout mgmt cmd.
2018-10-17 16:00:03 -04:00
John Eskew
62f3171c46 Add test for bulk email optout mgmt cmd. 2018-10-17 15:10:15 -04:00
bmedx
d9950f5754 Adds an API to bulk delete completed retirements 2018-10-17 14:06:17 -04:00
Michael Youngstrom
8c6e568fef dont assume the user's id 2018-10-17 13:44:00 -04:00
Matthew Piatetsky
c51ee5ecba move user course expiration date into separate function 2018-10-17 09:20:46 -04:00
Matthew Piatetsky
3e87cb7c7d fix expired message on dashboard and some of the tests 2018-10-17 09:20:45 -04:00
Nimisha Asthagiri
dc56a63e03 Remove deprecated JwtBuilder
ARCH-248
2018-10-17 07:43:59 -04:00
Robert Raposa
fbc59231fc Update edx-drf-extensions to 2.0.0.
Note: this version update is backward incompatible.

ARCH-255
2018-10-17 01:00:34 -04:00
J Eskew
dfbdfe0469 Merge pull request #19112 from edx/jeskew/add_mgmt_cmd_user_org_email_optin
Mgmt cmd to bulk opt-out user/org combos from email.
2018-10-16 11:45:30 -04:00
John Eskew
eef0e8c907 Mgmt cmd to bulk opt-out user/org combos from email. 2018-10-16 11:08:13 -04:00
Calen Pennington
8d6b7ee7f3 Merge pull request #19093 from cpennington/org-to-site-config
Add a facility for getting the SiteConfiguration that an org belongs to
2018-10-15 14:08:59 -04:00
Michael Youngstrom
e2d5235697 Merge pull request #19102 from edx/youngstrom/cms-remove-ratelimit
Fix flaky TestUserPreferenceMiddleware tests for xdist
2018-10-15 13:56:20 -04:00
Calen Pennington
996eceb6f9 Add a facility for getting the SiteConfiguration that an org belongs to 2018-10-15 13:28:30 -04:00
Nimisha Asthagiri
7ab5e7be63 Merge pull request #19103 from edx/arch/refactor-oauth-scopes-tests
Shared mixin for testing OAuth Scopes and various Auth
2018-10-15 11:32:12 -04:00
Michael Youngstrom
3da94170f5 Switch auth backends for cms as well 2018-10-15 11:14:25 -04:00
Douglas Hall
a824543e23 Merge pull request #19100 from edx/douglashall/login_refresh_csrf_exempt
Mark the refresh access token view as exempt from CSRF protection.
2018-10-15 10:25:55 -04:00
Douglas Hall
4817dd3f61 Mark the refresh access token view as exempt from CSRF protection. 2018-10-15 09:44:17 -04:00
Dillon-Dumesnil
4d37779f58 Merge pull request #19051 from edx/cstenson/unicode_normalization
Add unicode normalization to passwords.
2018-10-15 09:41:20 -04:00
Nimisha Asthagiri
f844e765fb Create shared test mixin for testing OAuth Scopes and various Auth.
ARCH-168
2018-10-13 16:21:01 -04:00
Calen Pennington
97a659c416 Limit access for Audit users to courses after a specified period of time 2018-10-12 16:43:23 -04:00
Calen Pennington
4642efbf08 Create shell django app for course duration feature 2018-10-12 16:43:13 -04:00
Cali Stenson
9c57cd1770 Add unicode normalization to passwords.
LEARNER-4283
2018-10-12 15:47:15 -04:00
Robert Raposa
863f86c411 Move and rename redirect helper.
- Rename is_safe_redirect to is_safe_login_or_logout_redirect.
- Moved is_safe_login_or_logout_redirect to user_authn.

ARCH-256
2018-10-12 13:33:09 -04:00
Alex Dusenbery
e5473f5396 Add the read API for course gradebook data (single and multiple users). 2018-10-12 10:48:34 -04:00
Nimisha Asthagiri
afd0e488ce Merge pull request #19085 from edx/arch/consistent-cookie-expiration
Consistent expiration for all login-related cookies
2018-10-11 13:15:57 -04:00
Dillon Dumesnil
b258f019b3 Fixing location of automatic password reset email 2018-10-11 12:09:41 -04:00
Michael Youngstrom
fa8e920fe1 Fix sharding for unittests to avoid skipped tests 2018-10-11 11:00:30 -04:00
Nimisha Asthagiri
2b8a9d5148 Consistent expiration for all login-related cookies 2018-10-10 22:13:28 -04:00
Nimisha Asthagiri
16605fa9c2 Merge pull request #19074 from edx/arch/fix-expiration
Fix overriding of token expiration in DOT (ARCH-246)
2018-10-10 16:59:16 -04:00
Dillon Dumesnil
deb758c808 Added in tests for the new password validation. Fixed old tests that
relied on the old configuration values and old way of validating
passwords. Also improved registration page by always showing error
messages rather than hiding them on leaving the field.
2018-10-10 11:06:30 -04:00
Dillon Dumesnil
4fa27f98dc Implementing django password validators for edX. This involves removing
the old validate password method and configuration values in favor of
AUTH_PASSWORD_VALIDATORS, a list of validators to use to check a
password. These include some that come straight from Django and some
that were written according to Django's specifications. This work also
included maintaining the current messaging as instruction text and
passing along restrictions for the password field.
2018-10-10 10:58:21 -04:00
rabiaiftikhar
aac430da34 EDUCATOR-3213 make Global EdX Staff able to view all forum posts 2018-10-10 12:01:23 +05:00
Nimisha Asthagiri
13d4091a1a Fix overriding of token expiration in DOT (ARCH-246) 2018-10-08 17:43:25 -04:00
Omar Al-Ithawi
ceacfc8a75 edX-ACE support for email change messages 2018-10-08 20:43:09 +03:00
Troy Sankey
f9488a8502 Merge pull request #19043 from edx/pwnage101/also-prevent-retired-email-reuse-via-account-settings-PLAT-2334
Prevent retired email reuse via account settings
2018-10-05 13:59:20 -04:00
Michael Terry
c90edab169 Bundle an SQL query for performance
We were doing many individual SQL queries for certificates when
awarding program certs. It's possible this was contributing to
high SQL load. Instead, let's bundle those queries up into a larger
one.

LEARNER-6490
2018-10-05 12:43:47 -04:00
Troy Sankey
5b9bb005bd Prevent retired email reuse via account settings
PLAT-2334
2018-10-04 15:38:03 -04:00
Diana Huang
02c15bf563 Refactor password reset email and send after failure. 2018-10-04 15:22:24 -04:00
Hasnain Naveed
6c31a78f3d Merge pull request #19001 from edx/hasnain-naveed/WL-1645
WL-1645 | Suppressing Error Alerts for WL Programs without Program Ce…
2018-10-04 13:29:20 +05:00
Robert Raposa
eca340d2e1 Merge pull request #18989 from edx/robrap/ARCH-241-logout-redirect
ARCH-241: Add ability to redirect to subdomain for logout.
2018-10-03 15:06:11 -04:00
J Eskew
d447c6c9b5 Merge pull request #19045 from edx/jeskew/PLAT_2146_again_add_username_retirement_check
Check for retired usernames as well as existing ones in validation.
2018-10-03 14:57:50 -04:00
Robert Raposa
027c53e61e Add ability to redirect to subdomain for logout.
ARCH-241
2018-10-03 12:13:14 -04:00
Douglas Hall
602d2fb221 Merge pull request #19044 from edx/douglashall/csrf-protection-decision
Add decisions record related to frontend apps and CSRF protection.
2018-10-03 12:11:08 -04:00
Douglas Hall
dec77f2ad3 Add decisions record related to frontent apps and CSRF protection. 2018-10-03 11:28:58 -04:00
Hammad Ahmad Waqas
db73d99da6 Merge pull request #19033 from edx/hammad/WL-1798
Hammad/WL-1798 Participants not able to move on to course assignments from pre-assessment
2018-10-03 19:11:44 +05:00
Hammad Ahmad Waqas
c7a8ddedea excluding html blocks form adding in computable blocks for completion 2018-10-03 17:18:23 +05:00