7203bd37a3
outposts: replace migration with string backup handler
2020-10-19 16:04:38 +02:00
ac4c314042
new release: 0.12.1-stable
2020-10-19 15:30:27 +02:00
05866d3544
providers/proxy: fix creation of ingress
2020-10-19 15:06:50 +02:00
386e23dfac
core: fix api signature for view_key
2020-10-19 14:35:22 +02:00
5de0d03acf
new release: 0.12.0-stable
2020-10-19 12:15:25 +02:00
83eb4aff02
build(deps): bump rollup in /passbook/static/static ( #282 )
...
Bumps [rollup](https://github.com/rollup/rollup ) from 2.31.0 to 2.32.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v2.31.0...v2.32.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-19 11:12:46 +02:00
d04afcd6d0
build(deps): bump chart.js in /passbook/static/static ( #283 )
...
Bumps [chart.js](https://github.com/chartjs/Chart.js ) from 2.9.3 to 2.9.4.
- [Release notes](https://github.com/chartjs/Chart.js/releases )
- [Commits](https://github.com/chartjs/Chart.js/compare/v2.9.3...v2.9.4 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-19 10:44:05 +02:00
8a2f982a77
admin: fix html of overview
2020-10-19 00:46:31 +02:00
1d85874f41
stages/user_write: don't update session hash after password change when impersonating
2020-10-18 22:58:05 +02:00
ff64182ae8
stages/prompt: skip password equality check when previous checks failed
2020-10-18 22:54:40 +02:00
a9ee67bf2d
sources/ldap: adjust order or fields in form
2020-10-18 22:39:13 +02:00
e87d52a76b
providers/proxy: implement Ingress diff checking
2020-10-18 21:34:45 +02:00
8b09cf55a2
root: upgrade to traefik 2.3
2020-10-18 18:48:19 +02:00
0203d20759
providers/proxy: add traefik labels to outposts deployed with docker integration
2020-10-18 17:46:20 +02:00
7861e2e0bd
provider/proxy: add K8s ingress support
2020-10-18 17:13:44 +02:00
ad29d54bbf
outposts: simplify k8s controller add more extensibility
2020-10-18 17:09:02 +02:00
c698ba37d9
core: add ability for users to create tokens
2020-10-18 15:42:16 +02:00
6a53069653
*: make generic template's base parameterised
2020-10-18 15:35:27 +02:00
152b2d863d
api: add fallback for proxies < 0.12 which send authorization without b64
2020-10-18 15:14:00 +02:00
ee670d5e19
core: add key field to token for easier rotation
2020-10-18 14:34:22 +02:00
36e095671c
proxy: fix WS Authorization Header being sent with the wrong format
2020-10-18 14:04:12 +02:00
1088b947a8
audit: remove duplicate date column, add search
2020-10-17 22:26:35 +02:00
c4a30c50ac
stages/consent: add fallback template
2020-10-17 18:18:29 +02:00
ee5bac099f
outposts: fix migration not having access to token property
2020-10-17 17:06:08 +02:00
69f7b41044
e2e: use dockercontroller to test proxy
2020-10-17 17:03:10 +02:00
e909e7fa8a
outposts: kill container on down
2020-10-17 16:33:38 +02:00
bee38551f3
outposts: fix tokens without identifier not loading in the UI
2020-10-17 16:33:23 +02:00
c0ec6388df
outposts: give container time to boot when newly created
2020-10-16 23:38:46 +02:00
8f08836885
outposts: ensure log is also written to stdout
2020-10-16 23:36:59 +02:00
dd0d7e7481
root: switch from drf-yasg to drf_yasg2 and up rest_framework
2020-10-16 23:32:35 +02:00
25d0ac6534
ci: bump pyright version
2020-10-16 22:29:59 +02:00
971713d1aa
outposts: call controller.down on outpost pre_delete
2020-10-16 22:27:00 +02:00
5135d828b4
outposts: rename run to up, add down method for deleting
2020-10-16 22:22:15 +02:00
6b1d30d230
outposts: improve logging from k8s controller
2020-10-16 21:31:55 +02:00
3454760731
*: ensure TaskResult uid is slugified to prevent URL errors
2020-10-16 21:31:12 +02:00
96846220c3
outposts: trigger reconcile on save
2020-10-16 21:08:35 +02:00
a4f5678144
docs: update admin screenshot
2020-10-16 20:26:09 +02:00
a18baa3cb3
static: simplify Message update trigger
2020-10-16 20:13:57 +02:00
dfedd4a7f1
admin: improve overview, re-add links
...
closes #270
2020-10-16 20:07:56 +02:00
897f64600a
static: dynamically add messages instead of replacing
2020-10-16 19:22:44 +02:00
c6eb015d18
static: fix shell card missing on small screens
2020-10-16 19:13:39 +02:00
54088239ab
sources/ldap: fix MonitoredTask not using uid
2020-10-16 16:43:40 +02:00
aa9c7a6567
flow: re-add FlowShell as Web Component
2020-10-16 16:36:18 +02:00
6c0c12c90a
static: fix messages update only working once
2020-10-16 16:30:38 +02:00
c49b57ad1d
stages/email: fix make_msgid call
2020-10-16 16:07:59 +02:00
2339e855bb
*: Improve MonitoredTasks' error capture
2020-10-16 16:00:24 +02:00
bdc019c7cf
outposts: skip post_save during migrations and unittests
2020-10-16 15:58:28 +02:00
5e2fb6d56e
static: replace server-side alerts with webcomponent
2020-10-16 15:26:51 +02:00
3b9524cdfc
*: ensure unittests wait on tasks
2020-10-16 14:53:14 +02:00
7154f19668
admin: fix task list not being sorted
2020-10-16 14:53:00 +02:00
8fedd9ec07
stages/email: Implement MonitoredTask, but only for failed emails
2020-10-16 14:31:01 +02:00
4ac87d8739
sources/saml: Implement MonitoredTask
2020-10-16 14:30:44 +02:00
e4f45eba0a
policies/reputation: implement MonitoredTask
2020-10-16 14:20:41 +02:00
4b3e0f0f96
sources/ldap: implement MonitoredTask
2020-10-16 14:20:07 +02:00
482da81522
admin: add button to retry task
2020-10-16 14:10:27 +02:00
c5226fd0e8
admin: add API to list tasks and schedule retry
2020-10-16 14:10:11 +02:00
7806cff96f
lib: save task's call arguments for manual retry
2020-10-16 13:35:40 +02:00
fa504e4bf9
outposts: pass outpost reference instead of PK, implement TaskResult.uid
2020-10-16 12:54:52 +02:00
86cfb10b9b
outposts: implement .run_wuth_logs() which returns logs, add task monitoring
2020-10-16 11:38:49 +02:00
f6b8171624
outposts: improve controller error handling
2020-10-16 11:31:31 +02:00
91ce7f7363
root: implement monitored tasks
2020-10-16 11:28:54 +02:00
17060238f0
build(deps): bump rollup in /passbook/static/static ( #278 )
...
Bumps [rollup](https://github.com/rollup/rollup ) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v2.30.0...v2.31.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-16 10:01:01 +02:00
69d2a1cf3b
providers/proxy: add more kubernetes tests
2020-10-14 20:21:47 +02:00
18da7565c2
outposts: improve performance by running related check in worker, fix tokens being left over on outpost delete
2020-10-14 18:41:16 +02:00
45699a1a69
outpost: rewrite kubernetes controller
2020-10-14 17:49:09 +02:00
5556e9f8e7
outposts: always save state, even without version
2020-10-14 12:15:40 +02:00
327bb09dd4
build(deps): bump rollup in /passbook/static/static ( #275 )
...
Bumps [rollup](https://github.com/rollup/rollup ) from 2.29.0 to 2.30.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v2.29.0...v2.30.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-14 11:47:30 +02:00
8ca23451c6
outposts: rewrite state logic, use cache to expire old channels, support multiple instances
2020-10-14 11:32:33 +02:00
e966dff1a7
Revert "flows: rewrite shell to webcomponents"
...
This reverts commit b03a508475
2020-10-14 11:32:33 +02:00
b03a508475
flows: rewrite shell to webcomponents
2020-10-12 17:53:35 +02:00
4a10b4999b
core: fix navbar icon not showing in firefox
2020-10-11 23:38:22 +02:00
20ee634cda
admin: add buttons to disable and enable users
2020-10-11 21:54:00 +02:00
713025d218
new release: 0.11.0-stable
2020-10-11 19:57:03 +02:00
58ae159835
outposts: disable Kubernetes selection for now
2020-10-11 19:40:22 +02:00
b6eb0bf53d
providers/oauth2: add missing property_mapping template
2020-10-11 19:29:13 +02:00
610b6c7f70
policies: add PolicyAccessView, which does complete access checking
2020-10-11 19:26:20 +02:00
fd42389bd5
build(deps-dev): bump rollup-plugin-sourcemaps ( #267 )
...
Bumps [rollup-plugin-sourcemaps](https://github.com/maxdavidson/rollup-plugin-sourcemaps ) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/maxdavidson/rollup-plugin-sourcemaps/releases )
- [Changelog](https://github.com/maxdavidson/rollup-plugin-sourcemaps/blob/master/CHANGELOG.md )
- [Commits](https://github.com/maxdavidson/rollup-plugin-sourcemaps/compare/v0.6.2...v0.6.3 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-09 11:31:47 +02:00
71b1df2fec
build(deps): bump rollup in /passbook/static/static ( #269 )
...
Bumps [rollup](https://github.com/rollup/rollup ) from 2.28.2 to 2.29.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v2.28.2...v2.29.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-09 09:08:39 +02:00
63041d788b
core: update application list API to show applications accessible by policy
2020-10-08 09:26:50 +02:00
8ab7f7fcbb
core: make passbook title navigate to overview
...
closes #264
2020-10-07 19:27:20 +02:00
c1eb8317f7
providers/proxy: update phrasing for basic_auth_* attributes
...
closes #265
2020-10-07 19:27:06 +02:00
7a578e5e83
admin: dont show check when outpost hasnt connected
...
closes #263
2020-10-07 19:19:25 +02:00
ca0e89c799
build(deps): bump @patternfly/patternfly in /passbook/static/static ( #261 )
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 4.42.2 to 4.50.4.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/prerelease-v4.42.2...prerelease-v4.50.4 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-07 09:10:47 +02:00
876618c1ec
build(deps): bump @fortawesome/fontawesome-free ( #258 )
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.15.0 to 5.15.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.15.0...5.15.1 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-06 10:19:05 +02:00
9df00e09a4
root: fix static docker's rollup build
2020-10-06 00:06:53 +02:00
cf6ce9c915
audit: optimize eventaction,
2020-10-05 23:43:56 +02:00
3b61191614
outpost: enable docker controller
2020-10-05 23:11:44 +02:00
ac88bd5d44
core: hide token value by default
2020-10-05 22:40:30 +02:00
da9aaf69df
admin: add metrics and charts
2020-10-05 22:10:03 +02:00
ae125dd1f0
root: fix missing docker dependency
2020-10-04 15:04:07 +02:00
f636595230
static: add fetch-fill-slot to load data for admin interface
2020-10-04 13:09:03 +02:00
d506e8f1a3
outposts: implement docker controller
2020-10-04 00:41:12 +02:00
d3a96ac7aa
outposts: load token async
2020-10-04 00:29:18 +02:00
189b0ec324
admin: expose info as API
2020-10-04 00:28:58 +02:00
c5a6b4961f
core: Add Token identifier as sudo-primary key
2020-10-04 00:28:43 +02:00
b590589324
root: add base template for api
2020-10-03 23:20:33 +02:00
9fb1ac98ec
Backup/Restore ( #256 )
...
* lifecycle: move s3 backup settings to s3 name
* providers/oauth2: fix for alerting for missing certificatekeypair
* lifecycle: add backup commands
see #252
* lifecycle: install postgres-client for 11 and 12
* root: migrate to DBBACKUP_STORAGE_OPTIONS, add region setting
* lifecycle: auto-clean last backups
* helm: add s3 region parameter, add cronjob for backups
* docs: add backup docs
* root: remove backup scheduled task for now
2020-10-03 20:36:36 +02:00
195d8fe71f
core: move name field to base Provider
2020-10-03 20:05:16 +02:00
b0602a3215
admin: implement search for all views
...
see #253
2020-10-03 19:32:01 +02:00
0150a5c58c
admin: add SearchListMixin mixin and partial template
2020-10-03 19:05:20 +02:00
b35d27c83e
admin: fix pagination template, ensure template is placed correctly in footer
2020-10-03 17:50:17 +02:00
801bb90806
root: lock pyright version
2020-10-03 15:34:53 +02:00
55a83abb26
*: remove deprecated providing_args
2020-10-02 11:18:14 +02:00
247015e955
stages/otp_*: Remove duplicate validation for OTP Codes
2020-10-02 10:30:43 +02:00
e9a1a18ba3
providers/oauth2: ensure that when rs256 is selected, a certificate key pair is selected
2020-10-01 20:01:45 +02:00
6cd9edd38a
providers/oauth2: add missing token_validity field to Forms and API
2020-10-01 20:01:28 +02:00
9b5f9167cd
root: always enable dbbackup
2020-10-01 13:41:40 +02:00
94eaeb5a60
new release: 0.10.9-stable
2020-10-01 10:24:16 +02:00
a5420fe019
providers/saml: lowercase acs URLs before checking
...
closes #249
2020-10-01 10:04:20 +02:00
2e1849a732
providers/oauth2: lowercase all uris before checking redirect URI
...
see #249
2020-10-01 10:00:44 +02:00
8f585eca70
stages/identification: replace buggy FilteredSelectMultiple with ArrayFieldSelectMultiple
2020-09-30 23:58:01 +02:00
516455f482
stages/identification: add case_insensitive_matching
...
closes #248
2020-09-30 23:48:53 +02:00
525d271535
*: apply new black styling
2020-09-30 19:34:22 +02:00
c3c525a3f0
lib: re-add Websockets error
2020-09-30 15:55:59 +02:00
c0b334eb02
lib: ignore ChannelFull error
2020-09-30 15:40:54 +02:00
03647fa6af
new release: 0.10.8-stable
2020-09-30 14:59:02 +02:00
a063613f4c
build(deps): bump uvicorn from 0.11.8 to 0.12.0 ( #241 )
...
* build(deps): bump uvicorn from 0.11.8 to 0.12.0
Bumps [uvicorn](https://github.com/encode/uvicorn ) from 0.11.8 to 0.12.0.
- [Release notes](https://github.com/encode/uvicorn/releases )
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/encode/uvicorn/compare/0.11.8...0.12.0 )
Signed-off-by: dependabot[bot] <support@github.com>
* lib: remove websockets ignored exception
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
2020-09-30 11:49:59 +02:00
59dbc15be7
core: make group_attributes include user's attributes
2020-09-30 11:39:25 +02:00
9d5dd896f3
providers/proxy: start implementing basic_auth_enabled
...
see #244
2020-09-30 11:15:22 +02:00
02f5f12089
providers/proxy: use external_url for launch URL, hide setup URLs
2020-09-30 11:14:50 +02:00
90ea6dba90
providers/proxy: add pb_proxy scope for proxy that sends user_attributes
2020-09-30 11:13:59 +02:00
739c66da1c
crypto: add tests
2020-09-30 09:12:37 +02:00
e8c7cce68f
build(deps): bump @fortawesome/fontawesome-free ( #247 )
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.14.0 to 5.15.0.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.14.0...5.15.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-30 08:57:47 +02:00
760352202e
admin: fix get_form_class
2020-09-29 11:42:34 +02:00
9724ded194
policies: change .form() and .serializer() to properties, add tests
2020-09-29 10:32:58 +02:00
5da4ff4ff1
e2e: further cleanup tests, directly navigate to user-settings instead of click
2020-09-29 00:27:58 +02:00
e54b98a80e
e2e: cleanup tests, remove XPATH selectors
2020-09-28 18:19:46 +02:00
bd78087582
root: fix RemovedInDjango40Warning being triggered
2020-09-28 11:47:50 +02:00
8f4e954160
providers/oauth2: rewrite introspection endpoint to allow basic or bearer auth
2020-09-28 11:42:27 +02:00
b6d7847eae
providers/oauth2: fix token introspection view
2020-09-28 09:04:31 +02:00
ad0d339794
flows: add benchmark command
2020-09-27 21:21:30 +02:00
d74fa4abbf
admin: fix categories in sidebar being collapsible
2020-09-27 18:40:50 +02:00
b24938fc6b
stages/consent: fix formatting
2020-09-26 21:06:01 +02:00
ea1564548c
stages/consent: support pending_user from flow
2020-09-26 20:43:41 +02:00
3663c3c8a1
sources/saml: cleanup SLO Implementation
2020-09-26 20:38:38 +02:00
07e20a2950
core: add AuthJsonConsumer to handle websocket authentication
2020-09-26 20:11:04 +02:00
6366d50a0e
core: show 'Create Application' button based on perms
2020-09-26 19:54:52 +02:00
c3e64df95b
new release: 0.10.7-stable
2020-09-26 19:26:12 +02:00
c1058c7438
e2e: fix formatting
2020-09-26 18:18:01 +02:00
44b815efae
sources/oauth: fix data being sent in body and header for oauth1
2020-09-26 17:43:58 +02:00
64a71a3663
flows: fix planner removing too many stages
2020-09-26 14:58:13 +02:00
7aa89c6d4f
flows: fix formatting
2020-09-26 14:19:42 +02:00
7e9d7e5198
flows: fix two stages being removed when reevaluate_marker was enabled
2020-09-26 14:13:10 +02:00
2be6cd70d9
sources/oauth: fix handling of token for do_request
2020-09-26 14:00:48 +02:00
2b9705b33c
policies/expression: remove pb_flow_plan, save flow context directly in context
2020-09-26 13:58:32 +02:00
40f1de3b11
admin: load info about latest version in celery task
2020-09-26 02:16:35 +02:00
899c5b63ea
admin: add BackSuccessUrlMixin to redirect to correct url after form edit
2020-09-26 02:04:16 +02:00
e104c74761
admin: make pagination size configurable
2020-09-26 01:55:40 +02:00
5d46c1ea5a
flows: improve strings, ensure default-source-enrollment's first stage has re_evaluate_policies
2020-09-26 01:37:54 +02:00
7d533889bc
sources/oauth: fix OAuth1 not working, cleanup
2020-09-26 01:27:33 +02:00
Jens Langhammer
dependabot[bot]
Jens L