Commit graph

1591 commits

Author SHA1 Message Date
Jens Langhammer c698ba37d9 core: add ability for users to create tokens 2020-10-18 15:42:16 +02:00
Jens Langhammer 6a53069653 *: make generic template's base parameterised 2020-10-18 15:35:27 +02:00
Jens Langhammer 152b2d863d api: add fallback for proxies < 0.12 which send authorization without b64 2020-10-18 15:14:00 +02:00
Jens Langhammer ee670d5e19 core: add key field to token for easier rotation 2020-10-18 14:34:22 +02:00
Jens Langhammer 36e095671c proxy: fix WS Authorization Header being sent with the wrong format 2020-10-18 14:04:12 +02:00
Jens Langhammer 1088b947a8 audit: remove duplicate date column, add search 2020-10-17 22:26:35 +02:00
Jens Langhammer c4a30c50ac stages/consent: add fallback template 2020-10-17 18:18:29 +02:00
Jens Langhammer ee5bac099f outposts: fix migration not having access to token property 2020-10-17 17:06:08 +02:00
Jens Langhammer 69f7b41044 e2e: use dockercontroller to test proxy 2020-10-17 17:03:10 +02:00
Jens Langhammer e909e7fa8a outposts: kill container on down 2020-10-17 16:33:38 +02:00
Jens Langhammer bee38551f3 outposts: fix tokens without identifier not loading in the UI 2020-10-17 16:33:23 +02:00
Jens Langhammer c0ec6388df outposts: give container time to boot when newly created 2020-10-16 23:38:46 +02:00
Jens Langhammer 8f08836885 outposts: ensure log is also written to stdout 2020-10-16 23:36:59 +02:00
Jens Langhammer dd0d7e7481 root: switch from drf-yasg to drf_yasg2 and up rest_framework 2020-10-16 23:32:35 +02:00
Jens Langhammer 25d0ac6534 ci: bump pyright version 2020-10-16 22:29:59 +02:00
Jens Langhammer 971713d1aa outposts: call controller.down on outpost pre_delete 2020-10-16 22:27:00 +02:00
Jens Langhammer 5135d828b4 outposts: rename run to up, add down method for deleting 2020-10-16 22:22:15 +02:00
Jens Langhammer 6b1d30d230 outposts: improve logging from k8s controller 2020-10-16 21:31:55 +02:00
Jens Langhammer 3454760731 *: ensure TaskResult uid is slugified to prevent URL errors 2020-10-16 21:31:12 +02:00
Jens Langhammer 96846220c3 outposts: trigger reconcile on save 2020-10-16 21:08:35 +02:00
Jens Langhammer a4f5678144 docs: update admin screenshot 2020-10-16 20:26:09 +02:00
Jens Langhammer a18baa3cb3 static: simplify Message update trigger 2020-10-16 20:13:57 +02:00
Jens Langhammer dfedd4a7f1 admin: improve overview, re-add links
closes #270
2020-10-16 20:07:56 +02:00
Jens Langhammer 897f64600a static: dynamically add messages instead of replacing 2020-10-16 19:22:44 +02:00
Jens Langhammer c6eb015d18 static: fix shell card missing on small screens 2020-10-16 19:13:39 +02:00
Jens Langhammer 54088239ab sources/ldap: fix MonitoredTask not using uid 2020-10-16 16:43:40 +02:00
Jens Langhammer aa9c7a6567 flow: re-add FlowShell as Web Component 2020-10-16 16:36:18 +02:00
Jens Langhammer 6c0c12c90a static: fix messages update only working once 2020-10-16 16:30:38 +02:00
Jens Langhammer c49b57ad1d stages/email: fix make_msgid call 2020-10-16 16:07:59 +02:00
Jens Langhammer 2339e855bb *: Improve MonitoredTasks' error capture 2020-10-16 16:00:24 +02:00
Jens Langhammer bdc019c7cf outposts: skip post_save during migrations and unittests 2020-10-16 15:58:28 +02:00
Jens Langhammer 5e2fb6d56e static: replace server-side alerts with webcomponent 2020-10-16 15:26:51 +02:00
Jens Langhammer 3b9524cdfc *: ensure unittests wait on tasks 2020-10-16 14:53:14 +02:00
Jens Langhammer 7154f19668 admin: fix task list not being sorted 2020-10-16 14:53:00 +02:00
Jens Langhammer 8fedd9ec07 stages/email: Implement MonitoredTask, but only for failed emails 2020-10-16 14:31:01 +02:00
Jens Langhammer 4ac87d8739 sources/saml: Implement MonitoredTask 2020-10-16 14:30:44 +02:00
Jens Langhammer e4f45eba0a policies/reputation: implement MonitoredTask 2020-10-16 14:20:41 +02:00
Jens Langhammer 4b3e0f0f96 sources/ldap: implement MonitoredTask 2020-10-16 14:20:07 +02:00
Jens Langhammer 482da81522 admin: add button to retry task 2020-10-16 14:10:27 +02:00
Jens Langhammer c5226fd0e8 admin: add API to list tasks and schedule retry 2020-10-16 14:10:11 +02:00
Jens Langhammer 7806cff96f lib: save task's call arguments for manual retry 2020-10-16 13:35:40 +02:00
Jens Langhammer fa504e4bf9 outposts: pass outpost reference instead of PK, implement TaskResult.uid 2020-10-16 12:54:52 +02:00
Jens Langhammer 86cfb10b9b outposts: implement .run_wuth_logs() which returns logs, add task monitoring 2020-10-16 11:38:49 +02:00
Jens Langhammer f6b8171624 outposts: improve controller error handling 2020-10-16 11:31:31 +02:00
Jens Langhammer 91ce7f7363 root: implement monitored tasks 2020-10-16 11:28:54 +02:00
dependabot[bot] 17060238f0
build(deps): bump rollup in /passbook/static/static (#278)
Bumps [rollup](https://github.com/rollup/rollup) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v2.30.0...v2.31.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-16 10:01:01 +02:00
Jens Langhammer 69d2a1cf3b providers/proxy: add more kubernetes tests 2020-10-14 20:21:47 +02:00
Jens Langhammer 18da7565c2 outposts: improve performance by running related check in worker, fix tokens being left over on outpost delete 2020-10-14 18:41:16 +02:00
Jens Langhammer 45699a1a69 outpost: rewrite kubernetes controller 2020-10-14 17:49:09 +02:00
Jens Langhammer 5556e9f8e7 outposts: always save state, even without version 2020-10-14 12:15:40 +02:00
dependabot[bot] 327bb09dd4
build(deps): bump rollup in /passbook/static/static (#275)
Bumps [rollup](https://github.com/rollup/rollup) from 2.29.0 to 2.30.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v2.29.0...v2.30.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-14 11:47:30 +02:00
Jens Langhammer 8ca23451c6 outposts: rewrite state logic, use cache to expire old channels, support multiple instances 2020-10-14 11:32:33 +02:00
Jens Langhammer e966dff1a7 Revert "flows: rewrite shell to webcomponents"
This reverts commit b03a508475.
2020-10-14 11:32:33 +02:00
Jens Langhammer b03a508475 flows: rewrite shell to webcomponents 2020-10-12 17:53:35 +02:00
Jens Langhammer 4a10b4999b core: fix navbar icon not showing in firefox 2020-10-11 23:38:22 +02:00
Jens Langhammer 20ee634cda admin: add buttons to disable and enable users 2020-10-11 21:54:00 +02:00
Jens Langhammer 713025d218 new release: 0.11.0-stable 2020-10-11 19:57:03 +02:00
Jens Langhammer 58ae159835 outposts: disable Kubernetes selection for now 2020-10-11 19:40:22 +02:00
Jens Langhammer b6eb0bf53d providers/oauth2: add missing property_mapping template 2020-10-11 19:29:13 +02:00
Jens Langhammer 610b6c7f70 policies: add PolicyAccessView, which does complete access checking 2020-10-11 19:26:20 +02:00
dependabot[bot] fd42389bd5
build(deps-dev): bump rollup-plugin-sourcemaps (#267)
Bumps [rollup-plugin-sourcemaps](https://github.com/maxdavidson/rollup-plugin-sourcemaps) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/maxdavidson/rollup-plugin-sourcemaps/releases)
- [Changelog](https://github.com/maxdavidson/rollup-plugin-sourcemaps/blob/master/CHANGELOG.md)
- [Commits](https://github.com/maxdavidson/rollup-plugin-sourcemaps/compare/v0.6.2...v0.6.3)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-09 11:31:47 +02:00
dependabot[bot] 71b1df2fec
build(deps): bump rollup in /passbook/static/static (#269)
Bumps [rollup](https://github.com/rollup/rollup) from 2.28.2 to 2.29.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v2.28.2...v2.29.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-09 09:08:39 +02:00
Jens Langhammer 63041d788b core: update application list API to show applications accessible by policy 2020-10-08 09:26:50 +02:00
Jens Langhammer 8ab7f7fcbb core: make passbook title navigate to overview
closes #264
2020-10-07 19:27:20 +02:00
Jens Langhammer c1eb8317f7 providers/proxy: update phrasing for basic_auth_* attributes
closes #265
2020-10-07 19:27:06 +02:00
Jens Langhammer 7a578e5e83 admin: dont show check when outpost hasnt connected
closes #263
2020-10-07 19:19:25 +02:00
dependabot[bot] ca0e89c799
build(deps): bump @patternfly/patternfly in /passbook/static/static (#261)
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly) from 4.42.2 to 4.50.4.
- [Release notes](https://github.com/patternfly/patternfly/releases)
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/patternfly/patternfly/compare/prerelease-v4.42.2...prerelease-v4.50.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-07 09:10:47 +02:00
dependabot[bot] 876618c1ec
build(deps): bump @fortawesome/fontawesome-free (#258)
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) from 5.15.0 to 5.15.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md)
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.15.0...5.15.1)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-06 10:19:05 +02:00
Jens Langhammer 9df00e09a4 root: fix static docker's rollup build 2020-10-06 00:06:53 +02:00
Jens Langhammer cf6ce9c915 audit: optimize eventaction, 2020-10-05 23:43:56 +02:00
Jens Langhammer 3b61191614 outpost: enable docker controller 2020-10-05 23:11:44 +02:00
Jens Langhammer ac88bd5d44 core: hide token value by default 2020-10-05 22:40:30 +02:00
Jens Langhammer da9aaf69df admin: add metrics and charts 2020-10-05 22:10:03 +02:00
Jens Langhammer ae125dd1f0 root: fix missing docker dependency 2020-10-04 15:04:07 +02:00
Jens Langhammer f636595230 static: add fetch-fill-slot to load data for admin interface 2020-10-04 13:09:03 +02:00
Jens Langhammer d506e8f1a3 outposts: implement docker controller 2020-10-04 00:41:12 +02:00
Jens Langhammer d3a96ac7aa outposts: load token async 2020-10-04 00:29:18 +02:00
Jens Langhammer 189b0ec324 admin: expose info as API 2020-10-04 00:28:58 +02:00
Jens Langhammer c5a6b4961f core: Add Token identifier as sudo-primary key 2020-10-04 00:28:43 +02:00
Jens Langhammer b590589324 root: add base template for api 2020-10-03 23:20:33 +02:00
Jens L 9fb1ac98ec
Backup/Restore (#256)
* lifecycle: move s3 backup settings to s3 name

* providers/oauth2: fix for alerting for missing certificatekeypair

* lifecycle: add backup commands

see #252

* lifecycle: install postgres-client for 11 and 12

* root: migrate to DBBACKUP_STORAGE_OPTIONS, add region setting

* lifecycle: auto-clean last backups

* helm: add s3 region parameter, add cronjob for backups

* docs: add backup docs

* root: remove backup scheduled task for now
2020-10-03 20:36:36 +02:00
Jens Langhammer 195d8fe71f core: move name field to base Provider 2020-10-03 20:05:16 +02:00
Jens Langhammer b0602a3215 admin: implement search for all views
see #253
2020-10-03 19:32:01 +02:00
Jens Langhammer 0150a5c58c admin: add SearchListMixin mixin and partial template 2020-10-03 19:05:20 +02:00
Jens Langhammer b35d27c83e admin: fix pagination template, ensure template is placed correctly in footer 2020-10-03 17:50:17 +02:00
Jens Langhammer 801bb90806 root: lock pyright version 2020-10-03 15:34:53 +02:00
Jens Langhammer 55a83abb26 *: remove deprecated providing_args 2020-10-02 11:18:14 +02:00
Jens Langhammer 247015e955 stages/otp_*: Remove duplicate validation for OTP Codes 2020-10-02 10:30:43 +02:00
Jens Langhammer e9a1a18ba3 providers/oauth2: ensure that when rs256 is selected, a certificate key pair is selected 2020-10-01 20:01:45 +02:00
Jens Langhammer 6cd9edd38a providers/oauth2: add missing token_validity field to Forms and API 2020-10-01 20:01:28 +02:00
Jens Langhammer 9b5f9167cd root: always enable dbbackup 2020-10-01 13:41:40 +02:00
Jens Langhammer 94eaeb5a60 new release: 0.10.9-stable 2020-10-01 10:24:16 +02:00
Jens Langhammer a5420fe019 providers/saml: lowercase acs URLs before checking
closes #249
2020-10-01 10:04:20 +02:00
Jens Langhammer 2e1849a732 providers/oauth2: lowercase all uris before checking redirect URI
see #249
2020-10-01 10:00:44 +02:00
Jens Langhammer 8f585eca70 stages/identification: replace buggy FilteredSelectMultiple with ArrayFieldSelectMultiple 2020-09-30 23:58:01 +02:00
Jens Langhammer 516455f482 stages/identification: add case_insensitive_matching
closes #248
2020-09-30 23:48:53 +02:00
Jens Langhammer 525d271535 *: apply new black styling 2020-09-30 19:34:22 +02:00
Jens Langhammer c3c525a3f0 lib: re-add Websockets error 2020-09-30 15:55:59 +02:00
Jens Langhammer c0b334eb02 lib: ignore ChannelFull error 2020-09-30 15:40:54 +02:00
Jens Langhammer 03647fa6af new release: 0.10.8-stable 2020-09-30 14:59:02 +02:00
dependabot[bot] a063613f4c
build(deps): bump uvicorn from 0.11.8 to 0.12.0 (#241)
* build(deps): bump uvicorn from 0.11.8 to 0.12.0

Bumps [uvicorn](https://github.com/encode/uvicorn) from 0.11.8 to 0.12.0.
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/encode/uvicorn/compare/0.11.8...0.12.0)

Signed-off-by: dependabot[bot] <support@github.com>

* lib: remove websockets ignored exception

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
2020-09-30 11:49:59 +02:00
Jens Langhammer 59dbc15be7 core: make group_attributes include user's attributes 2020-09-30 11:39:25 +02:00
Jens Langhammer 9d5dd896f3 providers/proxy: start implementing basic_auth_enabled
see #244
2020-09-30 11:15:22 +02:00
Jens Langhammer 02f5f12089 providers/proxy: use external_url for launch URL, hide setup URLs 2020-09-30 11:14:50 +02:00
Jens Langhammer 90ea6dba90 providers/proxy: add pb_proxy scope for proxy that sends user_attributes 2020-09-30 11:13:59 +02:00
Jens Langhammer 739c66da1c crypto: add tests 2020-09-30 09:12:37 +02:00
dependabot[bot] e8c7cce68f
build(deps): bump @fortawesome/fontawesome-free (#247)
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) from 5.14.0 to 5.15.0.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md)
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.14.0...5.15.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-30 08:57:47 +02:00
Jens Langhammer 760352202e admin: fix get_form_class 2020-09-29 11:42:34 +02:00
Jens Langhammer 9724ded194 policies: change .form() and .serializer() to properties, add tests 2020-09-29 10:32:58 +02:00
Jens Langhammer 5da4ff4ff1 e2e: further cleanup tests, directly navigate to user-settings instead of click 2020-09-29 00:27:58 +02:00
Jens Langhammer e54b98a80e e2e: cleanup tests, remove XPATH selectors 2020-09-28 18:19:46 +02:00
Jens Langhammer bd78087582 root: fix RemovedInDjango40Warning being triggered 2020-09-28 11:47:50 +02:00
Jens Langhammer 8f4e954160 providers/oauth2: rewrite introspection endpoint to allow basic or bearer auth 2020-09-28 11:42:27 +02:00
Jens Langhammer b6d7847eae providers/oauth2: fix token introspection view 2020-09-28 09:04:31 +02:00
Jens Langhammer ad0d339794 flows: add benchmark command 2020-09-27 21:21:30 +02:00
Jens Langhammer d74fa4abbf admin: fix categories in sidebar being collapsible 2020-09-27 18:40:50 +02:00
Jens Langhammer b24938fc6b stages/consent: fix formatting 2020-09-26 21:06:01 +02:00
Jens Langhammer ea1564548c stages/consent: support pending_user from flow 2020-09-26 20:43:41 +02:00
Jens Langhammer 3663c3c8a1 sources/saml: cleanup SLO Implementation 2020-09-26 20:38:38 +02:00
Jens Langhammer 07e20a2950 core: add AuthJsonConsumer to handle websocket authentication 2020-09-26 20:11:04 +02:00
Jens Langhammer 6366d50a0e core: show 'Create Application' button based on perms 2020-09-26 19:54:52 +02:00
Jens Langhammer c3e64df95b new release: 0.10.7-stable 2020-09-26 19:26:12 +02:00
Jens Langhammer c1058c7438 e2e: fix formatting 2020-09-26 18:18:01 +02:00
Jens Langhammer 44b815efae sources/oauth: fix data being sent in body and header for oauth1 2020-09-26 17:43:58 +02:00
Jens Langhammer 64a71a3663 flows: fix planner removing too many stages 2020-09-26 14:58:13 +02:00
Jens Langhammer 7aa89c6d4f flows: fix formatting 2020-09-26 14:19:42 +02:00
Jens Langhammer 7e9d7e5198 flows: fix two stages being removed when reevaluate_marker was enabled 2020-09-26 14:13:10 +02:00
Jens Langhammer 2be6cd70d9 sources/oauth: fix handling of token for do_request 2020-09-26 14:00:48 +02:00
Jens Langhammer 2b9705b33c policies/expression: remove pb_flow_plan, save flow context directly in context 2020-09-26 13:58:32 +02:00
Jens Langhammer 40f1de3b11 admin: load info about latest version in celery task 2020-09-26 02:16:35 +02:00
Jens Langhammer 899c5b63ea admin: add BackSuccessUrlMixin to redirect to correct url after form edit 2020-09-26 02:04:16 +02:00
Jens Langhammer e104c74761 admin: make pagination size configurable 2020-09-26 01:55:40 +02:00
Jens Langhammer 5d46c1ea5a flows: improve strings, ensure default-source-enrollment's first stage has re_evaluate_policies 2020-09-26 01:37:54 +02:00
Jens Langhammer 7d533889bc sources/oauth: fix OAuth1 not working, cleanup 2020-09-26 01:27:33 +02:00
Jens Langhammer d9c2b32cba sources/oauth: cleanup clients, add type annotations 2020-09-26 00:34:57 +02:00
Jens Langhammer 6e4ce8dbaa core: cache user's is_superuser 2020-09-26 00:34:35 +02:00
Jens Langhammer 03d58b439f sources/oauth: separate clients into separate modules 2020-09-25 23:58:58 +02:00
Jens Langhammer bdaf0111c2 stages/password: fix formatting 2020-09-25 21:12:42 +02:00
Jens Langhammer 974c2ddb11 stages/password: fix change_flow being deleted instead of renamed 2020-09-25 20:33:06 +02:00
Jens Langhammer f294791d41 stages/otp_time: fix redirect uri after setup 2020-09-25 19:39:19 +02:00
Jens Langhammer 4ee22f8ec1 stages/otp_static: fix redirect URL after setup, fix stage not being passed to setup 2020-09-25 19:38:51 +02:00
Jens Langhammer 74d3cfbba0 stages/otp_time: show OTP URI as aria-label 2020-09-25 19:03:12 +02:00
Jens Langhammer d278acb83b stages/otp_: fix flows having no title 2020-09-25 18:50:29 +02:00
Jens Langhammer 84da454612 stages/otp_: ensure stage.configure_flow is set 2020-09-25 17:45:13 +02:00
Jens Langhammer 52101007aa e2e: bump chrome version 2020-09-25 17:39:25 +02:00
Jens Langhammer dc57f433fd stages/password: update to use ConfigurableStage 2020-09-25 16:51:22 +02:00
Jens Langhammer 3d4c5b8f4e stages/otp_time: implement configure_flow 2020-09-25 12:56:27 +02:00
Jens Langhammer e66424cc49 stages/otp_static: implement configure_flow 2020-09-25 12:56:14 +02:00
Jens Langhammer 8fa83a8d08 flows: change setup_stage to configure_stage in migration 2020-09-25 12:55:33 +02:00
Jens Langhammer 397892b282 stages/consent: cleanup 2020-09-25 12:49:19 +02:00