Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Force user logout after password changed in other place. #2509

Merged
merged 35 commits into from
May 14, 2019

Conversation

zyhfish
Copy link
Contributor

@zyhfish zyhfish commented Dec 12, 2018

No description provided.

@mitchelsellers mitchelsellers changed the title DNN-27517: force user logout after password changed in other place. Force user logout after password changed in other place. Dec 12, 2018
@mitchelsellers
Copy link
Contributor

@dnnsoftware/tag thoughts on this one? This is a breaking change in behavior

@ohine
Copy link
Contributor

ohine commented Jan 7, 2019

On new installs this behavior is great, but for any upgraded sites I think they should have to enable that functionality through settings exposed under Security > Member Accounts > Member Management.

@zyhfish
Copy link
Contributor Author

zyhfish commented Jan 8, 2019

Hi @ohine , add the setting to control this behavior, and only enable it in new installation. after this PR merged, i will try to submit PR in AE repo for the UI part, thx

@ohine ohine added this to the 9.4.0 milestone Jan 8, 2019
@mitchelsellers
Copy link
Contributor

Per review in the TAG group today. We would also want to address invalidation of any issued JWT issue

@daguiler daguiler added the esw Issues reported by ESW team or Evoq customers label Jan 10, 2019
donker and others added 18 commits March 29, 2019 12:25
)

This is alternative way to fix above issue proposed in dnnsoftware/Dnn.AdminExperience#174

As per @sleupold , we need to move email notifications from UI to core part.
Once this will be approved and merged, we can remove email notifications from UI and replace it with updated controller method to let notifications to be send to their recipients.

fixes dnnsoftware#2424
Fixes dnnsoftware#2521 by rebuilding the PortalsDefaultLanguage view
)

* NOJIRA: mark as stable.

* DNN-21637: add config key.

* DNN-26576: prevent same-origin errors when loading popup and iframes from a secure page.

* code review

* Code review
* DNN-10795 - All pages except home page return 404

I have witnessed that occasionally on app pool recycle all,except the home page, will return 404 until the application pool is recycled a second time.

I've reviewed the code & believe that the root cause of the issue is due to the fact that the code that builds the tab index, portalDepths dictionary & tabPaths dictionary is not thread safe. I can see code in the method TabIndexController.FetchTabDictionary is using SharedDictionary classes to store the tab dictionaries, however the code is not thread safe when adding the dictionaries to the cache. Therefore when multiple threads are executing the FetchTabDictionary method it's possible for an empty dictionary to be added to the cache.

To resolve this issue the code has been updated so that only one thread can add the dictionaries to cache at a time.

* Updated comment to trigger Code Licence workflow.

* Added compiled DLLs that include the fix for bug DNN-10795 (All pages except home page return 404) for DNn versions 8.0.4 through 9.2.2
* DNN-23293 Recursive read lock acquisitions not allowed in this mode.

* DNN-23293 Recursive read lock acquisitions not allowed in this mode.
…nsoftware#2514)

* DNN-27498 Performance Issues

* DNN-27498 Performance Issues

* minor formatting

* Fixed case sensitivity issue

* Added mixed cased alias support to unit tests

* Fixed VanityUrl unit tests
* Fixed issue in ModuleCreator > Web > template.ascx

* Update DNN Platform/Admin Modules/Dnn.Modules.ModuleCreator/Templates/Web/Module - HTML/template.ascx

Co-Authored-By: mean2me <emanuele.colonnelli@gmail.com>
Mhtshum and others added 12 commits March 29, 2019 12:25
* Fix for missing SQL change

Fixes dnnsoftware#2521 by rebuilding the PortalsDefaultLanguage view

* Added attribution to NDepend for the usage of their ADO tooling

* Fix image/link markdown
* Set active Nuget package source to All

* Fixed parallel build
* DNN-29484: switch encrypt method.
Changes to modernize the NuGet packages published by the DNN Platform, fixes dnnsoftware#2586.  The below-submitted changes in structure have been validated by consultation with the DNN Platform Community, Microsoft Representatives, as well as validation of documentation per the published .nuspec file definition (https://docs.microsoft.com/en-us/nuget/reference/nuspec)

In detail, the following items have been changed:

* Migration of license information to the suggested <license> node rather than the deprecated <licenseurl> node.
* Inclusion of target framework for all included .dll files, this prevents installation of the package to pre-4.5 projects protecting downstream users.
* Improved package descriptions based on discussions held in the RFC regarding these improvements
* Added Package-to-Package dependencies to ensure quick usage and inclusion
* Updated the WebAPI and MVC packages to be holistic packages, including references to ALL needed items to develop using those patterns.

All changes are current for DNN Platform version 9.3.0 or later.  Packages have been built & tested locally with success.

## Suggested Usage

With these improved packages, development & references should be easier.

### MVC Modules

`Install-Package DotNetNuke.Web.Mvc`

Should be the only needed package installation.  It will install all needed dependencies, including the items necessary for WebAPI

### Modules Needing WebAPI (Not MVC)

`Install-Package DotNetNuke.WebApi`

Should be the only needed package for extensions not using MVC, however, needing to use WebApi for services.  This will work well for WebForms or Library projects, etc. that don't need the extra references for MVC/Razor

### WebForms/Limited Modules

`Install-Package DotNetNuke.Core`

The most simple modules, still using the WebForms pattern can use this package for the smallest footprint

For dnnsoftware#2600
* Upgraded app projects to .NET Framework 4.7.2; Added missing dependency to DotNetNuke.Tests.Core as it was missing DotNetNuke.Web.Client

* Removed targetframework web.config reference from Dnn.Modules.Console
@mitchelsellers
Copy link
Contributor

THis PR is now out of sync, can it get Re-based against Development?

@daguiler daguiler added esw Issues reported by ESW team or Evoq customers and removed esw Issues reported by ESW team or Evoq customers labels Apr 13, 2019
Copy link
Contributor

@mitchelsellers mitchelsellers left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we get the Admin Experience change o enable the setting?

@mtrutledge
Copy link
Contributor

@zyhfish What is the status for the change request that @mitchelsellers made for this change?

@zyhfish
Copy link
Contributor Author

zyhfish commented May 14, 2019

PR dnnsoftware/Dnn.AdminExperience#939 created for the UI part.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
esw Issues reported by ESW team or Evoq customers
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

10 participants