Commit graph

9 commits

Author SHA1 Message Date
Kyle Drake
160dc9e2de password reset tweaks 2024-04-09 16:49:57 -05:00
Kyle Drake
ffaca51d36 spam inbox check comment for password reset 2023-11-11 15:11:34 -06:00
Kyle Drake
a2677bb930 clarify ipfs support, add missing titles for pages 2019-01-26 14:44:23 -08:00
Kyle Drake
d467e9be96 Force case insensitivity for new emails, existing.
There is a legacy bug I just caught, where many accounts would have the
same email but then have different casing. In extreme scenarios, this
would lead to them creating a new user with the same email, or having
issues with password reset and username lookup.

This doesn't merge in the existing duplicates, but makes sure to only
allow insensitive lowercase emails from here on out. It also will check
for emails in a case insensitive way for such things as resets and
logins if the sensitive lookup doesn't work.

The implementation was not wrong per se - email is supposed to be case sensitive
for usernames. But of course, nobody (nor do most/all email servers) treat
them that way, leading to confusion situations where the user sometimes
camelcases their email and then switches to lowercase later.
2017-12-08 22:13:27 -08:00
Kyle Drake
05711b6c7f Use https:// for password reset 2017-05-10 22:40:01 -07:00
Kyle Drake
3cb7be6f35 Fix for password reset validation 2016-08-10 13:15:24 -07:00
Kyle Drake
fd3a7ccabc major improvements and testing for password reset 2016-04-07 15:30:43 -07:00
Kyle Drake
3f7f90c9e7 remove monkeypatch that was causing file upload issues 2015-03-14 17:49:18 -05:00
Kyle Drake
ab60744ac5 refactor app.rb blob to partition routes into files 2014-12-03 08:29:01 -08:00