c00c208199
Change to our own token authentication.
5 years ago
cc23d516a0
Add an endpoint to change password.
5 years ago
9cc68291df
Authentication classes: add permissions to logout.
5 years ago
7842bd4d9c
CollectionItem list: don't return the main item.
5 years ago
1bd4c5be52
Send the login signal on login.
5 years ago
15cd41db83
login: gracefully handle bad login attempts.
5 years ago
215a260700
Login: use only the username (not email) for login.
...
We may add support for email in the future.
5 years ago
6051a5ae3a
Signup: use the recommended drf style for validation.
5 years ago
5b2040fda3
Fix running with postgres: convert memoryview to bytes for nacl.
5 years ago
9347682997
Collection update: support limiting vs not limiting based on stoken.
5 years ago
64b947d455
Change invitations to also follow our list return type format.
5 years ago
89b47c67b7
Removed redundant get_serializer_context.
...
This is already provided by default in drf.
5 years ago
9f2140ffac
Change serializer fetching to the more drf way of doing it.
...
Also fix the ItemChunk serializer.
5 years ago
6c31b8fb30
CollectionItemView: disallow normal item creation
...
People should only use transaction/batch
5 years ago
f6960bb8cb
CollectionMember: fix collection list to return data in the right format.
5 years ago
e159bf971b
Collection/item viewsets: enforce access.
5 years ago
6e7fd5d0dd
Collection membership: implement leaving/revoking access.
5 years ago
d93a5d3f06
Collections: use the member stokens for filtering based on stoken
...
While at it, also generalised the stoken handling to be generic and
extendible.
5 years ago
9c63f8d674
Rename stoken to etag and cstoken to stoken.
...
This conforms better with what people know from HTTP and properly
differentiates from CSToken which is now renamed to stoken.
5 years ago
8eee280bbb
Split cstoken and stoken to be different concepts
...
The stokens are really just integrity checks for items, and are really
just tied to what revision we expected to have first what we have. So we
will rename stoken to lastRev or something, and have them completely
separate.
A partial revert of e22a49f982046e875d4e1c5007a91353527d7a0f
5 years ago
2a39f3538e
Change to standalone stoken objects (+ small optimisation).
...
Makes it possible to now generate Stokens as we need so we can add them to
non-revision objects, for example, membership changes.
We also slightly improved how we filter by revs.
5 years ago
3cdb7783fe
Make sure to always return fresh stokens.
5 years ago
863c405802
Rename pubkey to loginPubkey because we'll soon have another pubkey.
...
This breaks sharing because we no longer have a normal pubkey.
This will be fixed in the next commit.
5 years ago
a965a76c36
Invitation: move outgoing invitations to invite/outgoing.
5 years ago
40b7edcb84
Add a way to fetch a user's pubkey.
5 years ago
47e1eec122
Incoming invitations: implement incoming invitations and accepting them
5 years ago
8d1c02dcb9
Collection invitation: implement creating and manipulating collections invitations.
5 years ago
edd88427b0
Add a viewset to control collection membership.
5 years ago
c30cc2f229
Improve and rename bulk_get to filter by item stokens too + cstoken changes
...
Also change how we return cstokens
5 years ago
aaee8f5e38
Fix new_cstoken getting for list functions.
...
We were getting the general cstoken, and were not honouring our limit.
5 years ago
9bbb7ef3d7
Fix filter by cstoken function to not fetch twice.
5 years ago
c63210fe77
CollectionItem: implement batch updating.
5 years ago
b6571c93f6
Collection: fix stoken and add cstoken for the collection token.
5 years ago
e851fb9877
Views: fix wrong items name.
5 years ago
ae4aafcf96
Transaction: make it possible to pass a global stoken to block by.
5 years ago
eeaea6e6ab
Transaction: return 200 rather than 201.
5 years ago
f7c66eaadb
CollectionItem: add a batch endpoint for batch operations.
5 years ago
4c7e30eca5
CollectionItem: implement both update and create.
5 years ago
23dcbc1f9e
CollectionItem: always run both serializers when serializing.
5 years ago
775f438e61
Change deps to be pairs of uid/stoken.
5 years ago
bced00dc8a
Enable logout for now so client tests pass.
5 years ago
644539bd68
Reset view: adjust reset view path and class.
5 years ago
48ebbfb322
Disable host verification for debug mode.
...
Was causing issues with mitm proxy and etc which was a pain.
5 years ago
f438d0e947
Trim salt when creating the challenge.
5 years ago
e9e77945a6
Return token and user on signup/login.
5 years ago
93a0e41f03
Change login flow to better verify all relevant fields.
5 years ago
32a8b9c90d
Implement a ZKPP login flow.
5 years ago
df0f7d134d
Collection items: add a transaction endpoint.
5 years ago
d66d0640dc
Collection: disallow partial updates.
5 years ago
af27871955
Revision: change the shape of the list response.
5 years ago
Tom Hacohen