delta/gitlab/gitlab-ce.git/app/controllers/passwords_controller.rb, branch api-shared-groups gitlab.com: gitlab-org/gitlab-ce.git Allow the initial admin to set a password 2016-03-04T22:37:57+00:00 Robert Speicher rspeicher@gmail.com 2016-03-02T22:48:49+00:00 599a6d78737237e806dcfe0105b8b81dc696b71f Closes #1980 
Closes #1980
Use devise paranoid mode and ensure the same message is returned every time 2015-12-10T00:40:37+00:00 Drew Blessing drew@gitlab.com 2015-12-09T17:45:26+00:00 f4ec906e90b2f8dbf18b359b773e3b31f5da89ff Skipped CI because it has already passed. Had to rebase due to CHANGELOG. 
Skipped CI because it has already passed. Had to rebase due to CHANGELOG.
Refactor PasswordsController to use before_actions 2015-10-02T01:47:27+00:00 Robert Speicher rspeicher@gmail.com 2015-10-02T01:47:27+00:00 b8ff38b1d47e4323f799b593b95821ed4a8c11f7 






Only allow password reset emails once per minute
2015-09-30T19:38:21+00:00

Robert Speicher
rspeicher@gmail.com

2015-09-30T19:38:21+00:00

292bca0546c59b9816c696371cd9bbf04ba19fb2

Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2611





Addresses internal https://dev.gitlab.org/gitlab/gitlabhq/issues/2611







Take advantage of `Devise.sign_in_after_reset_password`
2015-09-30T18:35:00+00:00

Robert Speicher
rspeicher@gmail.com

2015-09-30T18:35:00+00:00

3a4274e19e1a1fbc23fb5fe0d6101ad62099aadb












Use User#two_factor_enabled instead of otp_required_for_login
2015-06-19T19:14:37+00:00

Robert Speicher
rspeicher@gmail.com

2015-06-19T19:14:37+00:00

b6318297fc93ab26108c586af9d34c16fc783589












Fill in email on the new password form
2015-05-16T20:03:18+00:00

Vinnie Okada
vokada@mrvinn.com

2015-05-14T03:57:16+00:00

af428b12598f06073327bc63d75d9c358c95067a












Redirect if password reset token is expired
2015-05-16T20:03:18+00:00

Vinnie Okada
vokada@mrvinn.com

2015-05-14T02:29:15+00:00

c68c23210bdf9f0d7212fa55e7bef71ac0f87bcf

Don't display the password editing form if the user's token is expired;
redirect to the form that allows users to request a new password reset
token.





Don't display the password editing form if the user's token is expired;
redirect to the form that allows users to request a new password reset
token.







Handle password reset for users with 2FA enabled
2015-05-11T18:31:31+00:00

Robert Speicher
rspeicher@gmail.com

2015-05-11T18:31:31+00:00

24bef5e67a81c5edf9dacb65ecc091cac1f4c528












Use ruby 1.9 hash syntax
2015-01-24T01:41:10+00:00

Dmitriy Zaporozhets
dmitriy.zaporozhets@gmail.com

2015-01-24T01:41:10+00:00

3dfcb95f0d5a9851b3829f357bc53abb96c0e6ba