Miguel Nogueira
27b1f3170b
Update settings log level
2020-08-31 20:02:30 +01:00
Miguel Nogueira
00cc36246f
Minor import change
2020-08-31 19:53:10 +01:00
Miguel Nogueira
41e3e817a2
Added error messages to settings.blade.php
2020-08-31 19:50:58 +01:00
Miguel Nogueira
2afea88846
Added logging to Settings
2020-08-31 19:47:27 +01:00
Miguel Nogueira
ea96cbc1f5
Options: return value instead of whole model
2020-08-31 18:54:33 +01:00
Miguel Nogueira
2996e66c8b
Add missing query builder statement for options
2020-08-31 18:51:35 +01:00
Miguel Nogueira
a32af7c464
Delete unused workflow
2020-08-31 18:38:49 +01:00
Miguel Nogueira
cd874c5f58
Settings auth checks
2020-08-31 18:36:38 +01:00
Miguel Nogueira
42de40e320
Added CSRF protection to settings
2020-08-31 18:34:09 +01:00
Miguel Nogueira
faa3a65e2b
Added unchecked checkbox workaround
2020-08-31 18:32:08 +01:00
Miguel Nogueira
ba3a139d1c
Wrapped settings with form-check
2020-08-31 18:13:44 +01:00
Miguel Nogueira
25ddf81118
Added form control buttons
...
Also improved form styling
2020-08-31 18:11:00 +01:00
Miguel Nogueira
9431eb5036
Updated options rendering
2020-08-31 18:03:20 +01:00
Miguel Nogueira
a3071dccf9
Update wrong view name
2020-08-31 17:58:07 +01:00
Miguel Nogueira
b0cbf65cfc
Added missing permissions to roles
2020-08-31 17:55:36 +01:00
Miguel Nogueira
6be5e241d4
Add permission and provider imports
2020-08-31 16:41:01 +01:00
Miguel Nogueira
d6c49a5cf0
Add missing migration
2020-08-30 23:27:06 +01:00
Miguel Nogueira
075617fd32
Merge remote-tracking branch 'origin/master' into master
2020-08-30 23:17:28 +01:00
Miguel Nogueira
da73c91b4a
Update DB seeder
2020-08-30 23:17:06 +01:00
Miguel Nogueira
ca82f5882d
Add settings page
2020-08-30 23:06:01 +01:00
Miguel Nogueira
88c36dd3f8
Updated Readme
2020-08-16 16:11:45 +01:00
Miguel Nogueira
535a2c3973
Fixed broken banning logic
2020-08-13 22:12:17 +01:00
Miguel Nogueira
ad5c3404cc
Update variable
2020-07-25 01:20:43 +01:00
Miguel Nogueira
64d418c590
Add heroku action
2020-07-25 00:28:44 +01:00
Miguel Nogueira
62b063ee63
Missed variable name
2020-07-23 02:37:08 +01:00
Miguel Nogueira
2c0c404d73
Change wrong param name
2020-07-19 06:01:46 +01:00
Miguel Nogueira
168f08bd96
Remove deprecated SubmenuFilter class
2020-07-18 19:58:49 +01:00
Miguel Nogueira
94d08f1886
Trust Heroku proxies
...
This commit also forces the environment into HTTPS when in production.
2020-07-18 06:33:00 +01:00
Miguel Nogueira
0cf6208577
Add embarassing missing comma
2020-07-18 03:57:56 +01:00
Miguel Nogueira
9255a6c88d
Rewrote lock file
2020-07-18 03:55:31 +01:00
Miguel Nogueira
098205a969
Updated required extension name
2020-07-18 03:51:57 +01:00
Miguel Nogueira
bf426e3bdd
Updated package lock and added postinstall
2020-07-18 03:45:31 +01:00
Miguel Nogueira
02059bbcb0
Updated dependency lock file
...
Also added Imagemagick as a required extension for 2FA
2020-07-18 03:21:49 +01:00
Miguel Nogueira
91627decbe
Added Heroku Procfile
...
Also changed required password length for new users
2020-07-18 02:45:15 +01:00
Miguel Nogueira
2763f777ab
Add password strength requirment
...
This commit adds a password strength requirement for new users using
regular expressions.
Also adds a dismissable alert so users know how to create passwords
properly.
2020-07-17 23:13:46 +01:00
Miguel Nogueira
d392c0593f
Add two factor authentication
2020-07-17 22:44:10 +01:00
Miguel Nogueira
5f1f92a9ce
Code review
...
This commit fixes some superficial instances of Broken Access Control
(https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/Top_10-2017_A5-Broken_Access_Control ).
There may be some more instances of this, as authorization was only done
after most of the controllers were done (big mistake).
Some refactoring was also performed, where Route Model Binding with DI
(dependency injection) was used whenever possible, to increase
testability of the codebase.
Some reused code was also moved to Helper classes as to enforce DRY;
There may be some lines of code that are still copy-pasted from other
parts of the codebase for reuse.
Non-breaking refactoring changes were made, but the app as a whole still
needs full manual testing, and customised responses to HTTP 500
responses. Some errors are also not handled gracefully and this wasn't
checked in this commit.
2020-07-16 21:21:28 +01:00
Miguel Nogueira
9e2d571298
Fix homepage bg issue
2020-07-16 07:32:52 +01:00
Miguel Nogueira
e16be5dc46
Override styles for auth pages
2020-07-16 07:11:33 +01:00
Miguel Nogueira
1a04880489
Replace basic authentication pages
2020-07-16 06:50:59 +01:00
Miguel Nogueira
3693ce3431
Add footer to all dashboard pages
2020-07-16 06:46:20 +01:00
Miguel Nogueira
4a766620ff
Fix appointment policy not being called correctly
...
This commit fixes the appointment policy being called at the wrong time, with the wrong arguments.
It also fixes wrong references on the auth service provider, also fixing other issues with poliy usage.
Fixes #3 and SPACEJEWEL-HOSTING-59.
2020-07-16 05:24:00 +01:00
Miguel Nogueira
bca6020ab0
Add ability to edit forms and add new fields
...
This commit adds the ability to edit and modify existing forms.
On the technical side, it also adds a new reusable validation Facade which helps reduce duplicated code.
2020-07-15 06:48:49 +01:00
Miguel Nogueira
1f50faaea7
Add ability to preview application
2020-07-12 19:36:12 +01:00
Miguel Nogueira
e978a5417b
Added ability to delete single application
...
Also moved User observer code to Application observer
2020-07-12 17:01:33 +01:00
Miguel Nogueira
4dc412e53c
Added check for constrained models when deleting
2020-07-12 06:39:39 +01:00
Miguel Nogueira
bd0664ce0d
Add ability to edit Vacancies
2020-07-11 20:34:26 +01:00
Miguel Nogueira
4b390ea536
Added full Vacancy description
...
Also added support for Markdown
2020-07-11 05:34:12 +01:00
Miguel Nogueira
035c9399a6
Add "All Applications" page
2020-07-11 02:43:59 +01:00
Miguel Nogueira
bbe3001157
Example env version update
2020-07-10 05:30:22 +01:00
Miguel Nogueira