73116b9d1a
policies/expression: migrate to raw python instead of jinja2 ( #49 )
...
* policies/expression: migrate to raw python instead of jinja2
* lib/expression: create base evaluator, custom subclass for policies
* core: rewrite propertymappings to use python
* providers/saml: update to new PropertyMappings
* sources/ldap: update to new PropertyMappings
* docs: update docs for new propertymappings
* root: remove jinja2
* root: re-add jinja to lock file as its implicitly required
2020-06-05 12:00:27 +02:00
8080b0380e
providers/saml: re-add default PropertyMappings
2020-06-02 17:00:03 +02:00
e2804b9755
root: fix linting errors
2020-05-27 11:26:48 +02:00
24a3e787dd
migrate to per-model UUID Primary key, remove UUIDModel ( #26 )
...
* *: migrate to per-model UUID Primary key, remove UUIDModel
* *: fix import order, fix unittests
2020-05-20 09:17:06 +02:00
c903c81bd5
root: update pylint ignore list
2020-05-18 18:15:39 +02:00
a5319fc2fe
*: rename templatetags to clearly identify
2020-05-15 10:54:31 +02:00
e12780f78f
flows: add invalidation designation, use as default logout action
2020-05-11 01:12:57 +02:00
3456527f10
providers/saml: fix minor typing issue
2020-05-09 20:54:11 +02:00
114bb1b0bd
flows: implement planner, start new executor
2020-05-08 14:33:14 +02:00
813dd2894f
*: add pyright type checking
2020-05-07 00:32:03 +02:00
80d90b91e8
core: add general admin.py loader, remove individual files
2020-05-07 00:05:10 +02:00
fff05e35ac
providers/saml: optionally verify SAML Signature
2020-05-06 18:03:12 +02:00
5f4452470b
providers/saml: fix metadata rendering when no singing keypair is selected
...
closes PASSBOOK-44
2020-04-10 21:54:23 +02:00
9a1270c693
providers/saml: fix wrong signing property being checked
...
closes PASSBOOK-45
2020-04-10 21:52:03 +02:00
f2119ce567
providers/saml: fix signing_kp typo
2020-03-05 17:09:08 +01:00
80a50f9bdb
providers/saml: switch to new crypto
2020-03-03 23:35:50 +01:00
64f15eadbd
providers/saml: fix CSRF errors with POST binding
2020-02-28 10:50:16 +01:00
9b72c604dd
docs: fix some typos
2020-02-27 13:00:55 +01:00
b8daab4377
providers/saml: fix AccessRequiredView.dispatch not being called
2020-02-25 11:38:26 +01:00
c5b91bdae8
providers/saml: fix CannotHandleAssertion Error still being sent to sentry
2020-02-24 19:14:43 +01:00
39a208c55f
providers/saml: fix wrong key being used for params
2020-02-24 17:48:03 +01:00
a5bfef9b6b
providers/saml: fix leftover data in session, fix IdP initiated login
...
move can_handle calls to binding endpoints (/login/ and /login/initiate/), so that /login/authorize/ works either way, can clean up the session and audit
2020-02-24 17:34:52 +01:00
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
f8599438df
ui: fix lists not being rendered correctly
2020-02-24 13:13:42 +01:00
521a8b5356
ui: update more remaining templates
2020-02-23 22:49:56 +01:00
8dbbe9102b
ui: fix application grid icons, fix SAML Authorize
2020-02-21 22:16:58 +01:00
a3ae827839
ui: centrally load CodeMirror and init via data tag
2020-02-21 21:02:03 +01:00
88c1ad4c1c
providers/saml: fix 500 when SAML Provider not assigned to application
2020-02-21 20:54:00 +01:00
1147c4901b
ui: clean up some more remaining templates
2020-02-21 20:40:40 +01:00
a09a1793ec
ui: update templates for jinja2-related fields
2020-02-21 15:36:37 +01:00
9440d24358
static: use codemirror from npm
2020-02-21 15:18:13 +01:00
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
ea6a1422f7
ui: rewrite admin templates to pf4, add some helper scripts
2020-02-21 14:20:16 +01:00
d988f37afc
lib: add SentryIgnoredException, to easily ignore exceptions from sentry
2020-02-20 21:38:53 +01:00
38a22ddf13
providers/saml: cleanup encoding
2020-02-20 21:33:10 +01:00
d06f1abb89
providers/saml: add POST binding support to Metadata
2020-02-20 17:38:42 +01:00
027a64fad2
providers/saml: change default NameID Format to emailAddress
2020-02-20 17:37:09 +01:00
e0272a6422
providers/saml: Show error message when trying to get metadata without assigning application
2020-02-20 17:04:20 +01:00
8d875cb01d
providers/saml: fix /login/ pointing to wrong view
2020-02-20 16:13:55 +01:00
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00
fbd4bdef33
providers/saml: add modal to show metadata without download
2020-02-18 10:57:43 +01:00
5b22f9b6c3
providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form
2020-02-18 10:57:30 +01:00
083e317028
lib: add helper method for 400 response with message
2020-02-18 10:13:53 +01:00
813b2676de
providers/saml: better handle PropertyMapping evaluation errors
2020-02-18 10:12:42 +01:00
aeca66a288
providers/saml: change assertion_valid_not_before default to -5 minutes
2020-02-17 21:32:23 +01:00
3aa2f1e892
*: propertymapping template -> expression
2020-02-17 20:38:14 +01:00
bc4b7ef44d
providers/saml: add custom help text for templates, add docs for User Object reference
2020-02-17 20:30:14 +01:00
Jens L
Jens Langhammer