Commit Graph

4483 Commits

Author SHA1 Message Date
Maximilian Tagher
1275cce1af Give better error messages when CSRF validation fails
* This is important because historically these errors have tripped people up
* Making security as easy as possible is important so that it doesn't just get turned off
* Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase
2017-11-26 09:00:30 -05:00
Michael Snoyman
18de949b03
Merge pull request #1457 from bermanjosh/langFix
Fix docs on `languages` set and `getMessageRender` to use it (#1325)
2017-11-26 12:40:56 +02:00
Josh Berman
6d6afcf826 point changelog to PR not issue 2017-11-26 12:09:17 +02:00
Josh Berman
79ab662a80 Fix docs on languages set and getMessageRender to use it (#1325) 2017-11-26 11:52:37 +02:00
Maximilian Tagher
c21e77947c
Merge pull request #1456 from eborden/eborden/fix-constraints-on-get404
Fix constraints on get404 and getBy404
2017-11-17 14:13:33 -08:00
Evan Rutledge Borden
cfb8fd9b21 Version bump for get404 and getBy404 constraint changes. 2017-11-17 14:41:57 -05:00
Evan Rutledge Borden
33d3200399 Fix constraints on get404 and getBy404
The constraints on `get404` and `getBy404` were overly powerful. They were
constrained by `PersistStore` and `PersistStoreUnique`, which is an alias for
`PersistStoreWrite...`. These only need `PersistStoreRead...` to accomplish
their job.
2017-11-17 14:28:20 -05:00
Maximilian Tagher
d848a7123f
Merge pull request #1451 from yesodweb/githubTemplates
Add Github issue and PR templates, plus contributing guidelines
2017-11-16 09:28:22 -08:00
Maximilian Tagher
8208e3deac
Fix typo in Haddocks of assertEq 2017-11-15 11:32:59 -08:00
Maximilian Tagher
3247237c44 Respond to @psibi's comments 2017-11-08 22:43:51 -08:00
Maximilian Tagher
7a4b2812c1 Update contributing guidelines based of Snoyberg's "How to Send Me a PR" post 2017-11-08 22:32:15 -08:00
Alex Greif
2c59cb7dcd extend docs of defaultMaybeAuthId (#1453)
* extend docs of defaultMaybeAuthId

make more explicite that on each call a database access is done. This can be of relevance and sometimes redundant with other Handler functionality

* Update Auth.hs
2017-11-08 12:36:39 +00:00
Michael Snoyman
abc50deffe
Drop an upper bound 2017-11-07 06:03:59 +02:00
Maximilian Tagher
42b94f5066 Add Github issue and PR templates, plus contributing guidelines
* Closes #1450
2017-11-02 20:27:24 -07:00
Sibi
299d0569af Merge pull request #1446 from bigs/extensible-password-hashing
Extend `YesodAuthEmail` to support extensible password hashing
2017-10-01 22:31:16 +05:30
Cole Brown
600d307310 Extend YesodAuthEmail to support extensible password hashing.
This change introduces `hashAndSaltPassword` and `verifyPassword` to the
`YesodAuthEmail` type class, allowing users to implement their own hashing
schemes (i.e. to provide compatibility with an existing database). It also
updates the default handlers to use these new functions when appropriate. The
functions have default implementation such that behavior for legacy applications
should not change.
2017-09-28 14:37:21 -04:00
Michael Snoyman
4f6b07c2fb Merge pull request #1444 from iand675/weak-etag
Add support to yesod-core for weak etags
2017-09-10 14:53:52 +03:00
Ian Duncan
05b2193e9f
Code review fixes for #1444 2017-09-08 09:00:12 +09:00
Michael Snoyman
c4ef7e1410
yesod-form version bump 2017-09-06 18:28:00 +03:00
Ian Duncan
fd872cff40
Add support to yesod-core for weak etags 2017-09-06 10:08:45 +09:00
Michael Snoyman
d6e4499c54 Merge pull request #1439 from binarysunrise-io/login-vs-log-in
Correct Yesod-Auth's usage of "log in" vs "login" in English.
2017-08-31 07:58:52 +03:00
Jesse Kempf
9edca8e3b5 Correct Yesod-Auth's usage of "log in" vs "login" in English.
"Log in" (two words) is a verb, indicating the action of, well, logging
in. "Login" (one word) is a noun, indicating the credentials used to log
in.
2017-08-30 20:40:29 -07:00
Sibi
498d373e2d Merge pull request #1437 from paul-rouse/master
Expose Yesod.Auth.Util.PasswordStore
2017-08-30 07:57:58 +05:30
Paul Rouse
3c53acdad8 Add "@since" comments for newly exposed Yesod.Auth.Util.PasswordStore 2017-08-29 18:49:21 +01:00
Paul Rouse
464b055568 Expose Yesod.Auth.Util.PasswordStore 2017-08-29 13:40:32 +01:00
Paul Rouse
59f073a41f Pure move of Yesod.PasswordStore to Yesod.Auth.Util.PasswordStore 2017-08-29 13:34:20 +01:00
Sibi
c7736db69a Merge pull request #1435 from Ephemera/translation
Add Korean translation
2017-08-26 14:04:33 +05:30
GyuYong Jung
1569af55c7 Add Korean translation 2017-08-26 05:27:53 +09:00
Michael Snoyman
a1c7fc5281 Merge pull request #1433 from binarysunrise-io/form-result-instantiate-alternative
Give FormResult an Alternative instance
2017-08-23 08:44:59 +03:00
Jesse Kempf
f08944d888 Give FormResult an Alternative instance 2017-08-22 22:00:42 -07:00
Michael Snoyman
4f14b9b82d
Add a stricter lower bound 2017-08-22 11:25:51 +03:00
Michael Snoyman
1e9427baee
Version bump 2017-08-22 11:24:35 +03:00
Michael Snoyman
469c1c2d01 Merge pull request #1432 from stackbuilders/reduce_verbosity_using_monadic_forms
Reduce verbosity using Monadic Forms
2017-08-22 10:41:00 +03:00
Sebastián Estrella
0f28604cfe Reduce verbosity using Monadic Forms 2017-08-22 02:24:26 -05:00
Michael Snoyman
f65d88d8c5 Merge pull request #1427 from alx741/fix-spanish-trans
Fix auth messages Spanish translation
2017-08-08 19:16:58 +03:00
Daniel Campoverde
e3041aa17b Fix auth messages Spanish translation 2017-08-08 11:03:09 -05:00
Michael Snoyman
896ee9c644
Version bump and close #1413 2017-08-04 16:30:58 +03:00
GyuYong Jung
854f823059 add src/ to file path if Haskell source files in src
Fixes #1413
2017-08-04 15:40:28 +09:00
Michael Snoyman
3b8ca1d3d1
Bad CPP 2017-08-04 08:12:55 +03:00
Michael Snoyman
a4eee30930
Cabal 2.0 support 2017-07-31 09:55:19 +03:00
Sibi
e027652494 Merge pull request #1417 from psibi/header-yesod
Add replaceOrAddHeader function to Yesod.Core.Handler module
2017-07-28 18:35:23 +05:30
Sibi Prabakaran
7cfefdf3fa
Merge remote-tracking branch 'origin/master' into header-yesod
Conflicts resolved in:
	yesod-core/ChangeLog.md
	yesod-core/yesod-core.cabal
2017-07-28 17:01:03 +05:30
Sibi Prabakaran
19ff5c2006
Fix warning in test code 2017-07-28 16:58:11 +05:30
Michael Snoyman
a17779b12d
Fix persistent < 2.5 code 2017-07-23 16:53:12 +03:00
Michael Snoyman
ada76a9636
Revert "Always use solver on Travis"
This reverts commit 5b18bf0c09.
2017-07-23 16:45:47 +03:00
Michael Snoyman
5b18bf0c09
Always use solver on Travis 2017-07-23 16:28:58 +03:00
Michael Snoyman
fff8f8ff5f
Reduce extra-deps, drop LTS 2 and 3 2017-07-23 13:04:40 +03:00
Michael Snoyman
4b34fe9c72
Fix deprecation warning for LTS 8 2017-07-23 12:25:29 +03:00
Michael Snoyman
626719ce28
Fix some version issues 2017-07-23 11:10:47 +03:00
Michael Snoyman
8e367bda3d
Bump to LTS 8 2017-07-23 10:31:51 +03:00