Commit Graph

65 Commits

Author SHA1 Message Date
adeelehsan
2390966e9b Added logs
added username log if unable to authenticate
newly created user for 1st time while its
account is still inactive.
Purpose of log is to find specific useranme
inorder to investigagte LERANER-6026
2019-01-15 18:31:53 +05:00
Michael Terry
01129787c0 Remove PasswordHistory
This is a feature that has been deprecated and can be safely removed.

DEPR-7
2018-12-13 13:18:56 -05:00
Dillon Dumesnil
0a0df72fc9 Cleaning up unicode waffle flag 2018-10-19 13:25:08 -04:00
Dillon-Dumesnil
4d37779f58 Merge pull request #19051 from edx/cstenson/unicode_normalization
Add unicode normalization to passwords.
2018-10-15 09:41:20 -04:00
Cali Stenson
9c57cd1770 Add unicode normalization to passwords.
LEARNER-4283
2018-10-12 15:47:15 -04:00
Robert Raposa
863f86c411 Move and rename redirect helper.
- Rename is_safe_redirect to is_safe_login_or_logout_redirect.
- Moved is_safe_login_or_logout_redirect to user_authn.

ARCH-256
2018-10-12 13:33:09 -04:00
Robert Raposa
eca340d2e1 Merge pull request #18989 from edx/robrap/ARCH-241-logout-redirect
ARCH-241: Add ability to redirect to subdomain for logout.
2018-10-03 15:06:11 -04:00
J Eskew
d447c6c9b5 Merge pull request #19045 from edx/jeskew/PLAT_2146_again_add_username_retirement_check
Check for retired usernames as well as existing ones in validation.
2018-10-03 14:57:50 -04:00
Robert Raposa
027c53e61e Add ability to redirect to subdomain for logout.
ARCH-241
2018-10-03 12:13:14 -04:00
John Eskew
aacdce17d4 Check for retired usernames as well as existing ones in validation. 2018-10-02 17:23:11 -04:00
Robert Raposa
23b9cfd76c Add whitelist for login redirect.
Use LOGIN_REDIRECT_WHITELIST to provide a whitelist of
additional domains to which login will now redirect.

ARCH-238
2018-10-02 16:00:55 -04:00
J Eskew
873eb40896 Revert "Check for username retirement in validation endpoint." 2018-10-02 11:10:21 -04:00
John Eskew
fba2a8b5dc Check for retired usernames as well as existing ones in validation. 2018-10-01 11:00:19 -04:00
Nimisha Asthagiri
8cf44283c9 Consolidate user login and authentication code 2018-09-15 03:21:39 -04:00
Michael Youngstrom
d6616c9036 Add require_https to all is_safe_url calls 2018-06-07 10:10:28 -04:00
Brian Mesick
ca0ec641db Merge pull request #18329 from edx/bmedx/is_safe_url_allowed_hosts
Change usages of is_safe_url to use new allowed_hosts instead of host
2018-06-07 10:06:40 -04:00
bmedx
29ad5fce6f Change usages of is_safe_url to use new allowed_hosts instead of host
"host" parameter is deprecated and throws a warning
2018-06-06 14:41:52 -04:00
Michael Youngstrom
26b4e30833 Remove django 1.8 shim 2018-06-06 10:34:56 -04:00
Eric Fischer
247bb50ed2 s/django.core.urlresolvers/django.urls/g
Django 1.10 deprecation fix for Hackathon XIX
Addresses PLAT-1397
2018-06-05 13:59:09 -04:00
asadiqbal
30db538e3a Change the log level to info 2018-05-31 19:43:11 +05:00
Troy Sankey
a7ecfe1cd3 Fixup! refactor email_exists, and handle many more cases 2018-05-18 15:34:35 -04:00
Brittney Exline
91e63ed8e0 ENT-945 Using SSOVerifications in ID Verification flow
This reworks what was done #17930, since it had to be reverted from the IDVerificationAggregate migration.
We decided to abandon that model and directly read from both id verification models.
2018-04-30 11:57:59 -04:00
Brittney Exline
292f9ca831 Partial revert of "ENT-945 Update IDVerification interfaces to accountfor SSOVerification"
This partially reverts commit ee1c3a4548.
The migration files introduced by the commit have been kept since they have been run
already on several enviornments.
2018-04-25 16:01:15 -04:00
Brittney Exline
ee1c3a4548 ENT-945 Update IDVerification interfaces to accountfor SSOVerification 2018-04-23 10:48:12 -04:00
John Eskew
3f0665b6d6 Fix existing quality errors. 2018-04-13 14:27:42 -04:00
John Eskew
338d4551ab Reject acct creation when using a retired username.
Change from specifying a retired username/email format to specifying
  a retired username prefix and a retired email prefix/domain,
  preventing possible config errors due to unexpected/bad formats.
2018-04-13 14:27:21 -04:00
Brittney Exline
d31d9bd684 ENT-942 Implement an abstraction layer for SoftwareSecurePhotoVerification class methods 2018-04-05 15:48:59 -04:00
bmedx
88153b7ac2 Exclude the default site from UserAttribute 'created_on_site'
This table is getting slammed and causing deadlocks, since 90% of it
is just this one setting on the default site we're going to stop saving
those and make it a default assumption going forward.
2018-04-04 15:00:59 -04:00
bmedx
1d45c85135 Refactor student login for readability and fix Django 1.11 issues 2018-01-24 11:26:43 -05:00
Sofiya Semenova
34e3ec6afe Ed-1315 part 2, removing progress message entirely and replacing with another 2017-10-05 11:06:22 -04:00
Saleem Latif
f087672d4b On edx.org instances, next URL for login page cannot contain 'edx.org'. 2017-08-25 17:31:35 +05:00
Jillian Vogel
84c6c5ac27 Adds THIRD_PARTY_AUTH_HINT to SiteConfiguration and to site-wide setting.FEATURES
When provided, this setting appends tpa_hint=<value> to the `next` URL provided for /login and /register page URLs, which bypasses the Open edX Login/Register page with an an automatic redirection to the TPA login/register URL.

This allows the already implemented tpa_hint feature to be automatically added to login, registration, and enrolment URLs generated throughout the platform.

Avoids auto-appending the tpa_hint parameter when the request is already in the TPA pipeline, to prevent infinite redirect loops, and adds tests to verify this behaviour.
2017-08-17 14:01:00 +09:30
Andy Armstrong
93235d118d Reorder imports using isort (except lms and cms) 2017-05-30 16:04:54 -04:00
Ahsan Ulhaq
7712bf3151 edx.org/login?next= should not be able to point to an asset
ECOM-6463
2017-03-07 22:17:50 +05:00
Simon Chen
c38de9638c Revert "edx.org/login?next= should not be able to point to an asset"
This reverts commit bc418c47c5.
2017-02-17 14:53:57 -05:00
Ahsan Ulhaq
bc418c47c5 edx.org/login?next= should not be able to point to an asset
ECOM-6463
2017-02-16 14:44:01 +05:00
Ahsan Ulhaq
c9676e4835 Merge pull request #13829 from edx/ahsan/ECOM-6185-errors-during-password-reset
errors during password reset
2016-10-27 18:45:33 +05:00
Ahsan Ulhaq
9e493c9e23 errors during password reset
ECOM-6140
2016-10-25 16:25:55 +05:00
Ahsan Ulhaq
c49f84fa3c parameter next on login page would redirect regardless url safe
ECOM-5968
2016-10-25 15:08:40 +05:00
Tasawer
1ac94921c3 Show verification expiration message on learner dashboard and allow them to reverify if expiration is X days away.
ECOM-2979
2016-10-08 11:32:02 +05:00
Ahsan
c5d975577a Invalidate access token
ECOM-4641
2016-10-03 13:02:52 +05:00
Jesse Shapiro
ce2ab5b15c Adding 'visible' field for SSO providers 2016-09-08 11:27:09 -04:00
Matt Drayer
c2c2a67753 mattdrayer/WL-493: Enable bulk purchase via Otto for unauthenticated users 2016-06-03 13:00:45 -04:00
vkaracic
86a4710ee8 Otto checkout flow 2016-02-17 18:16:44 +01:00
Usman Khalid
6cb62f2697 Rebase upgrade Django to v1.8.5
Please note that this is a squshed commit and the work of:
Symbolist, macdiesel, nedbat, doctoryes, muzaffaryousaf and muhammad-ammar
2015-11-10 15:00:19 -05:00
Bill DeRusha
60fc3f5705 Conditionally show unenroll action based on certificat status 2015-10-23 14:59:17 -04:00
William Ono
4d1194800e Support LTI third-party-auth providers
PR #8930
2015-09-03 22:53:45 -07:00
Will Daly
25fa2ffc2d Separate verification deadline from upgrade deadline
* Add verification deadline model.
* Populate verification deadlines from course modes table.
* Update student dashboard to use verification deadlines.
* Update pay-and-verify view to use verification deadlines.
* Simplify Django admin for course modes and add validation.
* Add verification deadline to Django admin for course modes.
* Add UI for when the upgrade deadline is missed in the pay-and-verify flow.
2015-07-21 08:43:14 -07:00
Sarina Canelake
ba8fd1c21d Eliminate instances of unused-import Pylint violation 2015-07-13 17:33:25 -04:00
Kyle McCormick
1dfe9ed9e8 MA-779 Update student dashboard to use CourseOverview 2015-07-08 12:05:38 -04:00