| Age | Commit message (Collapse) | Author |
|
value of request::is_ajax() from the original request is lost. This patch stores its value in the session so the reauthenticate controller knows whether its in a dialog/panel or not.
|
|
method to set the content type header and encode the response as a json object
|
|
on a query param to urls that appear in dialogs. This keeps things simpler.
|
|
that all the form calls actually return the form as a json object, calling the form creation controller method i no longer required.
|
|
user helper directly. Else it doesn't work with LDAP and other
identity systems.
|
|
|
|
admin page is not displayed in a dialog.
|
|
parameter to the url to let the controller know its in a dialog. The reauthenticate controller will format the password prompt as a page or a form content. If authentication is successful, then the original controller is called instead of being redirected to.
|
|
entire page when reauthenticating the administrator. Just put the form in the dialog."
This reverts commit 8493a3d36f597e183490ae880b35a3d98f50a045.
|
|
page when reauthenticating the administrator. Just put the form in the dialog.
|
|
login/continue code.
|
|
"invalid_password" to remove ambiguity.
|
|
|
|
|
|
active authentication every 20 minutes to access the admin area.
Also renaming auth::validate_too_many_failed_password_changes to validate_too_many_failed_auth_attempts since it's used in this generalized way in 3 places now.
|