summaryrefslogtreecommitdiff
path: root/actions/userauthorization.php
AgeCommit message (Collapse)Author
2009-08-25a distributed -> the distributedEvan Prodromou
2009-08-25change Laconica and Control Yourself to StatusNet in PHP filesEvan Prodromou
2009-08-10Added configuration option to only allow OpenID logins.Jeffery To
If $config['site']['openidonly'] is set to true: * the Login/Register pages will be removed from the navigation; * directly accesses to the Login/Register pages will redirect to the OpenID login page; * most links to the Login/Register pages will link to the OpenID login page instead. The user will still need to set a password to access the API and RSS feeds.
2009-08-05Use NICKNAME_FMT everywhere consistentlyCraig Andrews
2009-06-20Update copyright dates in files modified in 2009Evan Prodromou
2009-06-20change Controlez-Vous to Control YourselfEvan Prodromou
2009-04-12Updated styles for the Authrization subscription form inputsSarven Capadisli
2009-04-12Updated markup for entity_profile on Authorize subscription page.Sarven Capadisli
2009-03-11Remove OAuthRequest as storage from userauthorization.Adrian Lang
Since we are not really handling a fullblown OAuth request (No signature, nonce, consumer) we should not use this class, rather store the plain param array in the session.
2009-03-11Remove second OAuth request validation.Adrian Lang
2009-03-11Fixes #827: Laconica expects full OAuth message for user auth request.Adrian Lang
When a user subscribes to a remote profile, he is redirected to his own service to confirm the request. This authorization request is specified in http://oauth.net/core/1.0#auth_step2. According to the standard, it does not have to pass consumer_key, nonce, timestamp or signature. The only specified parameters are oauth_token and oauth_callback, both optional.
2009-03-09Improve handling of null values in profile parameters.Adrian Lang
This commit fixes two issues: - Allowing remote users to clear profile parameters via OMB. - Improved handling of profile parameters which evaluate to false ('0' for example)
2009-03-07fix case of OAuthUtil methodEvan Prodromou
2009-03-07fix for change in OAuthUtil upstreamEvan Prodromou
2009-02-27Fixes #1067: Avatar stretched on authorize remote subscription page. The img ↵Adrian Lang
tag used a wrong class which had a width: 100% applied.
2009-02-09Fixed remote subscribe avatar problemsEvan Prodromou
Had some Avatar file-copying issues; seem to be fixed.
2009-02-07trac #1155 ++ replace strlen with mb_strlen for all utf8 strings.Robin Millette
2009-01-26Cancel -> Reject in remote subscribeAdrian Lang
2009-01-23Fix over-zealous un-underscoring in userauthorizationEvan Prodromou
2009-01-23Update userauthorization, strip out a lot of debug stuffEvan Prodromou
2009-01-15Convert use of common_server_error and common_user_error to methods on ActionEvan Prodromou
2009-01-15Convert all actions to use new UI functionsEvan Prodromou
I did a massive search-and-replace to get all the action subclasses to use the new output function (common_element() -> $this->element(), etc.) There's still a lot to do, but it's a first step
2008-12-23move opening brace of class declaration to next lineEvan Prodromou
Another gigantor PEAR coding standards patch. Here, I've moved the opening curly bracket on a class statement to the following line. darcs-hash:20081223194923-84dde-77a93de314caadbcb5b70bf346a4648be77a864e.gz
2008-12-23TRUEEvan Prodromou
More PEAR coding standards global changes. Here, I've changed all instances of TRUE to true and FALSE to false. darcs-hash:20081223194428-84dde-cb1a1e6f679acd68e864545c4d4dd8752d6a6257.gz
2008-12-23change function headers to K&R styleEvan Prodromou
Another huge change, for PEAR code standards compliance. Function headers have to be in K&R style (opening brace on its own line), instead of having the opening brace on the same line as the function and parameters. So, a little perl magic found all the function definitions and move the opening brace to the next line (properly indented... usually). darcs-hash:20081223193323-84dde-a28e36ecc66672c783c2842d12fc11043c13ab28.gz
2008-12-23replace NULL with nullEvan Prodromou
Another global search-and-replace update. Here, I've replaced the PHP keyword 'NULL' with its lowercase version. This is another PEAR code standards change. darcs-hash:20081223192129-84dde-4a0182e0ec16a01ad88745ad3e08f7cb501aee0b.gz
2008-12-23replace all tabs with four spacesEvan Prodromou
The PEAR coding standards decree: no tabs, but indent by four spaces. I've done a global search-and-replace on all tabs, replacing them by four spaces. This is a huge change, but it will go a long way to getting us towards phpcs-compliance. And that means better code readability, and that means more participation. darcs-hash:20081223191907-84dde-21e8efe210e6d5d54e935a22d0cee5c7bbfc007d.gz
2008-12-02whitespace fixup in userauthorizationEvan Prodromou
darcs-hash:20081203032650-5ed1f-1f9affd557cf958cdfe7ed224433199b22e1c56a.gz
2008-12-02check for license compatibilityEvan Prodromou
darcs-hash:20081203032632-5ed1f-2213efd018913e3253082dbe83d7b906c4f0ff76.gz
2008-11-18add some extra checks to avoid remote subscriptions to local usersEvan Prodromou
darcs-hash:20081118180644-84dde-ab152249ac0844a482029b7e0f8db2780a0f15d6.gz
2008-09-26try to clean up user-without-profile errorsEvan Prodromou
darcs-hash:20080926145008-5ed1f-8a60ed3c5adbfe75aa044732e8d10dbdb9b93089.gz
2008-09-09Fix remote sub when redirected via login (Ticket #618)CiaranG
darcs-hash:20080909202259-f6e2c-8c7e836fd1f0ce9de3ea3802161e1068e346e5dd.gz
2008-09-04Resolve remote subscribe and omb problems with quotes (Tickets #604 and #567)CiaranG
darcs-hash:20080904065504-f6e2c-f0c770f52624e7151a93f2ed2b8813657ca88c14.gz
2008-08-29session token in userauthorization formEvan Prodromou
darcs-hash:20080829052847-84dde-a64918a75f8300ec8fb230202881691066147652.gz
2008-08-29csrf protection in userauthorizationEvan Prodromou
darcs-hash:20080829052732-84dde-0ebb7e32236b480cc3aa2eb7a4bb2b41ff6177d6.gz
2008-08-22better error reporting in user authorization actionEvan Prodromou
darcs-hash:20080822212111-84dde-2770093fcfaa6fe03abb1143d3828f0622382b45.gz
2008-08-16name omb_listener param so we can refer to it in error msgEvan Prodromou
darcs-hash:20080816151057-84dde-e9df2c91a2711b235aa936a28e250715fc7c6d50.gz
2008-07-22base class is_readonly() now returns false by defaultzach
darcs-hash:20080722212056-ca946-e4bd9eef8e3d8991414932e9fc7b8c9a31f818c0.gz
2008-07-22Added is_readonly() method to all Actionszach
darcs-hash:20080722171501-ca946-160bad6c4f80be2b3b105ea9b913f1c0f9edb0ef.gz
2008-07-08Convert _t() to _() for gettext.Mike Cochrane
darcs-hash:20080708094531-533db-83399a46e6ec4c0fcc6249b0235961f969d1ae73.gz
2008-07-02methodEvan Prodromou
darcs-hash:20080702131507-84dde-507a6380fcab66c1fbcbaad6d1399c8a2f210acf.gz
2008-06-10fixup some TODOs, fix a bug in userauthorizationEvan Prodromou
darcs-hash:20080611020810-84dde-32ab3b9e25532b92156d093dcf2ad24134cbcf4f.gz
2008-06-06checks for user and sub in validate and better error check in remote saveEvan Prodromou
darcs-hash:20080606055439-84dde-3abda48583737e89a9c75b3cff6722e9444d13a9.gz
2008-06-06debug info for authorizing tokenEvan Prodromou
darcs-hash:20080606053321-84dde-c6ee7a4565cce35873ad36890b609b90b65b472d.gz
2008-06-06handle errors in authorizing and saving remote profileEvan Prodromou
darcs-hash:20080606052631-84dde-4a8b4d8f70b0148d0b98b62875099f7d9cca9026.gz
2008-06-06use $_GET, not $argsEvan Prodromou
darcs-hash:20080606052117-84dde-b9afe0037d9c75382f218f85eefec2a944e42dc6.gz
2008-06-06don't clone arrays!Evan Prodromou
darcs-hash:20080606051823-84dde-1ba6bdfe546b5307afd97c2c7715f8d35b464e83.gz
2008-06-06fix args in returntoEvan Prodromou
darcs-hash:20080606051331-84dde-1afe6e4a156cbb802b8b4231e065dc99ad07fef4.gz
2008-06-05move avatar scaling and saving to Avatar and ProfileEvan Prodromou
Extracted the code for setting a new original avatar to the Profile class, and moved some of it to Avatar, too. This makes it easier to have the same functionality whether an avatar is set using the profile settings (for our users), or on a remote subscription. Necessitated changing the filenaming function to just take an ID. darcs-hash:20080605193708-84dde-a441cc0474951ce7f1a1da9310b5145c0b7c3070.gz
2008-06-05aEvan Prodromou
darcs-hash:20080605183419-84dde-debe7f18565c960ee6886ac1330833bc8ae1ca5f.gz