Florent Bruneau [Thu, 11 Dec 2008 19:44:01 +0000 (20:44 +0100)]
Prepare ChangeLog for next version.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 11 Dec 2008 19:40:40 +0000 (20:40 +0100)]
Plat/al 0.10.0.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 7 Dec 2008 20:45:15 +0000 (21:45 +0100)]
More readable administration portal.
Add admin/accounts page with a list of all administrators and all disabled
accounts.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 7 Dec 2008 17:33:19 +0000 (18:33 +0100)]
Optimizes the nickname synchronization for GoogleApps by not sending data for disabled accounts.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Aymeric Augustin [Sun, 7 Dec 2008 17:09:39 +0000 (18:09 +0100)]
Handle one more special case
Extra checks
Stéphane Jacob [Sun, 7 Dec 2008 15:10:48 +0000 (16:10 +0100)]
Fixes sector and function's display in the profile edition interface (Ooops).
Florent Bruneau [Sun, 7 Dec 2008 11:20:39 +0000 (12:20 +0100)]
Fix SUID authentication:
* default auth level is AUTH_MDP
* requested password (if needed) is the password of the administrator
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Sat, 6 Dec 2008 22:52:50 +0000 (23:52 +0100)]
Fixes sector and function's display in the profile edition interface.
Florent Bruneau [Tue, 2 Dec 2008 18:07:56 +0000 (19:07 +0100)]
Trim regexps to avoid the 'baldelx' effect.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 1 Dec 2008 22:04:52 +0000 (23:04 +0100)]
Fix last session.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Fri, 28 Nov 2008 12:19:40 +0000 (13:19 +0100)]
Deletes ambiguous explaination text about medals' publicity.
Stéphane Jacob [Thu, 27 Nov 2008 12:33:34 +0000 (13:33 +0100)]
Adds a pop-up when the subject is not filled on the group email interface and sets the default subject to null.
Aymeric Augustin [Sat, 22 Nov 2008 13:54:51 +0000 (14:54 +0100)]
Reviewing and slighlty clarifying template for sender address rewriting
Florent Bruneau [Sun, 16 Nov 2008 20:46:38 +0000 (21:46 +0100)]
Implementation of the logger here.
WARNING: This breaks compatibility with sessions created by previous
versions of plat/al.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 16 Nov 2008 20:12:08 +0000 (21:12 +0100)]
Cosmetics.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 16 Nov 2008 19:45:55 +0000 (20:45 +0100)]
Should fix the calculation of the number of pages on X.net events admin page (Closes #751)
Grumpf, obfuscated code! (not sure this fix all cases, please test if possible).
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 16 Nov 2008 14:21:26 +0000 (15:21 +0100)]
Add a message when a user valid his subscription to an event.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 16 Nov 2008 13:04:32 +0000 (14:04 +0100)]
On X.net, sitename is 'Polytechnique.net'.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 15 Nov 2008 20:11:09 +0000 (21:11 +0100)]
Confirming to editorial rules: 'courriel' => 'email'
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 15 Nov 2008 20:09:33 +0000 (21:09 +0100)]
Hop hop hop!!!
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 15 Nov 2008 20:00:57 +0000 (21:00 +0100)]
Fix performance issue at session creation.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Sat, 15 Nov 2008 16:51:04 +0000 (17:51 +0100)]
Fixes openweb.css and keynote.css bugs introduced in
fd9a8382.
Stéphane Jacob [Sat, 15 Nov 2008 16:36:16 +0000 (17:36 +0100)]
Adds picture for the order of St Charles.
Florent Bruneau [Sat, 15 Nov 2008 09:55:11 +0000 (10:55 +0100)]
Missing anchors
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 15 Nov 2008 09:48:55 +0000 (10:48 +0100)]
Gadz -> {$sitename}.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 14 Nov 2008 21:36:19 +0000 (22:36 +0100)]
Export the members of a list as a CSV file (Closes #927)
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 14 Nov 2008 20:26:49 +0000 (21:26 +0100)]
Update to txm's text (to be reviewed by the communication team).
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 14 Nov 2008 20:13:27 +0000 (21:13 +0100)]
Update ChangeLog
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Laurent Penou [Tue, 11 Nov 2008 11:34:53 +0000 (12:34 +0100)]
Small update to manage NomDusage correctly
Aymeric Augustin [Sun, 9 Nov 2008 14:07:16 +0000 (15:07 +0100)]
Read-only version of the globally whitelisted websites for openid
Adding a site can be done directly in SQL with user_id == NULL
Aymeric Augustin [Sun, 9 Nov 2008 13:53:23 +0000 (14:53 +0100)]
Users can delete entries from their openid whitelid
Florent Bruneau [Sat, 8 Nov 2008 11:53:17 +0000 (12:53 +0100)]
Oops, fix dynpost.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sat, 8 Nov 2008 11:47:22 +0000 (12:47 +0100)]
Oops, fix vcard query to retreive user pictures.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 18:34:01 +0000 (19:34 +0100)]
Rewrite goodiesPopup with jQuery, cleanup.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 18:24:00 +0000 (19:24 +0100)]
Rewrite auto_links stuff using jQuery.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 17:32:11 +0000 (18:32 +0100)]
Rewrite our pour implementation of Ajax using jQuery.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 16:26:35 +0000 (17:26 +0100)]
Update ChangeLog
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 16:22:28 +0000 (17:22 +0100)]
Wiki preview uses 'post' instead of 'get' (Closes #918)
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Fri, 7 Nov 2008 15:51:09 +0000 (16:51 +0100)]
Update core and ChangeLog: version will be 0.10.0
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Mon, 3 Nov 2008 20:35:17 +0000 (21:35 +0100)]
Update ChangeLog
Aymeric Augustin [Sun, 2 Nov 2008 22:16:57 +0000 (23:16 +0100)]
Simplify detection of bounces by using the MIME type (which was checked anyway)
Improve the detection of the "out of office"
Fix an error message
Aymeric Augustin [Sun, 2 Nov 2008 21:27:45 +0000 (22:27 +0100)]
Script to automatically process the NL bounces
Florent Bruneau [Sun, 2 Nov 2008 16:47:09 +0000 (17:47 +0100)]
Oops, forgot some references to plpage.devel.tpl.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 2 Nov 2008 16:43:54 +0000 (17:43 +0100)]
common.content.tpl and common.devel.tpl have been moved to the core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 2 Nov 2008 16:15:40 +0000 (17:15 +0100)]
Move plugin compiler.icon in the core.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Fri, 31 Oct 2008 23:11:45 +0000 (00:11 +0100)]
Coding rules discourage excessive comments
Aymeric Augustin [Fri, 31 Oct 2008 22:57:39 +0000 (23:57 +0100)]
Oops
Aymeric Augustin [Fri, 31 Oct 2008 22:52:30 +0000 (23:52 +0100)]
User can choose to always trust websites
TODO implement a way to remove websites from the whitelist
Aymeric Augustin [Fri, 31 Oct 2008 22:33:39 +0000 (23:33 +0100)]
Remove a page that is no longer used since the associated error case disappeared
Aymeric Augustin [Fri, 31 Oct 2008 22:32:29 +0000 (23:32 +0100)]
Add the possibility for globally whitelisted websites
(TODO admin interface to handle them)
Aymeric Augustin [Fri, 31 Oct 2008 22:31:12 +0000 (23:31 +0100)]
Reflow and drastically simplify logic
Since we do automatic user identifier selection, we can remove some checks
Aymeric Augustin [Fri, 31 Oct 2008 22:19:14 +0000 (23:19 +0100)]
Implement a list of trusted websites and check it during authentication
Aymeric Augustin [Fri, 31 Oct 2008 21:19:33 +0000 (22:19 +0100)]
Enable the usage of an OP Identifier instead of on User Identifier
Stéphane Jacob [Thu, 30 Oct 2008 22:17:59 +0000 (23:17 +0100)]
Adds a toggle button and a larger click target to toggle people in the ML/directory synchronisation page (Closes #914). Updates ChangeLog.
Aymeric Augustin [Thu, 30 Oct 2008 22:38:39 +0000 (23:38 +0100)]
Properly advertise XRDS on /
Aymeric Augustin [Thu, 30 Oct 2008 22:14:45 +0000 (23:14 +0100)]
Re-add a proper identification provider XRDS
We're going to enable users to enter an OP identifier and not a claimed identifier
Florent Bruneau [Thu, 30 Oct 2008 21:02:06 +0000 (22:02 +0100)]
Add poison emails in the bandeau.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Thu, 30 Oct 2008 20:38:28 +0000 (21:38 +0100)]
Add /pet/ to get emails inside <a href="mailto"> tags without <html>. Fix
links in footer, add links on xnet footer.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Aymeric Augustin [Wed, 29 Oct 2008 21:11:27 +0000 (22:11 +0100)]
Advertise sreg
Aymeric Augustin [Wed, 29 Oct 2008 21:01:29 +0000 (22:01 +0100)]
Use hruid as openid identifier
Aymeric Augustin [Wed, 29 Oct 2008 20:26:27 +0000 (21:26 +0100)]
ID provider XRDS was not used in our context
Florent Bruneau [Wed, 29 Oct 2008 20:50:09 +0000 (21:50 +0100)]
Fix check_ip with invalid HTTP_X_FORWARDED_FOR.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 29 Oct 2008 09:00:17 +0000 (10:00 +0100)]
Adds pictures for new medals.
Aymeric Augustin [Tue, 28 Oct 2008 22:44:45 +0000 (23:44 +0100)]
Only allow melix alias in openid URLs when the melix alias is public
Enable the hook
Aymeric Augustin [Tue, 28 Oct 2008 22:28:59 +0000 (23:28 +0100)]
Always redirect to the canonic URL before discovery can occur
(this is a good feature)
Add an alias for the openid page based on the melix alias
(this might be a bad thing, because it provides public alias => realname resolution; the feature is inactive)
Aymeric Augustin [Sun, 26 Oct 2008 09:41:17 +0000 (10:41 +0100)]
Improve session use
Aymeric Augustin [Sun, 26 Oct 2008 09:12:18 +0000 (10:12 +0100)]
Implement Simple Registration support
TODO: determine if date of birth can be given, and if there is a sensible implementation for postcode, country, language and timezone
Aymeric Augustin [Sun, 26 Oct 2008 08:40:34 +0000 (09:40 +0100)]
Check behaviour with a testing suite, fix behaviour when denying trust
Add comments and explanations
Better respect of the spec
Aymeric Augustin [Sat, 25 Oct 2008 21:23:29 +0000 (23:23 +0200)]
Working OpenId implementation, including basic security features
Still needs code improvements, error handling, and testing
Change path for OpenId library and update Makefile
Create a spool for the OpenId library with the Makefile
Aymeric Augustin [Sat, 25 Oct 2008 12:51:31 +0000 (14:51 +0200)]
XRDS for ID provider and user
Change path to library to simplify includes
Aymeric Augustin [Sat, 25 Oct 2008 11:02:47 +0000 (13:02 +0200)]
Create an openid discovery page for each user
Aymeric Augustin [Sat, 25 Oct 2008 09:08:33 +0000 (11:08 +0200)]
Add a Makefile task to download the JanRain openid library into the include folder
Ignore that folder in git
Fix mixed space/tabs in Makefile
Vincent Zanotti [Sat, 25 Oct 2008 21:06:36 +0000 (23:06 +0200)]
Adds support of plat/al's aliases in Google Apps.
It will solve the issue of the "Sender:" header being added to outgoing mails on GoogleApps GMail.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 25 Oct 2008 17:23:59 +0000 (19:23 +0200)]
Fixes the include path for some of our scripts (platal/core split).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Florent Bruneau [Thu, 23 Oct 2008 18:48:43 +0000 (20:48 +0200)]
Transition code from old validation request format.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Wed, 22 Oct 2008 19:54:19 +0000 (21:54 +0200)]
Modules MUST NOT try to reproduce authentication stuff from platal.php.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Stéphane Jacob [Wed, 22 Oct 2008 11:09:42 +0000 (13:09 +0200)]
Typos and text improvement.
Florent Bruneau [Tue, 21 Oct 2008 07:46:27 +0000 (09:46 +0200)]
With fixed seed, change the page every month.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 22:03:16 +0000 (00:03 +0200)]
The domain of the email must be included in the poisonous source file.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:33:12 +0000 (23:33 +0200)]
Don't get obfuscated.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:25:50 +0000 (23:25 +0200)]
Oops, don't activate this one.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Mon, 20 Oct 2008 21:24:50 +0000 (23:24 +0200)]
Add poisonous email injector.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Florent Bruneau [Sun, 19 Oct 2008 12:40:43 +0000 (14:40 +0200)]
Add mYk's poisonous email generator.
Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
Vincent Zanotti [Sun, 19 Oct 2008 03:15:06 +0000 (05:15 +0200)]
Merge branch 'platal-0.9.17'
Vincent Zanotti [Sat, 18 Oct 2008 17:20:37 +0000 (19:20 +0200)]
Fixes an invalid submit button in GoogleApps password change box.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 15:01:24 +0000 (17:01 +0200)]
Update ChangeLog.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:58:34 +0000 (16:58 +0200)]
Migrates hruid upgrade script to version 0.9.18.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 18 Oct 2008 14:56:46 +0000 (16:56 +0200)]
Merge commit 'origin/hruid'
Vincent Zanotti [Sat, 18 Oct 2008 14:56:11 +0000 (16:56 +0200)]
Update core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:19:45 +0000 (16:19 +0200)]
Use last version of core.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:18:15 +0000 (16:18 +0200)]
Removes 'bestalias' and 'forlife' from the session.
This switches the hruid branch to the "let's fix things that have been broken" mode.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:17:19 +0000 (16:17 +0200)]
Converts various user of the in-session 'bestalias' and 'forlife' values to hruid.
Vincent Zanotti [Sun, 12 Oct 2008 14:13:11 +0000 (16:13 +0200)]
Converts the Platal module to hruid (mainly two FIXME).
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 14:12:34 +0000 (16:12 +0200)]
Converts the remaining bits of the Profile module to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:50:08 +0000 (05:50 +0200)]
Migrates to hruid a few pages (axletter admin, ipwatch, search).
Adds a few TODO for forlife uses that are to be fixed later.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 03:48:13 +0000 (05:48 +0200)]
Migrates the PlSet views to hruid.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sun, 12 Oct 2008 02:12:37 +0000 (04:12 +0200)]
Converts the Events module to hruid. Rewrites the birthday/stale-profile code.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:58:47 +0000 (20:58 +0200)]
Fixes a security hole that did allow a third party website to reuse a valid
(challenge, response) pair. This pair, obtainable externally from an approved
groupex website, enabled it to discover personal information from Xs with a
permanent/valid cookie on Xorg.
The fix forces return url to match a defined regexp; backward compatibility is
retained, though the hole won't be fixed until all entries in groupex_auth are
added a non-empty return url regexp.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 18:24:44 +0000 (20:24 +0200)]
Converts auth-groupex to hruid; this doesn't fix the problem of the 'username' value, which will soon not be translatable to a valid email address anymore.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
Vincent Zanotti [Sat, 11 Oct 2008 17:40:09 +0000 (19:40 +0200)]
Converts module Carnet to the new hruid/User model.
Signed-off-by: Vincent Zanotti <vincent.zanotti@polytechnique.org>
projects / platal.git / log