GitLab

 * Give authentication plugins titles and descriptions, which are used by the authlist pieform element so people see an easier name
 * Add a new API method to the PluginAuth class, is_usable(). This can be used by auth plugins to check that required extensions are available. The authlist element will tell the user what they need to do to enable a plugin.

changing ldap to work when only email is set

Some whitespace cleanups. Add a log_info line for when authentication using a new authentication instance fails, to assist people debugging what might be wrong.

Some whitespace cleanups. Add a log_info line for when authentication using a new authentication instance fails, to assist people debugging what might be wrong.

It's based on a combination of the Mahara IMAP plugin and the Moodle LDAP plugin.

I cleaned up the code style and internationalised the language strings.

Also check that the institution isn't full when trying to authenticate an XMLRPC user.

When someone lands, log them if they're logged in, before making a new login attempt. Also, clear their session messages. This stops messages and potentially data for one user carrying over to another user when two people SSO from the same computer.

Removed a catch (Exception) block, as now the code called in the throw block should always be throwing the correct exceptions. This will improve error reporting for SSO related errors quite significantly.

Also throw some better exceptions if land.php fails to authenticate anyone.

Remove some bunk code around setting the 'institution' cookie, which was only used for auto populating the institution dropdown in the login box, which we don't have anymore.

Don't session_destroy before creating a new liveuser, I don't have any evidence that it does anything useful now.

If an authentication plugin thinks that a user should be able to log in, and furthermore thinks that it is able/allowed to automatically create user accounts, then it is now able to do just that. The authentication API now has a new method - can_auto_create_users() - to define whether each authentication instance feels it can/should be able to do this.

If the instance thinks it can, it needs to export some information through the get_user_info method in order to populate the user account. Although this may change shortly to be optional, with the users instead being forced to enter any information that is required that they haven't otherwise filled out.

Ensure that we retrieve timestamps from the database in the correct form when trying to log in a user, otherwise they get stored in the object in the wrong form, leading to pain later.

Ensure that the user's e-mail address is set correctly if it needs to be set when changing password.

Pass wantsurl through to the jump session function, so it can inform the other application we are doing SSO with where it wants to go. Fixes #1644

Now the city, country, introduction, language and WYSIWYG editor data are also imported.

Fix a fatal error when registering. password_validate expected a User object, which register.php cannot provide, so loosened the type hint on the function.