James Moger
2014-01-28 7ab32b65fcb20ca68d7afc357befb3a34de662bf
refs
author James Moger <james.moger@gitblit.com>
Tuesday, January 28, 2014 13:16 -0500
committer James Moger <james.moger@gitblit.com>
Tuesday, January 28, 2014 13:16 -0500
commit7ab32b65fcb20ca68d7afc357befb3a34de662bf
tree df393fe15adcc63a8adf0330219e6bec981ba761 tree | zip | gz
parent 158242228266af84aa14b7e13b43d2825626c446 view | diff
issue-361: Reset user cookie after administrative password change

Cookies were not reset on administrative password change of a user
account. This allowed accounts with changed passwords to continue
authenticating. Cookies are now reset on password changes, they are
validated on each page request, AND they will now expire 7 days after
generation.
8 files modified
110 ■■■■ changed files
releases.moxie 7 ●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/ConfigUserService.java 3 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/client/EditUserDialog.java 3 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/manager/AuthenticationManager.java 61 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/manager/GitblitManager.java 5 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/manager/IAuthenticationManager.java 8 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/wicket/pages/EditUserPage.java 3 ●●●●● diff | view | raw | blame | history
src/main/java/com/gitblit/wicket/pages/SessionPage.java 20 ●●●●● diff | view | raw | blame | history