483c32cfbf
* Users are only authenticated against their password on login, and to retrieve a token. * Passwords are wiped from the app and cookies after login and token retrieval * Tokens are revoked at the end of the session/logout * If the user chooses the "remember me" option, the token is stored in the cookie * A user interface to revoke tokens will be added * Tokens correctly delete themselves on logout * API documentation updated for the new user-token endpoints * Added a Manage tokens tab to the user panel * Added bullet point about the token authentication for the API * Added tests for new endpoints and tests against authentication middleware |
||
|---|---|---|
| .. | ||
| comments_page_view.js | ||
| empty_view.js | ||
| endless_page_view.js | ||
| help_view.js | ||
| home_view.js | ||
| login_view.js | ||
| manual_page_view.js | ||
| not_found_view.js | ||
| password_reset_view.js | ||
| post_detail_view.js | ||
| post_main_view.js | ||
| post_merge_view.js | ||
| post_upload_view.js | ||
| posts_header_view.js | ||
| posts_page_view.js | ||
| registration_view.js | ||
| settings_view.js | ||
| snapshots_page_view.js | ||
| tag_categories_view.js | ||
| tag_delete_view.js | ||
| tag_edit_view.js | ||
| tag_merge_view.js | ||
| tag_summary_view.js | ||
| tag_view.js | ||
| tags_header_view.js | ||
| tags_page_view.js | ||
| top_navigation_view.js | ||
| user_delete_view.js | ||
| user_edit_view.js | ||
| user_summary_view.js | ||
| user_tokens_view.js | ||
| user_view.js | ||
| users_header_view.js | ||
| users_page_view.js | ||