discourse/lib/auth
David Taylor 88779d849f
UX: Ignore name parameter from IDP when it is equal to email (#8869)
Some auth providers (e.g. Auth0 with default configuration) send the email address in the name field. In Discourse, the name field is made public, so this commit adds a safeguard to prevent emails being made public.
2020-02-05 16:03:18 +00:00
..
auth_provider.rb FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
authenticator.rb SECURITY: Add confirmation screen when connecting associated accounts 2019-07-24 10:28:15 +01:00
current_user_provider.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
default_current_user_provider.rb FEATURE: Hash API keys in the database (#8438) 2019-12-12 11:45:00 +00:00
discord_authenticator.rb FEATURE: Login with Discord (#8053) 2019-08-30 10:54:19 +01:00
facebook_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
github_authenticator.rb DEV: Apply Rubocop redundant return style 2019-11-14 15:10:51 -05:00
google_oauth2_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
instagram_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
managed_authenticator.rb UX: Ignore name parameter from IDP when it is equal to email (#8869) 2020-02-05 16:03:18 +00:00
oauth2_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
open_id_authenticator.rb DEV: s/\$redis/Discourse\.redis (#8431) 2019-12-03 10:05:53 +01:00
result.rb FIX: Do not raise exception if the authenticator email is missing 2019-08-14 12:08:59 +01:00
twitter_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00