Commit Graph

14 Commits

Author SHA1 Message Date
Aysel Afsar
506ab56711 LT-103: Show error messages if username or password are invalidated
- Remove Need An Account and Forgot Password buttons for Sign In page
2016-03-22 17:03:13 -04:00
Aysel Afsar
3c60a6dda1 LT-103: Authenticate via LDAP 2016-03-22 15:43:06 -04:00
Aysel Afsar
a5d4c6d0eb LT-102: Send a email which includes password reset link if Forgot Password option is selected
- Add custom Reset Password template  and reset password
- Show the first error instead showing all errors of invalidated input values in Sign Up and changePassword templates
2016-03-16 10:28:07 -04:00
Aysel Afsar
d83b2f4199 LT-106: User accounts shall be made inactive after 6 months of inactivity 2016-02-15 16:40:53 -05:00
Aysel Afsar
d19e402847 LT-98: Passwords shall be required to be changed every 90 days
- route to changePassword page if the password is passwordExpirationDays old
- passwordExpirationDays property under passwordOptions object sets the time interval when password should be changed (90 days by default)
2016-02-15 13:09:58 -05:00
Erik Ziegler
11e300f013 Style and bug fixes related to active-entry and hipaaAuditLog integration 2016-02-15 14:36:01 +01:00
Aysel Afsar
eb32e1771f LT-97: Add requireRegexValidation and requireStrongPasswords properties under passwordOptions which is under passwordOptions.
- requireRegexValidation toggles whether or not password validation is controlled by regular expression
- requireStrongPasswords toggles whether password validation is controlled by zxcvbn package
LT-104: User account shall be locked after 5 failed attempts
- "failedAttemptsLimit" property which is under passwordOptions in ActiveEntry configuration object sets number of failed attempts count to lock user account, it is set 5 as default
LT-99: Passwords shall use password history of 6
- "passwordHistoryCount" property which is under passwordOptions in ActiveEntry configuration object sets count of last passwords that is not used to reset password
- Show error messages in changePassword template
- Make signIn button disabled if inputs are not validated
2016-02-14 17:03:00 -05:00
Aysel Afsar
24e615da1e LT-97: - Remove zxcvbn package because of version conflict,
- Add passwordOptions in ActiveEntry.configure
- Toggle showPasswordStrengthIndicator to show password strength meter ui, toggle requireRegexValidation to set password regex for validation or requireStrongPasswords to create strong passwords by using zxcvbn.
- Sign in/ sing up when enter key is pressed
2016-02-11 08:48:11 -05:00
Aysel Afsar
e659f0f4b3 - Renamed validatePassword method, usePwstrength and useZxcvbn,
- Moved passwordOptions from settings.json to ActiveEntry configuration object
- Used zxcvbn rule set if showPasswordStrengthIndicator is true, used regular expression rule set if showPasswordStrengthIndicator is false
2016-02-04 17:53:01 -05:00
Aysel Afsar
4e986c8395 Added testing issues for password validation 2016-02-03 14:41:51 -05:00
Aysel Afsar
236ab64add - added optional pwstrength and zxcvbn and disabled by default.
- Reset ActiveEntry.errorMessages after active-entry buttons are clicked
- "Password is invalid" message is replaced by "Password must have at least 8 characters. It must contain at least 1 uppercase, 1 lowercase, 1 number and 1 special character."
2016-02-02 15:31:01 -05:00
Aysel Afsar
d3671a5bdd LT-97: Password validation
LT-107: Login session timeout after 30 min
2016-02-02 10:25:02 -05:00
Erik Ziegler
2ea9eae0aa Resolved styling issues from Clinical Meteor packages, added HIPAA Audit Log package 2016-01-25 22:35:53 +01:00
Erik Ziegler
b2fa6ead3b Add Clinical Meteor packages to Lesion Tracker 2016-01-25 17:14:42 +01:00