Commit graph

925 commits

Author SHA1 Message Date
Tom Hughes
b77c6fe8ae Improve recognition of OAuth referers for triggering of slim mode 2011-04-06 13:24:08 +01:00
Tom Hughes
685a35524a Try and patch up poor browser language selections
The HTTP RFC says that a language range specified by a browser only
matches a resource whose language tag is the same, or longer. This
means that a browser language range of de-DE will not match a resource
with a language tag of de.

Because of this browsers should always send the generic range, such
as de, as a secondary choice after a more specific range like de-DE.

Some browers don't this however, so if we don't get a language match
we try and patch up the list of language ranges by inserting the
more generic ranges.
2011-04-04 22:44:43 +01:00
Tom Hughes
4b20afd51e Preserve the referer at the end of account creation 2011-04-03 13:46:18 +01:00
Tom Hughes
097fb390b8 Only show login/signup in slim mode when used from oauth 2011-04-03 13:46:18 +01:00
Andy Allan
6edbcc12df Use slim layout for OAuth pages too 2011-04-03 13:46:17 +01:00
Andy Allan
7b57119146 Another approach, but this time without scattering stuff all over the methods 2011-04-03 13:46:17 +01:00
Andy Allan
0531a7dfa1 Ah, that doesn't work due to 'bugs' in the way layouts work - only the last command has any effect 2011-04-03 13:46:17 +01:00
Andy Allan
5531c0bf34 Use the slim layout on the login page 2011-04-03 13:46:16 +01:00
Tom Hughes
0169453855 Make sure the user is redirect correctly after seeing the terms 2011-04-03 13:46:16 +01:00
Tom Hughes
392aa71015 Tidy up a few things 2011-04-03 13:46:16 +01:00
Matt Amos
8b12abd5bb Phase 2 CTs implementation and tests, with config parameter 2011-04-03 13:46:16 +01:00
Matt Amos
f3ff36418b Fixed bug in changeset queries
The 'or' condition needed to be bracketed within larger 'and' expression.
2011-03-15 13:56:55 +00:00
Tom Hughes
f20a85a5c5 Allow the client to request errors as an XML document 2010-12-15 23:58:59 +00:00
Tom Hughes
3472c1d429 Channel all error reporting through report_error 2010-12-12 16:25:01 +00:00
Tom Hughes
7369b7427c Remove bogus trailing slash from GPX namespace URL 2010-12-02 19:23:38 +00:00
Tom Hughes
aa4a8fdc81 Replace JOSM editing option with generic Remote Control option 2010-12-01 09:25:27 +00:00
Tom Hughes
409576eea0 Make launching of Potlatch 2 from the GPS trace list work 2010-11-30 17:11:49 +00:00
Tom Hughes
9c2de4039c Add an explicit "default editor" option to the user settings 2010-11-29 12:20:23 +00:00
Tom Hughes
04a6c41be9 Show a popup listing available editors when hovering over the edit tab 2010-11-29 12:20:22 +00:00
Tom Hughes
6c3b5aa9d4 Only Potlatch 1 needs a token to be created 2010-11-29 12:20:22 +00:00
Tom Hughes
c3453cf57d Make JOSM remote control based editing work 2010-11-29 12:20:22 +00:00
Matt Amos
cd66a5db99 Initial work on support for multiple editors 2010-11-29 12:20:21 +00:00
Tom Hughes
7f955a4aca Don't show user navigation links for non-public users
The changeset browser pages should not show the per-user navigation links
for changesets made by users that have not made their edits public.
2010-11-23 09:30:22 +00:00
Tom Hughes
7f3d37867b Protect against interception of confirmation emails
When processing an account confirmation email don't automatically
log the user in unless their browser session has a token that
matches the same user. Closes #3337.
2010-11-15 21:41:32 +00:00
Tom Hughes
f364dd8f00 Allow the Nominatim instance used to be configured 2010-11-02 10:40:43 +00:00
Tom Hughes
2f0ed54206 Handle attempts to agree terms by users with validation errors better 2010-10-12 20:34:49 +01:00
Tom Hughes
71f1554212 Make trace API a proper CRUD API like other object types 2010-10-11 23:09:27 +01:00
Tom Hughes
bddf524c88 Allow users to send themselves a new confirmation email
Add a method which generates a new confirmation email, and provide
links to it from appropriate places.
2010-10-04 21:52:58 +01:00
Tom Hughes
52e523cb0b Invite users to fill in their profile after confirming an account 2010-10-04 19:45:26 +01:00
Tom Hughes
483936772d Improve the flash message shown after a user signs up
Make the message a bit more friendly and include the email address
the confirmation was sent to.
2010-10-04 19:11:01 +01:00
Tom Hughes
0874c807e3 Use javascript to automatically submit confirmation forms
In order to avoid forcing the user to press a confirm button, whilst
still not running into the problems we used to have with virus scanners
activating accounts we use javascript to hide and then automatically
submit the confirmation form.
2010-10-04 19:11:01 +01:00
Tom Hughes
2150d1021e Display the verifier if OAuth 1.0a is being used in OOB mode 2010-09-21 16:20:30 +01:00
Tom Hughes
1c3a9ee62b Update oauth models and controllers for OAuth 1.0a support 2010-09-21 16:20:30 +01:00
Tom Hughes
ef038fa5fe Only display the license notice if we don't already have a notice 2010-09-10 11:23:01 +01:00
Tom Hughes
b477cd5492 Remove unused/non-functional tag searching methods 2010-09-09 21:32:15 +01:00
Tom Hughes
39a014075a Revert "We can cache the trace list for logged in users now"
This reverts commit f30dcd1a62.
2010-09-01 13:47:06 +01:00
Tom Hughes
ba70c100f1 Set the default trace visibility on the upload form 2010-08-24 21:32:07 +01:00
Tom Hughes
2ce394118d Allow uncompressed GPX traces to be fetched from the API 2010-08-24 21:21:02 +01:00
Tom Hughes
b3d92954d3 Use normal notice system to display login banner 2010-08-13 15:13:30 +01:00
Tom Hughes
6c2089da2d Don't refer to the decline button when there isn't one 2010-08-12 18:09:36 +01:00
Tom Hughes
e055b8e2f8 Fix spelling of referer 2010-08-10 18:13:34 +01:00
Tom Hughes
a99b516962 Allow existing users to voluntarily sign up for the contributor terms
Based on a patch from Frederik Ramm this change allows users to make a
voluntary decision to sign up for the new contributor terms.
2010-08-10 18:08:11 +01:00
Tom Hughes
2adcfc1a72 Don't allow paging of the changeset atom feed
Make any request for a changeset feed with a page argument redirect
to the version with no page argument and ensure that any RSS links on
the HTML version of the changeset list don't have a page argument.
2010-08-09 13:47:21 +01:00
Matt Amos
838b1ee7e9 Fixed AMF controller to validate changeset comments
Fixed AMF controller so that it doesn't accept non-UTF8 comments, and
throws away non-XML characters.
2010-08-08 16:23:11 +01:00
Tom Hughes
c5b35406a6 More fixed to trace redirection
Redirect to list on a delete, not view. Also reorder the routes so
the more specific ones are first.
2010-08-06 10:31:20 +01:00
Tom Hughes
1ba40521af Really fix the redirect on trace deletion 2010-08-06 09:59:11 +01:00
Tom Hughes
289ab7c19d Fix redirect on deleting a trace 2010-08-06 09:56:49 +01:00
Tom Hughes
cf9cfd10a1 Fix redirect after a trace is uploaded 2010-08-06 09:53:53 +01:00
Tom Hughes
f07819d81a Rework application configuration
Use a preinitializer to load the settings from application.yml so
that they are available as early as possible. All settings can also
be overridden using environment variables.

The ad-hoc settins in environment.rb are then moved to this new
system so we have one consistent location for settings.
2010-08-04 22:06:05 +01:00
Tom Hughes
f30dcd1a62 We can cache the trace list for logged in users now 2010-07-22 20:47:35 +01:00