6 Commits

Author SHA1 Message Date
Oliver Günther eae05f9d1a Fix after login redirect not ending up on configured URL by default
We used request.url and a back_url for the home path to redirect users
if they did not end up trying to access on a deep link.

In case you access / and get redirected by require_login, you want users
to end up on the after_login_default_redirect_url

Likewise, if you access /login without a back_url, you want the same
behavior

Deep linking logins are unchanged

https://community.openproject.org/work_packages/74756
2026-05-08 09:26:58 +02:00
Oliver Günther 4d731dcab6 Replace raw and explicit html_safe calls 2026-03-20 09:49:10 +01:00
Alexander Brandon Coles 6f4afe7b7f Use aria-describedby to associate expiry unit 2025-10-31 15:03:09 +00:00
Alexander Brandon Coles 670454c014 Remove indent from nested Session expiry time
Removed pending further internal discussion.

See https://community.openproject.org/wp/68696
2025-10-31 15:03:09 +00:00
Alexander Brandon Coles 886ae0d3da Define CSS classes config for show-when-checked
Uses Stimulus API for defining classes: this allows classes to be
defined on the controller rather than element level.

See https://stimulus.hotwired.dev/reference/css-classes
2025-10-31 15:03:08 +00:00
Alexander Brandon Coles c82bec97bf [#68679] Fix toggleability of Session expiry time
Restores previous behavior (inferred from broken jQuery code), hiding
"Session expiry time after inactivity" field unless "Session expires"
is checked.

Possibly broken in #18734.
2025-10-31 15:03:08 +00:00