6 Commits

Author	SHA1	Message	Date
Katharina Irrgang	fa38257170	🐛 🎨 old accesstokens are not cleaned up (#8065) ... closes #8035 - create auth/utils - use authUtils.createTokens for all cases - decrease the expiry of the old access token before creating a new one	2017-03-01 10:12:03 +00:00
David Wolfe	e2bbf7d206	Fix brute for token exchanges (#7725) ... closes #7722 - fixes issue where token exhanges are logged with an undefined email address causing lockouts - use more relevant translations for errors	2016-11-17 14:02:56 +01:00
kirrg001	049b26e67c	🐛 err.next is not always present ... - see https://github.com/AdamPflug/express-brute/issues/45 - we have to handle two cases ATM: with and without callback - in case we call the lib synchronous (which we should not actually), we will log the error so we get informed	2016-11-10 12:23:34 +01:00
David Wolfe	68af2145a1	Replace memory spam prevention with brute-express (#7579) ... no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging	2016-11-08 12:33:19 +01:00
Katharina Irrgang	4056a6da4a	🎨 one token endpoint (#7571) ... * 🎨 one token endpoint refs #7562 - delete /authentication/ghost - Ghost-Admin will use /authentication/token for all use cases (password, refresh token and ghost.org authorization code) - add new grant_type `authorization_code` * 🎨 update comment description and remove spamPrevention.resetCounter	2016-10-17 12:45:50 +02:00
Katharina Irrgang	6473c9e858	✨ Ghost OAuth (#7451) ... issue #7452 Remote oauth2 authentication with Ghost.org. This PR supports: - oauth2 login or local login - authentication on blog setup - authentication on invite - normal authentication - does not contain many, many tests, but we'll improve in the next alpha weeks	2016-09-30 12:45:59 +01:00