362 Commits

Author	SHA1	Message	Date
Gerhard Schlager	a7bc1ecbae	FEATURE: Add support for Unicode usernames and group names ... Co-authored-by: Joffrey JAFFEUX <j.jaffeux@gmail.com>	2019-04-23 13:00:27 +02:00
Robin Ward	ef1af53e05	FIX: If creating an active user via the API, create reviewables	2019-04-12 15:25:02 -04:00
Tarek Khalil	442fb2facb	FEATURE: Remove ignore feature SiteSetting and enable ignore by default (#7349)	2019-04-10 12:54:59 +02:00
Tarek Khalil	b1cb95fc23	FEATURE: Introduce ignore duration selection (#7266) ... * FEATURE: Introducing new UI for tracking User's ignored or muted states	2019-03-29 10:14:53 +00:00
Robin Ward	b58867b6e9	FEATURE: New 'Reviewable' model to make reviewable items generic ... Includes support for flags, reviewable users and queued posts, with REST API backwards compatibility. Co-Authored-By: romanrizzi <romanalejandro@gmail.com> Co-Authored-By: jjaffeux <j.jaffeux@gmail.com>	2019-03-28 12:45:10 -04:00
Tarek Khalil	ef2362a30f	FEATURE: Introducing new UI for changing User's notification levels (#7248) ... * FEATURE: Introducing new UI for tracking User's ignored or muted states	2019-03-27 09:41:50 +00:00
Tarek Khalil	3b59ff0d02	[FEATURE] Disallow ignoring self, admins or moderators users (#7202)	2019-03-20 11:18:46 +01:00
Tarek Khalil	0a9a11094d	FEATURE: Save ignored usernames in user preferences (#7117) ... * FEATURE: Save ignored usernames in user preferences	2019-03-06 11:21:58 +00:00
Tarek Khalil	f19d36cbba	REFACTOR: Change watch wording to unignore (#7112) ... * REFACTOR: Change `watch` wording to `unignore`	2019-03-05 14:40:31 +00:00
Tarek Khalil	986cc8a0fb	FEATURE: Introduce Ignore user (#7072)	2019-02-27 14:49:07 +01:00
Maja Komel	6f427589b2	FIX: make it possible to use backup code everywhere where 2FA required (#7010)	2019-02-27 10:37:33 +01:00
Sam	33269c4172	FEATURE: do no search for groups unless a term is specified ... Do not allow `/u/search/users.json` to list any group matches unless a specific `term` is specified in the API call. Adding groups should always be done when an actual search term exists, blank search is only supported for users within a topic	2019-02-20 17:28:22 +11:00
Vinoth Kannan	e7821a63e7	FIX: Users should able check the emails for self	2019-02-05 23:31:19 +05:30
Arpit Jalan	0cb2b7d603	FIX: add meta details for user summary page	2019-01-14 19:49:14 +05:30
Arpit Jalan	60941f214c	FIX: remove unneeded keys from failed response	2018-11-22 14:59:50 +05:30
Guo Xiang Tan	6111b285d9	DEV: Remove comment that links to a private topic. ... Not going to be useful for other developers.	2018-11-22 14:55:02 +08:00
Arpit Jalan	10cc698df3	FIX: respond with proper error message if user not found	2018-11-21 10:47:37 +05:30
Arpit Jalan	22a7f1e7f2	FIX: handle nil user value on password reset	2018-11-20 21:49:47 +05:30
David Taylor	17bc82765b	FEATURE: Log password changes in UserHistory (#6600)	2018-11-14 08:32:42 +08:00
Régis Hanol	3e232412e3	UX: show error when hitting the rate limit on password reset	2018-10-22 19:00:30 +02:00
Guo Xiang Tan	aa60936115	DEV: Add order to avoid randomly failing test.	2018-10-15 11:42:45 +08:00
Sam	a1c912b630	Return 400 instead of 404 for bad token	2018-10-12 10:51:41 +11:00
Bianca Nenciu	048cdfbcfa	FIX: Do not allow revoking the token of current session. (#6472) ... * FIX: Do not allow revoking the token of current session. * DEV: Add getter of current auth_token from Guardian.	2018-10-12 10:40:48 +11:00
Robin Ward	a566ed42ae	FEATURE: Option to disable user presence and profile ... This allows users who are privacy conscious to disable the presence features of the forum as well as their public profile.	2018-10-10 17:34:33 -04:00
Bianca Nenciu	1d26a473e7	FEATURE: Show "Recently used devices" in user preferences (#6335) ... * FEATURE: Added MaxMindDb to resolve IP information. * FEATURE: Added browser detection based on user agent. * FEATURE: Added recently used devices in user preferences. * DEV: Added acceptance test for recently used devices. * UX: Do not show 'Show more' button if there aren't more tokens. * DEV: Fix unit tests. * DEV: Make changes after code review. * Add more detailed unit tests. * Improve logging messages. * Minor coding style fixes. * DEV: Use DropdownSelectBoxComponent and run Prettier. * DEV: Fix unit tests.	2018-10-09 22:21:41 +08:00
Sam	df45e82377	SECURITY: only allow picking of avatars created by self (#6417) ... * SECURITY: only allow picking of avatars created by self Also adds origin tracking to all uploads including de-duplicated uploads	2018-09-19 22:33:10 -07:00
Gerhard Schlager	797cbf8653	FIX: Remove user fields when anonymizing user	2018-09-07 00:02:56 +02:00
Vinoth Kannan	d8b543bb67	FIX: redirect to original URL after social signup	2018-09-05 01:44:23 +05:30
David Taylor	4382fb5fac	DEV: Allow plugins to whitelist specific user custom_fields for editing (#6358)	2018-09-04 20:45:36 +10:00
Bianca Nenciu	f5e0356fb2	correct miscellaneous issues with user login history	2018-09-02 17:24:54 +10:00
Bianca Nenciu	931cffcebe	FEATURE: Let users see their user auth tokens. (#6313)	2018-08-31 10:18:06 +02:00
David Taylor	103509b9dd	SECURITY: Prevent users from modifying custom fields	2018-08-30 12:59:36 +01:00
Neil Lalonde	9bf4333491	FIX: redirect to wrong URL after account creation on subfolder install	2018-08-24 10:34:44 -04:00
Sam	6f6b4ff988	regression: don't return from a block ... also clean up some warnings (shadowed var, unused var)	2018-08-10 14:53:55 +10:00
David Taylor	812add18bd	REFACTOR: Serve auth provider information in the site serializer. ... At the moment core providers are hard-coded in Javascript, and plugin providers get added to the JS payload at compile time. This refactor means that we only ship enabled providers to the client.	2018-08-06 09:25:48 +01:00
David Taylor	eda1462b3b	FEATURE: List, revoke and reconnect associated accounts. Phase 1 (#6099) ... Listing connections is supported for all built-in auth providers. Revoke and reconnect is currently only implemented for Facebook.	2018-07-23 16:51:57 +01:00
Régis Hanol	6d6e026e3c	FEATURE: selectable avatars	2018-07-18 12:57:43 +02:00
Vinoth Kannan	f3868fd646	FIX: Create empty user_avatar row if not exist	2018-07-16 14:06:49 +05:30
Leo McArdle	21ebb1cd54	FEATURE: Secondary emails support.	2018-07-16 11:09:49 +08:00
OsamaSayegh	decf1f27cf	FEATURE: Groundwork for user-selectable theme components ... * Phase 0 for user-selectable theme components - Drops `key` column from the `themes` table - Drops `theme_key` column from the `user_options` table - Adds `theme_ids` (array of ints default []) column to the `user_options` table and migrates data from `theme_key` to the new column. - Removes the `default_theme_key` site setting and adds `default_theme_id` instead. - Replaces `theme_key` cookie with a new one called `theme_ids` - no longer need Theme.settings_for_client	2018-07-12 14:18:21 +10:00
Maja Komel	ec3e6a81a4	FEATURE: Second factor backup	2018-06-28 10:12:32 +02:00
Guo Xiang Tan	ad5082d969	Make rubocop happy again.	2018-06-07 13:28:18 +08:00
Guo Xiang Tan	95f9b72351	FIX: Update activation email route was returning a generic json error.	2018-05-31 14:19:43 +08:00
OsamaSayegh	449399bef3	return 403 forbidden when local logins disabled	2018-05-26 05:18:19 +03:00
Régis Hanol	be6404d651	FIX: redirect users after signing up with a social login when using SSO provider	2018-05-13 16:03:11 +02:00
Régis Hanol	09cf35c760	FIX: redirect users after signing up using SSO provider	2018-05-12 00:41:27 +02:00
Régis Hanol	abda21a41f	Revert "FIX: redirect to sso_destination_url after account activation" ... This reverts commit 0402e97368.	2018-05-11 22:55:45 +02:00
Régis Hanol	0402e97368	FIX: redirect to sso_destination_url after account activation	2018-05-11 19:57:04 +02:00
Neil Lalonde	bd77795d7a	REFACTOR: move support for user card badge images to a plugin discourse-user-card-badges	2018-04-26 13:25:24 -04:00
Arpit Jalan	185d6ac747	FIX: use safe navigation operator when checking for totp_enabled	2018-04-09 12:33:41 +05:30