Commit graph

226 commits

Author SHA1 Message Date
Jakob Ackermann
4bdcd520de Merge pull request #6604 from overleaf/msm-jpa-add-go-to-settings-email-confirmation
Added "go to settings" button in email confirmation page

GitOrigin-RevId: 4449f05e9934fdb09ca07804171881b04f3e8bdb
2022-02-16 11:33:34 +00:00
Miguel Serrano
176ead8983 Primary Email Check (#6471)
* added primary-email-check page, route and controllers
* add `#add-email` internal link in settings to display new email form
* added primary-email-check redirection with split test
* update `lastPrimaryEmailCheck` when the default email address is set
* added `lastPrimaryCheck` to admin panel
* translations for primary-email-check
* acceptance tests for primary-email-check
* [web] multi-submit for primary email check
* Using `confirmedAt` to prevent from displaying primary-email-check page

Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com>
Co-Authored-By: Miguel Serrano <mserranom@gmail.com>
GitOrigin-RevId: d8e3a280439da08038a4487d8bfd7b3b0596e3b5
2022-02-04 09:03:34 +00:00
Jakob Ackermann
a13dee04c6 Merge pull request #6424 from overleaf/jpa-multi-submit-async-form
[web] add support for async-form inside a multi-submit page

GitOrigin-RevId: 801363aeacc6c10411aceaf2c09a5e4b3b90fcf7
2022-01-26 09:02:55 +00:00
Alf Eaton
ee00ff3c44 [web] Add the meta[viewport] tag to all pages (#6301)
* Always add the meta[viewport] tag
* Set metadata.viewport to false on projects list page
* Remove setting metadata.viewport = true
* Add viewport: false to editor page

GitOrigin-RevId: 6f9d4c1972e3e6fdf1b6c23cd17d57ba866fcaeb
2022-01-20 09:03:48 +00:00
June Kelly
000f849381 Merge pull request #6143 from overleaf/jk-register-password-validation
[web] Password length validation on register

GitOrigin-RevId: 8d97d92f3176f25c5af29479ba85789eac28540a
2022-01-13 09:03:16 +00:00
Timon Engelke
b9db578e0b Fix user settings template 2021-11-30 18:05:00 +01:00
Hugh O'Brien
3b95ac6d88 Merge pull request #5688 from overleaf/jpa-invalid-password-message
[web] password reset: validate user password ahead of invalidating token

GitOrigin-RevId: ba3e6549f53675a2216e2fc24293276c1968d416
2021-11-10 09:02:38 +00:00
Jakob Ackermann
0ee93793e3 Merge pull request #5641 from overleaf/jpa-survey-notification-2
[web] implement institutional leavers survey logic in frontend only

GitOrigin-RevId: e1002ee6f75ba3865c955eefa8482af0c72bb825
2021-11-03 09:03:28 +00:00
Thomas
307e151d6d Merge pull request #5590 from overleaf/tm-show-current-session-2
Show current session on user sessions page

GitOrigin-RevId: fd748207905f600ca3102db6a208a994b089ca97
2021-10-29 08:04:21 +00:00
Thomas
42fa5e28ed Merge pull request #5529 from overleaf/revert-5484-tm-show-current-session
Revert "Show current session on user sessions page"

GitOrigin-RevId: 80e4c667d96b2016066657dc74d9f27d6b52b6f8
2021-10-21 08:03:41 +00:00
June Kelly
e0b0d10143 Merge pull request #5484 from overleaf/tm-show-current-session
Show current session on user sessions page

GitOrigin-RevId: 6ae130bfa8c3d82a305fd865e162c19f5c8b208c
2021-10-21 08:03:04 +00:00
Jakob Ackermann
2a935d7ab5 Merge pull request #5261 from overleaf/jpa-de-ng-more-complex-pages
[web] de-ng some of the complex pages

GitOrigin-RevId: 6c85bbf2d21cb2e8d3441202dfd299512bf71453
2021-09-30 08:03:53 +00:00
June Kelly
5141f7b452 Merge pull request #5199 from overleaf/jk-de-ng-form-messages-role
[web] Improve a11y of form-messages

GitOrigin-RevId: 36360bc188f9a582e891d50328a6f27b414dce2a
2021-09-27 08:03:10 +00:00
Jakob Ackermann
891947770c Merge pull request #5124 from overleaf/jk-de-ng-set-password-page
[web] de-ng set password form

GitOrigin-RevId: d8ebf9f794454d5772e13ab783892d2bba6eed87
2021-09-24 08:03:23 +00:00
Jakob Ackermann
8d03e03d4d Merge pull request #5052 from overleaf/jpa-refactor-form-helper
[web] refactor form helper

GitOrigin-RevId: c04929fd3e62a6222ed335f99e8413592cbdd134
2021-09-17 08:03:05 +00:00
June Kelly
0ae8f37629 Merge pull request #5107 from overleaf/jk-de-ng-reconfirm-and-pw-reset
[web] de-ng password reset and must-reconfirm forms

GitOrigin-RevId: 2101493ff017ba56214c6f981129f94eb9db46aa
2021-09-17 08:03:02 +00:00
June Kelly
53698fb980 Merge pull request #5012 from overleaf/jk-de-ng-user-emails-confirm
[web] de-ng the user/emails/confirm page

GitOrigin-RevId: d4b3ceb524627593be05308475b0597242dba8a1
2021-09-17 08:02:58 +00:00
June Kelly
8f1cae8252 Merge pull request #4989 from overleaf/jk-de-ng-logout
[web] de-ng logout page

GitOrigin-RevId: 0d46e554ab41759bbf1044fcd49d750322a345ae
2021-09-17 08:02:54 +00:00
Jakob Ackermann
42f9920a9e Merge pull request #4945 from overleaf/jpa-jk-audit
[web] migrate trivial pug templates to the de-ng/marketing layout

GitOrigin-RevId: 041c277eaded45118c6a3bd3e95bdaa90b1536f4
2021-09-16 08:03:24 +00:00
Jakob Ackermann
780d5ca184 Merge pull request #5110 from overleaf/jpa-de-ng-autofocus
[web] use HTML5 autofocus flag on all the input fields

GitOrigin-RevId: 9a984abf09d5cd098f19c3d8c731961e881903c4
2021-09-16 08:03:21 +00:00
Jakob Ackermann
aec8d78254 Merge pull request #4958 from overleaf/jpa-login-de-ng
[web] login: de-ng most of the login pages

GitOrigin-RevId: 6e7721d515228b70e4e0b8e31e1a578801dbe1c5
2021-09-14 08:03:27 +00:00
June Kelly
b770feadc8 Merge pull request #4743 from overleaf/hb-recaptcha-branding
add recaptcha branding on login, registration, pw reset and share modal

GitOrigin-RevId: dcdf3e7987a25712601aed2426cce2467eaecea3
2021-08-20 08:03:05 +00:00
Jessica Lawshe
bb882c697c Merge pull request #4288 from overleaf/jel-skip-to-content
Add "Skip to content" to improve accessibility

GitOrigin-RevId: 43368a65057656bdea10b6be3c598d68bd8e2d40
2021-07-28 02:06:54 +00:00
Jakob Ackermann
9d00c351a8 Merge pull request #4327 from overleaf/jpa-pw-reset-captcha
[misc] add captcha on password reset requests

GitOrigin-RevId: 9a23b9c9dee2c56345e9c1846861c05c25126802
2021-07-28 02:06:02 +00:00
Miguel Serrano
37a50e295a [ServerPro] Removed SaaS views in admin panel and user settings (#4263)
* Removed SaaS views from SP admin panel and user settings

* Hiding must reconfirm for server pro and restored site admin

* Removed empty 'security' section

GitOrigin-RevId: 9ad8e2b7510cf957ccf3f968a53fa88d3174a64b
2021-07-01 12:30:21 +00:00
Jessica Lawshe
7989a3c52d Merge pull request #4147 from overleaf/jel-reconfirm-ui
Update button text on reconfirm page

GitOrigin-RevId: 9db6fe7136d6f5abf43b9f0eaabad5fb7c6b116c
2021-06-04 02:08:44 +00:00
Hugh O'Brien
13db97cbfa Merge pull request #4070 from overleaf/jel-email-button-tooltip
Fix check for disabled "Make Primary" button when email needs reconfirmation

GitOrigin-RevId: efbe56e77402cbbc673a41ce24390fb77ede2481
2021-05-26 02:05:35 +00:00
Jakob Ackermann
715fad4883 Merge pull request #4046 from overleaf/jpa-fix-404s
[misc] use ng-href for dynamic link targets

GitOrigin-RevId: 22cccf7a3784cde046d73d88c5929036e3572279
2021-05-18 02:08:01 +00:00
Alf Eaton
79f58598eb Merge pull request #4045 from overleaf/ae-register-spaces
Restore spaces on SP register page

GitOrigin-RevId: 5a8bdb25e4715861957a071bb4bc8f628ee36a41
2021-05-15 02:10:06 +00:00
Eric Mc Sween
5587de9cf5 Merge pull request #3833 from overleaf/em-meta-tags
Pass values to JS through meta tags

GitOrigin-RevId: f663a1b7fef4544b560574d21f59fdabaf617830
2021-04-01 02:05:44 +00:00
Alf Eaton
8227e68aca Improve form "for" and "autocomplete" attributes (#3822)
GitOrigin-RevId: 2ce35d57526fc36b5a974d0f940ef6ba08806864
2021-04-01 02:05:32 +00:00
Miguel Serrano
d65db1acf0 Merge pull request #3824 from overleaf/jpa-password-reset-email-forwarding
[misc] fix passing around of users email as part of password reset

GitOrigin-RevId: 54e8cde9867a2ce735bc7ebe281ead19ef49e6cd
2021-04-01 02:05:04 +00:00
Jakob Ackermann
deca5f3b0d Merge pull request #3810 from overleaf/jpa-meta-tag-user-sessions
[views] user/sessions: refactor window assignment into meta tag

GitOrigin-RevId: a5b07ccc99021b2c72a5888b9a9d28c1c458e1e9
2021-03-27 03:05:13 +00:00
Alf Eaton
a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Jakob Ackermann
f353728bda Merge pull request #3755 from overleaf/jpa-xss-2
[views] mitigate Angular XSS via email/new_email

GitOrigin-RevId: 3d127c283ba9f97c5b0e6c53a9d77f7f597058bb
2021-03-18 03:04:50 +00:00
Jakob Ackermann
7609b741fa Merge pull request #3768 from overleaf/jpa-xss-10
[views] mitigate Angular XSS on password reset page

GitOrigin-RevId: 65f423fcb1a3afff0f396bb8e173d1e1bcff056a
2021-03-18 03:04:45 +00:00
Jakob Ackermann
8766c23abb Merge pull request #3767 from overleaf/jpa-xss-9
[views] mitigate Angular XSS in email confirmation post gateway

GitOrigin-RevId: 11cd752d520054e448b3eeea431fe27f3c02fa00
2021-03-18 03:04:41 +00:00
Jakob Ackermann
115fe20184 Merge pull request #3766 from overleaf/jpa-xss-8
[views] mitigate Angular XSS in affiliations section of user settings

GitOrigin-RevId: bad444cea136c51f54546770653f21cec6fa70e3
2021-03-18 03:04:38 +00:00
Thomas
fc4f71a0c0 Merge pull request #3704 from overleaf/jel-reconfirm-disable-btn
Disable "Make Primary" button when reconfirmation needed

GitOrigin-RevId: df821185ce84c64ed1a8f4d413dd35ef18aa9e0c
2021-03-09 03:04:43 +00:00
Thomas
99834f0d7e Merge pull request #3738 from overleaf/jpa-fix-xss-registration
[misc] fix angular xss on user registration page

GitOrigin-RevId: 5dcc2aa0212371f154fba563d21018379292b9fe
2021-03-09 03:04:40 +00:00
Thomas
2d8167fa0a Merge pull request #3675 from overleaf/tm-main-landmarks-a11y
Add main landmark roles to multiple templates

GitOrigin-RevId: 80ae851fae015b21a3210d71d04287c0c9a3024d
2021-03-05 03:05:00 +00:00
Alf Eaton
248e860757 Merge pull request #3721 from overleaf/as-fix-register-xss
Prevent XSS on registration page

GitOrigin-RevId: 93e5a345752c3c5c42f488d9c75c70a9036bf53c
2021-03-05 03:04:35 +00:00
Jessica Lawshe
ddb6163b65 Merge pull request #3623 from overleaf/jel-ui-reconfirm-settings
Add reconfirm UI to settings

GitOrigin-RevId: cf9c4648cab07784782e24d752154089dc32196a
2021-02-23 03:04:17 +00:00
Timothée Alby
6e8a4e70dd Merge pull request #3641 from overleaf/ta-saml-integration
SAML Misc Changes

GitOrigin-RevId: 89fe8704d8effb6299d841be00efc653f6800fab
2021-02-19 03:04:18 +00:00
Jessica Lawshe
2bef6cd2e5 Merge pull request #3605 from overleaf/jel-disabled-delete-primary
Add disabled delete button for the primary email

GitOrigin-RevId: 8cb3285bdfce0909796ae60c13d8e8ebb1236d00
2021-02-03 03:05:00 +00:00
Shane Kilkelly
e9f7a17093 Merge pull request #3234 from overleaf/sk-fix-password-validation-email
Overhaul password validation

GitOrigin-RevId: a591c4e192e30a0ac053eab6f80627543a8a92fe
2020-10-23 02:04:39 +00:00
Jessica Lawshe
552fb56b74 Merge pull request #3078 from overleaf/jel-log-password-reset-by-token
Update audit log when password reset by token

GitOrigin-RevId: 2ae7f59c5cdf2723e541a99c58c36564cc82adbf
2020-08-13 15:46:10 +00:00
Jakob Ackermann
53927bca95 [misc] move /user/activate into a module (#2962)
* [misc] move /user/activate into a module

Co-Authored-By: Nate Stemen <nate.stemen@overleaf.com>

* [misc] setup copybara for the new user-activate module

* [misc] move the /user/activate route behind a feature flag

...which is by default enabled.

Co-authored-by: Nate Stemen <nate.stemen@overleaf.com>
GitOrigin-RevId: 87fc5ae869a7e282ffdbeea0ff7b7c55b8b9b31b
2020-07-16 02:06:51 +00:00
nate stemen
8ba78bd559 Merge pull request #2848 from overleaf/ns-account-deletion-v1-references
remove references to v1 projects on account deletion

GitOrigin-RevId: 1e886d6b693f98ee81efc704d2a3688de43981ef
2020-05-22 03:24:48 +00:00
Eric Mc Sween
1dc325d1c7 Merge pull request #2750 from overleaf/ta-activate-finish-login
Don't Bypass FinishLogin on Password Reset

GitOrigin-RevId: 92567c893afb4aa64fa045151678d33c877d8f71
2020-04-24 03:30:45 +00:00