Maximilian Tagher
1275cce1af
Give better error messages when CSRF validation fails
...
* This is important because historically these errors have tripped people up
* Making security as easy as possible is important so that it doesn't just get turned off
* Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase
2017-11-26 09:00:30 -05:00
Michael Snoyman
18de949b03
Merge pull request #1457 from bermanjosh/langFix
...
Fix docs on `languages` set and `getMessageRender` to use it (#1325 )
2017-11-26 12:40:56 +02:00
Josh Berman
6d6afcf826
point changelog to PR not issue
2017-11-26 12:09:17 +02:00
Josh Berman
79ab662a80
Fix docs on languages set and getMessageRender to use it ( #1325 )
2017-11-26 11:52:37 +02:00
Maximilian Tagher
c21e77947c
Merge pull request #1456 from eborden/eborden/fix-constraints-on-get404
...
Fix constraints on get404 and getBy404
2017-11-17 14:13:33 -08:00
Evan Rutledge Borden
cfb8fd9b21
Version bump for get404 and getBy404 constraint changes.
2017-11-17 14:41:57 -05:00
Evan Rutledge Borden
33d3200399
Fix constraints on get404 and getBy404
...
The constraints on `get404` and `getBy404` were overly powerful. They were
constrained by `PersistStore` and `PersistStoreUnique`, which is an alias for
`PersistStoreWrite...`. These only need `PersistStoreRead...` to accomplish
their job.
2017-11-17 14:28:20 -05:00
Maximilian Tagher
d848a7123f
Merge pull request #1451 from yesodweb/githubTemplates
...
Add Github issue and PR templates, plus contributing guidelines
2017-11-16 09:28:22 -08:00
Maximilian Tagher
8208e3deac
Fix typo in Haddocks of assertEq
2017-11-15 11:32:59 -08:00
Maximilian Tagher
3247237c44
Respond to @psibi's comments
2017-11-08 22:43:51 -08:00
Maximilian Tagher
7a4b2812c1
Update contributing guidelines based of Snoyberg's "How to Send Me a PR" post
2017-11-08 22:32:15 -08:00
Alex Greif
2c59cb7dcd
extend docs of defaultMaybeAuthId ( #1453 )
...
* extend docs of defaultMaybeAuthId
make more explicite that on each call a database access is done. This can be of relevance and sometimes redundant with other Handler functionality
* Update Auth.hs
2017-11-08 12:36:39 +00:00
Michael Snoyman
abc50deffe
Drop an upper bound
2017-11-07 06:03:59 +02:00
Maximilian Tagher
42b94f5066
Add Github issue and PR templates, plus contributing guidelines
...
* Closes #1450
2017-11-02 20:27:24 -07:00
Sibi
299d0569af
Merge pull request #1446 from bigs/extensible-password-hashing
...
Extend `YesodAuthEmail` to support extensible password hashing
2017-10-01 22:31:16 +05:30
Cole Brown
600d307310
Extend YesodAuthEmail to support extensible password hashing.
...
This change introduces `hashAndSaltPassword` and `verifyPassword` to the
`YesodAuthEmail` type class, allowing users to implement their own hashing
schemes (i.e. to provide compatibility with an existing database). It also
updates the default handlers to use these new functions when appropriate. The
functions have default implementation such that behavior for legacy applications
should not change.
2017-09-28 14:37:21 -04:00
Michael Snoyman
4f6b07c2fb
Merge pull request #1444 from iand675/weak-etag
...
Add support to yesod-core for weak etags
2017-09-10 14:53:52 +03:00
Ian Duncan
05b2193e9f
Code review fixes for #1444
2017-09-08 09:00:12 +09:00
Michael Snoyman
c4ef7e1410
yesod-form version bump
2017-09-06 18:28:00 +03:00
Ian Duncan
fd872cff40
Add support to yesod-core for weak etags
2017-09-06 10:08:45 +09:00
Michael Snoyman
d6e4499c54
Merge pull request #1439 from binarysunrise-io/login-vs-log-in
...
Correct Yesod-Auth's usage of "log in" vs "login" in English.
2017-08-31 07:58:52 +03:00
Jesse Kempf
9edca8e3b5
Correct Yesod-Auth's usage of "log in" vs "login" in English.
...
"Log in" (two words) is a verb, indicating the action of, well, logging
in. "Login" (one word) is a noun, indicating the credentials used to log
in.
2017-08-30 20:40:29 -07:00
Sibi
498d373e2d
Merge pull request #1437 from paul-rouse/master
...
Expose Yesod.Auth.Util.PasswordStore
2017-08-30 07:57:58 +05:30
Paul Rouse
3c53acdad8
Add "@since" comments for newly exposed Yesod.Auth.Util.PasswordStore
2017-08-29 18:49:21 +01:00
Paul Rouse
464b055568
Expose Yesod.Auth.Util.PasswordStore
2017-08-29 13:40:32 +01:00
Paul Rouse
59f073a41f
Pure move of Yesod.PasswordStore to Yesod.Auth.Util.PasswordStore
2017-08-29 13:34:20 +01:00
Sibi
c7736db69a
Merge pull request #1435 from Ephemera/translation
...
Add Korean translation
2017-08-26 14:04:33 +05:30
GyuYong Jung
1569af55c7
Add Korean translation
2017-08-26 05:27:53 +09:00
Michael Snoyman
a1c7fc5281
Merge pull request #1433 from binarysunrise-io/form-result-instantiate-alternative
...
Give FormResult an Alternative instance
2017-08-23 08:44:59 +03:00
Jesse Kempf
f08944d888
Give FormResult an Alternative instance
2017-08-22 22:00:42 -07:00
Michael Snoyman
4f14b9b82d
Add a stricter lower bound
2017-08-22 11:25:51 +03:00
Michael Snoyman
1e9427baee
Version bump
2017-08-22 11:24:35 +03:00
Michael Snoyman
469c1c2d01
Merge pull request #1432 from stackbuilders/reduce_verbosity_using_monadic_forms
...
Reduce verbosity using Monadic Forms
2017-08-22 10:41:00 +03:00
Sebastián Estrella
0f28604cfe
Reduce verbosity using Monadic Forms
2017-08-22 02:24:26 -05:00
Michael Snoyman
f65d88d8c5
Merge pull request #1427 from alx741/fix-spanish-trans
...
Fix auth messages Spanish translation
2017-08-08 19:16:58 +03:00
Daniel Campoverde
e3041aa17b
Fix auth messages Spanish translation
2017-08-08 11:03:09 -05:00
Michael Snoyman
896ee9c644
Version bump and close #1413
2017-08-04 16:30:58 +03:00
GyuYong Jung
854f823059
add src/ to file path if Haskell source files in src
...
Fixes #1413
2017-08-04 15:40:28 +09:00
Michael Snoyman
3b8ca1d3d1
Bad CPP
2017-08-04 08:12:55 +03:00
Michael Snoyman
a4eee30930
Cabal 2.0 support
2017-07-31 09:55:19 +03:00
Sibi
e027652494
Merge pull request #1417 from psibi/header-yesod
...
Add replaceOrAddHeader function to Yesod.Core.Handler module
2017-07-28 18:35:23 +05:30
Sibi Prabakaran
7cfefdf3fa
Merge remote-tracking branch 'origin/master' into header-yesod
...
Conflicts resolved in:
yesod-core/ChangeLog.md
yesod-core/yesod-core.cabal
2017-07-28 17:01:03 +05:30
Sibi Prabakaran
19ff5c2006
Fix warning in test code
2017-07-28 16:58:11 +05:30
Michael Snoyman
a17779b12d
Fix persistent < 2.5 code
2017-07-23 16:53:12 +03:00
Michael Snoyman
ada76a9636
Revert "Always use solver on Travis"
...
This reverts commit 5b18bf0c09 .
2017-07-23 16:45:47 +03:00
Michael Snoyman
5b18bf0c09
Always use solver on Travis
2017-07-23 16:28:58 +03:00
Michael Snoyman
fff8f8ff5f
Reduce extra-deps, drop LTS 2 and 3
2017-07-23 13:04:40 +03:00
Michael Snoyman
4b34fe9c72
Fix deprecation warning for LTS 8
2017-07-23 12:25:29 +03:00
Michael Snoyman
626719ce28
Fix some version issues
2017-07-23 11:10:47 +03:00
Michael Snoyman
8e367bda3d
Bump to LTS 8
2017-07-23 10:31:51 +03:00