5fa3729702
audit: fix fields for events from impersonation being swapped
2020-09-19 22:54:36 +02:00
fe4a0c3b44
core: add impersonation start/end to audit log
...
also add impersonated user as context to other logs
2020-09-18 23:39:37 +02:00
5ff1dd8426
core: move impersonation to core, add tests, add better permission checks
2020-09-17 16:24:53 +02:00
40614a65fc
flows: move complete denied view and template to flows
2020-09-14 21:52:43 +02:00
23cccebb96
pytest ( #209 )
2020-09-11 23:21:11 +02:00
78e5d471e3
core: fix type annotation for user settings
2020-07-05 23:49:33 +02:00
cc0b8164b0
providers/*: use PolicyAccessMixin to simplify
2020-07-01 23:18:10 +02:00
4915205678
WIP Use Flows for Sources and Providers ( #32 )
...
* core: start migrating to flows for authorisation
* sources/oauth: start type-hinting
* core: create default user
* core: only show user delete button if an unenrollment flow exists
* flows: Correctly check initial policies on flow with context
* policies: add more verbosity to engine
* sources/oauth: migrate to flows
* sources/oauth: fix typing errors
* flows: add more tests
* sources/oauth: start implementing unittests
* sources/ldap: add option to disable user sync, move connection init to model
* sources/ldap: re-add default PropertyMappings
* providers/saml: re-add default PropertyMappings
* admin: fix missing stage count
* stages/identification: fix sources not being shown
* crypto: fix being unable to save with private key
* crypto: re-add default self-signed keypair
* policies: rewrite cache_key to prevent wrong cache
* sources/saml: migrate to flows for auth and enrollment
* stages/consent: add new stage
* admin: fix PropertyMapping widget not rendering properly
* core: provider.authorization_flow is mandatory
* flows: add support for "autosubmit" attribute on form
* flows: add InMemoryStage for dynamic stages
* flows: optionally allow empty flows from FlowPlanner
* providers/saml: update to authorization_flow
* sources/*: fix flow executor URL
* flows: fix pylint error
* flows: wrap responses in JSON object to easily handle redirects
* flow: dont cache plan's context
* providers/oauth: rewrite OAuth2 Provider to use flows
* providers/*: update docstrings of models
* core: fix forms not passing help_text through safe
* flows: fix HttpResponses not being converted to JSON
* providers/oidc: rewrite to use flows
* flows: fix linting
2020-06-07 16:35:08 +02:00
d4fa60f509
core: only show user delete button if an unenrollment flow exists
2020-06-02 16:44:29 +02:00
df8995deed
policies/*: remove Policy.negate, order, timeout ( #39 )
...
policies: rewrite engine to use PolicyBinding for order/negate/timeout
policies: rewrite engine to use PolicyResult instead of tuple
2020-05-28 21:45:54 +02:00
beabba2890
flows: Load Stages without refreshing the whole page ( #33 )
...
* flows: initial implementation of FlowExecutorShell
* flows: load messages dynamically upon card refresh
2020-05-24 00:57:25 +02:00
57fed2b92b
stages/user_delete: fix formatting
2020-05-12 15:23:17 +02:00
e45b33c6c2
stages/user_delete: add user delete stage, remove view from core
2020-05-12 14:50:00 +02:00
e12780f78f
flows: add invalidation designation, use as default logout action
2020-05-11 01:12:57 +02:00
69120da45c
core: remove redundant views/forms
2020-05-11 00:49:48 +02:00
a3a3dde1c8
stages/dummy: add unittests
...
stages/password: improve coverage
stages/user_login: improve coverage
2020-05-10 17:02:01 +02:00
4315d1a03c
stages/prompt: add prompt stage: dynamically created forms based on database
2020-05-10 16:20:17 +02:00
0aad0604d8
stages/identification: migrate from core to separate stage
2020-05-09 21:31:29 +02:00
212e966dd4
factors: -> stage
2020-05-08 20:59:51 +02:00
2a85e5ae87
flows: complete migration to FlowExecutorView, fully use context
2020-05-08 16:10:27 +02:00
114bb1b0bd
flows: implement planner, start new executor
2020-05-08 14:33:14 +02:00
5400882d78
flows/: more migration progress, consolidate views
2020-05-07 21:30:52 +02:00
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
70ede8581a
core: sort sources on login view
2020-02-23 20:19:01 +01:00
e2f836feae
all: fix left over references to error templates
2020-02-21 15:05:32 +01:00
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
8fd86a28ff
ui: fixup minor issues, add static app
2020-02-21 11:20:55 +01:00
d88283a7a9
Merge branch 'master' into pf4
...
# Conflicts:
# passbook/core/static/img/logos/discord.svg
# passbook/core/static/js/passbook.js
# passbook/core/templates/login/with_sources.html
# passbook/core/templates/overview/index.html
# passbook/core/views/authentication.py
2020-02-21 09:05:40 +01:00
3c2b8e5ee1
all: prefix all UI related methods with ui_, switch to property and return dataclass
2020-02-20 13:51:41 +01:00
f1d77d475c
ui: start patternfly v4 migration
2020-02-19 21:03:39 +01:00
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
3bd1eadd51
all: implement black as code formatter
2019-12-31 12:51:16 +01:00
8eb3f0f708
ci: upgrade pylint to latest version
...
core: also upgrade kombu as https://github.com/celery/kombu/issues/1101 is fixed now
2019-12-31 12:45:29 +01:00
d4cb1a98c7
policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
2019-10-15 15:44:59 +02:00
2ff1635696
core/sources(minor): refactor Source's property
2019-10-13 16:47:13 +02:00
d91a852eda
factors/email(minor): start rebuilding email integration as factor
2019-10-08 14:30:17 +02:00
f2acc154cd
*(minor): small refactor
2019-10-07 16:33:48 +02:00
d21ec6c9a5
root(minor): get rid of duplicate settings
2019-10-04 16:09:35 +02:00
1453008796
wsgi(minor): add proper request logging
2019-10-04 12:44:59 +02:00
c0df1f38b8
*(minor): remove __name__ param from get_logger
2019-10-04 10:08:53 +02:00
f4499a5459
*(minor): stdlib logging to structlog
2019-10-01 10:24:10 +02:00
b3aede5bba
policy(minor): Move policy-related code to separate package
2019-10-01 10:17:39 +02:00
c2c5ff6912
config(minor): CONFIG.get -> CONFIG.y
2019-09-30 18:04:04 +02:00
98c844f3d6
improve OIDC compatibility
2019-06-25 17:57:25 +02:00
e0d597eeac
show cache on admin overview, add modal to clear cache, re-add logging to policy
2019-04-29 20:37:44 +02:00
f576985cc9
remove django guardian and check application access via PolicyEngine
2019-04-29 20:07:18 +02:00
15aaeda475
remove unused import
2019-04-10 18:47:21 +02:00
Jens Langhammer
Jens L
Langhammer, Jens