86 Commits

Author	SHA1	Message	Date
Harvey Tindall	86daa70ccb	userpage: password resets ... click "forgot password" on login modal, enter a contact method address/username, submit and check for a link. Requires link reset to be enabled.	2023-06-22 12:08:18 +01:00
Harvey Tindall	db97c3b2d4	form: add notice about userpage on success modal, userpage title ... uses new strings in the form lang section.	2023-06-22 10:12:22 +01:00
Harvey Tindall	8113f794ab	form: fix confirmation success page css	2023-06-21 21:22:05 +01:00
Harvey Tindall	14c18bd668	form: rework email confirmation ... realized half the info from the signup form wasnt being stored in the JWT used to create the account after email confirmation, and instead of adding them, the -whole request- from the browser is stored temporarily by the server, indexed by a smaller JWT that only includes the invite code. Someone complained on reddit about me storing the password in the JWT a while back, and although security-wise that isn't an issue (only the server can decrypt the token), it doesn't happen anymore. Happy?	2023-06-21 21:14:41 +01:00
Harvey Tindall	f779f0345e	storage: Use familiar api for invite access ... An almost identical set of functions to the discord/telegram/matrix storage ones is now used for accessing invites. No more parallelism-related issues, yay. Need to do this for everything eventually.	2023-06-21 20:39:16 +01:00
Harvey Tindall	7b9b0d8a84	userpage: implement login message card ... Shares code with custom emails, so most related functions have had a %s/Email/Message/g. Press the edit button on the user page setting to add a message.	2023-06-20 21:43:25 +01:00
Harvey Tindall	fcedea110d	telegram: modularize, add to userpage	2023-06-19 22:11:35 +01:00
Harvey Tindall	cf7983ca11	userpage: add/edit discord ... works identically to on the form, would like to eventually factor out the discord/telegram/matrix verif stuff so it can be shared between the two pages though.	2023-06-18 21:38:12 +01:00
Harvey Tindall	d3c5feaf1b	userpage: use form langfile, move login strings to common ... login-related stuff was moved into common using the langmover script, so that the user page doesn't have to use the admin language files.	2023-06-17 12:48:28 +01:00
Harvey Tindall	726acb9c29	userpage: initial page ... login, lang, and theme work. Currently only makes a request to a hello-world type endpoint to verify auth works. Accessible at /my/account.	2023-06-16 14:43:37 +01:00
Harvey Tindall	4014e93155	signup: add reCAPTCHA ... can be enabled in settings > captcha, requires a site key & secret key from google. New wiki article explains getting these. currently a little ugly looking on the page itself, hopefully fixable.	2023-06-15 17:11:27 +01:00
Harvey Tindall	eb85ee4d35	add option to auto redirect to jellyfin (or given link) ... if enabled (General>Auto redirect on success), the user will not have to click "continue" on the form or creation success page and will insted be redirected. For #242.	2023-02-02 10:34:22 +00:00
Harvey Tindall	895dcf5a30	fix missing create-success css ... part of #242	2023-02-01 14:14:13 +00:00
Harvey Tindall	62cbbf57e7	form: fix mono text in discord linking modal	2022-01-30 16:47:29 +00:00
Harvey Tindall	dbefb80f63	form: reliably disable submit button, communicate if account linking is required	2022-01-27 16:48:46 +00:00
Harvey Tindall	4deb45df3c	fix code text color in dark mode	2022-01-26 22:25:33 +00:00
Harvey Tindall	15e5564b12	discord: add/move to slash commands ... the version of the discord library with support for this isn't necessarily stable, so normal ! commands will still be available. The user is no longer DMed for the PIN, instead they type /pin <PIN>.	2022-01-26 21:47:02 +00:00
Harvey Tindall	1c942186aa	form: fix captcha ... wouldn't compile (not sure why i didn't notice) and after fixing, the check was being performed after deleting the invite so would always fail.	2022-01-13 20:40:58 +00:00
Harvey Tindall	d9f8785372	form: add CAPTCHAs ... Enabled in Settings > Captchas, shows a captcha on the account creation form.	2022-01-10 01:55:48 +00:00
Harvey Tindall	6448a7db9e	accounts: allow giving individual users jfa-go access ... New "Access jfa-go" column allows you to select users for jfa-go access. New "Allow All" setting allows all Jellyfin users access, as disabling "Admin Only" no longer does this.	2022-01-09 19:37:17 +00:00
Harvey Tindall	77c05a4d4f	prefix css with version to avoid cache conflict	2022-01-08 16:42:36 +00:00
Harvey Tindall	e6cc7fce1a	form: add setting for changing redirect url ... for #167, Settings > General (Advanced) > Form success redirect URL.	2021-12-20 20:44:08 +00:00
Harvey Tindall	0fd4f516b1	email: Add option to require on sign-up ... for #172	2021-12-20 18:50:48 +00:00
Harvey Tindall	73c7f22bd1	messages: add option to show/hide linking on registration ... In each of the Discord/Telegram/Matrix sections, the "Show on user registration" option can be disabled to hide the "Link xxx" button on the registration form. This is useful is you're only using these registrations for admin purposes.	2021-11-17 16:49:26 +00:00
Harvey Tindall	a4f59203b0	pwr: fix Send PWR when not using "Set password"	2021-10-13 15:19:52 +01:00
Harvey Tindall	eeb9b07bce	admin: add manual "Send Password reset" to accounts tab ... Only appears with Reset links enabled. Pressing this sends a PWR link to the users selected. if one user is selected, or if one of you selected users doesn't have a method of contact, a link is given to the admin to send to them manually.	2021-10-13 15:04:22 +01:00
Harvey Tindall	412fe31da6	invite: fix email confirmation jwt ... same issue as with auth.go, expiry was a string causing the library to see it as expired.	2021-08-26 18:39:50 +01:00
Harvey Tindall	1a6b0d2b6e	upgrade vulnerable deps ... upgrade gin and switch dgrijalva/jwt-go to golang-jwt/jwt.	2021-07-27 10:08:01 +01:00
Harvey Tindall	0a71d5b216	PWR: Add option to set new password from magic link ... For #103. Enable in Settings > Password Resets. Also changes the user's ombi password.	2021-06-07 13:49:05 +01:00
Harvey Tindall	19715f25f6	Move all migrations to separate file ... Also fixed some inconsistent uses of snake case.	2021-06-01 14:18:49 +01:00
Harvey Tindall	6fb8f1ed7f	Merge pull request #112 from hrfee/matrix ... Matrix Integration	2021-05-31 21:12:57 +01:00
Harvey Tindall	59ebf52fe2	Matrix: Show matrix on accounts page	2021-05-30 00:05:46 +01:00
Harvey Tindall	953a66ec47	Password Resets: Ignore magic link visits from bots ... For #108. Literally just searches the useragent for "Bot", seems good enough for Telegram atleast.	2021-05-29 19:24:00 +01:00
Harvey Tindall	e97b90d4d7	Matrix: Setup bot, add PIN verification ... PIN is verified but not used currently. Works a little different than the others, you input your matrix user ID and then the PIN is sent to you. The bot doesn't support E2EE, so the bot being the first one to message ensures the chat is unencrypted.	2021-05-29 17:43:11 +01:00
Harvey Tindall	1f9af8df89	Discord: Add option to provide server invite ... When enabled, a temporary one-use invite is created and shown to the user on the account creation form.	2021-05-23 19:50:03 +01:00
Harvey Tindall	ce8cdced4d	Discord: Fix GetUsers, add invite messages ... The "Send to" box on the invite tab now accepts username#discriminator, and a search icon has been added which opens a search window similar to the one on the accounts tab. DiscordDaemon.GetUsers was also very broken and wouldn't work with full username#discriminator, that's been fixed.	2021-05-23 16:16:31 +01:00
Harvey Tindall	f8f5f35cc1	PIN verification, notifications, multiple notif providers ... Discord, Email & Telegram can be enabled, although email is always enabled right now (will fix). Also apparently markdown hyperlinks don't work in Discord, eventually will implement something to convert them to embeds.	2021-05-21 21:35:25 +01:00
Harvey Tindall	ea0293bd4e	Split some settings into new "messages" section ... Most email dependant sections now depend on this. Also renamed more email things.	2021-05-07 21:53:29 +01:00
Harvey Tindall	716d6a931a	Telegram: Send messages via telegram ... Most messages are now sent as plaintext via telegram when suitable.	2021-05-07 16:06:47 +01:00
Harvey Tindall	99875b9176	almost complete telegram user verification ... When signing up, the user is given a pin code which they send to a telegram bot. This provides user verification, but more importantly allows the bot to message the user, as the Telegram API requires the user to interact with the bot before it can do the opposite. The bot should recognize the correct language, but a /lang command is also provided to change it. The verification process is pretty much functional but ui is still broken, and it isn't properly integrated yet.	2021-05-07 01:08:12 +01:00
Harvey Tindall	c0f316d049	add preview to Announcements	2021-05-03 18:35:27 +01:00
Harvey Tindall	af61549bf1	ombi: reset password when using pwr links ... When password reset links are enabled, the ombi password will be reset to the PIN along with Jellyfin.	2021-05-02 13:23:59 +01:00
Harvey Tindall	d701c5f27d	add months field to invites & expiry	2021-04-08 20:43:01 +01:00
Harvey Tindall	a8f71c83da	store language preference as cookie	2021-04-08 16:03:46 +01:00
Harvey Tindall	871bc9f396	use proper date formatting on form for expiry	2021-04-07 15:17:15 +01:00
Harvey Tindall	9370913ace	add password reset link option ... When enabled (in Settings > Password Resets), a magic link will be sent instead of a PIN when the user tries reset their password. By doing this the user doesn't have to keep the Jellyfin tab open to enter the code.	2021-03-30 22:41:28 +01:00
Harvey Tindall	21490faa9e	fix IsNew() func, include LICENSE in goreleaser	2021-03-07 16:45:35 +00:00
Harvey Tindall	bd05a4b35a	include LICENSE in build, display in about tab ... Also fixes last commit, user cache wasn't refreshed in ApplySettings, is now.	2021-03-01 00:32:09 +00:00
Harvey Tindall	1e9d184508	implement user expiry functionality ... All works now, but i'll add a field on the accounts tab for users with an expiry, as well as a 'disabled' badge.	2021-02-28 15:41:06 +00:00
Harvey Tindall	2934832a98	implement frontend for user expiry/duration ... this will add an optional validity period to users, where their account will be disabled (or deleted) a specified amount of time after they created it.	2021-02-28 00:44:28 +00:00