6 Commits

Author	SHA1	Message	Date
Jared Reisinger	2ae7c47a3c	Add support for email whitelist/blacklist to GitHub auth ... If a site is configured for GitHub logins, _**and**_ has an email domain whitelist, it's possible to get in a state where a new user is locked to a non-whitelist email (their GitHub primary) even though they have an alternate email that's on the whitelist. In all cases, the GitHub primary email is attempted first so that previously existing behavior will be the default. - Add whitelist/blacklist support to GithubAuthenticator (via EmailValidator) - Add multiple email support GithubAuthenticator - Add test specs for GithubAuthenticator - Add authenticator-agnostic "none of your email addresses are allowed" error message.	2016-09-22 11:31:10 -07:00
Sam	fdc89b1735	SECURITY: GitHub authenticator returning unverified emails	2014-09-03 12:53:22 +10:00
Louis Rose	1574485443	Perform the where(...).first to find_by(...) refactoring. ... This refactoring was automated using the command: bundle exec "ruby refactorings/where_dot_first_to_find_by/app.rb"	2014-05-06 14:41:59 +01:00
Sam	35ee341122	SECURITY: GitHub returns unvalidated emails	2014-03-26 10:55:36 +11:00
Sam	213ce33af2	Fixed all broken specs ... Moved middleware config into authenticators	2013-08-26 12:59:17 +10:00
Sam	b52aba15e0	major refactor of auth, break up the gigantic omniauth controller into sub classes for way better extensibitily	2013-08-26 12:59:17 +10:00