37a432267d
Squashed commit of the following:
...
commit 88029a43354040eb9619c9663a08daa3d92ebc0a6fa825e3726aefd072c8ac2dd3611f74e628ce9cd4ee18ee32
2020-07-20 18:17:14 +02:00
e15f7d7f28
flows: fix potential open redirect vuln
2020-07-14 21:57:28 +02:00
fbf9554a9e
flows: fix SESSION_KEY_GET being deleted too early
2020-07-14 21:42:47 +02:00
b452e751ea
flows: add SESSION_KEY_APPLICATION_PRE
...
whenever a user tries to access an application without being authenticated to passbook, we now show notice which application they are going to continue to.
2020-07-12 22:47:46 +02:00
4caa4be476
sources/oauth: fix UserOAuthSourceConnection not being assigned to user after enrollment
...
sources/oauth: separate handle_new_connection into handle_existing_user_link and handle_enroll
2020-07-10 00:07:59 +02:00
9518cefdd7
flows: fix default-source-enrollment-if-username expression
2020-07-09 00:20:42 +02:00
1524880eec
core: add generic login/base_full template for static login views
2020-07-08 14:17:29 +02:00
429627494c
root: fix passbook.footer_links not being rendered
2020-07-08 13:18:33 +02:00
9021bbd5de
root: implement APM support
2020-07-07 17:43:10 +02:00
b26882a450
flows: FlowStageBinding group Stage by type
2020-07-04 15:02:21 +02:00
d3b0992456
flows: FlowStageBinding: rename .flow to .target to fix select_subclasses()
2020-07-04 00:14:21 +02:00
bead19c64c
flows: cleanup denied view, use everywhere
2020-07-02 13:48:42 +02:00
9613fcde89
Squashed commit of the following:
...
commit 885a2ed057
2020-06-30 12:18:01 +02:00
b270fb0742
stages/otp_time: implement TOTP Setup stage
2020-06-30 12:14:40 +02:00
285a69d91f
Merge branch 'master' into otp-rework
2020-06-30 11:23:09 +02:00
de3b753a26
flows: show error message in flow when stage raises
2020-06-30 11:18:39 +02:00
d33f632203
flows: add CancelView to cancel current flow execution
2020-06-30 00:11:01 +02:00
920858ff72
Merge branch 'master' into otp-rework
...
# Conflicts:
# passbook/flows/models.py
# passbook/stages/otp/models.py
# swagger.yaml
2020-06-29 22:54:18 +02:00
96a6ac85df
audit: add cleanse_dict function to ensure no passwords end in logs
2020-06-29 19:13:07 +02:00
d6a8d8292d
core: UIUserSettings: remove icon, rename view_name to URL for complete URL
2020-06-29 16:20:33 +02:00
ec823aebed
flows: update migrations to use update_or_create
2020-06-29 16:19:39 +02:00
b8654c06bf
flows: remove generic "password change" designation and add setup_stage
2020-06-29 11:12:51 +02:00
9d03c4c7d2
flows: Stage ui_user_settings -> staticmethod with context as argument
2020-06-28 10:31:26 +02:00
57a7bed99d
sources/oauth: fix facebook provider
2020-06-25 10:24:53 +02:00
9eaceb9ec6
e2e: add tests for SAML source
2020-06-24 23:24:45 +02:00
de1be2df88
flows: save entire GET params from shell executor
2020-06-21 20:46:38 +02:00
6122dcacc7
flows: fix flow cache not being cleared correctly when stages are saved
2020-06-21 12:40:01 +02:00
68efcc7bf2
e2e: add custom testcase class to simplify code
2020-06-20 17:06:00 +02:00
af8cdb34ee
*: fix not all migrations using db_alias
2020-06-19 20:43:27 +02:00
03b1a67b44
flows: change wording of consent on flows
2020-06-19 20:33:41 +02:00
73e7158178
e2e: add OIDC Provider test against grafana, more formatting, minor bug fixes
2020-06-19 19:45:27 +02:00
c83216ece0
Merge branch 'master' into e2e
...
# Conflicts:
# Pipfile.lock
# docs/installation/docker-compose.md
2020-06-19 09:00:46 +02:00
dab53cfd03
flows/executor: call plan.next before pop so we can save plan
...
ReevaluateMarker: use PolicyEngine without cache
2020-06-18 22:54:09 +02:00
6a4086c490
flows: introduce FlowPlan markers, which indicate when a stage needs … ( #79 )
...
* flows: introduce FlowPlan markers, which indicate when a stage needs re-evaluation
Implement re_evaluate_policies
add unittests for several different scenarios
closes #78
* flows: move markers to separate files, cleanup formatting
* flows: fix self.next is not callable
2020-06-18 22:43:51 +02:00
afc8baff5f
flows/shell: check for elements with autofocus attribute and call .focus();
...
closes #76
2020-06-18 19:09:12 +02:00
ee8313142f
Merge branch 'docs-flows'
...
# Conflicts:
# passbook/core/templates/partials/form_horizontal.html
2020-06-08 15:43:46 +02:00
fc2eb003ea
e2e: add apply_default_data to load data from migrations after tables have been truncated
2020-06-07 19:31:16 +02:00
4915205678
WIP Use Flows for Sources and Providers ( #32 )
...
* core: start migrating to flows for authorisation
* sources/oauth: start type-hinting
* core: create default user
* core: only show user delete button if an unenrollment flow exists
* flows: Correctly check initial policies on flow with context
* policies: add more verbosity to engine
* sources/oauth: migrate to flows
* sources/oauth: fix typing errors
* flows: add more tests
* sources/oauth: start implementing unittests
* sources/ldap: add option to disable user sync, move connection init to model
* sources/ldap: re-add default PropertyMappings
* providers/saml: re-add default PropertyMappings
* admin: fix missing stage count
* stages/identification: fix sources not being shown
* crypto: fix being unable to save with private key
* crypto: re-add default self-signed keypair
* policies: rewrite cache_key to prevent wrong cache
* sources/saml: migrate to flows for auth and enrollment
* stages/consent: add new stage
* admin: fix PropertyMapping widget not rendering properly
* core: provider.authorization_flow is mandatory
* flows: add support for "autosubmit" attribute on form
* flows: add InMemoryStage for dynamic stages
* flows: optionally allow empty flows from FlowPlanner
* providers/saml: update to authorization_flow
* sources/*: fix flow executor URL
* flows: fix pylint error
* flows: wrap responses in JSON object to easily handle redirects
* flow: dont cache plan's context
* providers/oauth: rewrite OAuth2 Provider to use flows
* providers/*: update docstrings of models
* core: fix forms not passing help_text through safe
* flows: fix HttpResponses not being converted to JSON
* providers/oidc: rewrite to use flows
* flows: fix linting
2020-06-07 16:35:08 +02:00
07da5f7122
Merge branch 'master' into docs-flows
2020-06-05 20:30:59 +02:00
f91e02a0ec
flows: allow username for default flow
2020-06-05 20:30:47 +02:00
9f3f34389e
root: update docs URL
2020-06-05 20:18:26 +02:00
c4facd53b4
Merge branch 'master' into docs-flows
2020-06-02 20:25:43 +02:00
3f92d1c420
flows: Correctly check initial policies on flow with context
...
# Conflicts:
# passbook/flows/planner.py
# passbook/flows/tests/test_planner.py
# passbook/flows/tests/test_views.py
# passbook/flows/views.py
2020-06-02 16:53:40 +02:00
23193314f1
Merge branch 'master' into docs-flows
2020-06-02 15:20:24 +02:00
4d1658b35e
stages/identification: explicitly define enrollment and recovery
2020-05-31 23:01:08 +02:00
08302a04bf
docs: add docs for flows, start docs for stages
2020-05-30 22:36:01 +02:00
b1b63fbb7f
stages/prompt: add prompt order field
2020-05-28 23:21:43 +02:00
270739a45a
admin: fix policy testing form not showing the correct result
2020-05-28 21:50:43 +02:00
df8995deed
policies/*: remove Policy.negate, order, timeout ( #39 )
...
policies: rewrite engine to use PolicyBinding for order/negate/timeout
policies: rewrite engine to use PolicyResult instead of tuple
2020-05-28 21:45:54 +02:00
fdfc6472d2
admin: fixup some urls
2020-05-28 10:36:27 +02:00
Jens Langhammer
Jens L