Subversion Repositories SmartDukaan

Rev

Show changed files | Details | Compare with Previous | Blame | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
37913 13 h 11 m amit /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/ fix(security): fofo /login no longer trusts a request email when Google verification fails

LoginController.login fell back to emailId = emailIdOrMobileNumber whenever
googleTokenUtil.getEmailId(token) threw, so any bogus token plus any email
logged the caller in as that user. Verification failure now fails the login.
GoogleTokenUtil also requires tokeninfo aud == google.api.key (our web client
id, same value the login page uses) and email_verified == true.
Password login is unchanged.		  
33741 772 d 7 h amit.gupta /trunk/ Now allo EWB as well Invoice files related  
31637 1330 d 6 h tejbeer /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/util/  
23528 3118 d 8 h ashik.ali /trunk/profitmandi-fofo/src/main/ Feature : Recharge Commission, some improvements, recharge live integration  
23505 3121 d 9 h ashik.ali /trunk/profitmandi-fofo/src/main/  
22217 3359 d 8 h ashik.ali /trunk/profitmandi-fofo/src/main/  
22111 3371 d 10 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/  
21728 3413 d 5 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/  
21561 3434 d 6 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/