859e2033cb
MDL-58544 oauth2: Allow trusted issuers
...
Add a setting to each issuer that skips the email confirmation when creating and linking accounts.
2017-06-27 16:50:27 +08:00
97cc7e0969
MDL-59012 auth_oauth2: Do not escape URL in plain text emails
2017-05-23 13:28:27 +02:00
011591a148
MDL-58905 auth_oauth2: No linked accounts if the plugin is not enabled
2017-05-12 14:36:01 +08:00
2c69d24037
Merge branch 'MDL-58898-master' of https://github.com/xow/moodle
2017-05-12 12:32:23 +08:00
4c8727bad6
MDL-58898 oauth: Remove orphaned linked logins
2017-05-12 12:18:17 +08:00
95dd5e3bd6
MDL-58774 auth_oauth2: Only check unexpired accounts for same issuer
...
It shoudl be possible to link multiple OAuth2 sources which have the
same e-mail address to an account.
This patch makes the check for an existing linked account stricter so
that it only checks for linked account records which match the same
issuer, and which do not have expired confirmation tokens.
2017-05-12 09:44:48 +08:00
4f705f5d0d
MDL-58774 auth_oauth2: Prevent duplicate linked logins
2017-05-10 10:17:56 +08:00
e0abc2e405
MDL-58774 auth_oauth2: Cleanup on user delete.
2017-05-08 14:26:44 +08:00
a647e7d762
MDL-58220 oauth2: missing param confirmtokenexpires
2017-04-05 14:42:22 +08:00
512e681a3b
MDL-58220 oauth2: Don't login as deleted users
...
Also prevent sesskey error on first page of new logins.
2017-04-03 13:43:27 +08:00
13b449f4a5
MDL-58220 oauth2: cibot cleanups
2017-04-03 13:43:25 +08:00
28b592d5a6
MDL-58338 oauth2: Force email confirmation
...
New accounts and linking a login to an existing account MUST go through email verification.
We cannot trust the emails we get from oauth providers have been confirmed.
Part of MDL-58220
2017-04-03 13:43:25 +08:00
72fd103add
MDL-58219 cibot: Fixes
...
Fixes for cibot warnings.
Part of MDL-58220
2017-04-03 13:41:19 +08:00
1dca8d1a1d
MDL-58168 auth_oauth2: Allow linking other accounts
...
Part of MDL-58220
2017-04-03 13:40:13 +08:00
Damyon Wiese