Commit Graph

2170 Commits

Author SHA1 Message Date
Alex Dusenbery
e5473f5396 Add the read API for course gradebook data (single and multiple users). 2018-10-12 10:48:34 -04:00
Nimisha Asthagiri
afd0e488ce Merge pull request #19085 from edx/arch/consistent-cookie-expiration
Consistent expiration for all login-related cookies
2018-10-11 13:15:57 -04:00
Dillon Dumesnil
b258f019b3 Fixing location of automatic password reset email 2018-10-11 12:09:41 -04:00
Nimisha Asthagiri
2b8a9d5148 Consistent expiration for all login-related cookies 2018-10-10 22:13:28 -04:00
Nimisha Asthagiri
16605fa9c2 Merge pull request #19074 from edx/arch/fix-expiration
Fix overriding of token expiration in DOT (ARCH-246)
2018-10-10 16:59:16 -04:00
Dillon Dumesnil
deb758c808 Added in tests for the new password validation. Fixed old tests that
relied on the old configuration values and old way of validating
passwords. Also improved registration page by always showing error
messages rather than hiding them on leaving the field.
2018-10-10 11:06:30 -04:00
Dillon Dumesnil
4fa27f98dc Implementing django password validators for edX. This involves removing
the old validate password method and configuration values in favor of
AUTH_PASSWORD_VALIDATORS, a list of validators to use to check a
password. These include some that come straight from Django and some
that were written according to Django's specifications. This work also
included maintaining the current messaging as instruction text and
passing along restrictions for the password field.
2018-10-10 10:58:21 -04:00
rabiaiftikhar
aac430da34 EDUCATOR-3213 make Global EdX Staff able to view all forum posts 2018-10-10 12:01:23 +05:00
Nimisha Asthagiri
13d4091a1a Fix overriding of token expiration in DOT (ARCH-246) 2018-10-08 17:43:25 -04:00
Omar Al-Ithawi
ceacfc8a75 edX-ACE support for email change messages 2018-10-08 20:43:09 +03:00
Troy Sankey
f9488a8502 Merge pull request #19043 from edx/pwnage101/also-prevent-retired-email-reuse-via-account-settings-PLAT-2334
Prevent retired email reuse via account settings
2018-10-05 13:59:20 -04:00
Michael Terry
c90edab169 Bundle an SQL query for performance
We were doing many individual SQL queries for certificates when
awarding program certs. It's possible this was contributing to
high SQL load. Instead, let's bundle those queries up into a larger
one.

LEARNER-6490
2018-10-05 12:43:47 -04:00
Troy Sankey
5b9bb005bd Prevent retired email reuse via account settings
PLAT-2334
2018-10-04 15:38:03 -04:00
Diana Huang
02c15bf563 Refactor password reset email and send after failure. 2018-10-04 15:22:24 -04:00
Hasnain Naveed
6c31a78f3d Merge pull request #19001 from edx/hasnain-naveed/WL-1645
WL-1645 | Suppressing Error Alerts for WL Programs without Program Ce…
2018-10-04 13:29:20 +05:00
Robert Raposa
eca340d2e1 Merge pull request #18989 from edx/robrap/ARCH-241-logout-redirect
ARCH-241: Add ability to redirect to subdomain for logout.
2018-10-03 15:06:11 -04:00
J Eskew
d447c6c9b5 Merge pull request #19045 from edx/jeskew/PLAT_2146_again_add_username_retirement_check
Check for retired usernames as well as existing ones in validation.
2018-10-03 14:57:50 -04:00
Robert Raposa
027c53e61e Add ability to redirect to subdomain for logout.
ARCH-241
2018-10-03 12:13:14 -04:00
Douglas Hall
602d2fb221 Merge pull request #19044 from edx/douglashall/csrf-protection-decision
Add decisions record related to frontend apps and CSRF protection.
2018-10-03 12:11:08 -04:00
Douglas Hall
dec77f2ad3 Add decisions record related to frontent apps and CSRF protection. 2018-10-03 11:28:58 -04:00
Nimisha Asthagiri
1c1088358c Merge pull request #19031 from edx/arch/login-service-migration
Login service user creation - data migration
2018-10-02 20:45:42 -04:00
John Eskew
aacdce17d4 Check for retired usernames as well as existing ones in validation. 2018-10-02 17:23:11 -04:00
Michael Youngstrom
ed594a9983 Patch random.random from the factory's namespace 2018-10-02 13:08:33 -04:00
Nimisha Asthagiri
2a170549b4 Login service user creation - data migration 2018-10-02 12:26:50 -04:00
J Eskew
873eb40896 Revert "Check for username retirement in validation endpoint." 2018-10-02 11:10:21 -04:00
J Eskew
8dc4900eb0 Merge pull request #18990 from edx/jeskew/PLAT_2146_add_username_retirement_check
Check for username retirement in validation endpoint.
2018-10-01 15:04:46 -04:00
Nimisha Asthagiri
31a1ad4a09 Merge pull request #18999 from edx/arch/refactor-jwt-builder
JWT Cookies
2018-10-01 13:45:15 -04:00
Nimisha Asthagiri
02ba5fb0e8 Login service support for JWT Cookies 2018-10-01 13:08:40 -04:00
John Eskew
fba2a8b5dc Check for retired usernames as well as existing ones in validation. 2018-10-01 11:00:19 -04:00
hasnain-naveed
282fe39337 WL-1645 | Suppressing Error Alerts for WL Programs without Program Certificates. 2018-10-01 18:58:43 +05:00
Ahsan Ulhaq
ee7555e85f update usage of SessionAuthenticationAllowInactiveUser
LEARNER-6469
2018-10-01 17:52:52 +05:00
Ned Batchelder
f2dac46681 Merge pull request #18475 from appsembler/omar/ace-enroll-email
Convert instructor email messages to ACE
2018-09-27 16:44:08 -04:00
Ahsan Ulhaq
39f48a8c10 Reduce query to user table
LEARNER-6336
2018-09-26 17:16:42 +05:00
Michael Youngstrom
0ec4232cb5 Ensure we are starting at 0 when counting mongo queries 2018-09-25 14:43:50 -04:00
Qubad786
318937552a Update VAL version and thumbnails scrapper job in accordance with val api 2018-09-25 20:12:10 +05:00
Omar Al-Ithawi
6ff3235f84 Convert instructor email messages to ACE 2018-09-25 17:51:10 +03:00
Nimisha Asthagiri
0a88746aef Merge pull request #18980 from edx/arch/jwt-http-cookies
Refactor Login Cookies
2018-09-25 09:46:37 -04:00
Nimisha Asthagiri
b7deedfb36 Refactor Login Cookies 2018-09-25 09:12:08 -04:00
edx-pipeline-bot
007869836c Merge pull request #18995 from edx/private_to_public_7a92944
Mergeback PR from private to public.
2018-09-24 12:07:56 -04:00
Bill DeRusha
b43b174fdd Set usable password when canceling user retirement 2018-09-21 14:18:57 -04:00
edx-pipeline-bot
89963efd3a Merge pull request #18968 from edx/release-mergeback-to-master
Merge release back to master
2018-09-18 12:56:07 -04:00
Ned Batchelder
0dcd1b3339 Merge pull request #18962 from edx/nedbat/remove-setup-args
No need for superstitious kwargs
2018-09-18 12:07:58 -04:00
Robert Raposa
27cf027a79 Merge pull request #18915 from edx/arch/jwt-cookie-decision
JWT Cookie decision record
2018-09-17 20:29:46 -04:00
Ned Batchelder
93d4af35bd No need for superstitious kwargs 2018-09-17 17:01:11 -04:00
Kevin Falcone
4e8b179ac2 Merge pull request #18651 from edx/robrap/ARCH-180-dot-upgrade-all-steps
ARCH-180: Upgrade DOT to 1.1.2
2018-09-17 16:00:20 -04:00
Nimisha Asthagiri
1376409351 Decision: Transport JWT in HTTP Cookies 2018-09-17 14:44:01 -04:00
Robert Raposa
b4a2207a7a Add README for user_authn. 2018-09-17 14:37:05 -04:00
Robert Raposa
c91f1fdfc5 Add JWT_COOKIES_FLAG feature toggle.
This is intended to be a temporary flag for rollout of the JWT Cookies
feature.

ARCH-235
2018-09-17 12:24:11 -04:00
Nimisha Asthagiri
e2ff1ec537 Merge pull request #18917 from edx/arch/user-authn-app
Consolidate user login and authentication code
2018-09-15 10:00:51 -04:00
Nimisha Asthagiri
8cf44283c9 Consolidate user login and authentication code 2018-09-15 03:21:39 -04:00