Commit Graph

129 Commits

Author SHA1 Message Date
Jens Langhammer 083e317028 lib: add helper method for 400 response with message 2020-02-18 10:13:53 +01:00
Jens Langhammer 813b2676de providers/saml: better handle PropertyMapping evaluation errors 2020-02-18 10:12:42 +01:00
Jens Langhammer 3aa2f1e892 *: propertymapping template -> expression 2020-02-17 20:38:14 +01:00
Jens Langhammer e6c47fee26 core: add template field to PropertyMapping 2020-02-17 17:47:51 +01:00
Jens Langhammer 2be026dd44 global: fix import order 2020-02-14 15:17:40 +01:00
Jens Langhammer d9ecb7070d core: add more prometheus metrics 2020-01-19 21:01:26 +01:00
Jens Langhammer 3bd1eadd51 all: implement black as code formatter 2019-12-31 12:51:16 +01:00
Langhammer, Jens 261d57ad7b Merge branch 'master' into guardian
# Conflicts:
#	Pipfile
#	Pipfile.lock
#	passbook/admin/views/invitations.py
#	passbook/admin/views/policy.py
#	passbook/admin/views/providers.py
#	passbook/admin/views/sources.py
#	passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
Langhammer, Jens f1c4a62612 policy(major): fix error when policy.negate is enabled 2019-10-14 15:00:20 +02:00
Langhammer, Jens 358e39ced0 core(major): remove action field from policy 2019-10-14 13:57:38 +02:00
Langhammer, Jens 2ff1635696 core/sources(minor): refactor Source's property 2019-10-13 16:47:13 +02:00
Langhammer, Jens fc69b6851d core(minor): tags -> attributes, add attributes to user, add propertymappings to source 2019-10-11 12:47:06 +02:00
Langhammer, Jens 143a575369 Merge branch 'master' into guardian
# Conflicts:
#	Pipfile
#	Pipfile.lock
#	passbook/core/models.py
2019-10-10 17:29:34 +02:00
Langhammer, Jens 3d8242be06 core(minor): add new, optional description field to nonce 2019-10-10 14:04:58 +02:00
Langhammer, Jens 3185a86b22 core(minor): add separate permission to reset user's password 2019-10-10 13:01:36 +02:00
Langhammer, Jens a53f7a49ac root(minor): start implementing guardian 2019-10-10 10:45:51 +02:00
Langhammer, Jens 2e15b24f0a *(minor): switch has_user_settings to return Optional dataclass instead of tuple 2019-10-09 12:47:14 +02:00
Langhammer, Jens f2acc154cd *(minor): small refactor 2019-10-07 16:33:48 +02:00
Langhammer, Jens 0b86231a36 *(minor): make better use of structured logging 2019-10-04 10:21:33 +02:00
Langhammer, Jens c0df1f38b8 *(minor): remove __name__ param from get_logger 2019-10-04 10:08:53 +02:00
Jens Langhammer 64b75cab84 policy(minor): add data class for policy request 2019-10-03 10:45:31 +02:00
Jens Langhammer fb8ccc0283 lint(minor): fix import order 2019-10-02 21:05:37 +00:00
Jens Langhammer de0b137b1e policy(minor): improve error handling 2019-10-02 22:28:39 +02:00
Langhammer, Jens f4499a5459 *(minor): stdlib logging to structlog 2019-10-01 10:24:10 +02:00
Langhammer, Jens b3aede5bba policy(minor): Move policy-related code to separate package 2019-10-01 10:17:39 +02:00
Jens Langhammer 5d1a3043b2 create SSOLoginPolicy, which allows factors to be applied when user comes from SSO login
implement SESSIION_IS_SSO_LOGIN for OAuth Client and core MFA
2019-04-29 23:19:37 +02:00
Jens Langhammer 8536ef9e23 Add guardian for Application permissions 2019-04-10 18:46:33 +02:00
Jens Langhammer 660972e303 add ability to have non-expiring nonces, clean up expired nonces 2019-04-04 21:49:10 +02:00
Jens Langhammer 883d439544 add timeout field to policy to prevent stuck policies 2019-03-21 14:48:51 +01:00
Jens Langhammer ae3c092238 add user settings for Sources 2019-03-13 16:49:30 +01:00
Jens Langhammer 4a7b0ec8a9 remove Application.user_is_authorized 2019-03-12 10:56:01 +01:00
Jens Langhammer e4baf8c21e Add Group Member policy 2019-03-10 19:32:18 +01:00
Jens Langhammer 5f861189e4 Merge branch 'master' into 23-groups
# Conflicts:
#	passbook/admin/templates/administration/base.html
2019-03-10 17:13:29 +01:00
Jens Langhammer a7eaa74191 fix MATCH_EXACT not working as intended 2019-03-08 21:20:38 +01:00
Jens Langhammer 2d7e8f1b50 add group administration 2019-03-08 15:49:45 +01:00
Jens Langhammer 56d872af15 add PropertyMapping Model, add Subclass for SAML, test with AWS 2019-03-08 12:47:50 +01:00
Jens Langhammer 99c82676b6 Add some more failsafe for administration 2019-03-07 14:09:52 +01:00
Jens Langhammer fb82d56307 create suspicious request detector and policy, add request to policy engine 2019-03-03 20:26:25 +01:00
Jens Langhammer 791e88ffc1 Fix negate on FieldMatcherPolicy 2019-03-03 17:21:58 +01:00
Jens Langhammer 5584f5bda8 switch to PolicyEngine everywhere 2019-02-27 15:49:20 +01:00
Jens Langhammer 5b771da972 switch from first_name and last_name to name 2019-02-27 15:09:05 +01:00
Jens Langhammer 2db1738e4a make Admin UI more consistent, better show when provider has no application assigned 2019-02-27 14:47:11 +01:00
Jens Langhammer 421f51770c implement password policy checking on signup and password change closes #8 2019-02-26 15:40:58 +01:00
Jens Langhammer 98b414f3e2
add SignUp Confirmation (required by default, can be disabled in invitations) closes #6 2019-02-25 21:03:24 +01:00
Jens Langhammer a0d42092e3
add Nonce (one-time links), add password reset function (missing e-mail verification), closes #7 2019-02-25 20:46:23 +01:00
Jens Langhammer 408e205c5f add signal for password change, add field for password policies 2019-02-25 15:41:36 +01:00
Jens Langhammer 33431ae013 improve OAuth Source Setup process, fix login template, closes #3 2019-02-25 14:10:10 +01:00
Jens Langhammer 986fed3e7c add hook for Factors to show user settings. closes #5 2019-02-25 13:20:07 +01:00
Jens Langhammer 9c2cfd7db4 use Inheritance for Factors instead of JSONField 2019-02-24 22:39:09 +01:00
Jens Langhammer 183308e444 fix Contains not working correctly 2019-02-21 16:21:45 +01:00
Jens Langhammer c941107d42 Rules -> Policies, more things 2019-02-21 16:06:57 +01:00
Jens Langhammer df45797b4a fix inconsistent naming again 2019-02-16 11:13:00 +01:00
Jens Langhammer d6f4832e90 Rule -> Policies 2019-02-16 10:24:31 +01:00
Jens Langhammer d32699b332 remove reversion 2019-02-16 09:53:32 +01:00
Jens Langhammer 59a15c988f Move Factor instances to database 2019-02-16 09:52:37 +01:00
Jens Langhammer 0e73702fca add PasswordPolicyRule (not used yet) 2019-02-10 20:09:47 +01:00
Jens Langhammer d4a6e28fe6
core: add custom group model with hierarchy , add tree admin 2018-12-27 00:38:42 +01:00
Jens Langhammer 2eae37107d
core: add slug to application 2018-12-26 17:17:39 +01:00
Jens Langhammer b0fa302718 core: add is_link and get_url property to base Source 2018-12-18 13:24:58 +01:00
Jens Langhammer d0099edac4 all: fully switch to Invitation 2018-12-10 14:49:15 +01:00
Jens Langhammer 545795ebc6 all: invites -> invitations 2018-12-10 14:21:42 +01:00
Jens Langhammer 4b25924274 core: add invite model for sign-up 2018-12-10 13:48:22 +01:00
Jens Langhammer 633660c602 core: make FieldMatcherRule’s user_field into dropdown 2018-12-10 11:15:53 +01:00
Jens Langhammer 57f01952bd
core: fix bandit issues 2018-12-09 21:20:34 +01:00
Jens Langhammer 0754b07765
core: cleanup 2018-12-09 21:07:38 +01:00
Jens Langhammer 60b1c1b493
core: add DebugRule which takes random amount of time to process 2018-12-09 21:06:21 +01:00
Jens Langhammer af3df16b90
core: add uuid to user, use as sub for OpenID 2018-12-09 21:05:25 +01:00
Jens Langhammer 0ce242e956 core: fix rule engine not working 2018-11-30 14:33:33 +01:00
Jens Langhammer 62ee5db752 core: Remove AppTask Inheritance from Models 2018-11-28 14:01:46 +01:00
Jens Langhammer 731b745d0c core: switch role evaluating to celery worker 2018-11-27 16:23:29 +01:00
Jens Langhammer 4b047802c0 core: Add Webhook Rule 2018-11-27 16:23:04 +01:00
Jens Langhammer caf6580ccb Admin: add rule admin 2018-11-26 22:08:48 +01:00
Jens Langhammer 6c4e3fde6e
core: add order to rule 2018-11-25 20:38:49 +01:00
Jens Langhammer 1039555113
core: change provider to one-to-one field 2018-11-25 20:38:37 +01:00
Jens Langhammer 32945250b6
Move skip_authorization to base Provider 2018-11-24 22:26:28 +01:00
Jens Langhammer 095a5c0268 core: add basic model against which rules can be checked 2018-11-22 13:12:59 +01:00
Jens Langhammer c1276e9695 redo models again 2018-11-16 11:41:14 +01:00
Jens Langhammer fbaab4efaf
Many broken things 2018-11-16 09:10:35 +01:00
Jens Langhammer 5aa245cac0
add working oauth and ldap client 2018-11-11 13:41:48 +01:00