afc8baff5f
flows/shell: check for elements with autofocus attribute and call .focus();
...
closes #76
2020-06-18 19:09:12 +02:00
3713d111a4
core: fix integrity error for default user
...
closes #75
2020-06-18 19:04:13 +02:00
1d3460b670
new release: 0.9.0-pre2
2020-06-15 19:08:17 +02:00
feba3e2430
stages/prompt: Add username type field
...
add autocomplete attributes for username and password
2020-06-15 19:05:18 +02:00
b49d39a685
stages/identification: improve support for password managers
2020-06-15 18:38:09 +02:00
34c1b3b68b
stages/password: Improve support for password managers
2020-06-15 18:37:59 +02:00
e3d6ca6ab4
root: revert to non-prometheus db backend
2020-06-15 12:12:32 +02:00
6f0e292c43
root: add lgtm
2020-06-15 11:56:20 +02:00
9df1e7900d
stages/email: add noopener noreferrer
2020-06-15 11:56:14 +02:00
2a3166bf7e
ui: (pf4) Update pagination and toolbar
2020-06-09 13:40:03 +02:00
62fe4d617b
ui: (pf4) update admin overview
2020-06-09 13:39:44 +02:00
b86b36f947
ui: (pf4) update forms
2020-06-09 13:39:35 +02:00
d6b9e67e78
ui: (pf4) fix navbar
2020-06-09 13:11:54 +02:00
f589da4e72
ui: (pf4) fix empty state
2020-06-09 09:52:25 +02:00
2e5170f631
build(deps): bump @patternfly/patternfly in /passbook/static/static ( #58 )
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 2.71.6 to 4.10.31.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/v2.71.6...prerelease-v4.10.31 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-09 09:32:56 +02:00
bd312b60fc
gatekeeper: update upstream docker image
2020-06-09 09:26:03 +02:00
26aa7e1fef
sources/ldap: fix 'LDAPSource' object has no attribute '_connection'
2020-06-09 01:17:17 +02:00
5265064b10
new release: 0.9.0-pre1
2020-06-08 15:47:22 +02:00
ee8313142f
Merge branch 'docs-flows'
...
# Conflicts:
# passbook/core/templates/partials/form_horizontal.html
2020-06-08 15:43:46 +02:00
fc2eb003ea
e2e: add apply_default_data to load data from migrations after tables have been truncated
2020-06-07 19:31:16 +02:00
aa440c17b7
Merge branch 'master' into e2e
2020-06-07 17:52:51 +02:00
4915205678
WIP Use Flows for Sources and Providers ( #32 )
...
* core: start migrating to flows for authorisation
* sources/oauth: start type-hinting
* core: create default user
* core: only show user delete button if an unenrollment flow exists
* flows: Correctly check initial policies on flow with context
* policies: add more verbosity to engine
* sources/oauth: migrate to flows
* sources/oauth: fix typing errors
* flows: add more tests
* sources/oauth: start implementing unittests
* sources/ldap: add option to disable user sync, move connection init to model
* sources/ldap: re-add default PropertyMappings
* providers/saml: re-add default PropertyMappings
* admin: fix missing stage count
* stages/identification: fix sources not being shown
* crypto: fix being unable to save with private key
* crypto: re-add default self-signed keypair
* policies: rewrite cache_key to prevent wrong cache
* sources/saml: migrate to flows for auth and enrollment
* stages/consent: add new stage
* admin: fix PropertyMapping widget not rendering properly
* core: provider.authorization_flow is mandatory
* flows: add support for "autosubmit" attribute on form
* flows: add InMemoryStage for dynamic stages
* flows: optionally allow empty flows from FlowPlanner
* providers/saml: update to authorization_flow
* sources/*: fix flow executor URL
* flows: fix pylint error
* flows: wrap responses in JSON object to easily handle redirects
* flow: dont cache plan's context
* providers/oauth: rewrite OAuth2 Provider to use flows
* providers/*: update docstrings of models
* core: fix forms not passing help_text through safe
* flows: fix HttpResponses not being converted to JSON
* providers/oidc: rewrite to use flows
* flows: fix linting
2020-06-07 16:35:08 +02:00
07da5f7122
Merge branch 'master' into docs-flows
2020-06-05 20:30:59 +02:00
f91e02a0ec
flows: allow username for default flow
2020-06-05 20:30:47 +02:00
c62794c738
admin: fix PropertyMapping widget not rendering properly
2020-06-05 20:27:18 +02:00
7664b428e7
sources/ldap: fix expression field not being CodeMirror
2020-06-05 20:18:45 +02:00
9f3f34389e
root: update docs URL
2020-06-05 20:18:26 +02:00
30ca926b38
docs: remove last occurrences to jinja2
2020-06-05 20:18:11 +02:00
6a7ffa855e
docs: add example for login flow
2020-06-05 17:29:08 +02:00
0c5aff21bc
stages/identification: minor UI fixes
2020-06-05 17:02:50 +02:00
b0f426e51a
core: fix help_text not always being shown on horizontal form
2020-06-05 17:01:46 +02:00
4ff41be74a
Merge branch 'master' into docs-flows
...
# Conflicts:
# mkdocs.yml
2020-06-05 12:51:10 +02:00
73116b9d1a
policies/expression: migrate to raw python instead of jinja2 ( #49 )
...
* policies/expression: migrate to raw python instead of jinja2
* lib/expression: create base evaluator, custom subclass for policies
* core: rewrite propertymappings to use python
* providers/saml: update to new PropertyMappings
* sources/ldap: update to new PropertyMappings
* docs: update docs for new propertymappings
* root: remove jinja2
* root: re-add jinja to lock file as its implicitly required
2020-06-05 12:00:27 +02:00
790139f8bc
stages/email: Add test to check if user is pending
2020-06-03 21:00:04 +02:00
4824e5c8ba
docs: add docs for flows and all stages
2020-06-02 23:52:02 +02:00
c4facd53b4
Merge branch 'master' into docs-flows
2020-06-02 20:25:43 +02:00
ef913abc7a
sources/ldap: add option to disable user sync, move connection init to model
2020-06-02 17:15:59 +02:00
55fc5a6068
policies: rewrite cache_key to prevent wrong cache
...
# Conflicts:
# passbook/core/signals.py
# passbook/policies/engine.py
# passbook/policies/process.py
2020-06-02 17:06:18 +02:00
f22c89c998
crypto: re-add default self-signed keypair
2020-06-02 17:01:15 +02:00
2a78d2d0a0
crypto: fix being unable to save with private key
2020-06-02 17:01:15 +02:00
b0ddc6a8c0
admin: fix missing stage count
2020-06-02 17:00:26 +02:00
8080b0380e
providers/saml: re-add default PropertyMappings
2020-06-02 17:00:03 +02:00
ddfa2abbaa
sources/ldap: re-add default PropertyMappings
2020-06-02 17:00:03 +02:00
5fc5e54f47
sources/oauth: fix typing errors
...
# Conflicts:
# passbook/sources/oauth/clients.py
2020-06-02 16:57:38 +02:00
7462d56182
policies/engine: add more verbosity
2020-06-02 16:56:58 +02:00
3f92d1c420
flows: Correctly check initial policies on flow with context
...
# Conflicts:
# passbook/flows/planner.py
# passbook/flows/tests/test_planner.py
# passbook/flows/tests/test_views.py
# passbook/flows/views.py
2020-06-02 16:53:40 +02:00
d4fa60f509
core: only show user delete button if an unenrollment flow exists
2020-06-02 16:44:29 +02:00
052bf88c3d
core: create default user
...
# Conflicts:
# README.md
2020-06-02 16:42:44 +02:00
07d047c887
stages/identification: fix *_flows missing in edit form
2020-06-02 16:39:55 +02:00
23193314f1
Merge branch 'master' into docs-flows
2020-06-02 15:20:24 +02:00
1912b29dc5
policies/expression: fix lint error
2020-06-02 15:20:02 +02:00
c961327d27
stages/identification: fix recovery template
2020-06-01 19:08:14 +02:00
fe1ff7fc76
core: fix form not showing general errors
2020-06-01 19:08:01 +02:00
82d12ecfdf
policies/expression: use pb_message() for messages instead of returning a tuple
2020-06-01 15:25:38 +02:00
4d1658b35e
stages/identification: explicitly define enrollment and recovery
2020-05-31 23:01:08 +02:00
08302a04bf
docs: add docs for flows, start docs for stages
2020-05-30 22:36:01 +02:00
27728abe99
e2e: start implementing e2e tests
2020-05-29 00:45:56 +02:00
80a36a3441
stages/user_write: don't use create_user, create empty object and set attributes
2020-05-28 23:22:15 +02:00
b1b63fbb7f
stages/prompt: add prompt order field
2020-05-28 23:21:43 +02:00
fe6bfb1620
stages/identification: fix wrong link
2020-05-28 22:44:42 +02:00
e6d64bf5b3
stages/identification: fix sources and recovery/enrollment not being shown
2020-05-28 22:43:44 +02:00
270739a45a
admin: fix policy testing form not showing the correct result
2020-05-28 21:50:43 +02:00
df8995deed
policies/*: remove Policy.negate, order, timeout ( #39 )
...
policies: rewrite engine to use PolicyBinding for order/negate/timeout
policies: rewrite engine to use PolicyResult instead of tuple
2020-05-28 21:45:54 +02:00
fdfc6472d2
admin: fixup some urls
2020-05-28 10:36:27 +02:00
e2804b9755
root: fix linting errors
2020-05-27 11:26:48 +02:00
beabba2890
flows: Load Stages without refreshing the whole page ( #33 )
...
* flows: initial implementation of FlowExecutorShell
* flows: load messages dynamically upon card refresh
2020-05-24 00:57:25 +02:00
eeeb14a045
admin: fix urls for applications
2020-05-22 23:22:40 +02:00
73225917cd
build(deps): bump codemirror in /passbook/static/static ( #29 )
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.53.2 to 5.54.0.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.53.2...5.54.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-05-21 19:12:14 +02:00
0664f0b6b2
flows: add support for default_context, etc
...
default_context can be used to influence policies during the planning. This should be used when the Planner is called from other views to correctly preseed the plan.
This also checks if there is a PENDING_USER set, and uses that user for the cache key instead
2020-05-20 16:15:16 +02:00
fab9f1cb1b
root: clear cache on debug startup
2020-05-20 16:13:48 +02:00
b3c54308b7
policies/expression: validate syntax on form clean
2020-05-20 16:13:36 +02:00
c1a72a0474
crypto: fix clean_ methods not returning values
2020-05-20 16:10:12 +02:00
4377d1e86e
admin: fix flow ordering, fix source URLs
2020-05-20 16:09:53 +02:00
cafe2f1e1f
admin: fix linting
2020-05-20 13:59:56 +02:00
c329a724e8
admin: fix wrong name in template
2020-05-20 13:55:17 +02:00
969da05437
admin: show object's docstring on inheritance based lists
2020-05-20 13:47:58 +02:00
c61c84e9f3
admin: remove inline JS, add CodeMirror widget for jinja and yaml
2020-05-20 13:00:45 +02:00
e08c5ff875
helm: fully remove domain, add log_level
2020-05-20 12:16:56 +02:00
24a3e787dd
migrate to per-model UUID Primary key, remove UUIDModel ( #26 )
...
* *: migrate to per-model UUID Primary key, remove UUIDModel
* *: fix import order, fix unittests
2020-05-20 09:17:06 +02:00
13a20478fd
sources/oauth: add OIDC client
2020-05-19 21:53:46 +02:00
f58ee7fb52
sources/oauth: fix handling of sources with spaces in their name
2020-05-19 21:53:36 +02:00
f6b5fbc2cf
admin: fix sidebar
2020-05-19 21:02:10 +02:00
db69c3e38d
admin: add generic tests
2020-05-19 20:59:43 +02:00
5ba55356a9
admin: cleanup templates, cleanup templatetags
2020-05-19 20:29:02 +02:00
c903c81bd5
root: update pylint ignore list
2020-05-18 18:15:39 +02:00
886845306a
build(deps): bump codemirror in /passbook/static/static
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.52.0 to 5.53.2.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.52.0...5.53.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 11:50:33 +00:00
b6a0e895bc
build(deps): bump @fortawesome/fontawesome-free
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.12.1 to 5.13.0.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.12.1...5.13.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 11:03:22 +00:00
8c64fcd17f
build(deps): bump @patternfly/patternfly in /passbook/static/static
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 2.65.3 to 2.71.6.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/v2.65.3...v2.71.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-18 09:49:27 +00:00
753110583e
admin: fix incorrect URL
2020-05-17 23:55:42 +02:00
4206a8c43e
stages/password: fix button without labeling
2020-05-17 23:55:25 +02:00
7cc9ae45bc
static: fix any click on menu triggering collapse
2020-05-17 23:55:13 +02:00
09ef58350c
flows: rename AuthenticationStage to StageView as its a general base view
2020-05-17 00:03:06 +02:00
10d3f9ac2f
root: rewrite bootstrap in python, remove management command
2020-05-16 22:46:17 +02:00
9a1b8eb7c8
admin: add empty views to all lists, move invitation to stage-invitations
2020-05-16 21:43:48 +02:00
2ee45f388c
crypto: validate PEM data before saving
2020-05-16 21:25:10 +02:00
9a9feea5ff
static: make hamburger menu work
2020-05-16 21:11:48 +02:00
8540e787d3
admin: fix create buttons disappearing on small screens
2020-05-16 21:11:38 +02:00
db26ce808e
core: remove policies from application form
2020-05-16 20:48:45 +02:00
802d568273
admin: fix urls applications and sources
2020-05-16 20:48:30 +02:00
7b6524357f
stages/user_logout: fix dependency on PENDING_USER
2020-05-16 20:46:21 +02:00
83013f063d
core: remove stub data from user settings
2020-05-16 20:45:43 +02:00
333ee3eed4
dc: fix compose, remove SESSION_COOKIE_DOMAIN
2020-05-16 20:39:38 +02:00
e68352b09c
admin: add flow-stage-bindings, add policy-bindings, add prompts
2020-05-16 19:55:59 +02:00
df1cb88abc
admin: fix slow load for templates using get_links
2020-05-16 19:00:43 +02:00
5596caedbc
Merge pull request #9 from BeryJu/db-reset
...
DB Reset
2020-05-16 18:20:03 +02:00
7bd65120b9
*: migrate from PolicyModel to PolicyBindingModel, move Policy to passbook_policies
2020-05-16 18:07:00 +02:00
227966e727
core: rename nonce to token
2020-05-16 16:11:53 +02:00
406f69080b
Revert "*: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through"
...
This reverts commit 7ed3ceb960
2020-05-16 16:02:42 +02:00
2ce31dfaa5
root: upgrade django-dbbackup
2020-05-16 14:54:18 +02:00
7ed3ceb960
*: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through
2020-05-16 14:03:57 +02:00
615cd7870d
stages/email: add field to select E-Mail and subject
2020-05-15 14:50:23 +02:00
b907105f4a
policies/expression: expose python requests via expression, remove webhook policy
2020-05-15 12:02:41 +02:00
023423c6e7
stages/password: show password forgotten prompt when recovery flow configured
2020-05-15 11:01:02 +02:00
a5319fc2fe
*: rename templatetags to clearly identify
2020-05-15 10:54:31 +02:00
814c797c64
stages/prompt: add policy verification logic
2020-05-14 15:48:23 +02:00
776ad3cfbf
policies/expression: add pb_log function to debug
2020-05-14 15:48:08 +02:00
74ddf70cb7
policy: add context to PolicyRequest
2020-05-14 15:47:56 +02:00
a7a839a29c
stages/prompt: promptstage based on PolicyBindingModel
2020-05-14 13:51:35 +02:00
9859c5db0a
policies: add API for policybindings
2020-05-14 13:51:05 +02:00
43a583e2d2
stages/invitation: add unittests
2020-05-13 23:20:27 +02:00
f289025d8e
stages/user_delete: fix missing API, fix missing tests
2020-05-13 23:20:07 +02:00
80c3246333
policies/expression: add pb_flow_plan variable
2020-05-13 18:44:36 +02:00
461fed5567
admin: remove more duplicate code
2020-05-13 13:45:57 +02:00
d5f6714ed7
admin: remove redundant code
2020-05-13 11:57:19 +02:00
c42ed6bc99
admin: sort types, minor fixups
2020-05-13 11:57:10 +02:00
57fed2b92b
stages/user_delete: fix formatting
2020-05-12 15:23:17 +02:00
e45b33c6c2
stages/user_delete: add user delete stage, remove view from core
2020-05-12 14:50:00 +02:00
137e90355b
flows: default-auth -> default-authentication
2020-05-12 14:49:47 +02:00
7500e622f6
stages/invitation: start extracting invitation from core
2020-05-11 21:58:02 +02:00
d49c58f326
flows: fix linting
2020-05-11 21:27:46 +02:00
9814d3be03
flows: add Planner and Executor unittests
2020-05-11 15:01:14 +02:00
fc9f86cccc
lib: use TemplateResponse for bad_request_message
2020-05-11 14:08:04 +02:00
6fd19c0a37
flows: add caching of plan, add planner unittests
2020-05-11 11:39:58 +02:00
10cb412532
flows: fix linting of migrations
2020-05-11 09:08:15 +02:00
e12780f78f
flows: add invalidation designation, use as default logout action
2020-05-11 01:12:57 +02:00
9dec13c225
stages/user_logout: add logout stage
2020-05-11 01:12:14 +02:00
69120da45c
core: remove redundant views/forms
2020-05-11 00:49:48 +02:00
5b2bf7519a
stages/user_create -> user_write: Stage can create and update existing users
2020-05-10 23:38:15 +02:00
631cf77f89
stages/captcha: add tests
2020-05-10 21:43:30 +02:00
6676e95011
stages/email: add tests, cleanup
2020-05-10 21:43:22 +02:00
3219cffb52
stages/email: add logic to verify token
2020-05-10 21:00:04 +02:00
d4f149bc02
stages/email: add form for sending email to prevent spam
...
stages/email: make token validity configurable
2020-05-10 20:50:27 +02:00
206cf4967d
stages/identification: add more templates
2020-05-10 20:24:47 +02:00
a67c53f46a
stages/email: start rewriting templates, add template tags to embed CSS and images
2020-05-10 20:16:58 +02:00
e989c61793
core: reduce default nonce time to 30 minutes
2020-05-10 20:15:56 +02:00
99bab03cce
flows: add check if current plan matches current flow
2020-05-10 20:15:24 +02:00
a7567ad8c6
stages/identification: add recovery support
2020-05-10 18:45:16 +02:00
2ffa2fc6b8
admin: update templates and stage views
2020-05-10 18:44:58 +02:00
8de87d9acb
stages/identification: test signup notice
2020-05-10 18:17:24 +02:00
1d03b36750
stages/identification: show sign up url when related flow exists
2020-05-10 18:14:10 +02:00
8dc3c49a2f
stages/user_create: add stage to create user after prompts
2020-05-10 18:04:23 +02:00
f6461b08d7
stages/prompt: add unittests
2020-05-10 17:52:26 +02:00
a3a3dde1c8
stages/dummy: add unittests
...
stages/password: improve coverage
stages/user_login: improve coverage
2020-05-10 17:02:01 +02:00
f111604b70
stages/login: -> stages/user_login: rename login to user_login for user_create stage
2020-05-10 16:20:44 +02:00
4315d1a03c
stages/prompt: add prompt stage: dynamically created forms based on database
2020-05-10 16:20:17 +02:00
9def45c8d7
stages/identification: fix label for inputs
2020-05-10 15:29:27 +02:00
358922b09b
lib/ui: fix human_list for lists with one item
2020-05-10 15:29:10 +02:00
fbc3ac6b30
flows: make FlowExecutor fully working without pending user
2020-05-10 15:28:52 +02:00
4f785da452
root: fix migrations for CI
2020-05-10 13:06:38 +02:00
ff4bd1c91f
root: increase testing verbosity to debug CI
2020-05-10 12:50:58 +02:00
7a96f9e894
policies/dummy: fix migrations
2020-05-10 12:27:10 +02:00
c27d257146
core: fix migrations
2020-05-10 12:07:40 +02:00
9bccf9bb0a
policies/dummy: separate dummy policy from core into app
2020-05-10 02:14:55 +02:00
c0b05a62f4
stages/password: add unittests
2020-05-10 02:00:38 +02:00
c140c39d07
stages/login: add unittests
2020-05-10 01:02:04 +02:00
9a700e506b
stages/identification: simplify unittests
2020-05-10 01:01:58 +02:00
8e488670ad
stages/identification: load uid_fields from stage in form, add more unit tests
2020-05-10 00:05:36 +02:00
fd5b2298e5
flows: fix unittests and migrations
2020-05-09 23:31:35 +02:00
caeaf8d5a9
stages/identification: optimise User lookup query
2020-05-09 23:20:20 +02:00
c46f0781fc
flows: separate final login step from flow executor
2020-05-09 23:19:36 +02:00
0aad0604d8
stages/identification: migrate from core to separate stage
2020-05-09 21:31:29 +02:00
131c3fdb32
stages/password: fix broken authentication
2020-05-09 21:30:12 +02:00
8a6009c278
flows: enum to django TextChoices
2020-05-09 20:54:56 +02:00
3456527f10
providers/saml: fix minor typing issue
2020-05-09 20:54:11 +02:00
28b913136d
root: set log level based on DEBUG flag
2020-05-09 20:53:47 +02:00
f700899640
stages/password: fix possibility of password in logs
2020-05-09 20:53:32 +02:00
212e966dd4
factors: -> stage
2020-05-08 20:59:51 +02:00
08c0eb2ec6
admin: add flows
2020-05-08 18:45:53 +02:00
872ecd93a6
flows: add to api and add forms
2020-05-08 18:29:18 +02:00
f8af9d6ce0
flows: make sure flow_slug is logged consistently
2020-05-08 17:18:43 +02:00
c3e43a7c2f
flows: fix denied view not being registered
2020-05-08 16:50:50 +02:00
273af0f1cb
core/auth: fix unittests for flows
2020-05-08 16:43:22 +02:00
2a85e5ae87
flows: complete migration to FlowExecutorView, fully use context
2020-05-08 16:10:27 +02:00
114bb1b0bd
flows: implement planner, start new executor
2020-05-08 14:33:14 +02:00
97b5d120f8
providers/oauth: fix default cors settings
2020-05-08 11:26:26 +02:00
e1f0fe45cb
static: fix dashes being removed from slugs
2020-05-08 11:26:12 +02:00
5400882d78
flows/: more migration progress, consolidate views
2020-05-07 21:30:52 +02:00
8de66b27ad
flows/*: Initial flows stage1 implementation
2020-05-07 20:51:06 +02:00
179f0097c0
provider/samlv2: more samlv2 progres
2020-05-07 19:25:15 +02:00
b40bffdf38
providers/samlv2: start implementing new SAML Provider
2020-05-07 01:20:08 +02:00
813dd2894f
*: add pyright type checking
2020-05-07 00:32:03 +02:00
80d90b91e8
core: add general admin.py loader, remove individual files
2020-05-07 00:05:10 +02:00
fff05e35ac
providers/saml: optionally verify SAML Signature
2020-05-06 18:03:12 +02:00
75bb59a22a
ui: fix help text not being shown for checkboxes
2020-05-06 17:59:19 +02:00
aac7e6be90
lib: fix ram usage due to bootstrap
...
bootstrap now exits (0) when all services are up, instead continuously running. This is combined with a simple bash script, which does this job instead.
This also adds /bootstrap.sh as docker ENTRYPOINT
2020-04-22 11:45:11 +02:00
c77f4204c0
new release: 0.8.15-beta
2020-04-10 21:57:20 +02:00
5f4452470b
providers/saml: fix metadata rendering when no singing keypair is selected
...
closes PASSBOOK-44
2020-04-10 21:54:23 +02:00
9a1270c693
providers/saml: fix wrong signing property being checked
...
closes PASSBOOK-45
2020-04-10 21:52:03 +02:00
7b9d1a1159
new release: 0.8.14-beta
2020-04-10 21:23:55 +02:00
e43db2e065
new release: 0.8.13-beta
2020-04-10 21:11:24 +02:00
d1c74d2160
lib: fix imports being changed every time
2020-03-05 17:28:03 +01:00
f2119ce567
providers/saml: fix signing_kp typo
2020-03-05 17:09:08 +01:00
f2154d9875
crypto: add property for private_key
2020-03-04 19:43:18 +01:00
80a50f9bdb
providers/saml: switch to new crypto
2020-03-03 23:35:50 +01:00
dc8b89a6b9
sources/saml: switch to new crypto
2020-03-03 23:35:38 +01:00
8df55f22aa
crypto: implement simple certificate-key pair for easier management
2020-03-03 23:35:25 +01:00
f6c322be27
providers/oidc: fix skip_authorization not being synced to oidc_client
2020-03-02 17:40:38 +01:00
a144552059
providers/oidc: fill claims with userinfo
2020-03-01 22:55:56 +01:00
535d529193
ui: fix title, fix navigation on user settings
2020-02-29 14:46:58 +01:00
6ed2e137a2
new release: 0.8.12-beta
2020-02-28 11:54:03 +01:00
45bd63c720
api: update old field names
2020-02-28 11:48:55 +01:00
736e13fc35
ui: add template for csrf errors
2020-02-28 11:41:28 +01:00
966fff008c
ui: re-enable branding on navbar
2020-02-28 11:37:07 +01:00
64f15eadbd
providers/saml: fix CSRF errors with POST binding
2020-02-28 10:50:16 +01:00
81b66ecdcd
core: remove some more dead code, add more help texts for factors
2020-02-27 16:39:30 +01:00
53e5cf7826
admin: fix some models not being paginated
2020-02-27 15:30:28 +01:00
82654b3fd9
ui: re-organize some of the navigation to make it cleaner for end-users
2020-02-27 14:59:34 +01:00
9b72c604dd
docs: fix some typos
2020-02-27 13:00:55 +01:00
5fb1b8044c
new release: 0.8.11-beta
2020-02-25 11:38:50 +01:00
b8daab4377
providers/saml: fix AccessRequiredView.dispatch not being called
2020-02-25 11:38:26 +01:00
c5b91bdae8
providers/saml: fix CannotHandleAssertion Error still being sent to sentry
2020-02-24 19:14:43 +01:00
39a208c55f
providers/saml: fix wrong key being used for params
2020-02-24 17:48:03 +01:00
a5bfef9b6b
providers/saml: fix leftover data in session, fix IdP initiated login
...
move can_handle calls to binding endpoints (/login/ and /login/initiate/), so that /login/authorize/ works either way, can clean up the session and audit
2020-02-24 17:34:52 +01:00
f1f4cbef9b
lib/sentry: fix SentryIgnoredException not being ignored correctly
2020-02-24 17:01:31 +01:00
8388120b06
new release: 0.8.10-beta
2020-02-24 15:30:57 +01:00
2bf96828f1
root: fix logging.basicConfig being called by pyjwkest
2020-02-24 15:30:28 +01:00
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
484dd6de09
providers/oidc: add error template
2020-02-24 14:19:02 +01:00
b743736c26
lib/logging: fix typo
2020-02-24 14:10:58 +01:00
af91e2079b
core: sort provider by pk when selection application provider
2020-02-24 14:10:51 +01:00
120d32e4dc
new release: 0.8.9-beta
2020-02-24 13:23:20 +01:00
238b489e07
root: add process ID to logging output
2020-02-24 13:20:32 +01:00
4daa70c894
core: fix saving of policy not correctly clearing it's cache
2020-02-24 13:15:52 +01:00
f8599438df
ui: fix lists not being rendered correctly
2020-02-24 13:13:42 +01:00
155c9a4c3f
ui: update remaining forms, completely remove jQuery
2020-02-24 13:13:28 +01:00
8433b5e583
ui: fix automatic slug generation
2020-02-24 12:40:16 +01:00
dc5ba144f1
ui: fix height of multiple select input
2020-02-24 12:40:06 +01:00
521a8b5356
ui: update more remaining templates
2020-02-23 22:49:56 +01:00
3453077d7b
root: set SameSite to None when debugging
2020-02-23 22:49:33 +01:00
70ede8581a
core: sort sources on login view
2020-02-23 20:19:01 +01:00
6a7545fd43
lib: add bootstrap command
2020-02-23 19:52:41 +01:00
a8926cbd07
lib: add more errors to sentry ignore
2020-02-23 19:48:14 +01:00
64d7b009ab
sources/oauth: fix invalid headers, fix invalid function signature
2020-02-23 19:42:57 +01:00
2b5fddb7bf
policies: add unittests for evaluator
2020-02-23 15:54:26 +01:00
b99d23c119
all: remove dead code
2020-02-23 15:32:20 +01:00
03905b74ff
admin: exclude anonymous user from listing
2020-02-23 15:27:28 +01:00
6b8a59cfbd
admin: show prettified yaml
2020-02-23 15:27:11 +01:00
d6fdcd3ef9
ui: re-add automatic slug generation
2020-02-23 15:20:41 +01:00
53ebc551d2
ui: fix icon sizing on login
2020-02-23 15:13:18 +01:00
3d4f43d6e3
ui: show default icon for source without icon
2020-02-23 15:09:58 +01:00
074cde7cd5
audit: save model's name or string representation
2020-02-23 15:04:30 +01:00
382e563590
new release: 0.8.8-beta
2020-02-23 14:45:45 +01:00
ca61a7cc21
audit: don't pop password as its censored already
2020-02-23 14:43:33 +01:00
fa2870afe0
sources: remove policies as they are not used currently
2020-02-23 14:40:06 +01:00
0f46207ea4
admin: fix provider list not having pagination
2020-02-23 14:29:21 +01:00
f4a676e2fb
sources/oauth: slugify provider type instead of just lowercase
2020-02-23 13:53:16 +01:00
b2c10e2387
ui: add missing discord and twitter icons
2020-02-23 13:47:21 +01:00
8c329dca7d
core: add migration to fix null fields in core.application
2020-02-22 19:26:34 +01:00
83da175749
policies/expression: add pb_client_ip field
2020-02-22 19:26:16 +01:00
995c87938f
core: fix default Null causing issues in translation
2020-02-21 23:10:00 +01:00
40678b2f84
new release: 0.8.7-beta
2020-02-21 22:17:11 +01:00
8dbbe9102b
ui: fix application grid icons, fix SAML Authorize
2020-02-21 22:16:58 +01:00
2f51f354de
ui: fix app icon not showing
2020-02-21 22:02:44 +01:00
04b815a33e
admin: show object usage count instead of list
2020-02-21 22:02:03 +01:00
2a4d68911b
helm: change static healthcheck and port
2020-02-21 21:50:16 +01:00
4d5a2d61ff
new release: 0.8.6-beta
2020-02-21 21:36:04 +01:00
efd88c27ad
audit: *crit* fix audit log not being protected correctly
2020-02-21 21:33:42 +01:00
80d361ccd2
audit: fix failed login events not being logged
2020-02-21 21:27:25 +01:00
6ed4501615
ui: fix branding viewport
2020-02-21 21:18:55 +01:00
a3ae827839
ui: centrally load CodeMirror and init via data tag
2020-02-21 21:02:03 +01:00
88c1ad4c1c
providers/saml: fix 500 when SAML Provider not assigned to application
2020-02-21 20:54:00 +01:00
1147c4901b
ui: clean up some more remaining templates
2020-02-21 20:40:40 +01:00
063181d7a7
ui: use compact templates
2020-02-21 20:24:02 +01:00
1285ba6fbb
ui: include font-awesome
2020-02-21 18:00:09 +01:00
a09a1793ec
ui: update templates for jinja2-related fields
2020-02-21 15:36:37 +01:00
50caa3ac3e
ui: update static docker image to download NPM modules
2020-02-21 15:33:54 +01:00
9440d24358
static: use codemirror from npm
2020-02-21 15:18:13 +01:00
26bf6fd22f
all: add more helpful help_text to models
2020-02-21 15:12:16 +01:00
e2f836feae
all: fix left over references to error templates
2020-02-21 15:05:32 +01:00
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
ea6a1422f7
ui: rewrite admin templates to pf4, add some helper scripts
2020-02-21 14:20:16 +01:00
8fd86a28ff
ui: fixup minor issues, add static app
2020-02-21 11:20:55 +01:00
d88283a7a9
Merge branch 'master' into pf4
...
# Conflicts:
# passbook/core/static/img/logos/discord.svg
# passbook/core/static/js/passbook.js
# passbook/core/templates/login/with_sources.html
# passbook/core/templates/overview/index.html
# passbook/core/views/authentication.py
2020-02-21 09:05:40 +01:00
32a15f84c0
root: run bandit as part of pre-commit
2020-02-21 09:03:59 +01:00
93ba4b7f62
root: use defusedxml's defuse_stdlib globally
2020-02-21 09:00:28 +01:00
187780dab2
new release: 0.8.5-beta
2020-02-20 21:39:13 +01:00
d988f37afc
lib: add SentryIgnoredException, to easily ignore exceptions from sentry
2020-02-20 21:38:53 +01:00
295c0bae3f
sources/saml: validate SAMLResponse signature
2020-02-20 21:34:25 +01:00
38a22ddf13
providers/saml: cleanup encoding
2020-02-20 21:33:10 +01:00
d06f1abb89
providers/saml: add POST binding support to Metadata
2020-02-20 17:38:42 +01:00
027a64fad2
providers/saml: change default NameID Format to emailAddress
2020-02-20 17:37:09 +01:00
84fc54ddaa
sources/saml: entity_id -> issuer
2020-02-20 17:23:27 +01:00
0b5caa85f5
all: sort imports and cleanup
2020-02-20 17:23:05 +01:00
14e0a17dbc
ui: don't remove dashes when auto generating slug
2020-02-20 17:13:50 +01:00
3c04afa31f
root: use different cookie names for dev instance
2020-02-20 17:08:11 +01:00
40a2a26904
sources/saml: fix Metadata cert including PEM header
2020-02-20 17:05:11 +01:00
c8b3c6e51a
sources/saml: fix `build_full_url` using incorrect URL parameter
2020-02-20 17:04:54 +01:00
e0272a6422
providers/saml: Show error message when trying to get metadata without assigning application
2020-02-20 17:04:20 +01:00
b290bbf6d7
new release: 0.8.4-beta
2020-02-20 16:17:23 +01:00
8d875cb01d
providers/saml: fix /login/ pointing to wrong view
2020-02-20 16:13:55 +01:00
36b1f8ba36
new release: 0.8.3-beta
2020-02-20 15:14:49 +01:00
6c889eff27
core: fix application icons not loading, fix with_sources being broken
2020-02-20 14:30:06 +01:00
9d8675e54b
new release: 0.8.2-beta
2020-02-20 13:57:46 +01:00
22ae986c0b
root: add logger name to log output
2020-02-20 13:52:14 +01:00
2bef5f3911
policies: struct -> types to match core
2020-02-20 13:52:05 +01:00
3c2b8e5ee1
all: prefix all UI related methods with ui_, switch to property and return dataclass
2020-02-20 13:51:41 +01:00
c96571bdba
core: fix discord logo being hard to see
2020-02-20 13:50:05 +01:00
2dfd93afb1
core: add more fields for metadata of applications
2020-02-20 13:45:22 +01:00
f1d77d475c
ui: start patternfly v4 migration
2020-02-19 21:03:39 +01:00
1d22e30c70
lib: sentry ignore Redis and OSError
2020-02-19 17:13:44 +01:00
07b7951390
sources/ldap: handle user_sync errors better, show warning when user exists already
2020-02-19 16:20:33 +01:00
995615d0a0
policies/expression: Return False if Policy returns Undefined and log warning
2020-02-19 16:19:02 +01:00
ac273aab75
core: raise PropertyMappingExpressionException when PropertyMapping returns Undefined
2020-02-19 16:18:31 +01:00
44cd03654d
core: base set maximum-scale to 1
2020-02-19 15:11:25 +01:00
3e2375f970
new release: 0.8.1-beta
2020-02-19 11:31:05 +01:00
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
e27a05a7fc
lib/sentry: ignore django validation error
2020-02-19 10:54:29 +01:00
e4886f0c6f
new release: 0.8.0-beta
2020-02-19 10:29:52 +01:00
8b2ce5476a
policies/expression: add annotation to update docs, name jinja filters/funcs more clearly
2020-02-19 10:23:42 +01:00
1b82283a20
docs: update policy types, add docs for expression policies
2020-02-19 10:21:28 +01:00
7f3d0113c2
policies: remove redundant policies which can be easily implemented with expressions
2020-02-19 09:51:15 +01:00
0f6dd33a6b
api: add expression policy to API URLs
2020-02-19 09:49:57 +01:00
5b79b3fd22
policies/expression: move evaluation code into separate class
2020-02-19 09:49:38 +01:00
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
865abc005a
sources/oauth: remove leading spaces in default URLs
2020-02-18 21:49:53 +01:00
a2725d5b82
sources/oauth: remove redundant OAuth2Clients
2020-02-18 21:49:40 +01:00
4a05bc6e02
sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz
2020-02-18 21:49:23 +01:00
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
ff25c1c057
admin: load custom policy templates
2020-02-18 21:35:21 +01:00
78cddca0d7
admin: fix user object being overwritten when deleting a user
2020-02-18 21:35:06 +01:00
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
591d2f89a1
audit: log event creation on save
2020-02-18 17:05:11 +01:00
7c353f9297
sources/oauth: remove supervisr
2020-02-18 17:01:08 +01:00
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
878169ea2e
core: only show icon on login page if defined
2020-02-18 17:00:26 +01:00
38dfb03668
new release: 0.7.17-beta
2020-02-18 16:29:23 +01:00
e2631cec0e
factors/view: show concise error message when domain is mis-configured
2020-02-18 16:29:04 +01:00
9f00843441
policies/expression: add Expression based policy
2020-02-18 15:12:50 +01:00
f31cd7dec6
core: check PropertyMapping's expression syntax before save
2020-02-18 15:12:05 +01:00
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00
fbd4bdef33
providers/saml: add modal to show metadata without download
2020-02-18 10:57:43 +01:00
5b22f9b6c3
providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form
2020-02-18 10:57:30 +01:00
083e317028
lib: add helper method for 400 response with message
2020-02-18 10:13:53 +01:00
95416623b3
sources/ldap: better handle property mapping evaluation errors
2020-02-18 10:13:05 +01:00
813b2676de
providers/saml: better handle PropertyMapping evaluation errors
2020-02-18 10:12:42 +01:00
aeca66a288
providers/saml: change assertion_valid_not_before default to -5 minutes
2020-02-17 21:32:23 +01:00
04a5428148
new release: 0.7.16-beta
2020-02-17 21:02:54 +01:00
73b173b92a
admin: fix form missing on update pages
2020-02-17 21:02:47 +01:00
7cbf20a71c
admin: fix CodeMirror field not loading correctly
2020-02-17 21:02:35 +01:00
7a98e6d92b
new release: 0.7.15-beta
2020-02-17 20:45:56 +01:00
3aa2f1e892
*: propertymapping template -> expression
2020-02-17 20:38:14 +01:00
bc4b7ef44d
providers/saml: add custom help text for templates, add docs for User Object reference
2020-02-17 20:30:14 +01:00
9400b01a55
admin: parameterise generic from's base template
2020-02-17 20:29:41 +01:00
e57da71dcf
sources/ldap: update LDAP source to use new property mappings
2020-02-17 17:55:48 +01:00
7268afaaf9
providers/saml: update to new PropertyMappings
2020-02-17 17:50:11 +01:00
205183445c
admin: add support for template field and Jinja2 highlighting
2020-02-17 17:48:53 +01:00
e6c47fee26
core: add template field to PropertyMapping
2020-02-17 17:47:51 +01:00
a5629c5155
providers/saml: add changeable signature and digest algorithm
2020-02-17 16:28:18 +01:00
41689fe3ce
sources/* add missing migrations
2020-02-17 16:27:35 +01:00
8e84208e2c
new release: 0.7.14-beta
2020-02-17 15:42:14 +01:00
32a48fa07a
providers/saml: more typehints
2020-02-17 15:40:49 +01:00
773a9c0692
policies/engine: fix cached policy results being ignored
2020-02-17 15:37:51 +01:00
8808e3afe0
policies/engine: set mp start method to fork to fix issues under macOS
2020-02-17 15:20:30 +01:00
ecea85f8ca
lib/config: remove autoreload handler as this API is gone in django 3
2020-02-17 15:20:11 +01:00
5dfa141e35
root/wsgi: log requests with event name of request
2020-02-16 14:36:31 +01:00
447e81d0b8
providers/saml: handle uncompressed SAML AuthNRequest
2020-02-16 14:08:35 +01:00
e138076e1d
sources/saml: move labels from forms to models
2020-02-16 12:34:46 +01:00
721d133dc3
sources/oauth: move labels from form to models
2020-02-16 12:34:33 +01:00
75b687ecbe
sources/ldap: move labels from form to models
2020-02-16 12:30:45 +01:00
bdd1863177
providers/saml: move field labels from Form into models
2020-02-16 12:30:26 +01:00
e5b85e8e6a
providers/saml: move default saml properties to DB
2020-02-16 12:29:53 +01:00
d7481c9de7
new release: 0.7.13-beta
2020-02-14 15:35:05 +01:00
571373866e
providers/saml: some more cleanup, fix get_time_string when called without argument
2020-02-14 15:34:24 +01:00
e36d7928e4
providers/saml: big cleanup, simplify base processor
...
add New fields for
- assertion_valid_not_before
- assertion_valid_not_on_or_after
- session_valid_not_on_or_after
allow flexible time durations for these fields
fall back to Provider's ACS if none is specified in AuthNRequest
2020-02-14 15:19:48 +01:00
2be026dd44
global: fix import order
2020-02-14 15:17:40 +01:00
d9ecb7070d
core: add more prometheus metrics
2020-01-19 21:01:26 +01:00
fc4a46bd9c
root: fix credential variables overwriting each other
2020-01-17 11:16:23 +01:00
7bf7bde856
root: fix prometheus path in ServiceMonitor, return WWW-Authenticate header so basic auth is sent
2020-01-17 10:55:11 +01:00
9bdff14403
providers/app_gw: fix wrong UPSTREAM parameter
2020-01-03 09:15:07 +01:00
f124314eab
new release: 0.7.12-beta
2020-01-02 20:22:44 +01:00
684e4ffdcf
providers/app_gw: fix formatting
2020-01-02 20:22:36 +01:00
d9ff5c69c8
providers/app_gw: fix assignment of response_types
2020-01-02 20:20:10 +01:00
8142e3df45
providers/oidc: fix application property of wrong object being used
2020-01-02 20:19:53 +01:00
86f16e2781
providers/oidc: fix incorrectly sorted imports
2020-01-02 16:42:52 +01:00
2ed8e72c62
new release: 0.7.11-beta
2020-01-02 16:38:11 +01:00
edeed18ae8
providers/oidc: fix error when using with app_gw
2020-01-02 16:38:01 +01:00
d24133d8a2
core: fix _redirect_with_qs appending an array to the URL
2020-01-02 16:14:56 +01:00
b9733e56aa
providers/app_gw: fix passbook domain being empty
2020-01-02 16:09:17 +01:00
cd34413914
providers/app_gw: separate host field into external_ and internal_
2020-01-02 16:09:04 +01:00
c3a4a76d43
providers/app_gw: fix Client's response_type not being set
2020-01-02 16:06:32 +01:00
dce1edbe53
new release: 0.7.10-beta
2020-01-02 14:54:52 +01:00
6207226bdf
new release: 0.7.9-beta
2020-01-02 14:09:58 +01:00
696cd1f247
new release: 0.7.8-beta
2020-01-02 14:03:36 +01:00
575739d07c
ci: add bandit for static security checks
2020-01-02 13:41:49 +01:00
2d7e70eebf
audit: fix import order
2020-01-02 13:20:41 +01:00
387f3c981f
audit: fix error when trying to save models with UUID as PK
2020-01-02 13:12:23 +01:00
7c706369cd
new release: 0.7.7-beta
2020-01-02 11:22:08 +01:00
c448f87027
new release: 0.7.6-beta
2020-01-02 10:34:34 +01:00
9d7ed9a0ed
new release: 0.7.7-beta
2019-12-31 14:02:01 +01:00
d77afd1ded
new release: 0.7.6-beta
2019-12-31 13:47:39 +01:00
766518ee0e
audit: sanitize kwargs when creating audit event
2019-12-31 13:33:07 +01:00
74b2b26a20
ci: disable pylint's bad-continuation to please black
2019-12-31 13:17:35 +01:00
3bd1eadd51
all: implement black as code formatter
2019-12-31 12:51:16 +01:00
8eb3f0f708
ci: upgrade pylint to latest version
...
core: also upgrade kombu as https://github.com/celery/kombu/issues/1101 is fixed now
2019-12-31 12:45:29 +01:00
31ea2e7139
audit: fix internal server error from passing models
2019-12-31 11:40:03 +01:00
f986dc89ad
all: migrate to github
2019-12-30 10:25:35 +01:00
b21fd10093
new release: 0.7.5-beta
2019-12-16 22:05:22 +01:00
b428ec5237
providers/oidc: remove duplicate fields
2019-12-14 14:28:36 +01:00
f22dbba931
providers/saml: add UID field
2019-12-13 13:45:10 +01:00
0946d6a25d
docs: add initial structure, add docs for policies and factors
2019-12-09 21:00:45 +01:00
807cbbeaaf
audit: rewrite to be independent of django http requests, allow custom actions
2019-12-05 16:14:08 +01:00
74cd0bc08f
all(minor): remove old, unused code
2019-12-05 15:07:37 +01:00
b08ec0477e
all(minor): replace django-ipware with custom implementation
2019-12-05 14:33:55 +01:00
328c999cb9
ci(minor): reenable prospector
2019-12-05 14:31:51 +01:00
c37e382c15
root(minor): fix incorrect user IP being shown
2019-12-02 18:05:06 +01:00
784dd0fdd6
root(minor): fix unnecessary redirect for prometheus
2019-12-02 18:04:55 +01:00
23146de2bf
new release: 0.7.4-beta
2019-11-20 13:15:46 +01:00
979bea17ed
root(minor): disable error reporting by default
2019-11-20 13:12:37 +01:00
99fadf2e55
new release: 0.7.3-beta
2019-11-19 18:14:06 +01:00
be642bc874
root(major): fix dbbackup not working with prometheus
2019-11-19 18:08:25 +01:00
089b48aad1
Merge branch 'agw'
2019-11-11 18:14:03 +01:00
2997cb83b1
providers/appgw(major): rewrite to use oauth2_proxy
2019-11-11 18:13:46 +01:00
08f0aca894
provider/oidc(minor): include claims in id_token
2019-11-11 13:19:54 +01:00
019a0cb14d
new release: 0.7.2-beta
2019-11-08 14:26:52 +01:00
7f150c96b4
new release: 0.7.1-beta
2019-11-08 14:04:59 +01:00
73558f30d1
root(minor): revert to django_redis cache
2019-11-08 13:58:10 +01:00
3d73aac3ab
helm(minor): add service monitors
2019-11-08 12:24:42 +01:00
e4fbcd3735
root(major): add prometheus
2019-11-08 12:23:51 +01:00
44c0eb37cf
sources/saml(minor): fix lint issue
2019-11-07 18:02:59 +01:00
adc3dcc2c4
sources/saml(minor): disallow login if source is not enabled
2019-11-07 17:35:25 +01:00
bac8227371
sources/saml(minor): fix fields not being shown
2019-11-07 17:28:59 +01:00
73d4d9dfe0
admin(major): fix incorrect permissions being set
2019-11-07 17:25:36 +01:00
dabce36667
sources/saml(major): add saml SP
2019-11-07 17:02:56 +01:00
3bd56ce522
api(minor): fix invalid fieldls being selected
2019-11-07 10:30:22 +01:00
ed1fcc3930
new release: 0.7.0-beta
2019-11-02 16:31:23 +00:00
c22ddc5394
root(minor): catch keyboardinput and s3 error from sentry
2019-11-02 16:27:28 +00:00
0b9fc9e444
root(minor): fallback to empty string if no Host header ise set
2019-11-01 12:50:38 +00:00
e862b97005
all(major): add API for all objects
2019-10-28 17:55:36 +01:00
cffe09b02e
all(major): add most models to API
2019-10-28 17:40:57 +01:00
846a86fb62
fix lint
2019-10-28 14:44:46 +01:00
463c130351
core(major): add api for most simple objects
2019-10-28 14:27:43 +01:00
ffca957838
audit(major): AuditEntry -> Event
2019-10-28 14:26:34 +01:00
543e949a48
api(minor): start with api v2
2019-10-28 14:26:07 +01:00
feb80049aa
Merge branch 'master' into guardian
2019-10-25 22:18:13 +02:00
5c59c8ccb6
new release: 0.6.11-beta
2019-10-15 16:56:24 +02:00
bf6c9e8c4a
new release: 0.6.10-beta
2019-10-15 16:05:51 +02:00
3353aa0298
root(minor): disable uwsgi request loggin and use custom logging instead
2019-10-15 15:57:37 +02:00
d4cb1a98c7
policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
2019-10-15 15:44:59 +02:00
13f4ea0b8b
root(minor): sort keys in log output
2019-10-15 15:40:38 +02:00
261d57ad7b
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/admin/views/invitations.py
# passbook/admin/views/policy.py
# passbook/admin/views/providers.py
# passbook/admin/views/sources.py
# passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
4086252979
core(major): add integrated database backup
2019-10-15 13:52:33 +02:00
8bdf12cff1
recovery(minor): add unittests
2019-10-14 17:12:56 +02:00
65a065c4ee
policy(minor): add unittests for policy engine
2019-10-14 16:08:24 +02:00
a691ee529c
new release: 0.6.9-beta
2019-10-14 15:00:30 +02:00
f1c4a62612
policy(major): fix error when policy.negate is enabled
2019-10-14 15:00:20 +02:00
358e39ced0
core(major): remove action field from policy
2019-10-14 13:57:38 +02:00
82d14f37c3
new release: 0.6.8-beta
2019-10-14 13:18:51 +02:00
2a27325dfd
admin(major): add pagination to all listviews
2019-10-14 13:15:42 +02:00
a6dee2e8ed
admin(minor): fix sidebar disappearing when editing user
2019-10-14 13:14:54 +02:00
2ff1635696
core/sources(minor): refactor Source's property
2019-10-13 16:47:13 +02:00
1cb6b5e984
new release: 0.6.7-beta
2019-10-12 14:23:14 +02:00
1fe420fd80
admin(major): add YAMLField for attributes, add codemirror editor
2019-10-12 14:23:03 +02:00
50172e58d8
sources/ldap(minor): save ldap password for user upon successful bind
2019-10-12 14:00:34 +02:00
d7483d129f
sources/ldap(minor): call set_unusable_password when creating new user
2019-10-12 13:59:52 +02:00
34ed0b3594
new release: 0.6.6-beta
2019-10-11 14:33:36 +02:00
9de950220f
core(minor): small css adjustment
2019-10-11 14:32:19 +02:00
567c90b4c6
new release: 0.6.5-beta
2019-10-11 14:26:20 +02:00
ae19236366
factors/email(minor): fix default timeout being 0, which breaks task
2019-10-11 14:24:58 +02:00
f9babe7089
core(minor): fix timezone warning when cleaning nonces
2019-10-11 14:23:59 +02:00
32abb27e61
sources/ldap(minor): fix lint
2019-10-11 13:43:35 +02:00
8478b03892
sources/ldap(major): implement membership sync, add more settings
2019-10-11 13:41:12 +02:00
e972f2b289
Merge branch 'master' into ldap-rewrite
2019-10-11 12:53:56 +02:00
22c4fb1414
sources/ldap(major): add sync_users and sync_groups, rewrite auth_user method
2019-10-11 12:53:48 +02:00
0154def916
root(minor): allow subapps to define CELERY_BEAT_SCHEDULE
2019-10-11 12:47:29 +02:00
fc69b6851d
core(minor): tags -> attributes, add attributes to user, add propertymappings to source
2019-10-11 12:47:06 +02:00
44a3c7fa5f
Merge branch 'master' into ldap-rewrite
2019-10-11 10:24:12 +02:00
37111fd07b
core(minor): merge migrations
2019-10-10 17:41:22 +02:00
4e6653e299
ldap(major): start rewrite
2019-10-10 17:36:09 +02:00
143a575369
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/core/models.py
2019-10-10 17:29:34 +02:00
c782585287
ci(minor): re-enable pylint
2019-10-10 17:22:56 +02:00
48a04744e0
new release: 0.6.4-beta
2019-10-10 16:09:38 +02:00
b9991465ee
recovery(new): add recovery app to create recovery links
2019-10-10 14:05:16 +02:00
3d8242be06
core(minor): add new, optional description field to nonce
2019-10-10 14:04:58 +02:00
344a8817c3
admin(minor): fix linting
2019-10-10 13:05:03 +02:00
3afb0d4f6d
admin(minor): remove partial API
2019-10-10 13:04:20 +02:00
c9714893bb
admin(major): rewrite all views to use guardian mixins
2019-10-10 13:01:49 +02:00
3185a86b22
core(minor): add separate permission to reset user's password
2019-10-10 13:01:36 +02:00
a53f7a49ac
root(minor): start implementing guardian
2019-10-10 10:45:51 +02:00
ca3bcc565d
ui(minor): simplify top navigation
2019-10-10 10:02:48 +02:00
c1dae0b599
sources/oauth(minor): fix wrong settings reference
2019-10-09 19:46:23 +02:00
e70d3b6286
new release: 0.6.3-beta
2019-10-09 14:44:50 +02:00
17e6bc921b
core(minor): fix import order
2019-10-09 14:37:40 +02:00
3b7e47dbe2
settings(minor): use cached_db for session, use localhost as domain
2019-10-09 14:30:53 +02:00
2e15b24f0a
*(minor): switch has_user_settings to return Optional dataclass instead of tuple
2019-10-09 12:47:14 +02:00
088b9592cd
core(minor): remove unused code
2019-10-08 15:04:38 +02:00
b1e4e32b83
providers/oidc(minor): correctly create audit entry on authz
2019-10-08 14:34:59 +02:00
d91a852eda
factors/email(minor): start rebuilding email integration as factor
2019-10-08 14:30:17 +02:00
171c5b9759
factors/password(minor): remove form from core
2019-10-08 14:23:02 +02:00
64290b2a37
admin(minor): add view to create user
2019-10-08 11:27:19 +02:00
72769b8a0a
lib(minor): cleanup default settings
2019-10-08 10:44:44 +02:00
6d0ecd228e
new release: 0.6.2-beta
2019-10-07 21:24:56 +02:00
a390bb7b59
factors/otp(minor): fix old URLs
2019-10-07 21:23:25 +02:00
17eea4a10c
new release: 0.6.1-beta
2019-10-07 18:53:04 +02:00
ec73b53340
providers/saml(minor): fix last wrong urls names
2019-10-07 18:36:09 +02:00
8f42a7f0b4
new release: 0.6.0-beta
2019-10-07 17:18:19 +02:00
2c221ea819
providers/oauth(minor): fix import order
2019-10-07 17:14:52 +02:00
93e0441b58
helm(minor): don't directly mount configmap
2019-10-07 17:14:08 +02:00
59fc223a85
factors/captcha(minor): load correct keys
2019-10-07 16:58:06 +02:00
0a6f555c23
otp(minor): disable autocomplete for code input
2019-10-07 16:57:54 +02:00
6a4233d6fd
providers/oauth(minor): fix urls not being mounted in the right path
2019-10-07 16:57:36 +02:00
15fa7e9652
ui(minor): merge menus
2019-10-07 16:50:13 +02:00
f2acc154cd
*(minor): small refactor
2019-10-07 16:33:48 +02:00
d21ec6c9a5
root(minor): get rid of duplicate settings
2019-10-04 16:09:35 +02:00
34cbf5f702
new release: 0.5.0-beta
2019-10-04 13:55:13 +02:00
1cd149c815
policy(minor): fix linting
2019-10-04 13:49:27 +02:00
4c6f562805
policy(minor): fix deadlock issue
2019-10-04 13:44:26 +02:00
e59c4ec1c7
root(minor): cleanup, remove unused log
2019-10-04 13:43:47 +02:00
1169db7530
docker(minor): move docker-related files into separate folder
2019-10-04 12:45:19 +02:00
1453008796
wsgi(minor): add proper request logging
2019-10-04 12:44:59 +02:00
2209b6d603
deploy(minor): fix robots.txt not being in the right path
...
fix path matching in docker compose
2019-10-04 12:01:38 +02:00
ccbc0384f9
deploy(minor): remove app-gw, add robots.txt
2019-10-04 11:57:41 +02:00
a48924c896
docker(minor): switch to debian based image so we can use wheels
2019-10-04 11:50:52 +02:00
afca94ceb8
policy(minor): improve loading of policy subclasses
2019-10-04 10:22:06 +02:00
0b86231a36
*(minor): make better use of structured logging
2019-10-04 10:21:33 +02:00
c0df1f38b8
*(minor): remove __name__ param from get_logger
2019-10-04 10:08:53 +02:00
2b8fed8f4e
saml_idp(minor): rewrite to use defusedxml instead of bs4
2019-10-04 09:50:25 +02:00
c7322a32a0
app_gw(minor): remove current implementation
2019-10-04 09:28:28 +02:00
64b75cab84
policy(minor): add data class for policy request
2019-10-03 10:45:31 +02:00
f58bc61999
new release: 0.4.2-beta
2019-10-02 21:05:51 +00:00
fb8ccc0283
lint(minor): fix import order
2019-10-02 21:05:37 +00:00
c38012f147
new release: 0.4.1-beta
2019-10-02 21:04:16 +00:00
920e705d75
policy(minor): lookup correct policy subclass
2019-10-02 22:28:58 +02:00
de0b137b1e
policy(minor): improve error handling
2019-10-02 22:28:39 +02:00
8745ac7932
new release: 0.4.0-beta
2019-10-01 17:01:30 +02:00
b8656858ec
k8s(minor): load secrets as env vars
2019-10-01 15:42:14 +02:00
aec1ccd88d
root(minor): fix redis password not being loaded
2019-10-01 15:30:35 +02:00
9d640efc88
new release: 0.3.0-beta
2019-10-01 13:50:50 +02:00
2bffc12ef9
ci(minor): fix default settings so CI works
2019-10-01 13:22:38 +02:00
7bff2734aa
lint(minor): fix all remaining pylint and prospector errors
2019-10-01 11:08:56 +02:00
84768c0ec6
helm(minor): remove rabbitmq
2019-10-01 10:48:55 +02:00
f4499a5459
*(minor): stdlib logging to structlog
2019-10-01 10:24:10 +02:00
b3aede5bba
policy(minor): Move policy-related code to separate package
2019-10-01 10:17:39 +02:00
c2c5ff6912
config(minor): CONFIG.get -> CONFIG.y
2019-09-30 18:04:04 +02:00
06d15d8a27
new release: 0.2.8-beta
2019-07-22 17:18:07 +02:00
4cf6c36f34
new release: 0.2.7-beta
2019-07-22 15:54:34 +02:00
62abe3f256
suspicious_policy: fix Request IP lookup
2019-07-22 15:46:41 +02:00
174472bb45
all: get rid of individual requirements file, remove version from every module
2019-07-22 15:20:17 +02:00
f97a5eeefb
api: *actually* fix drf dependency issue
2019-07-15 15:05:54 +00:00
10fd96981e
new release: 0.2.6-beta
2019-07-15 13:42:18 +00:00
67e3eb549c
api: fix wrong django-rest-framework dependency
2019-07-15 13:42:03 +00:00
30a6d1f0b1
new release: 0.2.5-beta
2019-07-15 13:31:04 +00:00
3d1fa9f048
app_gw: Rewrite redirect responses (replace upstream location with server_name)
2019-07-09 15:28:52 +02:00
1d2be6e68b
root: fix sentry sending wrong release
2019-07-05 16:00:01 +02:00
c21e343986
oidc_provider: fix error when creating a new provider
2019-07-05 15:59:52 +02:00
ff37ed095c
new release: 0.2.4-beta
2019-07-05 15:30:13 +02:00
8623a2c3fc
oidc_provider: fix error trying to create RSA Key before migrations are run
2019-07-05 15:27:04 +02:00
23d277eaf1
remove oidc from OAuth2, add dedicated OIDC provider
2019-07-05 15:21:48 +02:00
bccf424c5e
new release: 0.2.3-beta
2019-07-04 16:25:33 +02:00
ed25801e6e
core: revert to cherrypy for main webserver and use daphne only for app_gw
2019-07-04 15:23:05 +02:00
4d0148193f
root: migrate to new sentry instance
2019-07-03 17:35:54 +02:00
804ae15c2e
new release: 0.2.2-beta
2019-06-25 18:50:41 +02:00
b35a9fad86
Fix linting errors with current build-base image
2019-06-25 18:50:37 +02:00
a4f83bd28a
new release: 0.2.1-beta
2019-06-25 18:25:27 +02:00
2099bbb713
new release: 0.2.0-beta
2019-06-25 18:16:14 +02:00
67beba8f78
Fix wrong URLConf being loaded
2019-06-25 18:11:08 +02:00
a798412e17
separate passbook.core into passbook.root and passbook.core
...
Move Main Django Project into passbook.root while passbook.core holds core functionality.
passbook.root contains main settings, ASGI & WSGI, celery and URLs.
2019-06-25 18:00:54 +02:00
3b2c2d781f
Fix typo
2019-06-25 17:59:51 +02:00
98c844f3d6
improve OIDC compatibility
2019-06-25 17:57:25 +02:00
2645bd0132
new release: 0.1.38-beta
2019-04-29 23:26:18 +02:00
0ec1468058
remove unused import
2019-04-29 23:22:54 +02:00
5d1a3043b2
create SSOLoginPolicy, which allows factors to be applied when user comes from SSO login
...
implement SESSIION_IS_SSO_LOGIN for OAuth Client and core MFA
2019-04-29 23:19:37 +02:00
b46958d1f9
send session to task
2019-04-29 23:18:51 +02:00
5daa8d5fe3
fix missing/wrong widget inputs
2019-04-29 23:16:04 +02:00
31846f1d05
Show redirect URL in <pre> element
2019-04-29 22:32:22 +02:00
1fac964b8b
increase application close timeout
2019-04-29 22:19:26 +02:00
dfa6ed8ac2
add help to show how SAML Property Mapping substitutes variables
2019-04-29 22:19:13 +02:00
66fe10299e
new release: 0.1.37-beta
2019-04-29 21:43:18 +02:00
e0a3ec033f
fix IDP-Initiated SAML Login
2019-04-29 21:39:41 +02:00
7033ec0ab9
remove debug print
2019-04-29 21:39:30 +02:00
4004579905
remove nexus_upload command
2019-04-29 21:39:16 +02:00
9fe9e48a5c
new release: 0.1.36-beta
2019-04-29 20:57:57 +02:00
595a6c7fe6
remove guardian completely
2019-04-29 20:57:54 +02:00
11b5860d4a
new release: 0.1.35-beta
2019-04-29 20:47:32 +02:00
9bdbff4cda
fix gitlab-ci using incorrect variables for docker access
2019-04-29 20:42:24 +02:00
e0d597eeac
show cache on admin overview, add modal to clear cache, re-add logging to policy
2019-04-29 20:37:44 +02:00
f576985cc9
remove django guardian and check application access via PolicyEngine
2019-04-29 20:07:18 +02:00
22a6aef60b
fix wrong import
2019-04-29 20:06:52 +02:00
ec0a6e7854
new release: 0.1.34-beta
2019-04-29 19:22:20 +02:00
6904608e6f
fix clicking on administration always loading admin interface
2019-04-29 19:22:14 +02:00
cb3732cb2b
filter out connection errors for sentry
2019-04-29 19:16:49 +02:00
9f8fb7378a
add audience field, switch base processor, better handle processor loading failure
2019-04-18 11:30:21 +02:00
98cd646044
remove unneeded processors
2019-04-18 11:09:12 +02:00
53918462b6
new release: 0.1.33-beta
2019-04-18 10:28:12 +02:00
8e5c3f2f31
remove unused import
2019-04-17 17:53:45 +02:00
5a3b2fdd49
add Rancher SAML processor
2019-04-17 17:53:15 +02:00
e47b9f0d57
fix SAML Request not being parsed all the time
2019-04-17 17:53:05 +02:00
146dd747f1
fix EntityID being None in SAML Metadata
2019-04-17 17:52:24 +02:00
f2ce56063b
bump version: 0.1.31-beta -> 0.1.32-beta
2019-04-17 14:27:41 +02:00
9072b836c6
automatically add response_type if not given in OAuth Request
2019-04-17 14:25:51 +02:00
2fa57d064e
bump version: 0.1.30-beta -> 0.1.31-beta
2019-04-13 17:58:09 +02:00
e7129d18f6
fix inconsistent migrations
2019-04-13 17:52:11 +02:00
d2bf9f81d6
remove raven middleware
2019-04-13 17:46:51 +02:00
30acf0660b
Merge branch 'master' into 37-guardian
2019-04-13 17:43:02 +02:00
dda41af5c8
remove logging to increase speed, add more caching to policy and rewriter
2019-04-13 17:22:03 +02:00
9b5b03647b
move actual proxying logic to separate class
2019-04-13 16:05:11 +02:00
940b3eb943
move logging to separate thread
2019-04-13 16:04:48 +02:00
16eb629b71
only enable sentry when not DEBUG
2019-04-11 15:30:42 +02:00
755045b226
try to fix app_gw being null
2019-04-11 15:30:07 +02:00
61478db94e
use global urllib Pools
2019-04-11 15:29:35 +02:00
f69f959bdb
allow setting authentication_header to empty string (disabling the header)
2019-04-11 15:29:01 +02:00
146edb45d4
bump version: 0.1.29-beta -> 0.1.30-beta
2019-04-11 14:22:34 +02:00
045a802365
don't use context manager in web command
2019-04-11 14:22:32 +02:00
c90d8ddcff
bump version: 0.1.28-beta -> 0.1.29-beta
2019-04-11 14:03:08 +02:00
a3ef26b7ad
Run collectstatic before coverage, use autoreload on celery worker
2019-04-11 13:54:11 +02:00
19cd1624c1
replace cherrypy with daphne
2019-04-11 13:43:49 +02:00
366ef352c6
switch to whitenoise for static files
2019-04-11 13:43:08 +02:00
a1a5223b58
bump version: 0.1.27-beta -> 0.1.28-beta
2019-04-11 10:48:31 +02:00
b369eb28f1
set default log level to warn, fix clean_nonces not working
2019-04-11 10:43:13 +02:00
9b8f390e31
Merge branch '38-websocket-proxying' into 'master'
...
Resolve "Websocket Proxying"
Closes #38
See merge request BeryJu.org/passbook!24
2019-04-10 20:42:24 +00:00
11630c9a74
switch kubernetes deployment to daphne server
2019-04-10 22:38:25 +02:00
c9ac10f6f6
Implement websocket proxy
2019-04-10 19:03:42 +02:00
04d613cb28
Move code from django-revproxy to app_gw to fix cookie bug
2019-04-10 19:03:22 +02:00
40866f9ecd
Choose upstream more cleverly
2019-04-10 18:49:33 +02:00
d8585eb872
trigger autoreload from config files
2019-04-10 18:48:55 +02:00
15aaeda475
remove unused import
2019-04-10 18:47:21 +02:00
8536ef9e23
Add guardian for Application permissions
2019-04-10 18:46:33 +02:00
35b6bb6b3f
fix failing CI
2019-04-09 17:26:53 +02:00
eaa573c715
fully remove raven and switch WSGI and logging to sentry_sdk
2019-04-05 16:11:53 +02:00
660972e303
add ability to have non-expiring nonces, clean up expired nonces
2019-04-04 21:49:10 +02:00
a21012bf0c
switch from raven to sentry_sdk
2019-04-04 21:48:50 +02:00
80049413f0
bump version: 0.1.26-beta -> 0.1.27-beta
2019-03-22 14:51:13 +01:00
2739442d4a
prepare 0.1.27
2019-03-22 14:51:09 +01:00
c679f0a67c
bump version: 0.1.25-beta -> 0.1.26-beta
2019-03-22 12:48:00 +01:00
4d6bb60134
add custom template views
2019-03-22 12:16:30 +01:00
81ac951872
validate upstream in form
2019-03-22 10:55:26 +01:00
f33e553cfd
always parse url instead of once
2019-03-22 10:55:04 +01:00
9b0240dc26
bump version: 0.1.24-beta -> 0.1.25-beta
2019-03-21 16:50:00 +01:00
c327310392
prepare 0.1.24-beta release
2019-03-21 16:49:57 +01:00
7e87bfef5b
validate server_name in form
2019-03-21 16:36:38 +01:00
a7af5268de
Invalidate cache when ApplicationGateway instance is saved
2019-03-21 16:27:37 +01:00
6d916029bb
implement actual Rewriting logic
2019-03-21 16:22:07 +01:00
81fdcbadad
add compiled regex to RewriteRule
2019-03-21 16:21:51 +01:00
ec1e25fe71
cleanup property_mapping list
2019-03-21 16:21:11 +01:00
b5306e4a94
Redirect to login on reverse proxy
2019-03-21 15:15:01 +01:00
801b8a1e59
prevent ZeroDivisionError
2019-03-21 15:05:04 +01:00
3a52059793
cleanup post-migration mess
2019-03-21 15:02:33 +01:00
10b7d99b37
Merge branch 'master' into 30-application-security-gateway
...
# Conflicts:
# passbook/core/policies.py
# passbook/core/settings.py
2019-03-21 14:58:10 +01:00
6be8d0cbb2
Better handle policy timeouts
2019-03-21 14:53:57 +01:00
Jens Langhammer
dependabot-preview[bot]
Jens L
Langhammer, Jens