Jens Langhammer
f8e5383ba2
providers/saml: parse NameID Policy from AuthnRequest
2020-07-12 17:05:48 +02:00
Jens Langhammer
06f73512df
lib/evaluator: add support for IP Address comparison
2020-07-12 16:36:49 +02:00
Jens Langhammer
0ff4545bab
providers/saml: fix AuthnRequest Signature validation, add unittests
2020-07-12 16:17:53 +02:00
Jens Langhammer
ff6e270886
sources/saml: fix AuthnRequest Singing for redirect bindings
2020-07-12 16:17:35 +02:00
Jens Langhammer
91766a2162
sources/saml: automatically add RelayState to build_auth_n_detached
2020-07-12 01:46:46 +02:00
Jens Langhammer
a393097504
*/saml: start implementing unittests, fix signing
2020-07-12 01:44:34 +02:00
Jens Langhammer
2056b86ce7
providers/saml: rewrite SAML AuthNRequest Parser and Response Processor
2020-07-11 14:06:42 +02:00
Jens Langhammer
1b0c013d8e
providers/saml: remove processor_path field
2020-07-11 13:28:10 +02:00
Jens Langhammer
92a09be8c0
sources/saml: rewrite Processors and Views to directly build XML without templates
2020-07-11 01:02:55 +02:00
Jens Langhammer
d74366f413
policies/hibp: update for flows, add unittests
2020-07-10 20:57:15 +02:00
Jens Langhammer
5bcf2aef8c
policies/password: Add Password Policy tests, update password policy for flows
2020-07-10 20:53:08 +02:00
Jens Langhammer
8de3c4fbd6
sources/ldap: improve unittests
2020-07-10 20:21:51 +02:00
Jens Langhammer
7ac4242a38
e2e: add test for OAuth Enrollment -> OAuth Authentication
2020-07-10 00:14:48 +02:00
Jens Langhammer
4caa4be476
sources/oauth: fix UserOAuthSourceConnection not being assigned to user after enrollment
...
sources/oauth: separate handle_new_connection into handle_existing_user_link and handle_enroll
2020-07-10 00:07:59 +02:00
Jens Langhammer
c6d8bae147
e2e: generate dex config dynamically
2020-07-09 23:15:22 +02:00
Jens Langhammer
c70310730a
sources/oauth: split up single large "core" views
2020-07-09 23:09:32 +02:00
Jens Langhammer
2d2b2d08f4
core: fix source slug not being unique
2020-07-09 23:05:46 +02:00
Jens Langhammer
8fe6a5b62d
stages/prompt: fix checkbox not working, fix date and datetime not using HTML5 input types
2020-07-09 22:55:44 +02:00
Jens Langhammer
64c47a59f8
e2e: add tests for OAuth Source, update tests for new base templates
2020-07-09 00:53:18 +02:00
Jens Langhammer
9518cefdd7
flows: fix default-source-enrollment-if-username expression
2020-07-09 00:20:42 +02:00
Jens Langhammer
32d5c26577
core: fix base_full template missing messages
2020-07-09 00:18:45 +02:00
Jens Langhammer
ef2cdf27b3
stages/prompt: add static and separator elements
2020-07-09 00:00:15 +02:00
Jens Langhammer
e58ac7ae90
polices: add helper to remove None-value keys from dict for policies
2020-07-08 23:07:16 +02:00
Jens Langhammer
d786fa4b7c
sources/oauth: rewrite to not directly create user, pre-seed data into flow
2020-07-08 20:39:20 +02:00
Jens Langhammer
0e3e73989d
sources/saml: Add NameID Policy field, sent with AuthnRequest
2020-07-08 16:18:09 +02:00
Jens Langhammer
d831599608
core: make autosubmit_form generic template
2020-07-08 14:27:58 +02:00
Jens Langhammer
1e57926603
sources/saml: add POST_AUTO binding which auto redirects to IdP
2020-07-08 14:18:08 +02:00
Jens Langhammer
1524880eec
core: add generic login/base_full template for static login views
2020-07-08 14:17:29 +02:00
Jens Langhammer
0bfb623f97
providers/saml: fix autosubmit_form using wrong template
2020-07-08 14:12:44 +02:00
Jens Langhammer
429627494c
root: fix passbook.footer_links not being rendered
2020-07-08 13:18:33 +02:00
Jens Langhammer
c7f078ffcc
new release: 0.9.0-pre7
2020-07-07 22:34:44 +02:00
Jens Langhammer
571cb3d65f
sources/oauth: disable twitter source while its broken
2020-07-07 22:25:50 +02:00
Jens Langhammer
8c500c38b1
policies/reputation: only change score when credentials contain username
2020-07-07 22:25:37 +02:00
Jens Langhammer
5644e57e6a
sources/oauth: directly call AuthorizedServiceBackend instead of authenticate()
2020-07-07 22:23:45 +02:00
Jens Langhammer
cfc181eed1
sources/oauth: fix wrong comparions
...
closes #118
2020-07-07 21:46:16 +02:00
Jens Langhammer
91bea38b8e
lib: ignore APM errors
2020-07-07 21:45:36 +02:00
Jens Langhammer
d95c5aa739
root: allow changing of APM verify_server_cert setting
2020-07-07 19:59:32 +02:00
Jens Langhammer
0b250b897e
new release: 0.9.0-pre6
2020-07-07 19:14:29 +02:00
Jens L
c6880a0f16
Merge pull request #117 from BeryJu/apm
...
Support for Elastic APM
2020-07-07 18:48:40 +02:00
Jens Langhammer
231e448b1a
lib/eval: fix import order
2020-07-07 18:05:38 +02:00
Jens Langhammer
b3b8cd807d
root: expose APM settings in helm chart
2020-07-07 17:54:07 +02:00
Jens Langhammer
9021bbd5de
root: implement APM support
2020-07-07 17:43:10 +02:00
Jens Langhammer
169475ab39
crypto: add colon seperator for fingerprint
2020-07-07 17:05:31 +02:00
Jens Langhammer
c00e01626e
sources/ldap: adjust task schedule name
2020-07-07 17:04:07 +02:00
Jens Langhammer
05d4a9ef62
policies/reputation: rewrite to save score into cache and save into DB via worker
2020-07-07 17:03:57 +02:00
Jens Langhammer
17a2ac73e7
stages/user_write: add signals
2020-07-07 15:49:02 +02:00
Jens Langhammer
6bc6f947dd
stages/invitation: move invite signals from core to app
2020-07-07 15:46:13 +02:00
Jens Langhammer
363940ee8d
root: fix API requests erroring
2020-07-07 14:02:20 +02:00
Jens Langhammer
b12182c1d1
admin: improve overview layout
2020-07-07 13:13:15 +02:00
Jens Langhammer
d8f27f595a
admin: use django cache for admin version (expiry)
2020-07-07 13:12:54 +02:00
Jens Langhammer
2dc1b65718
ui: fix modal layout
2020-07-06 20:50:14 +02:00
Jens Langhammer
af22f507f4
sources/oauth: fix template for user settings
2020-07-06 17:48:53 +02:00
Jens Langhammer
9958019bf3
core: fix user's sidebar links for sources
2020-07-06 17:46:41 +02:00
Jens Langhammer
02d65972cb
admin: fix submit button on update form
2020-07-06 17:46:30 +02:00
Jens Langhammer
24ad893350
admin: fix token_list template
2020-07-06 17:43:20 +02:00
Jens Langhammer
094d191bff
new release: 0.9.0-pre5
2020-07-06 12:52:34 +02:00
Jens Langhammer
78e5d471e3
core: fix type annotation for user settings
2020-07-05 23:49:33 +02:00
Jens Langhammer
2e2c9f5287
api: add token authentication
2020-07-05 23:37:58 +02:00
Jens Langhammer
d5a3e09a98
core: add token Intents
2020-07-05 23:14:57 +02:00
Jens Langhammer
2402cfe29d
providers/* use name for __str__
2020-07-05 23:00:40 +02:00
Jens Langhammer
26613b6ea9
core: fix application overview
2020-07-05 22:58:52 +02:00
Jens Langhammer
e5165abf04
stages/user_login: Allow changing of session duration
2020-07-04 15:20:45 +02:00
Jens Langhammer
b26882a450
flows: FlowStageBinding group Stage by type
2020-07-04 15:02:21 +02:00
Jens Langhammer
94281bee88
admin: improve policy binding listing by showing Target object type
2020-07-04 00:18:19 +02:00
Jens Langhammer
16b966c16e
policies: Show grouped Dropdown for Target
2020-07-04 00:16:16 +02:00
Jens Langhammer
d3b0992456
flows: FlowStageBinding: rename .flow to .target to fix select_subclasses()
2020-07-04 00:14:21 +02:00
Jens Langhammer
1d9c92d548
admin: add generic form tests
2020-07-02 22:29:30 +02:00
Jens Langhammer
bead19c64c
flows: cleanup denied view, use everywhere
2020-07-02 13:48:42 +02:00
Jens Langhammer
ae83ee6d31
providers/saml: fix access result not being checked properly
2020-07-02 00:23:52 +02:00
Jens Langhammer
4701374021
admin: remove duplicate code into new base classes
2020-07-02 00:13:33 +02:00
Jens Langhammer
bd40585247
providers/samlv2: remove SAMLv2 from master
2020-07-01 23:21:58 +02:00
Jens Langhammer
cc0b8164b0
providers/*: use PolicyAccessMixin to simplify
2020-07-01 23:18:10 +02:00
Jens Langhammer
310b31a8b7
core: fix linting
2020-07-01 22:35:38 +02:00
Jens Langhammer
13900bc603
lib: cleanup unused widgets
2020-07-01 22:27:58 +02:00
Jens Langhammer
6634cc2edf
root: add group_membership policy
2020-07-01 21:18:05 +02:00
Jens Langhammer
3478a2cf6d
admin: add filter to hide classes with __debug_only__
when Debug is disabled
2020-07-01 18:53:13 +02:00
Jens Langhammer
3b70d12a5f
*: rephrase strings
2020-07-01 18:40:52 +02:00
Jens Langhammer
219acf76d5
core: fix forms for radio buttons
2020-07-01 12:47:27 +02:00
Jens Langhammer
ec6f467fa2
ui: Make Checkbox label click trigger checkbox toggle
2020-07-01 12:37:13 +02:00
Jens Langhammer
0e6561987e
admin: fix user and group create not triggering sidebar
2020-07-01 12:36:44 +02:00
Jens Langhammer
62c20b6e67
admin: add list of all tokens
2020-07-01 12:27:30 +02:00
Jens Langhammer
13084562c5
admin: fix Password Recovery function not working
2020-07-01 12:10:12 +02:00
Jens Langhammer
02c1c434a2
core: update styling of impersonate banner
2020-07-01 12:01:58 +02:00
Jens Langhammer
5f04a75878
new release: 0.9.0-pre4
2020-07-01 09:50:21 +02:00
Jens Langhammer
89c33060d4
core: fix user settings sidebar buttons not being enabled
2020-06-30 21:26:43 +02:00
Jens Langhammer
b61f595562
core: ensure user settings are sorted by name
2020-06-30 21:24:58 +02:00
Jens Langhammer
ce2230f774
stages/otp_*: update user setting design
2020-06-30 21:23:37 +02:00
Jens Langhammer
c59c6aa728
stages/*: minor UI updates, cleanup
2020-06-30 19:06:41 +02:00
Jens Langhammer
729910c383
stages/*: minor string updates
2020-06-30 18:52:18 +02:00
Jens Langhammer
37fe637422
stages/password: make template inherit form_with_user
2020-06-30 18:50:24 +02:00
Jens Langhammer
2ca5e1eedb
stages/otp_*: fix linting
2020-06-30 16:12:19 +02:00
Jens Langhammer
d2bf579ff6
stages/otp_static: start implementing static stage
2020-06-30 15:44:34 +02:00
Jens Langhammer
3716bda76e
stages/otp_time: fix linting
2020-06-30 13:44:09 +02:00
Jens Langhammer
a76eb4d30f
stages/otp_time: Cleanup, use django_otp's URL generator
2020-06-30 12:42:39 +02:00
Jens Langhammer
7c191b0984
stages/otp_validate: Implement OTP Validation stage
2020-06-30 12:42:12 +02:00
Jens Langhammer
9613fcde89
Squashed commit of the following:
...
commit 885a2ed057
Author: Jens Langhammer <jens.langhammer@beryju.org>
Date: Tue Jun 30 12:17:23 2020 +0200
flows: fix linting error
2020-06-30 12:18:01 +02:00
Jens Langhammer
b270fb0742
stages/otp_time: implement TOTP Setup stage
2020-06-30 12:14:40 +02:00
Jens Langhammer
285a69d91f
Merge branch 'master' into otp-rework
2020-06-30 11:23:09 +02:00
Jens Langhammer
de3b753a26
flows: show error message in flow when stage raises
2020-06-30 11:18:39 +02:00
Jens Langhammer
34be1dd9f4
admin: add execute button to flow which executes flow without cache
2020-06-30 11:18:20 +02:00
Jens Langhammer
a4c0fb9e75
otp_time: fix linting
2020-06-30 10:42:27 +02:00
Jens Langhammer
f040223646
audit: move events list from admin to audit app
2020-06-30 10:23:54 +02:00
Jens Langhammer
bf297b8593
admin: add info about latest version
2020-06-30 10:23:39 +02:00
Jens L
b746ce97ba
Merge branch 'master' into flows-cancel
2020-06-30 00:20:33 +02:00
Jens Langhammer
dbee714dac
api: fix consent stage missing from API
2020-06-30 00:19:06 +02:00
Jens Langhammer
d33f632203
flows: add CancelView to cancel current flow execution
2020-06-30 00:11:01 +02:00
Jens Langhammer
920858ff72
Merge branch 'master' into otp-rework
...
# Conflicts:
# passbook/flows/models.py
# passbook/stages/otp/models.py
# swagger.yaml
2020-06-29 22:54:18 +02:00
Jens Langhammer
8d31eef47d
stages/password: assign default password change flow to password stage
...
add e2e tests for password change flow
2020-06-29 21:47:20 +02:00
Jens Langhammer
96a6ac85df
audit: add cleanse_dict function to ensure no passwords end in logs
2020-06-29 19:13:07 +02:00
Jens Langhammer
21ba969072
stages/password: create default password change flow
2020-06-29 16:26:21 +02:00
Jens Langhammer
d6a8d8292d
core: UIUserSettings: remove icon, rename view_name to URL for complete URL
2020-06-29 16:20:33 +02:00
Jens Langhammer
693a92ada5
audit: fix sanitize_dict updating source dict
2020-06-29 16:19:56 +02:00
Jens Langhammer
ec823aebed
flows: update migrations to use update_or_create
2020-06-29 16:19:39 +02:00
Jens Langhammer
b8654c06bf
flows: remove generic "password change" designation and add setup_stage
2020-06-29 11:12:51 +02:00
Jens Langhammer
9d03c4c7d2
flows: Stage ui_user_settings -> staticmethod with context as argument
2020-06-28 10:31:26 +02:00
Jens Langhammer
8c36ab89e8
stages/otp: start separation into 3 stages, otp_time, otp_static and otp_validate
2020-06-28 10:30:35 +02:00
Jens Langhammer
cc7e4ad0e2
e2e: show browser logs to debug CI issues
2020-06-26 15:06:46 +02:00
Jens Langhammer
768464dc6a
new release: 0.9.0-pre3
2020-06-25 20:39:50 +02:00
Jens Langhammer
5a11206fe9
Merge branch 'master' into e2e
2020-06-25 17:58:51 +02:00
Jens Langhammer
9675fbb07d
e2e: add tests for enrollment with email
2020-06-25 17:45:06 +02:00
Jens Langhammer
57a7bed99d
sources/oauth: fix facebook provider
2020-06-25 10:24:53 +02:00
dependabot-preview[bot]
b8b5069df1
build(deps): bump @patternfly/patternfly in /passbook/static/static
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 4.10.31 to 4.16.7.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/prerelease-v4.10.31...prerelease-v4.16.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-25 09:21:20 +02:00
Jens Langhammer
9eaceb9ec6
e2e: add tests for SAML source
2020-06-24 23:24:45 +02:00
Jens Langhammer
05778d8065
sources/saml: minor formatting fixes
2020-06-24 22:46:20 +02:00
Jens Langhammer
831e228f80
api: fix SAMLSource missing from API
2020-06-24 22:28:40 +02:00
Jens Langhammer
31e0d74495
sources/saml: correctly cleanup transient users, update forms
2020-06-24 22:27:14 +02:00
Jens Langhammer
05999cb8c7
sources/saml: start implementing transient NameID format
2020-06-24 21:50:30 +02:00
Jens Langhammer
c0d8aa2303
sources/saml: fix SAMLRequest not being encoded properly for Redirect bindings
2020-06-24 13:12:34 +02:00
Jens Langhammer
db6cb5ad51
core: make generic error template work with shell executor
2020-06-23 21:49:43 +02:00
Jens Langhammer
52f138d402
sources/saml: improve error handing of invalid signatures
2020-06-23 21:49:27 +02:00
dependabot-preview[bot]
59b8b1e92a
build(deps): bump codemirror in /passbook/static/static ( #86 )
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.54.0 to 5.55.0.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.54.0...5.55.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-22 10:55:16 +02:00
Jens Langhammer
491e507d49
stages/email: check saved get params for token
2020-06-21 20:46:48 +02:00
Jens Langhammer
de1be2df88
flows: save entire GET params from shell executor
2020-06-21 20:46:38 +02:00
Jens Langhammer
39f51ec33d
stages/email: fix email account confirmation email template
2020-06-21 20:13:59 +02:00
Jens Langhammer
1b3c0adf75
e2e: cleanup, always take screenshots on teardown
2020-06-21 15:09:01 +02:00
Jens Langhammer
6122dcacc7
flows: fix flow cache not being cleared correctly when stages are saved
2020-06-21 12:40:01 +02:00
Jens Langhammer
4d81172a48
providers/oauth: add support for consent stage, cleanup
2020-06-20 23:30:53 +02:00
Jens Langhammer
c97b946a00
providers/saml: make SAML provider compatible with consent
2020-06-20 22:30:45 +02:00
Jens Langhammer
3753275453
providers/saml: make metadata accessible without authentication
2020-06-20 21:51:52 +02:00
Jens Langhammer
e4cb9b7ff9
providers/saml: fix provider has no attribute sp_binding
2020-06-20 21:49:48 +02:00
Jens Langhammer
a0f05caf8e
providers/saml: move templates into correct folder
2020-06-20 21:49:16 +02:00
Jens Langhammer
42e9ce4f72
providers/*: fix plan stages not being injected properly
2020-06-20 19:40:25 +02:00
Jens Langhammer
331faa53bc
providers/saml: fix metadata template using wrong templates
2020-06-20 19:35:48 +02:00
Jens Langhammer
68efcc7bf2
e2e: add custom testcase class to simplify code
2020-06-20 17:06:00 +02:00
Jens Langhammer
7b7305607c
root: enable debug logging when testing
2020-06-20 15:48:54 +02:00
Jens Langhammer
14fd137f89
root: improve test detection
2020-06-19 22:27:20 +02:00
Jens Langhammer
af8cdb34ee
*: fix not all migrations using db_alias
2020-06-19 20:43:27 +02:00
Jens Langhammer
03b1a67b44
flows: change wording of consent on flows
2020-06-19 20:33:41 +02:00
Jens Langhammer
3a40e50fa0
providers/oidc: add template for consent
2020-06-19 20:19:31 +02:00
Jens Langhammer
fa5c2bd85c
stages/consent: add FlowPlan context variable for template name
2020-06-19 20:19:18 +02:00
Jens Langhammer
73e7158178
e2e: add OIDC Provider test against grafana, more formatting, minor bug fixes
2020-06-19 19:45:27 +02:00
Jens Langhammer
8c6a4a4968
e2e: test against standalone chrome instance, start implementing oidc provider test
2020-06-19 18:19:20 +02:00
Jens Langhammer
c83216ece0
Merge branch 'master' into e2e
...
# Conflicts:
# Pipfile.lock
# docs/installation/docker-compose.md
2020-06-19 09:00:46 +02:00
dependabot-preview[bot]
b0fec4f3e2
build(deps): bump @fortawesome/fontawesome-free ( #80 )
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.13.0 to 5.13.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.13.0...5.13.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-19 08:53:29 +02:00
Jens Langhammer
dab53cfd03
flows/executor: call plan.next before pop so we can save plan
...
ReevaluateMarker: use PolicyEngine without cache
2020-06-18 22:54:09 +02:00
Jens L
6a4086c490
flows: introduce FlowPlan markers, which indicate when a stage needs … ( #79 )
...
* flows: introduce FlowPlan markers, which indicate when a stage needs re-evaluation
Implement re_evaluate_policies
add unittests for several different scenarios
closes #78
* flows: move markers to separate files, cleanup formatting
* flows: fix self.next is not callable
2020-06-18 22:43:51 +02:00
Jens Langhammer
bdf0e74af3
docs: add supported scopes of oauth provider
2020-06-18 19:39:58 +02:00
Jens Langhammer
5e8a1e3c0d
*: make email naming consistent
2020-06-18 19:35:59 +02:00
Jens Langhammer
afc8baff5f
flows/shell: check for elements with autofocus attribute and call .focus();
...
closes #76
2020-06-18 19:09:12 +02:00
Jens Langhammer
3713d111a4
core: fix integrity error for default user
...
closes #75
2020-06-18 19:04:13 +02:00
Jens Langhammer
1d3460b670
new release: 0.9.0-pre2
2020-06-15 19:08:17 +02:00
Jens Langhammer
feba3e2430
stages/prompt: Add username type field
...
add autocomplete attributes for username and password
2020-06-15 19:05:18 +02:00
Jens Langhammer
b49d39a685
stages/identification: improve support for password managers
2020-06-15 18:38:09 +02:00
Jens Langhammer
34c1b3b68b
stages/password: Improve support for password managers
2020-06-15 18:37:59 +02:00
Jens Langhammer
e3d6ca6ab4
root: revert to non-prometheus db backend
2020-06-15 12:12:32 +02:00
Jens Langhammer
6f0e292c43
root: add lgtm
2020-06-15 11:56:20 +02:00
Jens Langhammer
9df1e7900d
stages/email: add noopener noreferrer
2020-06-15 11:56:14 +02:00
Jens Langhammer
2a3166bf7e
ui: (pf4) Update pagination and toolbar
2020-06-09 13:40:03 +02:00
Jens Langhammer
62fe4d617b
ui: (pf4) update admin overview
2020-06-09 13:39:44 +02:00
Jens Langhammer
b86b36f947
ui: (pf4) update forms
2020-06-09 13:39:35 +02:00
Jens Langhammer
d6b9e67e78
ui: (pf4) fix navbar
2020-06-09 13:11:54 +02:00
Jens Langhammer
f589da4e72
ui: (pf4) fix empty state
2020-06-09 09:52:25 +02:00
dependabot-preview[bot]
2e5170f631
build(deps): bump @patternfly/patternfly in /passbook/static/static ( #58 )
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 2.71.6 to 4.10.31.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/v2.71.6...prerelease-v4.10.31 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-09 09:32:56 +02:00
Jens Langhammer
bd312b60fc
gatekeeper: update upstream docker image
2020-06-09 09:26:03 +02:00
Jens Langhammer
26aa7e1fef
sources/ldap: fix 'LDAPSource' object has no attribute '_connection'
2020-06-09 01:17:17 +02:00
Jens Langhammer
5265064b10
new release: 0.9.0-pre1
2020-06-08 15:47:22 +02:00
Jens Langhammer
ee8313142f
Merge branch 'docs-flows'
...
# Conflicts:
# passbook/core/templates/partials/form_horizontal.html
2020-06-08 15:43:46 +02:00
Jens Langhammer
fc2eb003ea
e2e: add apply_default_data to load data from migrations after tables have been truncated
2020-06-07 19:31:16 +02:00
Jens Langhammer
aa440c17b7
Merge branch 'master' into e2e
2020-06-07 17:52:51 +02:00
Jens L
4915205678
WIP Use Flows for Sources and Providers ( #32 )
...
* core: start migrating to flows for authorisation
* sources/oauth: start type-hinting
* core: create default user
* core: only show user delete button if an unenrollment flow exists
* flows: Correctly check initial policies on flow with context
* policies: add more verbosity to engine
* sources/oauth: migrate to flows
* sources/oauth: fix typing errors
* flows: add more tests
* sources/oauth: start implementing unittests
* sources/ldap: add option to disable user sync, move connection init to model
* sources/ldap: re-add default PropertyMappings
* providers/saml: re-add default PropertyMappings
* admin: fix missing stage count
* stages/identification: fix sources not being shown
* crypto: fix being unable to save with private key
* crypto: re-add default self-signed keypair
* policies: rewrite cache_key to prevent wrong cache
* sources/saml: migrate to flows for auth and enrollment
* stages/consent: add new stage
* admin: fix PropertyMapping widget not rendering properly
* core: provider.authorization_flow is mandatory
* flows: add support for "autosubmit" attribute on form
* flows: add InMemoryStage for dynamic stages
* flows: optionally allow empty flows from FlowPlanner
* providers/saml: update to authorization_flow
* sources/*: fix flow executor URL
* flows: fix pylint error
* flows: wrap responses in JSON object to easily handle redirects
* flow: dont cache plan's context
* providers/oauth: rewrite OAuth2 Provider to use flows
* providers/*: update docstrings of models
* core: fix forms not passing help_text through safe
* flows: fix HttpResponses not being converted to JSON
* providers/oidc: rewrite to use flows
* flows: fix linting
2020-06-07 16:35:08 +02:00
Jens Langhammer
07da5f7122
Merge branch 'master' into docs-flows
2020-06-05 20:30:59 +02:00
Jens Langhammer
f91e02a0ec
flows: allow username for default flow
2020-06-05 20:30:47 +02:00
Jens Langhammer
c62794c738
admin: fix PropertyMapping widget not rendering properly
2020-06-05 20:27:18 +02:00
Jens Langhammer
7664b428e7
sources/ldap: fix expression field not being CodeMirror
2020-06-05 20:18:45 +02:00
Jens Langhammer
9f3f34389e
root: update docs URL
2020-06-05 20:18:26 +02:00
Jens Langhammer
30ca926b38
docs: remove last occurrences to jinja2
2020-06-05 20:18:11 +02:00
Jens Langhammer
6a7ffa855e
docs: add example for login flow
2020-06-05 17:29:08 +02:00
Jens Langhammer
0c5aff21bc
stages/identification: minor UI fixes
2020-06-05 17:02:50 +02:00
Jens Langhammer
b0f426e51a
core: fix help_text not always being shown on horizontal form
2020-06-05 17:01:46 +02:00
Jens Langhammer
4ff41be74a
Merge branch 'master' into docs-flows
...
# Conflicts:
# mkdocs.yml
2020-06-05 12:51:10 +02:00
Jens L
73116b9d1a
policies/expression: migrate to raw python instead of jinja2 ( #49 )
...
* policies/expression: migrate to raw python instead of jinja2
* lib/expression: create base evaluator, custom subclass for policies
* core: rewrite propertymappings to use python
* providers/saml: update to new PropertyMappings
* sources/ldap: update to new PropertyMappings
* docs: update docs for new propertymappings
* root: remove jinja2
* root: re-add jinja to lock file as its implicitly required
2020-06-05 12:00:27 +02:00
Jens Langhammer
790139f8bc
stages/email: Add test to check if user is pending
2020-06-03 21:00:04 +02:00
Jens Langhammer
4824e5c8ba
docs: add docs for flows and all stages
2020-06-02 23:52:02 +02:00
Jens Langhammer
c4facd53b4
Merge branch 'master' into docs-flows
2020-06-02 20:25:43 +02:00
Jens Langhammer
ef913abc7a
sources/ldap: add option to disable user sync, move connection init to model
2020-06-02 17:15:59 +02:00
Jens Langhammer
55fc5a6068
policies: rewrite cache_key to prevent wrong cache
...
# Conflicts:
# passbook/core/signals.py
# passbook/policies/engine.py
# passbook/policies/process.py
2020-06-02 17:06:18 +02:00
Jens Langhammer
f22c89c998
crypto: re-add default self-signed keypair
2020-06-02 17:01:15 +02:00
Jens Langhammer
2a78d2d0a0
crypto: fix being unable to save with private key
2020-06-02 17:01:15 +02:00
Jens Langhammer
b0ddc6a8c0
admin: fix missing stage count
2020-06-02 17:00:26 +02:00
Jens Langhammer
8080b0380e
providers/saml: re-add default PropertyMappings
2020-06-02 17:00:03 +02:00
Jens Langhammer
ddfa2abbaa
sources/ldap: re-add default PropertyMappings
2020-06-02 17:00:03 +02:00
Jens Langhammer
5fc5e54f47
sources/oauth: fix typing errors
...
# Conflicts:
# passbook/sources/oauth/clients.py
2020-06-02 16:57:38 +02:00
Jens Langhammer
7462d56182
policies/engine: add more verbosity
2020-06-02 16:56:58 +02:00
Jens Langhammer
3f92d1c420
flows: Correctly check initial policies on flow with context
...
# Conflicts:
# passbook/flows/planner.py
# passbook/flows/tests/test_planner.py
# passbook/flows/tests/test_views.py
# passbook/flows/views.py
2020-06-02 16:53:40 +02:00
Jens Langhammer
d4fa60f509
core: only show user delete button if an unenrollment flow exists
2020-06-02 16:44:29 +02:00
Jens Langhammer
052bf88c3d
core: create default user
...
# Conflicts:
# README.md
2020-06-02 16:42:44 +02:00
Jens Langhammer
07d047c887
stages/identification: fix *_flows missing in edit form
2020-06-02 16:39:55 +02:00
Jens Langhammer
23193314f1
Merge branch 'master' into docs-flows
2020-06-02 15:20:24 +02:00
Jens Langhammer
1912b29dc5
policies/expression: fix lint error
2020-06-02 15:20:02 +02:00
Jens Langhammer
c961327d27
stages/identification: fix recovery template
2020-06-01 19:08:14 +02:00
Jens Langhammer
fe1ff7fc76
core: fix form not showing general errors
2020-06-01 19:08:01 +02:00
Jens Langhammer
82d12ecfdf
policies/expression: use pb_message() for messages instead of returning a tuple
2020-06-01 15:25:38 +02:00
Jens Langhammer
4d1658b35e
stages/identification: explicitly define enrollment and recovery
2020-05-31 23:01:08 +02:00
Jens Langhammer
08302a04bf
docs: add docs for flows, start docs for stages
2020-05-30 22:36:01 +02:00
Jens Langhammer
27728abe99
e2e: start implementing e2e tests
2020-05-29 00:45:56 +02:00
Jens Langhammer
80a36a3441
stages/user_write: don't use create_user, create empty object and set attributes
2020-05-28 23:22:15 +02:00
Jens Langhammer
b1b63fbb7f
stages/prompt: add prompt order field
2020-05-28 23:21:43 +02:00
Jens Langhammer
fe6bfb1620
stages/identification: fix wrong link
2020-05-28 22:44:42 +02:00
Jens Langhammer
e6d64bf5b3
stages/identification: fix sources and recovery/enrollment not being shown
2020-05-28 22:43:44 +02:00
Jens Langhammer
270739a45a
admin: fix policy testing form not showing the correct result
2020-05-28 21:50:43 +02:00
Jens L
df8995deed
policies/*: remove Policy.negate, order, timeout ( #39 )
...
policies: rewrite engine to use PolicyBinding for order/negate/timeout
policies: rewrite engine to use PolicyResult instead of tuple
2020-05-28 21:45:54 +02:00
Jens Langhammer
fdfc6472d2
admin: fixup some urls
2020-05-28 10:36:27 +02:00
Jens Langhammer
e2804b9755
root: fix linting errors
2020-05-27 11:26:48 +02:00
Jens L
beabba2890
flows: Load Stages without refreshing the whole page ( #33 )
...
* flows: initial implementation of FlowExecutorShell
* flows: load messages dynamically upon card refresh
2020-05-24 00:57:25 +02:00
Jens Langhammer
eeeb14a045
admin: fix urls for applications
2020-05-22 23:22:40 +02:00
dependabot-preview[bot]
73225917cd
build(deps): bump codemirror in /passbook/static/static ( #29 )
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.53.2 to 5.54.0.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.53.2...5.54.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-05-21 19:12:14 +02:00
Jens Langhammer
0664f0b6b2
flows: add support for default_context, etc
...
default_context can be used to influence policies during the planning. This should be used when the Planner is called from other views to correctly preseed the plan.
This also checks if there is a PENDING_USER set, and uses that user for the cache key instead
2020-05-20 16:15:16 +02:00
Jens Langhammer
fab9f1cb1b
root: clear cache on debug startup
2020-05-20 16:13:48 +02:00
Jens Langhammer
b3c54308b7
policies/expression: validate syntax on form clean
2020-05-20 16:13:36 +02:00
Jens Langhammer
c1a72a0474
crypto: fix clean_ methods not returning values
2020-05-20 16:10:12 +02:00
Jens Langhammer
4377d1e86e
admin: fix flow ordering, fix source URLs
2020-05-20 16:09:53 +02:00
Jens Langhammer
cafe2f1e1f
admin: fix linting
2020-05-20 13:59:56 +02:00
Jens Langhammer
c329a724e8
admin: fix wrong name in template
2020-05-20 13:55:17 +02:00
Jens Langhammer
969da05437
admin: show object's docstring on inheritance based lists
2020-05-20 13:47:58 +02:00
Jens Langhammer
c61c84e9f3
admin: remove inline JS, add CodeMirror widget for jinja and yaml
2020-05-20 13:00:45 +02:00
Jens Langhammer
e08c5ff875
helm: fully remove domain, add log_level
2020-05-20 12:16:56 +02:00
Jens L
24a3e787dd
migrate to per-model UUID Primary key, remove UUIDModel ( #26 )
...
* *: migrate to per-model UUID Primary key, remove UUIDModel
* *: fix import order, fix unittests
2020-05-20 09:17:06 +02:00
Jens Langhammer
13a20478fd
sources/oauth: add OIDC client
2020-05-19 21:53:46 +02:00
Jens Langhammer
f58ee7fb52
sources/oauth: fix handling of sources with spaces in their name
2020-05-19 21:53:36 +02:00
Jens Langhammer
f6b5fbc2cf
admin: fix sidebar
2020-05-19 21:02:10 +02:00
Jens Langhammer
db69c3e38d
admin: add generic tests
2020-05-19 20:59:43 +02:00
Jens Langhammer
5ba55356a9
admin: cleanup templates, cleanup templatetags
2020-05-19 20:29:02 +02:00
Jens Langhammer
c903c81bd5
root: update pylint ignore list
2020-05-18 18:15:39 +02:00
dependabot-preview[bot]
886845306a
build(deps): bump codemirror in /passbook/static/static
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.52.0 to 5.53.2.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.52.0...5.53.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 11:50:33 +00:00
dependabot-preview[bot]
b6a0e895bc
build(deps): bump @fortawesome/fontawesome-free
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.12.1 to 5.13.0.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.12.1...5.13.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 11:03:22 +00:00
dependabot-preview[bot]
8c64fcd17f
build(deps): bump @patternfly/patternfly in /passbook/static/static
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 2.65.3 to 2.71.6.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/v2.65.3...v2.71.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 09:49:27 +00:00
Jens Langhammer
753110583e
admin: fix incorrect URL
2020-05-17 23:55:42 +02:00
Jens Langhammer
4206a8c43e
stages/password: fix button without labeling
2020-05-17 23:55:25 +02:00
Jens Langhammer
7cc9ae45bc
static: fix any click on menu triggering collapse
2020-05-17 23:55:13 +02:00
Jens Langhammer
09ef58350c
flows: rename AuthenticationStage to StageView as its a general base view
2020-05-17 00:03:06 +02:00
Jens Langhammer
10d3f9ac2f
root: rewrite bootstrap in python, remove management command
2020-05-16 22:46:17 +02:00
Jens Langhammer
9a1b8eb7c8
admin: add empty views to all lists, move invitation to stage-invitations
2020-05-16 21:43:48 +02:00
Jens Langhammer
2ee45f388c
crypto: validate PEM data before saving
2020-05-16 21:25:10 +02:00
Jens Langhammer
9a9feea5ff
static: make hamburger menu work
2020-05-16 21:11:48 +02:00
Jens Langhammer
8540e787d3
admin: fix create buttons disappearing on small screens
2020-05-16 21:11:38 +02:00
Jens Langhammer
db26ce808e
core: remove policies from application form
2020-05-16 20:48:45 +02:00
Jens Langhammer
802d568273
admin: fix urls applications and sources
2020-05-16 20:48:30 +02:00
Jens Langhammer
7b6524357f
stages/user_logout: fix dependency on PENDING_USER
2020-05-16 20:46:21 +02:00
Jens Langhammer
83013f063d
core: remove stub data from user settings
2020-05-16 20:45:43 +02:00
Jens Langhammer
333ee3eed4
dc: fix compose, remove SESSION_COOKIE_DOMAIN
2020-05-16 20:39:38 +02:00
Jens Langhammer
e68352b09c
admin: add flow-stage-bindings, add policy-bindings, add prompts
2020-05-16 19:55:59 +02:00
Jens Langhammer
df1cb88abc
admin: fix slow load for templates using get_links
2020-05-16 19:00:43 +02:00
Jens L
5596caedbc
Merge pull request #9 from BeryJu/db-reset
...
DB Reset
2020-05-16 18:20:03 +02:00
Jens Langhammer
7bd65120b9
*: migrate from PolicyModel to PolicyBindingModel, move Policy to passbook_policies
2020-05-16 18:07:00 +02:00
Jens Langhammer
227966e727
core: rename nonce to token
2020-05-16 16:11:53 +02:00
Jens Langhammer
406f69080b
Revert "*: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through"
...
This reverts commit 7ed3ceb960
.
2020-05-16 16:02:42 +02:00
Jens Langhammer
2ce31dfaa5
root: upgrade django-dbbackup
2020-05-16 14:54:18 +02:00
Jens Langhammer
7ed3ceb960
*: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through
2020-05-16 14:03:57 +02:00
Jens Langhammer
615cd7870d
stages/email: add field to select E-Mail and subject
2020-05-15 14:50:23 +02:00
Jens Langhammer
b907105f4a
policies/expression: expose python requests via expression, remove webhook policy
2020-05-15 12:02:41 +02:00
Jens Langhammer
023423c6e7
stages/password: show password forgotten prompt when recovery flow configured
2020-05-15 11:01:02 +02:00
Jens Langhammer
a5319fc2fe
*: rename templatetags to clearly identify
2020-05-15 10:54:31 +02:00
Jens Langhammer
814c797c64
stages/prompt: add policy verification logic
2020-05-14 15:48:23 +02:00
Jens Langhammer
776ad3cfbf
policies/expression: add pb_log function to debug
2020-05-14 15:48:08 +02:00
Jens Langhammer
74ddf70cb7
policy: add context to PolicyRequest
2020-05-14 15:47:56 +02:00
Jens Langhammer
a7a839a29c
stages/prompt: promptstage based on PolicyBindingModel
2020-05-14 13:51:35 +02:00
Jens Langhammer
9859c5db0a
policies: add API for policybindings
2020-05-14 13:51:05 +02:00
Jens Langhammer
43a583e2d2
stages/invitation: add unittests
2020-05-13 23:20:27 +02:00
Jens Langhammer
f289025d8e
stages/user_delete: fix missing API, fix missing tests
2020-05-13 23:20:07 +02:00
Jens Langhammer
80c3246333
policies/expression: add pb_flow_plan variable
2020-05-13 18:44:36 +02:00
Jens Langhammer
461fed5567
admin: remove more duplicate code
2020-05-13 13:45:57 +02:00
Jens Langhammer
d5f6714ed7
admin: remove redundant code
2020-05-13 11:57:19 +02:00
Jens Langhammer
c42ed6bc99
admin: sort types, minor fixups
2020-05-13 11:57:10 +02:00
Jens Langhammer
57fed2b92b
stages/user_delete: fix formatting
2020-05-12 15:23:17 +02:00
Jens Langhammer
e45b33c6c2
stages/user_delete: add user delete stage, remove view from core
2020-05-12 14:50:00 +02:00
Jens Langhammer
137e90355b
flows: default-auth -> default-authentication
2020-05-12 14:49:47 +02:00
Jens Langhammer
7500e622f6
stages/invitation: start extracting invitation from core
2020-05-11 21:58:02 +02:00
Jens Langhammer
d49c58f326
flows: fix linting
2020-05-11 21:27:46 +02:00
Jens Langhammer
9814d3be03
flows: add Planner and Executor unittests
2020-05-11 15:01:14 +02:00
Jens Langhammer
fc9f86cccc
lib: use TemplateResponse for bad_request_message
2020-05-11 14:08:04 +02:00
Jens Langhammer
6fd19c0a37
flows: add caching of plan, add planner unittests
2020-05-11 11:39:58 +02:00
Jens Langhammer
10cb412532
flows: fix linting of migrations
2020-05-11 09:08:15 +02:00
Jens Langhammer
e12780f78f
flows: add invalidation designation, use as default logout action
2020-05-11 01:12:57 +02:00
Jens Langhammer
9dec13c225
stages/user_logout: add logout stage
2020-05-11 01:12:14 +02:00
Jens Langhammer
69120da45c
core: remove redundant views/forms
2020-05-11 00:49:48 +02:00
Jens Langhammer
5b2bf7519a
stages/user_create -> user_write: Stage can create and update existing users
2020-05-10 23:38:15 +02:00
Jens Langhammer
631cf77f89
stages/captcha: add tests
2020-05-10 21:43:30 +02:00
Jens Langhammer
6676e95011
stages/email: add tests, cleanup
2020-05-10 21:43:22 +02:00
Jens Langhammer
3219cffb52
stages/email: add logic to verify token
2020-05-10 21:00:04 +02:00
Jens Langhammer
d4f149bc02
stages/email: add form for sending email to prevent spam
...
stages/email: make token validity configurable
2020-05-10 20:50:27 +02:00
Jens Langhammer
206cf4967d
stages/identification: add more templates
2020-05-10 20:24:47 +02:00
Jens Langhammer
a67c53f46a
stages/email: start rewriting templates, add template tags to embed CSS and images
2020-05-10 20:16:58 +02:00
Jens Langhammer
e989c61793
core: reduce default nonce time to 30 minutes
2020-05-10 20:15:56 +02:00
Jens Langhammer
99bab03cce
flows: add check if current plan matches current flow
2020-05-10 20:15:24 +02:00
Jens Langhammer
a7567ad8c6
stages/identification: add recovery support
2020-05-10 18:45:16 +02:00
Jens Langhammer
2ffa2fc6b8
admin: update templates and stage views
2020-05-10 18:44:58 +02:00
Jens Langhammer
8de87d9acb
stages/identification: test signup notice
2020-05-10 18:17:24 +02:00
Jens Langhammer
1d03b36750
stages/identification: show sign up url when related flow exists
2020-05-10 18:14:10 +02:00
Jens Langhammer
8dc3c49a2f
stages/user_create: add stage to create user after prompts
2020-05-10 18:04:23 +02:00
Jens Langhammer
f6461b08d7
stages/prompt: add unittests
2020-05-10 17:52:26 +02:00
Jens Langhammer
a3a3dde1c8
stages/dummy: add unittests
...
stages/password: improve coverage
stages/user_login: improve coverage
2020-05-10 17:02:01 +02:00
Jens Langhammer
f111604b70
stages/login: -> stages/user_login: rename login to user_login for user_create stage
2020-05-10 16:20:44 +02:00
Jens Langhammer
4315d1a03c
stages/prompt: add prompt stage: dynamically created forms based on database
2020-05-10 16:20:17 +02:00
Jens Langhammer
9def45c8d7
stages/identification: fix label for inputs
2020-05-10 15:29:27 +02:00
Jens Langhammer
358922b09b
lib/ui: fix human_list for lists with one item
2020-05-10 15:29:10 +02:00
Jens Langhammer
fbc3ac6b30
flows: make FlowExecutor fully working without pending user
2020-05-10 15:28:52 +02:00
Jens Langhammer
4f785da452
root: fix migrations for CI
2020-05-10 13:06:38 +02:00
Jens Langhammer
ff4bd1c91f
root: increase testing verbosity to debug CI
2020-05-10 12:50:58 +02:00
Jens Langhammer
7a96f9e894
policies/dummy: fix migrations
2020-05-10 12:27:10 +02:00
Jens Langhammer
c27d257146
core: fix migrations
2020-05-10 12:07:40 +02:00
Jens Langhammer
9bccf9bb0a
policies/dummy: separate dummy policy from core into app
2020-05-10 02:14:55 +02:00
Jens Langhammer
c0b05a62f4
stages/password: add unittests
2020-05-10 02:00:38 +02:00
Jens Langhammer
c140c39d07
stages/login: add unittests
2020-05-10 01:02:04 +02:00
Jens Langhammer
9a700e506b
stages/identification: simplify unittests
2020-05-10 01:01:58 +02:00
Jens Langhammer
8e488670ad
stages/identification: load uid_fields from stage in form, add more unit tests
2020-05-10 00:05:36 +02:00
Jens Langhammer
fd5b2298e5
flows: fix unittests and migrations
2020-05-09 23:31:35 +02:00
Jens Langhammer
caeaf8d5a9
stages/identification: optimise User lookup query
2020-05-09 23:20:20 +02:00
Jens Langhammer
c46f0781fc
flows: separate final login step from flow executor
2020-05-09 23:19:36 +02:00
Jens Langhammer
0aad0604d8
stages/identification: migrate from core to separate stage
2020-05-09 21:31:29 +02:00
Jens Langhammer
131c3fdb32
stages/password: fix broken authentication
2020-05-09 21:30:12 +02:00
Jens Langhammer
8a6009c278
flows: enum to django TextChoices
2020-05-09 20:54:56 +02:00
Jens Langhammer
3456527f10
providers/saml: fix minor typing issue
2020-05-09 20:54:11 +02:00
Jens Langhammer
28b913136d
root: set log level based on DEBUG flag
2020-05-09 20:53:47 +02:00
Jens Langhammer
f700899640
stages/password: fix possibility of password in logs
2020-05-09 20:53:32 +02:00
Jens Langhammer
212e966dd4
factors: -> stage
2020-05-08 20:59:51 +02:00
Jens Langhammer
08c0eb2ec6
admin: add flows
2020-05-08 18:45:53 +02:00
Jens Langhammer
872ecd93a6
flows: add to api and add forms
2020-05-08 18:29:18 +02:00
Jens Langhammer
f8af9d6ce0
flows: make sure flow_slug is logged consistently
2020-05-08 17:18:43 +02:00
Jens Langhammer
c3e43a7c2f
flows: fix denied view not being registered
2020-05-08 16:50:50 +02:00
Jens Langhammer
273af0f1cb
core/auth: fix unittests for flows
2020-05-08 16:43:22 +02:00
Jens Langhammer
2a85e5ae87
flows: complete migration to FlowExecutorView, fully use context
2020-05-08 16:10:27 +02:00
Jens Langhammer
114bb1b0bd
flows: implement planner, start new executor
2020-05-08 14:33:14 +02:00
Jens Langhammer
97b5d120f8
providers/oauth: fix default cors settings
2020-05-08 11:26:26 +02:00
Jens Langhammer
e1f0fe45cb
static: fix dashes being removed from slugs
2020-05-08 11:26:12 +02:00
Jens Langhammer
5400882d78
flows/: more migration progress, consolidate views
2020-05-07 21:30:52 +02:00
Jens Langhammer
8de66b27ad
flows/*: Initial flows stage1 implementation
2020-05-07 20:51:06 +02:00
Jens Langhammer
179f0097c0
provider/samlv2: more samlv2 progres
2020-05-07 19:25:15 +02:00
Jens Langhammer
b40bffdf38
providers/samlv2: start implementing new SAML Provider
2020-05-07 01:20:08 +02:00
Jens Langhammer
813dd2894f
*: add pyright type checking
2020-05-07 00:32:03 +02:00
Jens Langhammer
80d90b91e8
core: add general admin.py loader, remove individual files
2020-05-07 00:05:10 +02:00
Jens Langhammer
fff05e35ac
providers/saml: optionally verify SAML Signature
2020-05-06 18:03:12 +02:00
Jens Langhammer
75bb59a22a
ui: fix help text not being shown for checkboxes
2020-05-06 17:59:19 +02:00
Jens Langhammer
aac7e6be90
lib: fix ram usage due to bootstrap
...
bootstrap now exits (0) when all services are up, instead continuously running. This is combined with a simple bash script, which does this job instead.
This also adds /bootstrap.sh as docker ENTRYPOINT
2020-04-22 11:45:11 +02:00
Jens Langhammer
c77f4204c0
new release: 0.8.15-beta
2020-04-10 21:57:20 +02:00
Jens Langhammer
5f4452470b
providers/saml: fix metadata rendering when no singing keypair is selected
...
closes PASSBOOK-44
2020-04-10 21:54:23 +02:00
Jens Langhammer
9a1270c693
providers/saml: fix wrong signing property being checked
...
closes PASSBOOK-45
2020-04-10 21:52:03 +02:00
Jens Langhammer
7b9d1a1159
new release: 0.8.14-beta
2020-04-10 21:23:55 +02:00
Jens Langhammer
e43db2e065
new release: 0.8.13-beta
2020-04-10 21:11:24 +02:00
Jens Langhammer
d1c74d2160
lib: fix imports being changed every time
2020-03-05 17:28:03 +01:00
Jens Langhammer
f2119ce567
providers/saml: fix signing_kp typo
2020-03-05 17:09:08 +01:00
Jens Langhammer
f2154d9875
crypto: add property for private_key
2020-03-04 19:43:18 +01:00
Jens Langhammer
80a50f9bdb
providers/saml: switch to new crypto
2020-03-03 23:35:50 +01:00
Jens Langhammer
dc8b89a6b9
sources/saml: switch to new crypto
2020-03-03 23:35:38 +01:00
Jens Langhammer
8df55f22aa
crypto: implement simple certificate-key pair for easier management
2020-03-03 23:35:25 +01:00
Jens Langhammer
f6c322be27
providers/oidc: fix skip_authorization not being synced to oidc_client
2020-03-02 17:40:38 +01:00
Jens Langhammer
a144552059
providers/oidc: fill claims with userinfo
2020-03-01 22:55:56 +01:00
Jens Langhammer
535d529193
ui: fix title, fix navigation on user settings
2020-02-29 14:46:58 +01:00
Jens Langhammer
6ed2e137a2
new release: 0.8.12-beta
2020-02-28 11:54:03 +01:00
Jens Langhammer
45bd63c720
api: update old field names
2020-02-28 11:48:55 +01:00
Jens Langhammer
736e13fc35
ui: add template for csrf errors
2020-02-28 11:41:28 +01:00
Jens Langhammer
966fff008c
ui: re-enable branding on navbar
2020-02-28 11:37:07 +01:00
Jens Langhammer
64f15eadbd
providers/saml: fix CSRF errors with POST binding
2020-02-28 10:50:16 +01:00
Jens Langhammer
81b66ecdcd
core: remove some more dead code, add more help texts for factors
2020-02-27 16:39:30 +01:00
Jens Langhammer
53e5cf7826
admin: fix some models not being paginated
2020-02-27 15:30:28 +01:00
Jens Langhammer
82654b3fd9
ui: re-organize some of the navigation to make it cleaner for end-users
2020-02-27 14:59:34 +01:00
Jens Langhammer
9b72c604dd
docs: fix some typos
2020-02-27 13:00:55 +01:00
Jens Langhammer
5fb1b8044c
new release: 0.8.11-beta
2020-02-25 11:38:50 +01:00
Jens Langhammer
b8daab4377
providers/saml: fix AccessRequiredView.dispatch not being called
2020-02-25 11:38:26 +01:00
Jens Langhammer
c5b91bdae8
providers/saml: fix CannotHandleAssertion Error still being sent to sentry
2020-02-24 19:14:43 +01:00
Jens Langhammer
39a208c55f
providers/saml: fix wrong key being used for params
2020-02-24 17:48:03 +01:00
Jens Langhammer
a5bfef9b6b
providers/saml: fix leftover data in session, fix IdP initiated login
...
move can_handle calls to binding endpoints (/login/ and /login/initiate/), so that /login/authorize/ works either way, can clean up the session and audit
2020-02-24 17:34:52 +01:00
Jens Langhammer
f1f4cbef9b
lib/sentry: fix SentryIgnoredException not being ignored correctly
2020-02-24 17:01:31 +01:00
Jens Langhammer
8388120b06
new release: 0.8.10-beta
2020-02-24 15:30:57 +01:00
Jens Langhammer
2bf96828f1
root: fix logging.basicConfig being called by pyjwkest
2020-02-24 15:30:28 +01:00
Jens Langhammer
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
Jens Langhammer
484dd6de09
providers/oidc: add error template
2020-02-24 14:19:02 +01:00
Jens Langhammer
b743736c26
lib/logging: fix typo
2020-02-24 14:10:58 +01:00
Jens Langhammer
af91e2079b
core: sort provider by pk when selection application provider
2020-02-24 14:10:51 +01:00
Jens Langhammer
120d32e4dc
new release: 0.8.9-beta
2020-02-24 13:23:20 +01:00
Jens Langhammer
238b489e07
root: add process ID to logging output
2020-02-24 13:20:32 +01:00
Jens Langhammer
4daa70c894
core: fix saving of policy not correctly clearing it's cache
2020-02-24 13:15:52 +01:00
Jens Langhammer
f8599438df
ui: fix lists not being rendered correctly
2020-02-24 13:13:42 +01:00
Jens Langhammer
155c9a4c3f
ui: update remaining forms, completely remove jQuery
2020-02-24 13:13:28 +01:00
Jens Langhammer
8433b5e583
ui: fix automatic slug generation
2020-02-24 12:40:16 +01:00
Jens Langhammer
dc5ba144f1
ui: fix height of multiple select input
2020-02-24 12:40:06 +01:00
Jens Langhammer
521a8b5356
ui: update more remaining templates
2020-02-23 22:49:56 +01:00
Jens Langhammer
3453077d7b
root: set SameSite to None when debugging
2020-02-23 22:49:33 +01:00
Jens Langhammer
70ede8581a
core: sort sources on login view
2020-02-23 20:19:01 +01:00
Jens Langhammer
6a7545fd43
lib: add bootstrap command
2020-02-23 19:52:41 +01:00
Jens Langhammer
a8926cbd07
lib: add more errors to sentry ignore
2020-02-23 19:48:14 +01:00
Jens Langhammer
64d7b009ab
sources/oauth: fix invalid headers, fix invalid function signature
2020-02-23 19:42:57 +01:00
Jens Langhammer
2b5fddb7bf
policies: add unittests for evaluator
2020-02-23 15:54:26 +01:00
Jens Langhammer
b99d23c119
all: remove dead code
2020-02-23 15:32:20 +01:00
Jens Langhammer
03905b74ff
admin: exclude anonymous user from listing
2020-02-23 15:27:28 +01:00
Jens Langhammer
6b8a59cfbd
admin: show prettified yaml
2020-02-23 15:27:11 +01:00
Jens Langhammer
d6fdcd3ef9
ui: re-add automatic slug generation
2020-02-23 15:20:41 +01:00
Jens Langhammer
53ebc551d2
ui: fix icon sizing on login
2020-02-23 15:13:18 +01:00
Jens Langhammer
3d4f43d6e3
ui: show default icon for source without icon
2020-02-23 15:09:58 +01:00
Jens Langhammer
074cde7cd5
audit: save model's name or string representation
2020-02-23 15:04:30 +01:00
Jens Langhammer
382e563590
new release: 0.8.8-beta
2020-02-23 14:45:45 +01:00
Jens Langhammer
ca61a7cc21
audit: don't pop password as its censored already
2020-02-23 14:43:33 +01:00
Jens Langhammer
fa2870afe0
sources: remove policies as they are not used currently
2020-02-23 14:40:06 +01:00
Jens Langhammer
0f46207ea4
admin: fix provider list not having pagination
2020-02-23 14:29:21 +01:00
Jens Langhammer
f4a676e2fb
sources/oauth: slugify provider type instead of just lowercase
2020-02-23 13:53:16 +01:00
Jens Langhammer
b2c10e2387
ui: add missing discord and twitter icons
2020-02-23 13:47:21 +01:00
Jens Langhammer
8c329dca7d
core: add migration to fix null fields in core.application
2020-02-22 19:26:34 +01:00
Jens Langhammer
83da175749
policies/expression: add pb_client_ip field
2020-02-22 19:26:16 +01:00
Jens Langhammer
995c87938f
core: fix default Null causing issues in translation
2020-02-21 23:10:00 +01:00
Jens Langhammer
40678b2f84
new release: 0.8.7-beta
2020-02-21 22:17:11 +01:00
Jens Langhammer
8dbbe9102b
ui: fix application grid icons, fix SAML Authorize
2020-02-21 22:16:58 +01:00
Jens Langhammer
2f51f354de
ui: fix app icon not showing
2020-02-21 22:02:44 +01:00
Jens Langhammer
04b815a33e
admin: show object usage count instead of list
2020-02-21 22:02:03 +01:00
Jens Langhammer
2a4d68911b
helm: change static healthcheck and port
2020-02-21 21:50:16 +01:00
Jens Langhammer
4d5a2d61ff
new release: 0.8.6-beta
2020-02-21 21:36:04 +01:00
Jens Langhammer
efd88c27ad
audit: *crit* fix audit log not being protected correctly
2020-02-21 21:33:42 +01:00
Jens Langhammer
80d361ccd2
audit: fix failed login events not being logged
2020-02-21 21:27:25 +01:00
Jens Langhammer
6ed4501615
ui: fix branding viewport
2020-02-21 21:18:55 +01:00
Jens Langhammer
a3ae827839
ui: centrally load CodeMirror and init via data tag
2020-02-21 21:02:03 +01:00
Jens Langhammer
88c1ad4c1c
providers/saml: fix 500 when SAML Provider not assigned to application
2020-02-21 20:54:00 +01:00
Jens Langhammer
1147c4901b
ui: clean up some more remaining templates
2020-02-21 20:40:40 +01:00
Jens Langhammer
063181d7a7
ui: use compact templates
2020-02-21 20:24:02 +01:00
Jens Langhammer
1285ba6fbb
ui: include font-awesome
2020-02-21 18:00:09 +01:00
Jens Langhammer
a09a1793ec
ui: update templates for jinja2-related fields
2020-02-21 15:36:37 +01:00
Jens Langhammer
50caa3ac3e
ui: update static docker image to download NPM modules
2020-02-21 15:33:54 +01:00
Jens Langhammer
9440d24358
static: use codemirror from npm
2020-02-21 15:18:13 +01:00
Jens Langhammer
26bf6fd22f
all: add more helpful help_text to models
2020-02-21 15:12:16 +01:00
Jens Langhammer
e2f836feae
all: fix left over references to error templates
2020-02-21 15:05:32 +01:00
Jens Langhammer
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
Jens Langhammer
ea6a1422f7
ui: rewrite admin templates to pf4, add some helper scripts
2020-02-21 14:20:16 +01:00
Jens Langhammer
8fd86a28ff
ui: fixup minor issues, add static app
2020-02-21 11:20:55 +01:00
Jens Langhammer
d88283a7a9
Merge branch 'master' into pf4
...
# Conflicts:
# passbook/core/static/img/logos/discord.svg
# passbook/core/static/js/passbook.js
# passbook/core/templates/login/with_sources.html
# passbook/core/templates/overview/index.html
# passbook/core/views/authentication.py
2020-02-21 09:05:40 +01:00
Jens Langhammer
32a15f84c0
root: run bandit as part of pre-commit
2020-02-21 09:03:59 +01:00
Jens Langhammer
93ba4b7f62
root: use defusedxml's defuse_stdlib globally
2020-02-21 09:00:28 +01:00
Jens Langhammer
187780dab2
new release: 0.8.5-beta
2020-02-20 21:39:13 +01:00
Jens Langhammer
d988f37afc
lib: add SentryIgnoredException, to easily ignore exceptions from sentry
2020-02-20 21:38:53 +01:00
Jens Langhammer
295c0bae3f
sources/saml: validate SAMLResponse signature
2020-02-20 21:34:25 +01:00
Jens Langhammer
38a22ddf13
providers/saml: cleanup encoding
2020-02-20 21:33:10 +01:00
Jens Langhammer
d06f1abb89
providers/saml: add POST binding support to Metadata
2020-02-20 17:38:42 +01:00
Jens Langhammer
027a64fad2
providers/saml: change default NameID Format to emailAddress
2020-02-20 17:37:09 +01:00
Jens Langhammer
84fc54ddaa
sources/saml: entity_id -> issuer
2020-02-20 17:23:27 +01:00
Jens Langhammer
0b5caa85f5
all: sort imports and cleanup
2020-02-20 17:23:05 +01:00
Jens Langhammer
14e0a17dbc
ui: don't remove dashes when auto generating slug
2020-02-20 17:13:50 +01:00
Jens Langhammer
3c04afa31f
root: use different cookie names for dev instance
2020-02-20 17:08:11 +01:00
Jens Langhammer
40a2a26904
sources/saml: fix Metadata cert including PEM header
2020-02-20 17:05:11 +01:00
Jens Langhammer
c8b3c6e51a
sources/saml: fix build_full_url
using incorrect URL parameter
2020-02-20 17:04:54 +01:00
Jens Langhammer
e0272a6422
providers/saml: Show error message when trying to get metadata without assigning application
2020-02-20 17:04:20 +01:00
Jens Langhammer
b290bbf6d7
new release: 0.8.4-beta
2020-02-20 16:17:23 +01:00
Jens Langhammer
8d875cb01d
providers/saml: fix /login/ pointing to wrong view
2020-02-20 16:13:55 +01:00
Jens Langhammer
36b1f8ba36
new release: 0.8.3-beta
2020-02-20 15:14:49 +01:00
Jens Langhammer
6c889eff27
core: fix application icons not loading, fix with_sources being broken
2020-02-20 14:30:06 +01:00
Jens Langhammer
9d8675e54b
new release: 0.8.2-beta
2020-02-20 13:57:46 +01:00
Jens Langhammer
22ae986c0b
root: add logger name to log output
2020-02-20 13:52:14 +01:00
Jens Langhammer
2bef5f3911
policies: struct -> types to match core
2020-02-20 13:52:05 +01:00
Jens Langhammer
3c2b8e5ee1
all: prefix all UI related methods with ui_, switch to property and return dataclass
2020-02-20 13:51:41 +01:00
Jens Langhammer
c96571bdba
core: fix discord logo being hard to see
2020-02-20 13:50:05 +01:00
Jens Langhammer
2dfd93afb1
core: add more fields for metadata of applications
2020-02-20 13:45:22 +01:00
Jens Langhammer
f1d77d475c
ui: start patternfly v4 migration
2020-02-19 21:03:39 +01:00
Jens Langhammer
1d22e30c70
lib: sentry ignore Redis and OSError
2020-02-19 17:13:44 +01:00
Jens Langhammer
07b7951390
sources/ldap: handle user_sync errors better, show warning when user exists already
2020-02-19 16:20:33 +01:00
Jens Langhammer
995615d0a0
policies/expression: Return False if Policy returns Undefined and log warning
2020-02-19 16:19:02 +01:00
Jens Langhammer
ac273aab75
core: raise PropertyMappingExpressionException when PropertyMapping returns Undefined
2020-02-19 16:18:31 +01:00
Jens Langhammer
44cd03654d
core: base set maximum-scale to 1
2020-02-19 15:11:25 +01:00
Jens Langhammer
3e2375f970
new release: 0.8.1-beta
2020-02-19 11:31:05 +01:00
Jens Langhammer
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
Jens Langhammer
e27a05a7fc
lib/sentry: ignore django validation error
2020-02-19 10:54:29 +01:00
Jens Langhammer
e4886f0c6f
new release: 0.8.0-beta
2020-02-19 10:29:52 +01:00
Jens Langhammer
8b2ce5476a
policies/expression: add annotation to update docs, name jinja filters/funcs more clearly
2020-02-19 10:23:42 +01:00
Jens Langhammer
1b82283a20
docs: update policy types, add docs for expression policies
2020-02-19 10:21:28 +01:00
Jens Langhammer
7f3d0113c2
policies: remove redundant policies which can be easily implemented with expressions
2020-02-19 09:51:15 +01:00
Jens Langhammer
0f6dd33a6b
api: add expression policy to API URLs
2020-02-19 09:49:57 +01:00
Jens Langhammer
5b79b3fd22
policies/expression: move evaluation code into separate class
2020-02-19 09:49:38 +01:00
Jens Langhammer
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
Jens Langhammer
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
Jens Langhammer
865abc005a
sources/oauth: remove leading spaces in default URLs
2020-02-18 21:49:53 +01:00
Jens Langhammer
a2725d5b82
sources/oauth: remove redundant OAuth2Clients
2020-02-18 21:49:40 +01:00
Jens Langhammer
4a05bc6e02
sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz
2020-02-18 21:49:23 +01:00
Jens Langhammer
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
Jens Langhammer
ff25c1c057
admin: load custom policy templates
2020-02-18 21:35:21 +01:00
Jens Langhammer
78cddca0d7
admin: fix user object being overwritten when deleting a user
2020-02-18 21:35:06 +01:00
Jens Langhammer
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
Jens Langhammer
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
Jens Langhammer
591d2f89a1
audit: log event creation on save
2020-02-18 17:05:11 +01:00
Jens Langhammer
7c353f9297
sources/oauth: remove supervisr
2020-02-18 17:01:08 +01:00
Jens Langhammer
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
Jens Langhammer
878169ea2e
core: only show icon on login page if defined
2020-02-18 17:00:26 +01:00
Jens Langhammer
38dfb03668
new release: 0.7.17-beta
2020-02-18 16:29:23 +01:00
Jens Langhammer
e2631cec0e
factors/view: show concise error message when domain is mis-configured
2020-02-18 16:29:04 +01:00
Jens Langhammer
9f00843441
policies/expression: add Expression based policy
2020-02-18 15:12:50 +01:00
Jens Langhammer
f31cd7dec6
core: check PropertyMapping's expression syntax before save
2020-02-18 15:12:05 +01:00
Jens Langhammer
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00