- Apr 04, 2024
-
-
Thomas Mortagne authored
(cherry picked from commit 3b58028c)
-
- Mar 27, 2024
-
-
Simon Urli authored
Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by:
Manuel Leduc <manuel.leduc@xwiki.com> (cherry picked from commit b410dad4)
-
Thomas Mortagne authored
-
- Mar 05, 2024
-
-
Marius Dumitru Florea authored
-
- Feb 27, 2024
-
-
Vincent Massol authored
# Conflicts: # pom.xml
-
- Feb 09, 2024
-
-
Thomas Mortagne authored
-
- Jan 17, 2024
-
-
Simon Urli authored
-
Thomas Mortagne authored
(cherry picked from commit b759f2dc)
-
- Jan 03, 2024
-
-
Thomas Mortagne authored
-
- Dec 29, 2023
-
-
Manuel Leduc authored
-
- Dec 26, 2023
-
-
Simon Urli authored
-
- Dec 20, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit 0af9d7e5)
-
- Dec 18, 2023
-
-
Lucas C authored
* Removed H1 from the Dashboard sections * Removed H1 from the Panels * Fixed the home page header level * Removed multiple h1s from the user profile sections * Updated the content of the sandbox page * Removed a style rule that is just extra as of now * Updated translations to follow the changes applied in the English files * Updated the administration section title to a H2 (see Editing -> Wysiwyg editor ) * Updated CSS to avoid backward incompatibility (cherry picked from commit 92c46a63)
-
- Dec 12, 2023
-
-
Michael Hamann authored
-
- Dec 07, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit b9a23fe7)
-
- Nov 29, 2023
-
-
Thomas Mortagne authored
(cherry picked from commit de9bdb82)
-
- Nov 27, 2023
-
-
Thomas Mortagne authored
-
- Nov 20, 2023
-
-
Oana-Lavinia Florean authored
-
- Nov 16, 2023
-
-
Michael Hamann authored
-
- Nov 08, 2023
-
-
XWiki authored
Currently translated at 100.0% (4 of 4 strings) Translation: XWiki Platform/Jetty listener Translate-URL: https://l10n.xwiki.org/projects/xwiki-platform/jetty-listener/fr/ Co-authored-by:
Simon Urli <simon.urli@xwiki.com> Co-authored-by:
raphj <raphael.jakse@xwiki.com>
-
Vincent Massol authored
-
- Nov 03, 2023
-
-
Vincent Massol authored
-
- Oct 31, 2023
-
-
Vincent Massol authored
-
- Oct 25, 2023
-
-
Thomas Mortagne authored
-
- Oct 23, 2023
-
-
Simon Urli authored
-
- Oct 20, 2023
-
-
Michael Hamann authored
* Add a new method `getRequiredRight` to `MacroPermissionPolicy` and implement it for the different script macros * Introduce a RequiredRightAnalyzer role to analyze the rights that are required by a document, macro or XObject * Add generic analyzers for macros and objects * Add generic script macro support * Add an analyzer for XWiki.RequiredRightClass * Add an analyzer for skin extensions * Add a component for printing the content of an XObject * Add a component for printing macro parameters and content. * Introduce RequiredRightsEditConfirmationChecker * Introduce RequiredRightsAddedFilter to filter results according to the document author * package the UI by default in xwiki-platform-distribution-flavor-common * Minimal docker test + Page objects * Introduce a configuration to enable the required right analysis, disabled by default as long as it is incomplete and not polished --------- Co-authored-by:
Manuel Leduc <manuel.leduc@xwiki.com>
-
- Oct 10, 2023
-
-
Vincent Massol authored
-
- Sep 27, 2023
-
-
Thomas Mortagne authored
-
- Sep 26, 2023
-
-
Thomas Mortagne authored
-
- Sep 19, 2023
-
-
Vincent Massol authored
-