- Jun 27, 2024
-
-
Michael Hamann authored
-
- May 27, 2024
-
-
Thomas Mortagne authored
-
- May 17, 2024
-
-
Vincent Massol authored
-
- Apr 04, 2024
-
-
Thomas Mortagne authored
(cherry picked from commit 3b58028c)
-
- Mar 27, 2024
-
-
Simon Urli authored
Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by:
Manuel Leduc <manuel.leduc@xwiki.com> (cherry picked from commit b410dad4)
-
Thomas Mortagne authored
-
- Mar 05, 2024
-
-
Marius Dumitru Florea authored
-
- Feb 27, 2024
-
-
Vincent Massol authored
# Conflicts: # pom.xml
-
- Feb 09, 2024
-
-
Thomas Mortagne authored
-
- Jan 17, 2024
-
-
Simon Urli authored
-
Thomas Mortagne authored
(cherry picked from commit b759f2dc)
-
- Jan 03, 2024
-
-
Thomas Mortagne authored
-
- Dec 29, 2023
-
-
Manuel Leduc authored
-
- Dec 26, 2023
-
-
Simon Urli authored
-
- Dec 20, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit 0af9d7e5)
-
- Dec 18, 2023
-
-
Lucas C authored
* Removed H1 from the Dashboard sections * Removed H1 from the Panels * Fixed the home page header level * Removed multiple h1s from the user profile sections * Updated the content of the sandbox page * Removed a style rule that is just extra as of now * Updated translations to follow the changes applied in the English files * Updated the administration section title to a H2 (see Editing -> Wysiwyg editor ) * Updated CSS to avoid backward incompatibility (cherry picked from commit 92c46a63)
-
- Dec 12, 2023
-
-
Michael Hamann authored
-
- Dec 07, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit b9a23fe7)
-
- Nov 29, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit de9bdb82)
-
- Nov 27, 2023
-
-
Thomas Mortagne authored
-
- Nov 20, 2023
-
-
Oana-Lavinia Florean authored
-
- Nov 16, 2023
-
-
Michael Hamann authored
-
- Nov 08, 2023
-
-
XWiki authored
Currently translated at 100.0% (4 of 4 strings) Translation: XWiki Platform/Jetty listener Translate-URL: https://l10n.xwiki.org/projects/xwiki-platform/jetty-listener/fr/ Co-authored-by:
Simon Urli <simon.urli@xwiki.com> Co-authored-by:
raphj <raphael.jakse@xwiki.com>
-
Vincent Massol authored
-
- Nov 03, 2023
-
-
Vincent Massol authored
-
- Oct 31, 2023
-
-
Vincent Massol authored
-
- Oct 25, 2023
-
-
Thomas Mortagne authored
-