9 Commits

Author	SHA1	Message	Date
albert	4606ec4763	priv users now have 6sec timeout, platinum users have 9sec timeout	2013-03-21 07:46:49 -07:00
albert	7470d189c3	add api authentication	2013-03-20 15:43:17 -07:00
小太	cba839ba76	Kill trailing whitespace in ruby files	2013-03-19 23:10:10 +11:00
albert	d912ba6172	fixes #764	2013-03-05 17:18:01 -05:00
albert	5ab9887923	only store partial hash in cookies for validation	2013-03-05 16:49:09 -05:00
albert	f52181db94	Major revamp of security. Passwords are first SHA1 hashed and then ... that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced.	2013-03-04 22:55:41 -05:00
albert	000be2de6d	update users last_logged_in_at more frequently, disable tag subscription processing for users who have been inactive for more than one year	2012-06-07 17:31:55 -04:00
albert	a7267cf00b	fixed tests	2011-10-16 01:40:42 -04:00
albert	d324f4a071	refactored login process, added remember option for login	2011-10-15 16:36:07 -04:00