5 commits

Author	SHA1	Message	Date
Jake Moshenko	82efc746b3	Make our JWT checking more strict.	2015-09-04 15:18:57 -04:00
Joseph Schorr	0854d20cbd	SECURITY FIX FOR LDAP ... It appears the recent migration of the LDAP code and add of a check for the admin username/password being invalid *broke the LDAP password check*, allowing any password to succeed for login. This fixes the problem, add unit tests to verify the fix and add some tests to our other external auth test suite. A release will be needed immediately along with an announcement	2015-08-18 12:32:19 -04:00
Jake Moshenko	18100be481	Refactor the util directory to use subpackages.	2015-08-03 16:04:19 -04:00
Joseph Schorr	38a6b3621c	Automatically link the superuser account to federated service for auth ... When the user commits the configuration, if they have chosen a non-DB auth system, we now auto-link the superuser account to that auth system, to ensure they can login again after restart.	2015-07-22 13:37:23 -04:00
Joseph Schorr	33b54218cc	Refactor the users class into their own files, add a common base class for federated users and add a verify_credentials method which only does the verification, without the linking. We use this in the superuser verification pass	2015-07-20 11:39:59 -04:00