483c32cfbf
* Users are only authenticated against their password on login, and to retrieve a token. * Passwords are wiped from the app and cookies after login and token retrieval * Tokens are revoked at the end of the session/logout * If the user chooses the "remember me" option, the token is stored in the cookie * A user interface to revoke tokens will be added * Tokens correctly delete themselves on logout * API documentation updated for the new user-token endpoints * Added a Manage tokens tab to the user panel * Added bullet point about the token authentication for the API * Added tests for new endpoints and tests against authentication middleware
18 lines
989 B
Smarty
18 lines
989 B
Smarty
<div class='content-wrapper' id='user'>
|
|
<h1><%- ctx.user.name %></h1>
|
|
<nav class='buttons'><!--
|
|
--><ul><!--
|
|
--><li data-name='summary'><a href='<%- ctx.formatClientLink('user', ctx.user.name) %>'>Summary</a></li><!--
|
|
--><% if (ctx.canEditAnything) { %><!--
|
|
--><li data-name='edit'><a href='<%- ctx.formatClientLink('user', ctx.user.name, 'edit') %>'>Account settings</a></li><!--
|
|
--><% } %><!--
|
|
--><% if (ctx.canListTokens) { %><!--
|
|
--><li data-name='list-tokens'><a href='<%- ctx.formatClientLink('user', ctx.user.name, 'list-tokens') %>'>Manage tokens</a></li><!--
|
|
--><% } %><!--
|
|
--><% if (ctx.canDelete) { %><!--
|
|
--><li data-name='delete'><a href='<%- ctx.formatClientLink('user', ctx.user.name, 'delete') %>'>Account deletion</a></li><!--
|
|
--><% } %><!--
|
|
--></ul><!--
|
|
--></nav>
|
|
<div id='user-content-holder'></div>
|
|
</div>
|