Commit graph

24 commits

Author SHA1 Message Date
ilkin-overleaf
2675cab92e Merge pull request #10394 from overleaf/ii-password-reset-and-strength-checking
[web] Password reset strength checking and UI updates

GitOrigin-RevId: 442a5c9e7e9d0a61d3ae649f3526bc3c02fd5704
2022-12-07 09:03:36 +00:00
June Kelly
3288f87dbe [web] Password set/reset: reject current password (redux) (#8956)
* [web] set-password: reject same as current password

* [web] Add 'peek' operation on tokens

This allows us to improve the UX of the reset-password form,
by not invalidating the token in the case where the new
password will be rejected by validation logic.

We give up to three attempts before invalidating the token.

* [web] Add hide-on-error feature to async forms

This allows us to hide the form elements when certain
named error conditions occur.

* [web] reset-password: handle same-password rejection

We also change the implementation to use the new
peekValueFromToken API, and to expire the token explicitely
after it has been used to set the new password.

* [web] Validate OneTimeToken when loading password reset form

* [web] Rate limit GET: /user/password/set

Now that we are peeking at OneTimeToken when accessing this page,
we add rate to the GET request, matching that of the POST request.

* [web] Tidy up pug layout and mongo query for token peeking

Co-authored-by: Mathias Jakobsen <mathias.jakobsen@overleaf.com>
GitOrigin-RevId: 835205cc7c7ebe1209ee8e5b693efeb939a3056a
2022-09-28 08:06:54 +00:00
Thomas
79cdf5e65e Change sales form 'Interested in' to be multi-select checkboxes (#8872)
* Change form helper serialization to allow for multi-values

* Change sales form 'Interested in' to be multi-select checkboxes

* Add clarification text to server pro/commons products

GitOrigin-RevId: 2732a8975ea36602375949a23b19705e4d4c9080
2022-07-29 08:04:22 +00:00
Timothée Alby
7f722a006c Merge pull request #8571 from overleaf/ta-token-access-page
Require User Interaction on Token Access Page

GitOrigin-RevId: 2f4c00ba75ebd6bd87d3e770ec8223d736344f5b
2022-07-29 08:03:39 +00:00
Timothée Alby
4b87568e4f Merge pull request #7810 from overleaf/ta-settings-intermediate-pages
[SettingsPage] Github and Dropbox Linking Flow Improvements

GitOrigin-RevId: 4fd69e7e3a8989b2478299751582007635f9e0b0
2022-05-17 08:03:29 +00:00
Timothée Alby
f0ac0f3e7a Merge pull request #7742 from overleaf/ta-email-preferences-page
Create Email Preferences Page

GitOrigin-RevId: 371a62e8423e5cbebff83e61bf35a8b3b638c398
2022-04-28 08:03:12 +00:00
Jakob Ackermann
1f4c8d4ed9 Merge pull request #7424 from overleaf/jpa-captcha-error-handling
[web] double down on error handling in captcha process

GitOrigin-RevId: 91692978a24b02e9fa1ca55193a462ca29f68a7e
2022-04-12 08:03:07 +00:00
Alf Eaton
e73ad85d0e Add AbortController polyfill to captcha script (#6555)
GitOrigin-RevId: 3a7e8350b4d6d62583a3cb87378605f13cde3728
2022-02-07 09:03:39 +00:00
Jakob Ackermann
3730672c97 Merge pull request #6502 from overleaf/jpa-skip-likely-failing-login-request
[web] skip login re-try request when no captcha response was generated

GitOrigin-RevId: 9edc6e8394914a710020983fe9cbcf09d543a82f
2022-01-27 09:03:48 +00:00
Jakob Ackermann
8e77ada424 Merge pull request #6417 from overleaf/jpa-device-history
[web] add cookie/JWE based device history for skipping captcha challenge

GitOrigin-RevId: b091564bfd93f7e587d396c860fd864f220f4b63
2022-01-27 09:03:34 +00:00
Jakob Ackermann
a13dee04c6 Merge pull request #6424 from overleaf/jpa-multi-submit-async-form
[web] add support for async-form inside a multi-submit page

GitOrigin-RevId: 801363aeacc6c10411aceaf2c09a5e4b3b90fcf7
2022-01-26 09:02:55 +00:00
Jakob Ackermann
2a935d7ab5 Merge pull request #5261 from overleaf/jpa-de-ng-more-complex-pages
[web] de-ng some of the complex pages

GitOrigin-RevId: 6c85bbf2d21cb2e8d3441202dfd299512bf71453
2021-09-30 08:03:53 +00:00
Jakob Ackermann
c9e22f7ddf Merge pull request #5190 from overleaf/jpa-sso-oauth-de-ng
[web] de-ng sso/oauth/institutional account linking pages

GitOrigin-RevId: 50718cefff68142431aa411cb4f8644a3d8ab93f
2021-09-28 08:03:31 +00:00
Jakob Ackermann
614565b3a2 Merge pull request #5177 from overleaf/jpa-handle-nested-api-responses
[web] hydrate-form: handle nested messages with nested text field

GitOrigin-RevId: 7f28a58ed59bc7a46f00edfd553adcc9d6333daa
2021-09-24 08:03:55 +00:00
Jakob Ackermann
f06f1e2b96 Merge pull request #5171 from overleaf/jpa-web-launchpad-de-ng
[web] de-ng launchpad page

GitOrigin-RevId: 0a8939ac8716bd099d9e8c2be0a281f24274e48d
2021-09-24 08:03:43 +00:00
Jakob Ackermann
011e719fdf Merge pull request #5125 from overleaf/jpa-portal-de-ng
[web] de-ng portals page

GitOrigin-RevId: 2460c51fb0f81be758c5804e66803a98b614b304
2021-09-22 08:03:41 +00:00
Jakob Ackermann
8d03e03d4d Merge pull request #5052 from overleaf/jpa-refactor-form-helper
[web] refactor form helper

GitOrigin-RevId: c04929fd3e62a6222ed335f99e8413592cbdd134
2021-09-17 08:03:05 +00:00
June Kelly
53698fb980 Merge pull request #5012 from overleaf/jk-de-ng-user-emails-confirm
[web] de-ng the user/emails/confirm page

GitOrigin-RevId: d4b3ceb524627593be05308475b0597242dba8a1
2021-09-17 08:02:58 +00:00
June Kelly
8f1cae8252 Merge pull request #4989 from overleaf/jk-de-ng-logout
[web] de-ng logout page

GitOrigin-RevId: 0d46e554ab41759bbf1044fcd49d750322a345ae
2021-09-17 08:02:54 +00:00
Jakob Ackermann
317f8fa73f Merge pull request #5115 from overleaf/jpa-recaptcha-detection
[web] form-helpers/captcha: step up detection of loaded recaptcha

GitOrigin-RevId: d9ed3b99277ffcdca68df9f8e0b162faeb363451
2021-09-16 08:03:15 +00:00
Jakob Ackermann
895c93d8f2 Merge pull request #5086 from overleaf/jpa-rework-de-ng-validation
[web] input-validator: rework of content and behavior

GitOrigin-RevId: 276c23c651d3954d7e82415b5315907600c8e0e1
2021-09-16 08:03:11 +00:00
Jakob Ackermann
aec8d78254 Merge pull request #4958 from overleaf/jpa-login-de-ng
[web] login: de-ng most of the login pages

GitOrigin-RevId: 6e7721d515228b70e4e0b8e31e1a578801dbe1c5
2021-09-14 08:03:27 +00:00
Jakob Ackermann
7919017118 Merge pull request #4956 from overleaf/jpa-jk-contact-form-de-ng
[web] de-ng contact form

GitOrigin-RevId: 8a92b37163555d6466e4b8c565f1ef490f73d49a
2021-09-09 08:03:07 +00:00
Jakob Ackermann
267b7fc17d Merge pull request #4941 from overleaf/jpa-as-homepage-prototype
[web] de-ng homepage prototype

GitOrigin-RevId: 030a5bf0b4f05eac7d69fda928c906f3c9c962f0
2021-09-09 08:03:04 +00:00