46b579dc4a
Make sure User/AccessToken relations are set up by default
...
User.login assumes the relation User.accessTokens exists
2014-02-14 10:31:30 -08:00
618b563c6e
Use hex encoding for application ids/keys
...
base64 encoded ids/keys are not friendly for urls
2014-02-07 11:14:01 -08:00
592f3f9278
Make sure the configured ACL submodel is used
2014-02-03 16:00:01 -08:00
c36e20587e
Merge pull request #163 from strongloop/feature/include-user-in-login-result
...
Include user in login result
2014-01-30 10:24:14 -08:00
c711b99b8a
Merge pull request #154 from strongloop/feature/debug-login-error
...
Add debug information for user.login
2014-01-30 10:13:26 -08:00
d6f0b5f5a6
Add `include=user` param to `User.login`
...
Allow LB clients to get details of the currently logged-in user
as part of the login response.
Improve method's `description` to mention this new option.
2014-01-30 18:09:54 +01:00
03cb2f0556
Describe `access_token` param of `User.logout`
...
Add an explicit note that clients are not supposed to send the
`access_token` parameter, since it is extracted from request
headers.
2014-01-30 18:09:54 +01:00
57796a41cd
Remove the generated flag for access token id
...
The generated flag is used to indicate if the id is automatically generated
by the backend store. If it's set, the data type will be updated when the
model is attached to a datasource.
The AccessToken model defines a string id, which is set in the beforeCreate
hook. So it's client provided id.
2014-01-30 09:02:12 -08:00
938cafeb77
Remove message prefix as debug will print it
2014-01-27 14:47:48 -08:00
c35f762d4e
Add debug information for user.login
2014-01-27 14:31:38 -08:00
20766e251a
Add loopback.compat to simplify upgrade to 1.6
...
Add a compatibility layer that allows applications based on LB pre-v1.6
to work with 1.6 versions with a minimum amount of changes required.
New flag(s):
compat.usePluralNamesForRemoting
2014-01-27 10:29:57 +01:00
8bb8861ba1
Register exported models using singular names
...
Remove the inconsistency between model names used by LoopBack app and
datasource-juggler (modelName, e.g. User) and the name used by
strong-remoting (pluralModelName, e.g. Users).
This way the class name in the strong-remoting metadata can be used
by client-code generators. Before this change, the generators would
produce method names like `Users.login`.
2014-01-27 10:29:57 +01:00
54bff35fef
User: use User.http.path
...
Use the new property introduced by a recent change in
loopback-datasource-juggler instead of building the URL
manually from pluralModelName.
2014-01-27 10:29:57 +01:00
5586c54c49
Fix the Role ref to RoleMapping
2014-01-23 15:04:48 -08:00
224b500c3a
Fix the Scope reference to models
2014-01-23 14:46:02 -08:00
bb389ce209
Lookup the email model
2014-01-23 14:40:27 -08:00
bcc7e68e0e
Add lookback.getModelByType() and use it resolve model deps
2014-01-23 14:39:27 -08:00
a6ff22c9c1
Make sure defaultPermission is checked
2014-01-16 15:05:10 -08:00
7212ebe805
Remove the dangling require
2014-01-16 09:12:52 -08:00
d8647bb3c1
Make ACL model subclassing friendly
2014-01-16 08:50:50 -08:00
c8eb5d9170
Make sure methods are called in the context of the calling class
2014-01-14 15:34:44 -08:00
9fc8e197ee
Start to move md to jsdoc
2014-01-14 10:03:47 -08:00
6bb0ba2d95
Add missing assert in user model
2014-01-10 10:07:39 -08:00
fcc4bba82d
Add reference documentation using sdocs
2013-12-19 17:49:47 -08:00
a47317de0d
Update README for application model
2013-12-19 13:42:12 -08:00
16b790a93a
Merge pull request #102 from strongloop/fix/user
...
Various Fixes and Behavioral Changes to the User Model
2013-12-18 21:34:30 -08:00
ac2f4de9d3
Remove the default values for gateway/port
2013-12-18 12:28:48 -08:00
598b1e6b61
Reformat the code using 2 space identation
2013-12-18 11:49:09 -08:00
95ad3e8c04
Allow cert/key data to be shared by push/feedback
2013-12-18 10:58:34 -08:00
98ed38302a
Logout now automatically pulls the accessToken from the request
2013-12-17 21:22:05 -08:00
939df463fe
Fix tests depending on old behavior of default User ACLs
2013-12-17 21:10:05 -08:00
3152960336
Add default user ACLs
2013-12-17 20:42:28 -08:00
d09e3225cd
Define schema for GCM push-notification settings
...
Remove unused property PushNotificationSettingSchema.platform.
Flatten GCM settings schema. There is no need to distinquish between
pushOptions and feedback, as there is only single HTTP channel shared
by both.
2013-12-17 18:44:13 +01:00
0794f141c1
Improve debug statements for access control
2013-12-16 18:12:13 -08:00
b62b8fa47d
Fix user not allowed to delete itself if user
...
**Note: the only code required for the fix is in role.js:203**. The
other changes are to help organize debug output.
2013-12-11 19:15:19 -08:00
ad58a8ec13
Only look at cookies if they are available
2013-12-11 16:43:23 -08:00
0f86f69880
Remove the empty comment and set default token
2013-12-11 16:21:37 -08:00
97dc0aa441
Refactor to the code use wrapper classes
...
Add AccessContext, Principal, and AccessRequest
Add debug information
2013-12-11 16:03:48 -08:00
178674ec9a
Enhance getRoles() to support smart roles
2013-12-11 09:06:21 -08:00
82eeaeee6b
Fix the algorithm for Role.isInRole and ACL.checkAccess
2013-12-10 23:33:57 -08:00
4560ec0964
Various ACL fixes
2013-12-10 21:49:18 -08:00
b0f51e20f7
Add user default ACLs
2013-12-10 19:43:59 -08:00
dfcb43e613
Allow requests without auth tokens
2013-12-10 15:57:55 -08:00
7f51c28539
Fix the ACL resolution against rules by matching score
2013-12-09 15:26:53 -08:00
af2b8dd4ff
Merge feature/password-reset
2013-12-06 17:35:14 -08:00
216fee3015
Add access type checking
2013-12-06 17:04:47 -08:00
2f9403016c
Initial auth implementation
2013-11-22 12:26:59 -08:00
e92c46a4e4
Add password reset
2013-11-20 14:20:47 -08:00
344c74297c
Add unauthenticated role
2013-11-20 13:43:02 -08:00
bee8a3b022
Add checkAccess for subject and token
2013-11-20 13:43:01 -08:00
Raymond Feng
Miroslav Bajtoš
Raymond Feng
Miroslav Bajtoš
Ritchie Martori