Commit graph

8 commits

Author SHA1 Message Date
ReAnzu
a88ace403f Page formatting/style updates 2018-03-10 19:02:09 -06:00
ReAnzu
5ce8fab533 Implement last usage time 2018-03-10 18:15:00 -06:00
ReAnzu
8d8477ee6b client/user: Updating the title on the delete token button. 2018-03-10 16:38:55 -06:00
ReAnzu
e0d1d9a12e client/user: UI cleanup 2018-03-10 16:38:55 -06:00
ReAnzu
f19c82d110 Addressed defects
* Deleting the current token used for the session, now forces a logout.
* Removed an assert in the is_valid_token code that was erroneous.
* Sorted imports in test_auth according to style.
2018-03-10 16:38:55 -06:00
ReAnzu
606ef31b01 Added note and expiration fields to the user_token model
* Updated UI to show more information about the token.
* Updated the js API to note the client token when creating it.
* Added prototype override to do add day calculations on dates.
* Updated auth check against token to inspect the expiration date of the token if it possesses one.
2018-03-10 16:38:55 -06:00
ReAnzu
8b320ff978 Address pull request comments
* Reformatted javascript
* Appeased pycodestyle
* TODO Add Expiration and Note fields to tokens?
2018-03-10 16:38:55 -06:00
ReAnzu
483c32cfbf User Token Authentication
* Users are only authenticated against their password on login, and to retrieve a token.
* Passwords are wiped from the app and cookies after login and token retrieval
* Tokens are revoked at the end of the session/logout
* If the user chooses the "remember me" option, the token is stored in the cookie
* A user interface to revoke tokens will be added
* Tokens correctly delete themselves on logout
* API documentation updated for the new user-token endpoints
* Added a Manage tokens tab to the user panel
* Added bullet point about the token authentication for the API
* Added tests for new endpoints and tests against authentication middleware
2018-03-10 16:38:55 -06:00