Commit Graph

4740 Commits

Author SHA1 Message Date
Sam
ff49f72ad9 FEATURE: per client user tokens
Revamped system for managing authentication tokens.

- Every user has 1 token per client (web browser)
- Tokens are rotated every 10 minutes

New system migrates the old tokens to "legacy" tokens,
so users still remain logged on.

Also introduces weekly job to expire old auth tokens.
2017-02-07 09:22:16 -05:00
Jeff Atwood
fcfaa71e85 copyedit on "get a room" 2017-02-04 12:04:15 -08:00
Robin Ward
f1e7bca3c9 FEATURE: Warn a user when they're replying to the same user too much 2017-02-03 17:00:54 -05:00
Neil Lalonde
c4e10f2a9d FEATURE: redesign the change password page to use javascript and validations 2017-02-03 16:09:24 -05:00
Neil Lalonde
6845f0151d Merge pull request #4680 from ziptofaf/patch-1
fix 'reply' translations in Polish
2017-02-01 17:18:10 -05:00
Sam
a898d6a02a FIX: silence and quiet logger not thread safe
This caused info/warning to be consistently missing
in dev mode when using puma
2017-01-31 15:44:46 -05:00
ziptofaf
573e702f75 fix 'reply' translations in Polish
a small fix for the latest version of discourse
2017-01-30 22:42:15 +01:00
Arpit Jalan
1d2dceda32 FIX: add max value validation for settings containing days 2017-01-27 17:54:41 +05:30
Arpit Jalan
74a46dce68 FIX: set max value for purge_unactivated_users_grace_period_days setting 2017-01-27 14:22:13 +05:30
Leo McArdle
c76f6856ea FEATURE: reply as new message to the same recipients 2017-01-27 12:24:31 +08:00
Guo Xiang Tan
156a00af47 UX: Show edit button on post revision modal as long as user can edit. 2017-01-27 10:49:17 +08:00
Régis Hanol
a553fecb51 fix 'reply' translations in other locales 2017-01-26 18:56:19 +01:00
Neil Lalonde
8ab327665f Update translations 2017-01-26 12:22:14 -05:00
Régis Hanol
810176be5b Merge branch 'master' into master 2017-01-26 10:56:25 +01:00
Guo Xiang Tan
ee7c7c347a Merge pull request #4673 from tgxworld/edit_post_button_wiki_post_revision
Add edit post button to post revision modal for wiki-ed posts.
2017-01-26 13:33:55 +08:00
Arpit Jalan
9dd09e453b FEATURE: add explicit confirmation button to accept the invite 2017-01-25 15:50:30 +05:30
Guo Xiang Tan
ee396edd9c Add edit post button to post revision modal for wiki-ed posts. 2017-01-25 14:36:00 +08:00
Guo Xiang Tan
0a25df67bc Revert "FIX: Incorrect parameter being passed to component."
This reverts commit d354a6f7a4.
2017-01-25 13:12:24 +08:00
Guo Xiang Tan
d354a6f7a4 FIX: Incorrect parameter being passed to component. 2017-01-25 13:09:08 +08:00
Guo Xiang Tan
ce07da1d8b UX: Only display the words that fails censored words validations. 2017-01-24 13:11:05 +08:00
Guo Xiang Tan
d043e9716f Merge pull request #4666 from tgxworld/fix_wiki_create_new_version
FIX: Toggling post's wiki status should not create a new version.
2017-01-20 15:43:38 +08:00
Guo Xiang Tan
32846aad2a FIX: Toggling post's wiki status should not create a new version. 2017-01-20 15:42:33 +08:00
Jeff Atwood
27124736c7 change /about "New Users" to "Users" 2017-01-19 17:07:55 -08:00
Jeff Atwood
c421b0d892 default email title shouldn't expose addr 2017-01-19 12:57:30 -08:00
Jeff Atwood
99f9adaf50 improve copy for export your own posts PM 2017-01-19 12:48:15 -08:00
Arpit Jalan
bcbcfa2078 Update Translations 2017-01-18 22:13:12 +05:30
Jeff Atwood
af0a0017c1 Omit needless words 2017-01-18 03:00:43 -08:00
Jeff Atwood
d4b08d8bc6 tweak to signup hints 2017-01-18 02:50:52 -08:00
Jeff Atwood
095ec9cf63 minor css change to user page 2017-01-18 01:11:49 -08:00
Jeff Atwood
49515d5a38 minor copyedit on invites 2017-01-18 01:09:10 -08:00
Guo Xiang Tan
c76ee788a7 Merge pull request #4656 from tgxworld/dont_display_an_extra_button_for_wiki_post
UX: Display wiki icon on post edits indicator.
2017-01-17 06:34:43 +08:00
Guo Xiang Tan
17da0bd11f UX: Display wiki icon on post edits indicator. 2017-01-17 06:33:58 +08:00
Régis Hanol
fbf9172db8 FIX: log backups download/destroy staff action
FIX: clean up junk left by the specs
RENAME: 'backup_operation' to 'backup_create' to match other backup log types
2017-01-16 19:53:31 +01:00
Arpit Jalan
1570c4e4a7 Update Translations 2017-01-12 13:26:45 +05:30
Guo Xiang Tan
515f50e42e FEATURE: Log admin action when readonly mode is changed. 2017-01-12 09:41:02 +08:00
Régis Hanol
887e9af84f FEATURE: new 'max_image_megapixels' site setting 2017-01-11 23:37:12 +01:00
Arpit Jalan
e793caf3e3 FIX: only allow CSV file to be uploaded for bulk invite 2017-01-11 16:26:01 +05:30
Jeff Atwood
9103ba30ad switch from "API Requests" to "Pageviews" 2017-01-10 17:02:23 -08:00
Neil Lalonde
e84fcc7d74 Staff action logs explain when system is deleting a post because author marked it to be deleted 2017-01-10 17:25:36 -05:00
Neil Lalonde
fc0a0a76a4 Add more info in staff action logs for blocking a user, and add logging for lock trust level, activate, and deactive user 2017-01-10 17:25:36 -05:00
Jeff Atwood
0303047446 SECURITY: disallow csv as default upload file type 2017-01-10 13:24:10 -08:00
Robin Ward
b60bc47a4c Plugins can register providers for global settings 2017-01-09 17:18:58 -05:00
Guo Xiang Tan
3d21ccd4a5 FIX: Add validation to disallow censored words in topic title. 2017-01-09 16:55:41 +08:00
Guo Xiang Tan
cbc6aee137 UX: Display large numbers with delimiters. 2017-01-09 15:56:02 +08:00
Guo Xiang Tan
95d1ad1ab8 Fix typo. 2017-01-09 10:13:15 +08:00
Neil Lalonde
5a2e989e0d Update translations 2017-01-06 15:53:03 -05:00
Robin Ward
41307c3d1c SECURITY: Moderators should not be able to access customizations 2017-01-06 14:42:53 -05:00
Jeff Atwood
8a5dad16bd add email address clarification to invites 2017-01-05 14:15:09 -08:00
Jeff Atwood
e82dd4a0d6 copyedit on invite emails 2017-01-05 14:05:22 -08:00
Jeff Atwood
baf3e4ccf8 minor setup wizard copyedits 2017-01-05 13:58:38 -08:00