f22dbba931
providers/saml: add UID field
2019-12-13 13:45:10 +01:00
0946d6a25d
docs: add initial structure, add docs for policies and factors
2019-12-09 21:00:45 +01:00
807cbbeaaf
audit: rewrite to be independent of django http requests, allow custom actions
2019-12-05 16:14:08 +01:00
74cd0bc08f
all(minor): remove old, unused code
2019-12-05 15:07:37 +01:00
b08ec0477e
all(minor): replace django-ipware with custom implementation
2019-12-05 14:33:55 +01:00
328c999cb9
ci(minor): reenable prospector
2019-12-05 14:31:51 +01:00
c37e382c15
root(minor): fix incorrect user IP being shown
2019-12-02 18:05:06 +01:00
784dd0fdd6
root(minor): fix unnecessary redirect for prometheus
2019-12-02 18:04:55 +01:00
23146de2bf
new release: 0.7.4-beta
2019-11-20 13:15:46 +01:00
979bea17ed
root(minor): disable error reporting by default
2019-11-20 13:12:37 +01:00
99fadf2e55
new release: 0.7.3-beta
2019-11-19 18:14:06 +01:00
be642bc874
root(major): fix dbbackup not working with prometheus
2019-11-19 18:08:25 +01:00
089b48aad1
Merge branch 'agw'
2019-11-11 18:14:03 +01:00
2997cb83b1
providers/appgw(major): rewrite to use oauth2_proxy
2019-11-11 18:13:46 +01:00
08f0aca894
provider/oidc(minor): include claims in id_token
2019-11-11 13:19:54 +01:00
019a0cb14d
new release: 0.7.2-beta
2019-11-08 14:26:52 +01:00
7f150c96b4
new release: 0.7.1-beta
2019-11-08 14:04:59 +01:00
73558f30d1
root(minor): revert to django_redis cache
2019-11-08 13:58:10 +01:00
3d73aac3ab
helm(minor): add service monitors
2019-11-08 12:24:42 +01:00
e4fbcd3735
root(major): add prometheus
2019-11-08 12:23:51 +01:00
44c0eb37cf
sources/saml(minor): fix lint issue
2019-11-07 18:02:59 +01:00
adc3dcc2c4
sources/saml(minor): disallow login if source is not enabled
2019-11-07 17:35:25 +01:00
bac8227371
sources/saml(minor): fix fields not being shown
2019-11-07 17:28:59 +01:00
73d4d9dfe0
admin(major): fix incorrect permissions being set
2019-11-07 17:25:36 +01:00
dabce36667
sources/saml(major): add saml SP
2019-11-07 17:02:56 +01:00
3bd56ce522
api(minor): fix invalid fieldls being selected
2019-11-07 10:30:22 +01:00
ed1fcc3930
new release: 0.7.0-beta
2019-11-02 16:31:23 +00:00
c22ddc5394
root(minor): catch keyboardinput and s3 error from sentry
2019-11-02 16:27:28 +00:00
0b9fc9e444
root(minor): fallback to empty string if no Host header ise set
2019-11-01 12:50:38 +00:00
e862b97005
all(major): add API for all objects
2019-10-28 17:55:36 +01:00
cffe09b02e
all(major): add most models to API
2019-10-28 17:40:57 +01:00
846a86fb62
fix lint
2019-10-28 14:44:46 +01:00
463c130351
core(major): add api for most simple objects
2019-10-28 14:27:43 +01:00
ffca957838
audit(major): AuditEntry -> Event
2019-10-28 14:26:34 +01:00
543e949a48
api(minor): start with api v2
2019-10-28 14:26:07 +01:00
feb80049aa
Merge branch 'master' into guardian
2019-10-25 22:18:13 +02:00
5c59c8ccb6
new release: 0.6.11-beta
2019-10-15 16:56:24 +02:00
bf6c9e8c4a
new release: 0.6.10-beta
2019-10-15 16:05:51 +02:00
3353aa0298
root(minor): disable uwsgi request loggin and use custom logging instead
2019-10-15 15:57:37 +02:00
d4cb1a98c7
policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
2019-10-15 15:44:59 +02:00
13f4ea0b8b
root(minor): sort keys in log output
2019-10-15 15:40:38 +02:00
261d57ad7b
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/admin/views/invitations.py
# passbook/admin/views/policy.py
# passbook/admin/views/providers.py
# passbook/admin/views/sources.py
# passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
4086252979
core(major): add integrated database backup
2019-10-15 13:52:33 +02:00
8bdf12cff1
recovery(minor): add unittests
2019-10-14 17:12:56 +02:00
65a065c4ee
policy(minor): add unittests for policy engine
2019-10-14 16:08:24 +02:00
a691ee529c
new release: 0.6.9-beta
2019-10-14 15:00:30 +02:00
f1c4a62612
policy(major): fix error when policy.negate is enabled
2019-10-14 15:00:20 +02:00
358e39ced0
core(major): remove action field from policy
2019-10-14 13:57:38 +02:00
82d14f37c3
new release: 0.6.8-beta
2019-10-14 13:18:51 +02:00
2a27325dfd
admin(major): add pagination to all listviews
2019-10-14 13:15:42 +02:00
a6dee2e8ed
admin(minor): fix sidebar disappearing when editing user
2019-10-14 13:14:54 +02:00
2ff1635696
core/sources(minor): refactor Source's property
2019-10-13 16:47:13 +02:00
1cb6b5e984
new release: 0.6.7-beta
2019-10-12 14:23:14 +02:00
1fe420fd80
admin(major): add YAMLField for attributes, add codemirror editor
2019-10-12 14:23:03 +02:00
50172e58d8
sources/ldap(minor): save ldap password for user upon successful bind
2019-10-12 14:00:34 +02:00
d7483d129f
sources/ldap(minor): call set_unusable_password when creating new user
2019-10-12 13:59:52 +02:00
34ed0b3594
new release: 0.6.6-beta
2019-10-11 14:33:36 +02:00
9de950220f
core(minor): small css adjustment
2019-10-11 14:32:19 +02:00
567c90b4c6
new release: 0.6.5-beta
2019-10-11 14:26:20 +02:00
ae19236366
factors/email(minor): fix default timeout being 0, which breaks task
2019-10-11 14:24:58 +02:00
f9babe7089
core(minor): fix timezone warning when cleaning nonces
2019-10-11 14:23:59 +02:00
32abb27e61
sources/ldap(minor): fix lint
2019-10-11 13:43:35 +02:00
8478b03892
sources/ldap(major): implement membership sync, add more settings
2019-10-11 13:41:12 +02:00
e972f2b289
Merge branch 'master' into ldap-rewrite
2019-10-11 12:53:56 +02:00
22c4fb1414
sources/ldap(major): add sync_users and sync_groups, rewrite auth_user method
2019-10-11 12:53:48 +02:00
0154def916
root(minor): allow subapps to define CELERY_BEAT_SCHEDULE
2019-10-11 12:47:29 +02:00
fc69b6851d
core(minor): tags -> attributes, add attributes to user, add propertymappings to source
2019-10-11 12:47:06 +02:00
44a3c7fa5f
Merge branch 'master' into ldap-rewrite
2019-10-11 10:24:12 +02:00
37111fd07b
core(minor): merge migrations
2019-10-10 17:41:22 +02:00
4e6653e299
ldap(major): start rewrite
2019-10-10 17:36:09 +02:00
143a575369
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/core/models.py
2019-10-10 17:29:34 +02:00
c782585287
ci(minor): re-enable pylint
2019-10-10 17:22:56 +02:00
48a04744e0
new release: 0.6.4-beta
2019-10-10 16:09:38 +02:00
b9991465ee
recovery(new): add recovery app to create recovery links
2019-10-10 14:05:16 +02:00
3d8242be06
core(minor): add new, optional description field to nonce
2019-10-10 14:04:58 +02:00
344a8817c3
admin(minor): fix linting
2019-10-10 13:05:03 +02:00
3afb0d4f6d
admin(minor): remove partial API
2019-10-10 13:04:20 +02:00
c9714893bb
admin(major): rewrite all views to use guardian mixins
2019-10-10 13:01:49 +02:00
3185a86b22
core(minor): add separate permission to reset user's password
2019-10-10 13:01:36 +02:00
a53f7a49ac
root(minor): start implementing guardian
2019-10-10 10:45:51 +02:00
ca3bcc565d
ui(minor): simplify top navigation
2019-10-10 10:02:48 +02:00
c1dae0b599
sources/oauth(minor): fix wrong settings reference
2019-10-09 19:46:23 +02:00
e70d3b6286
new release: 0.6.3-beta
2019-10-09 14:44:50 +02:00
17e6bc921b
core(minor): fix import order
2019-10-09 14:37:40 +02:00
3b7e47dbe2
settings(minor): use cached_db for session, use localhost as domain
2019-10-09 14:30:53 +02:00
2e15b24f0a
*(minor): switch has_user_settings to return Optional dataclass instead of tuple
2019-10-09 12:47:14 +02:00
088b9592cd
core(minor): remove unused code
2019-10-08 15:04:38 +02:00
b1e4e32b83
providers/oidc(minor): correctly create audit entry on authz
2019-10-08 14:34:59 +02:00
d91a852eda
factors/email(minor): start rebuilding email integration as factor
2019-10-08 14:30:17 +02:00
171c5b9759
factors/password(minor): remove form from core
2019-10-08 14:23:02 +02:00
64290b2a37
admin(minor): add view to create user
2019-10-08 11:27:19 +02:00
72769b8a0a
lib(minor): cleanup default settings
2019-10-08 10:44:44 +02:00
6d0ecd228e
new release: 0.6.2-beta
2019-10-07 21:24:56 +02:00
a390bb7b59
factors/otp(minor): fix old URLs
2019-10-07 21:23:25 +02:00
17eea4a10c
new release: 0.6.1-beta
2019-10-07 18:53:04 +02:00
ec73b53340
providers/saml(minor): fix last wrong urls names
2019-10-07 18:36:09 +02:00
8f42a7f0b4
new release: 0.6.0-beta
2019-10-07 17:18:19 +02:00
2c221ea819
providers/oauth(minor): fix import order
2019-10-07 17:14:52 +02:00
93e0441b58
helm(minor): don't directly mount configmap
2019-10-07 17:14:08 +02:00
59fc223a85
factors/captcha(minor): load correct keys
2019-10-07 16:58:06 +02:00
0a6f555c23
otp(minor): disable autocomplete for code input
2019-10-07 16:57:54 +02:00
6a4233d6fd
providers/oauth(minor): fix urls not being mounted in the right path
2019-10-07 16:57:36 +02:00
15fa7e9652
ui(minor): merge menus
2019-10-07 16:50:13 +02:00
f2acc154cd
*(minor): small refactor
2019-10-07 16:33:48 +02:00
d21ec6c9a5
root(minor): get rid of duplicate settings
2019-10-04 16:09:35 +02:00
34cbf5f702
new release: 0.5.0-beta
2019-10-04 13:55:13 +02:00
1cd149c815
policy(minor): fix linting
2019-10-04 13:49:27 +02:00
4c6f562805
policy(minor): fix deadlock issue
2019-10-04 13:44:26 +02:00
e59c4ec1c7
root(minor): cleanup, remove unused log
2019-10-04 13:43:47 +02:00
1169db7530
docker(minor): move docker-related files into separate folder
2019-10-04 12:45:19 +02:00
1453008796
wsgi(minor): add proper request logging
2019-10-04 12:44:59 +02:00
2209b6d603
deploy(minor): fix robots.txt not being in the right path
...
fix path matching in docker compose
2019-10-04 12:01:38 +02:00
ccbc0384f9
deploy(minor): remove app-gw, add robots.txt
2019-10-04 11:57:41 +02:00
a48924c896
docker(minor): switch to debian based image so we can use wheels
2019-10-04 11:50:52 +02:00
afca94ceb8
policy(minor): improve loading of policy subclasses
2019-10-04 10:22:06 +02:00
0b86231a36
*(minor): make better use of structured logging
2019-10-04 10:21:33 +02:00
c0df1f38b8
*(minor): remove __name__ param from get_logger
2019-10-04 10:08:53 +02:00
2b8fed8f4e
saml_idp(minor): rewrite to use defusedxml instead of bs4
2019-10-04 09:50:25 +02:00
c7322a32a0
app_gw(minor): remove current implementation
2019-10-04 09:28:28 +02:00
64b75cab84
policy(minor): add data class for policy request
2019-10-03 10:45:31 +02:00
f58bc61999
new release: 0.4.2-beta
2019-10-02 21:05:51 +00:00
fb8ccc0283
lint(minor): fix import order
2019-10-02 21:05:37 +00:00
c38012f147
new release: 0.4.1-beta
2019-10-02 21:04:16 +00:00
920e705d75
policy(minor): lookup correct policy subclass
2019-10-02 22:28:58 +02:00
de0b137b1e
policy(minor): improve error handling
2019-10-02 22:28:39 +02:00
8745ac7932
new release: 0.4.0-beta
2019-10-01 17:01:30 +02:00
b8656858ec
k8s(minor): load secrets as env vars
2019-10-01 15:42:14 +02:00
aec1ccd88d
root(minor): fix redis password not being loaded
2019-10-01 15:30:35 +02:00
9d640efc88
new release: 0.3.0-beta
2019-10-01 13:50:50 +02:00
2bffc12ef9
ci(minor): fix default settings so CI works
2019-10-01 13:22:38 +02:00
7bff2734aa
lint(minor): fix all remaining pylint and prospector errors
2019-10-01 11:08:56 +02:00
84768c0ec6
helm(minor): remove rabbitmq
2019-10-01 10:48:55 +02:00
f4499a5459
*(minor): stdlib logging to structlog
2019-10-01 10:24:10 +02:00
b3aede5bba
policy(minor): Move policy-related code to separate package
2019-10-01 10:17:39 +02:00
c2c5ff6912
config(minor): CONFIG.get -> CONFIG.y
2019-09-30 18:04:04 +02:00
06d15d8a27
new release: 0.2.8-beta
2019-07-22 17:18:07 +02:00
4cf6c36f34
new release: 0.2.7-beta
2019-07-22 15:54:34 +02:00
62abe3f256
suspicious_policy: fix Request IP lookup
2019-07-22 15:46:41 +02:00
174472bb45
all: get rid of individual requirements file, remove version from every module
2019-07-22 15:20:17 +02:00
f97a5eeefb
api: *actually* fix drf dependency issue
2019-07-15 15:05:54 +00:00
10fd96981e
new release: 0.2.6-beta
2019-07-15 13:42:18 +00:00
67e3eb549c
api: fix wrong django-rest-framework dependency
2019-07-15 13:42:03 +00:00
30a6d1f0b1
new release: 0.2.5-beta
2019-07-15 13:31:04 +00:00
3d1fa9f048
app_gw: Rewrite redirect responses (replace upstream location with server_name)
2019-07-09 15:28:52 +02:00
1d2be6e68b
root: fix sentry sending wrong release
2019-07-05 16:00:01 +02:00
c21e343986
oidc_provider: fix error when creating a new provider
2019-07-05 15:59:52 +02:00
ff37ed095c
new release: 0.2.4-beta
2019-07-05 15:30:13 +02:00
8623a2c3fc
oidc_provider: fix error trying to create RSA Key before migrations are run
2019-07-05 15:27:04 +02:00
23d277eaf1
remove oidc from OAuth2, add dedicated OIDC provider
2019-07-05 15:21:48 +02:00
bccf424c5e
new release: 0.2.3-beta
2019-07-04 16:25:33 +02:00
ed25801e6e
core: revert to cherrypy for main webserver and use daphne only for app_gw
2019-07-04 15:23:05 +02:00
4d0148193f
root: migrate to new sentry instance
2019-07-03 17:35:54 +02:00
804ae15c2e
new release: 0.2.2-beta
2019-06-25 18:50:41 +02:00
b35a9fad86
Fix linting errors with current build-base image
2019-06-25 18:50:37 +02:00
a4f83bd28a
new release: 0.2.1-beta
2019-06-25 18:25:27 +02:00
2099bbb713
new release: 0.2.0-beta
2019-06-25 18:16:14 +02:00
67beba8f78
Fix wrong URLConf being loaded
2019-06-25 18:11:08 +02:00
a798412e17
separate passbook.core into passbook.root and passbook.core
...
Move Main Django Project into passbook.root while passbook.core holds core functionality.
passbook.root contains main settings, ASGI & WSGI, celery and URLs.
2019-06-25 18:00:54 +02:00
3b2c2d781f
Fix typo
2019-06-25 17:59:51 +02:00
98c844f3d6
improve OIDC compatibility
2019-06-25 17:57:25 +02:00
2645bd0132
new release: 0.1.38-beta
2019-04-29 23:26:18 +02:00
0ec1468058
remove unused import
2019-04-29 23:22:54 +02:00
5d1a3043b2
create SSOLoginPolicy, which allows factors to be applied when user comes from SSO login
...
implement SESSIION_IS_SSO_LOGIN for OAuth Client and core MFA
2019-04-29 23:19:37 +02:00
b46958d1f9
send session to task
2019-04-29 23:18:51 +02:00
5daa8d5fe3
fix missing/wrong widget inputs
2019-04-29 23:16:04 +02:00
31846f1d05
Show redirect URL in <pre> element
2019-04-29 22:32:22 +02:00
1fac964b8b
increase application close timeout
2019-04-29 22:19:26 +02:00
dfa6ed8ac2
add help to show how SAML Property Mapping substitutes variables
2019-04-29 22:19:13 +02:00
66fe10299e
new release: 0.1.37-beta
2019-04-29 21:43:18 +02:00
e0a3ec033f
fix IDP-Initiated SAML Login
2019-04-29 21:39:41 +02:00
7033ec0ab9
remove debug print
2019-04-29 21:39:30 +02:00
4004579905
remove nexus_upload command
2019-04-29 21:39:16 +02:00
9fe9e48a5c
new release: 0.1.36-beta
2019-04-29 20:57:57 +02:00
595a6c7fe6
remove guardian completely
2019-04-29 20:57:54 +02:00
11b5860d4a
new release: 0.1.35-beta
2019-04-29 20:47:32 +02:00
9bdbff4cda
fix gitlab-ci using incorrect variables for docker access
2019-04-29 20:42:24 +02:00
e0d597eeac
show cache on admin overview, add modal to clear cache, re-add logging to policy
2019-04-29 20:37:44 +02:00
f576985cc9
remove django guardian and check application access via PolicyEngine
2019-04-29 20:07:18 +02:00
22a6aef60b
fix wrong import
2019-04-29 20:06:52 +02:00
ec0a6e7854
new release: 0.1.34-beta
2019-04-29 19:22:20 +02:00
6904608e6f
fix clicking on administration always loading admin interface
2019-04-29 19:22:14 +02:00
cb3732cb2b
filter out connection errors for sentry
2019-04-29 19:16:49 +02:00
9f8fb7378a
add audience field, switch base processor, better handle processor loading failure
2019-04-18 11:30:21 +02:00
98cd646044
remove unneeded processors
2019-04-18 11:09:12 +02:00
53918462b6
new release: 0.1.33-beta
2019-04-18 10:28:12 +02:00
8e5c3f2f31
remove unused import
2019-04-17 17:53:45 +02:00
5a3b2fdd49
add Rancher SAML processor
2019-04-17 17:53:15 +02:00
e47b9f0d57
fix SAML Request not being parsed all the time
2019-04-17 17:53:05 +02:00
146dd747f1
fix EntityID being None in SAML Metadata
2019-04-17 17:52:24 +02:00
f2ce56063b
bump version: 0.1.31-beta -> 0.1.32-beta
2019-04-17 14:27:41 +02:00
9072b836c6
automatically add response_type if not given in OAuth Request
2019-04-17 14:25:51 +02:00
2fa57d064e
bump version: 0.1.30-beta -> 0.1.31-beta
2019-04-13 17:58:09 +02:00
e7129d18f6
fix inconsistent migrations
2019-04-13 17:52:11 +02:00
d2bf9f81d6
remove raven middleware
2019-04-13 17:46:51 +02:00
30acf0660b
Merge branch 'master' into 37-guardian
2019-04-13 17:43:02 +02:00
dda41af5c8
remove logging to increase speed, add more caching to policy and rewriter
2019-04-13 17:22:03 +02:00
9b5b03647b
move actual proxying logic to separate class
2019-04-13 16:05:11 +02:00
940b3eb943
move logging to separate thread
2019-04-13 16:04:48 +02:00
16eb629b71
only enable sentry when not DEBUG
2019-04-11 15:30:42 +02:00
755045b226
try to fix app_gw being null
2019-04-11 15:30:07 +02:00
Jens Langhammer
Langhammer, Jens
Jens Langhammer