pengyuthon/odoo_source
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
103,913 Commits 1 Branch 0 Tags
f96b3cd9f97665ade831a198d1dfee252c25be09
Commit Graph
29 Commits
Author SHA1 Message Date
Christophe Simonis 3ed483caa1 [MERGE] forward port of branch 9.0 up to fa4a371 2016-06-07 19:21:18 +02:00
Christophe Simonis 7889d7e0ff [FIX] web,auth_signup: prevent login autocapitalization 
Mobile virtual keyboards will often capitalize the first letter of
an input text field, which is annoying as odoo logins are case-sensitive.
This will no longer happen thanks to this new attribute.

X-port of commit odoo/enterprise@b8632f8bb6
 2016-06-07 16:15:47 +02:00
Kinjal Mehta 416903d1b9 [MIG] auth_signup: Migrated into new api. 2015-12-16 13:39:41 +01:00
Kinjal Mehta 327de507a7 [MOVE] auth_signup: Moved files in related models and views directory. 2015-12-16 12:20:41 +01:00
Martin Geubelle 65d0faca4d [IMP] auth_signup: reset password form 
* Hide 'back to login' when there is a token
* Hide the form when the token is invalid
 2015-11-17 13:01:08 +01:00
Christophe Simonis 7636b510a2 [ADD] *: CSRF protection in forms and routes 
* make CSRF protection the default on all non-SAFE methods
  note: there currently is no way to call a CSRF-protected endpoint
  without a form-encoded entity-body as that's the only place we get the
  CSRF token from.
* simple CSRF token generation: just use the HMAC'd session id, no
  generating a new random token per session then HMAC it
* use constant-time equal function to avoid timing attacks
* assert that a database secret is configured before hashing/validating
  the CSRF token
* opt-out database manager from CSRF: The super-admin password serves
  the purpose of a CSRF token in the database manager screens.
  There is no request database to obtain the
  secret and generate a CSRF token.
 2015-10-01 01:36:50 +02:00
Nicolas Martinelli 516b1e1cce [IMP] auth_signup: rename "Reset password" to "Confirm" 2015-09-09 11:28:10 +02:00
Christophe Simonis edeceba7df [MERGE] forward port of branch saas-6 up to 7a768a4 
Due to `sale` rewrite (94716a3f14),
the commit 503820acb6 has been partially
ignored (in sale.order.line) and will be rewritten later using new-api.
 2015-08-28 15:07:16 +02:00
Christophe Simonis 6d85a9a4b9 [MERGE] forward port of branch 8.0 up to d744923 2015-08-27 18:30:46 +02:00
Denis Ledoux 0f03699956 [FIX] auth_signup: login & name readonly if signup with token 
In the case of a signup with token, the user login
already exists, and changing of login (email) is
therefore not allowed.

It's the same behavior than in the reset password
view (`auth_signup.reset_password`)

opw-648125
 2015-08-27 12:22:21 +02:00
Antony Lesuisse cd5444a16d [IMP] web: login page cleanups 
- fix html and css layout using only pure bootstrap
- replace db selection by a link to the database selector
- reorder templates
- remove unused templates
 2015-08-01 18:06:45 +02:00
Richard Mathot 7b763176ba [REM] modelines: Gotta catch 'em all 2015-01-08 11:38:58 +01:00
Olivier Dony 95abee7579 [IMP] auth_signup: better autofocus handling 
bzr revid: odo@openerp.com-20140424174842-5zzos30cq0jdu9w6
 2014-04-24 19:48:42 +02:00
Olivier Dony be6bef3c59 [FIX] auth_signup: avoid losing direct query string params during when switching between signup/signin/reset 
bzr revid: odo@openerp.com-20140424162401-qtnopdtfdkfa1zxa
 2014-04-24 18:24:01 +02:00
Christophe Simonis d504764eff [MERGE] forward port of branch saas-3 up to revid 9298 chm@openerp.com-20140311130852-3ft0v1mc9ht1any6 
bzr revid: chs@openerp.com-20140311145205-s56fj113fsrnisc3
 2014-03-11 15:52:05 +01:00
Olivier Dony 2cf5d26b1a [FIX] auth_signup: autofocus second field in signup form if login is already filled in 
bzr revid: odo@openerp.com-20140306210835-82auwdf2aal3a25x
 2014-03-06 22:08:35 +01:00
Denis Ledoux ee67a1ae39 [IMP] auth_signup: email first in the signup form, as is regarded as the most important variable 
bzr revid: dle@openerp.com-20140227161638-5rp3bunjx77fbavu
 2014-02-27 17:16:38 +01:00
Fabien Meghazi 075640848e [FIX] signup and rest password links 
bzr revid: fme@openerp.com-20140227121032-2nj47kqc5bwwpo23
 2014-02-27 13:10:32 +01:00
Christophe Simonis 3954a2f9af [FIX] auth_signup: force login to be an email when signup 
bzr revid: chs@openerp.com-20140211132839-a4lzg0t7m7kl5ihr
 2014-02-11 14:28:39 +01:00
Fabien Meghazi de7c5f76bd [MERGE] upstream 
bzr revid: fme@openerp.com-20140210134735-59csf1137d6v10ev
 2014-02-10 14:47:35 +01:00
Christophe Simonis 4b22c30888 [FIX] auth_signup: keep query when generating links 
bzr revid: chs@openerp.com-20140206164020-2yuf5xdciabt4zsp
 2014-02-06 17:40:20 +01:00
Fabien Meghazi bce084bac2 [IMP] Seperate signup and reset into two controllers and templates 
bzr revid: fme@openerp.com-20140205183232-fmlin6kiycu6bu0j
 2014-02-05 19:32:32 +01:00
Fabien Meghazi 9ffb9d5632 [REM] Removed LoginForm javascript related 
bzr revid: fme@openerp.com-20140205092354-oa6qxm0fsuojhuc2
 2014-02-05 10:23:54 +01:00
Fabien Meghazi 2bf139a9a1 [ADD] database selector to auth_signup 
bzr revid: fme@openerp.com-20140124151910-riy18qm3ix93nbdg
 2014-01-24 16:19:10 +01:00
Fabien Pinckaers ef5a50fa98 [IMP] wording 
bzr revid: fp@tinyerp.com-20140122193818-vxn20qaibfvgn1u3
 2014-01-22 20:38:18 +01:00
Fabien Pinckaers df3a1486f4 [IMP] remove under construction 
bzr revid: fp@tinyerp.com-20140122193523-ni1uzv38plutq41m
 2014-01-22 20:35:23 +01:00
Fabien Pinckaers 986471dcba [IMP] design of sign in/up 
bzr revid: fp@tinyerp.com-20140122192322-nvtcood5ll0outn9
 2014-01-22 20:23:22 +01:00
Fabien Meghazi fff55213b5 [IMP] auth_signup converted to server side module 
bzr revid: fme@openerp.com-20140121152027-7wch4r7dt2ew0did
 2014-01-21 16:20:27 +01:00
Fabien Meghazi c3f7ab7ddd [WIP] auth_signup 
bzr revid: fme@openerp.com-20140117141806-r6f1dejdcg7ii1e0
 2014-01-17 15:18:06 +01:00