discourse/app
Sam Saffron 7e8f0dc967 FIX: attempt to handle ios edge case where token is seen but unsaved
This relaxes our security in the following way

- prev auth token is always accepted as long as rotation
date is within our window of SiteSetting.maximum_session_age.hours
(previously old token expired within a minute of new one being seen)

- new auth token is marked unseen if we are presented with an old token
after we already saw new one

This attempts to fix an issue where ios webkit is not committing new cookies
2017-02-26 17:09:57 -05:00
..
assets FIX: eradicate I18n fallback issues 💣 2017-02-24 11:31:21 +01:00
controllers remove unecessary '.limit(1)' 2017-02-24 12:56:13 +01:00
helpers FEATURE: replace emoji with unicode in title and description meta tags 2017-02-22 16:24:13 -05:00
jobs should not have renamed this setting in 460665895c 2017-02-08 18:11:34 +01:00
mailers add a comment because I can never find the mailing list summary email 2017-02-08 12:13:29 -05:00
models FIX: attempt to handle ios edge case where token is seen but unsaved 2017-02-26 17:09:57 -05:00
serializers FEATURE: make show_subcategory_list a per-category setting 2017-02-22 11:42:36 -05:00
services SECURITY: Ensure oAuth authenticated email is the same as created user's email. 2017-02-24 13:13:10 +08:00
views FEATURE: linked topics should be rendered under posts for crawlers 2017-02-21 12:43:24 +05:30