Subversion Repositories SmartDukaan

Rev

Show changed files | Details | Compare with Previous | Blame | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
37913 24 d 15 h amit /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/ fix(security): fofo /login no longer trusts a request email when Google verification fails

LoginController.login fell back to emailId = emailIdOrMobileNumber whenever
googleTokenUtil.getEmailId(token) threw, so any bogus token plus any email
logged the caller in as that user. Verification failure now fails the login.
GoogleTokenUtil also requires tokeninfo aud == google.api.key (our web client
id, same value the login page uses) and email_verified == true.
Password login is unchanged.		  
33741 796 d 10 h amit.gupta /trunk/ Now allo EWB as well Invoice files related  
31637 1354 d 8 h tejbeer /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/util/  
23528 3142 d 10 h ashik.ali /trunk/profitmandi-fofo/src/main/ Feature : Recharge Commission, some improvements, recharge live integration  
23505 3145 d 11 h ashik.ali /trunk/profitmandi-fofo/src/main/  
22217 3383 d 10 h ashik.ali /trunk/profitmandi-fofo/src/main/  
22111 3395 d 13 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/  
21728 3437 d 8 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/  
21561 3458 d 9 h ashik.ali /trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/