131c3fdb32
stages/password: fix broken authentication
2020-05-09 21:30:12 +02:00
8a6009c278
flows: enum to django TextChoices
2020-05-09 20:54:56 +02:00
3456527f10
providers/saml: fix minor typing issue
2020-05-09 20:54:11 +02:00
28b913136d
root: set log level based on DEBUG flag
2020-05-09 20:53:47 +02:00
f700899640
stages/password: fix possibility of password in logs
2020-05-09 20:53:32 +02:00
212e966dd4
factors: -> stage
2020-05-08 20:59:51 +02:00
08c0eb2ec6
admin: add flows
2020-05-08 18:45:53 +02:00
872ecd93a6
flows: add to api and add forms
2020-05-08 18:29:18 +02:00
f8af9d6ce0
flows: make sure flow_slug is logged consistently
2020-05-08 17:18:43 +02:00
c3e43a7c2f
flows: fix denied view not being registered
2020-05-08 16:50:50 +02:00
273af0f1cb
core/auth: fix unittests for flows
2020-05-08 16:43:22 +02:00
2a85e5ae87
flows: complete migration to FlowExecutorView, fully use context
2020-05-08 16:10:27 +02:00
114bb1b0bd
flows: implement planner, start new executor
2020-05-08 14:33:14 +02:00
97b5d120f8
providers/oauth: fix default cors settings
2020-05-08 11:26:26 +02:00
e1f0fe45cb
static: fix dashes being removed from slugs
2020-05-08 11:26:12 +02:00
5400882d78
flows/: more migration progress, consolidate views
2020-05-07 21:30:52 +02:00
8de66b27ad
flows/*: Initial flows stage1 implementation
2020-05-07 20:51:06 +02:00
179f0097c0
provider/samlv2: more samlv2 progres
2020-05-07 19:25:15 +02:00
b40bffdf38
providers/samlv2: start implementing new SAML Provider
2020-05-07 01:20:08 +02:00
813dd2894f
*: add pyright type checking
2020-05-07 00:32:03 +02:00
80d90b91e8
core: add general admin.py loader, remove individual files
2020-05-07 00:05:10 +02:00
fff05e35ac
providers/saml: optionally verify SAML Signature
2020-05-06 18:03:12 +02:00
75bb59a22a
ui: fix help text not being shown for checkboxes
2020-05-06 17:59:19 +02:00
aac7e6be90
lib: fix ram usage due to bootstrap
...
bootstrap now exits (0) when all services are up, instead continuously running. This is combined with a simple bash script, which does this job instead.
This also adds /bootstrap.sh as docker ENTRYPOINT
2020-04-22 11:45:11 +02:00
c77f4204c0
new release: 0.8.15-beta
2020-04-10 21:57:20 +02:00
5f4452470b
providers/saml: fix metadata rendering when no singing keypair is selected
...
closes PASSBOOK-44
2020-04-10 21:54:23 +02:00
9a1270c693
providers/saml: fix wrong signing property being checked
...
closes PASSBOOK-45
2020-04-10 21:52:03 +02:00
7b9d1a1159
new release: 0.8.14-beta
2020-04-10 21:23:55 +02:00
e43db2e065
new release: 0.8.13-beta
2020-04-10 21:11:24 +02:00
d1c74d2160
lib: fix imports being changed every time
2020-03-05 17:28:03 +01:00
f2119ce567
providers/saml: fix signing_kp typo
2020-03-05 17:09:08 +01:00
f2154d9875
crypto: add property for private_key
2020-03-04 19:43:18 +01:00
80a50f9bdb
providers/saml: switch to new crypto
2020-03-03 23:35:50 +01:00
dc8b89a6b9
sources/saml: switch to new crypto
2020-03-03 23:35:38 +01:00
8df55f22aa
crypto: implement simple certificate-key pair for easier management
2020-03-03 23:35:25 +01:00
f6c322be27
providers/oidc: fix skip_authorization not being synced to oidc_client
2020-03-02 17:40:38 +01:00
a144552059
providers/oidc: fill claims with userinfo
2020-03-01 22:55:56 +01:00
535d529193
ui: fix title, fix navigation on user settings
2020-02-29 14:46:58 +01:00
6ed2e137a2
new release: 0.8.12-beta
2020-02-28 11:54:03 +01:00
45bd63c720
api: update old field names
2020-02-28 11:48:55 +01:00
736e13fc35
ui: add template for csrf errors
2020-02-28 11:41:28 +01:00
966fff008c
ui: re-enable branding on navbar
2020-02-28 11:37:07 +01:00
64f15eadbd
providers/saml: fix CSRF errors with POST binding
2020-02-28 10:50:16 +01:00
81b66ecdcd
core: remove some more dead code, add more help texts for factors
2020-02-27 16:39:30 +01:00
53e5cf7826
admin: fix some models not being paginated
2020-02-27 15:30:28 +01:00
82654b3fd9
ui: re-organize some of the navigation to make it cleaner for end-users
2020-02-27 14:59:34 +01:00
9b72c604dd
docs: fix some typos
2020-02-27 13:00:55 +01:00
5fb1b8044c
new release: 0.8.11-beta
2020-02-25 11:38:50 +01:00
b8daab4377
providers/saml: fix AccessRequiredView.dispatch not being called
2020-02-25 11:38:26 +01:00
c5b91bdae8
providers/saml: fix CannotHandleAssertion Error still being sent to sentry
2020-02-24 19:14:43 +01:00
39a208c55f
providers/saml: fix wrong key being used for params
2020-02-24 17:48:03 +01:00
a5bfef9b6b
providers/saml: fix leftover data in session, fix IdP initiated login
...
move can_handle calls to binding endpoints (/login/ and /login/initiate/), so that /login/authorize/ works either way, can clean up the session and audit
2020-02-24 17:34:52 +01:00
f1f4cbef9b
lib/sentry: fix SentryIgnoredException not being ignored correctly
2020-02-24 17:01:31 +01:00
8388120b06
new release: 0.8.10-beta
2020-02-24 15:30:57 +01:00
2bf96828f1
root: fix logging.basicConfig being called by pyjwkest
2020-02-24 15:30:28 +01:00
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
484dd6de09
providers/oidc: add error template
2020-02-24 14:19:02 +01:00
b743736c26
lib/logging: fix typo
2020-02-24 14:10:58 +01:00
af91e2079b
core: sort provider by pk when selection application provider
2020-02-24 14:10:51 +01:00
120d32e4dc
new release: 0.8.9-beta
2020-02-24 13:23:20 +01:00
238b489e07
root: add process ID to logging output
2020-02-24 13:20:32 +01:00
4daa70c894
core: fix saving of policy not correctly clearing it's cache
2020-02-24 13:15:52 +01:00
f8599438df
ui: fix lists not being rendered correctly
2020-02-24 13:13:42 +01:00
155c9a4c3f
ui: update remaining forms, completely remove jQuery
2020-02-24 13:13:28 +01:00
8433b5e583
ui: fix automatic slug generation
2020-02-24 12:40:16 +01:00
dc5ba144f1
ui: fix height of multiple select input
2020-02-24 12:40:06 +01:00
521a8b5356
ui: update more remaining templates
2020-02-23 22:49:56 +01:00
3453077d7b
root: set SameSite to None when debugging
2020-02-23 22:49:33 +01:00
70ede8581a
core: sort sources on login view
2020-02-23 20:19:01 +01:00
6a7545fd43
lib: add bootstrap command
2020-02-23 19:52:41 +01:00
a8926cbd07
lib: add more errors to sentry ignore
2020-02-23 19:48:14 +01:00
64d7b009ab
sources/oauth: fix invalid headers, fix invalid function signature
2020-02-23 19:42:57 +01:00
2b5fddb7bf
policies: add unittests for evaluator
2020-02-23 15:54:26 +01:00
b99d23c119
all: remove dead code
2020-02-23 15:32:20 +01:00
03905b74ff
admin: exclude anonymous user from listing
2020-02-23 15:27:28 +01:00
6b8a59cfbd
admin: show prettified yaml
2020-02-23 15:27:11 +01:00
d6fdcd3ef9
ui: re-add automatic slug generation
2020-02-23 15:20:41 +01:00
53ebc551d2
ui: fix icon sizing on login
2020-02-23 15:13:18 +01:00
3d4f43d6e3
ui: show default icon for source without icon
2020-02-23 15:09:58 +01:00
074cde7cd5
audit: save model's name or string representation
2020-02-23 15:04:30 +01:00
382e563590
new release: 0.8.8-beta
2020-02-23 14:45:45 +01:00
ca61a7cc21
audit: don't pop password as its censored already
2020-02-23 14:43:33 +01:00
fa2870afe0
sources: remove policies as they are not used currently
2020-02-23 14:40:06 +01:00
0f46207ea4
admin: fix provider list not having pagination
2020-02-23 14:29:21 +01:00
f4a676e2fb
sources/oauth: slugify provider type instead of just lowercase
2020-02-23 13:53:16 +01:00
b2c10e2387
ui: add missing discord and twitter icons
2020-02-23 13:47:21 +01:00
8c329dca7d
core: add migration to fix null fields in core.application
2020-02-22 19:26:34 +01:00
83da175749
policies/expression: add pb_client_ip field
2020-02-22 19:26:16 +01:00
995c87938f
core: fix default Null causing issues in translation
2020-02-21 23:10:00 +01:00
40678b2f84
new release: 0.8.7-beta
2020-02-21 22:17:11 +01:00
8dbbe9102b
ui: fix application grid icons, fix SAML Authorize
2020-02-21 22:16:58 +01:00
2f51f354de
ui: fix app icon not showing
2020-02-21 22:02:44 +01:00
04b815a33e
admin: show object usage count instead of list
2020-02-21 22:02:03 +01:00
2a4d68911b
helm: change static healthcheck and port
2020-02-21 21:50:16 +01:00
4d5a2d61ff
new release: 0.8.6-beta
2020-02-21 21:36:04 +01:00
efd88c27ad
audit: *crit* fix audit log not being protected correctly
2020-02-21 21:33:42 +01:00
80d361ccd2
audit: fix failed login events not being logged
2020-02-21 21:27:25 +01:00
6ed4501615
ui: fix branding viewport
2020-02-21 21:18:55 +01:00
a3ae827839
ui: centrally load CodeMirror and init via data tag
2020-02-21 21:02:03 +01:00
88c1ad4c1c
providers/saml: fix 500 when SAML Provider not assigned to application
2020-02-21 20:54:00 +01:00
1147c4901b
ui: clean up some more remaining templates
2020-02-21 20:40:40 +01:00
063181d7a7
ui: use compact templates
2020-02-21 20:24:02 +01:00
1285ba6fbb
ui: include font-awesome
2020-02-21 18:00:09 +01:00
a09a1793ec
ui: update templates for jinja2-related fields
2020-02-21 15:36:37 +01:00
50caa3ac3e
ui: update static docker image to download NPM modules
2020-02-21 15:33:54 +01:00
9440d24358
static: use codemirror from npm
2020-02-21 15:18:13 +01:00
26bf6fd22f
all: add more helpful help_text to models
2020-02-21 15:12:16 +01:00
e2f836feae
all: fix left over references to error templates
2020-02-21 15:05:32 +01:00
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
ea6a1422f7
ui: rewrite admin templates to pf4, add some helper scripts
2020-02-21 14:20:16 +01:00
8fd86a28ff
ui: fixup minor issues, add static app
2020-02-21 11:20:55 +01:00
d88283a7a9
Merge branch 'master' into pf4
...
# Conflicts:
# passbook/core/static/img/logos/discord.svg
# passbook/core/static/js/passbook.js
# passbook/core/templates/login/with_sources.html
# passbook/core/templates/overview/index.html
# passbook/core/views/authentication.py
2020-02-21 09:05:40 +01:00
32a15f84c0
root: run bandit as part of pre-commit
2020-02-21 09:03:59 +01:00
93ba4b7f62
root: use defusedxml's defuse_stdlib globally
2020-02-21 09:00:28 +01:00
187780dab2
new release: 0.8.5-beta
2020-02-20 21:39:13 +01:00
d988f37afc
lib: add SentryIgnoredException, to easily ignore exceptions from sentry
2020-02-20 21:38:53 +01:00
295c0bae3f
sources/saml: validate SAMLResponse signature
2020-02-20 21:34:25 +01:00
38a22ddf13
providers/saml: cleanup encoding
2020-02-20 21:33:10 +01:00
d06f1abb89
providers/saml: add POST binding support to Metadata
2020-02-20 17:38:42 +01:00
027a64fad2
providers/saml: change default NameID Format to emailAddress
2020-02-20 17:37:09 +01:00
84fc54ddaa
sources/saml: entity_id -> issuer
2020-02-20 17:23:27 +01:00
0b5caa85f5
all: sort imports and cleanup
2020-02-20 17:23:05 +01:00
14e0a17dbc
ui: don't remove dashes when auto generating slug
2020-02-20 17:13:50 +01:00
3c04afa31f
root: use different cookie names for dev instance
2020-02-20 17:08:11 +01:00
40a2a26904
sources/saml: fix Metadata cert including PEM header
2020-02-20 17:05:11 +01:00
c8b3c6e51a
sources/saml: fix `build_full_url` using incorrect URL parameter
2020-02-20 17:04:54 +01:00
e0272a6422
providers/saml: Show error message when trying to get metadata without assigning application
2020-02-20 17:04:20 +01:00
b290bbf6d7
new release: 0.8.4-beta
2020-02-20 16:17:23 +01:00
8d875cb01d
providers/saml: fix /login/ pointing to wrong view
2020-02-20 16:13:55 +01:00
36b1f8ba36
new release: 0.8.3-beta
2020-02-20 15:14:49 +01:00
6c889eff27
core: fix application icons not loading, fix with_sources being broken
2020-02-20 14:30:06 +01:00
9d8675e54b
new release: 0.8.2-beta
2020-02-20 13:57:46 +01:00
22ae986c0b
root: add logger name to log output
2020-02-20 13:52:14 +01:00
2bef5f3911
policies: struct -> types to match core
2020-02-20 13:52:05 +01:00
3c2b8e5ee1
all: prefix all UI related methods with ui_, switch to property and return dataclass
2020-02-20 13:51:41 +01:00
c96571bdba
core: fix discord logo being hard to see
2020-02-20 13:50:05 +01:00
2dfd93afb1
core: add more fields for metadata of applications
2020-02-20 13:45:22 +01:00
f1d77d475c
ui: start patternfly v4 migration
2020-02-19 21:03:39 +01:00
1d22e30c70
lib: sentry ignore Redis and OSError
2020-02-19 17:13:44 +01:00
07b7951390
sources/ldap: handle user_sync errors better, show warning when user exists already
2020-02-19 16:20:33 +01:00
995615d0a0
policies/expression: Return False if Policy returns Undefined and log warning
2020-02-19 16:19:02 +01:00
ac273aab75
core: raise PropertyMappingExpressionException when PropertyMapping returns Undefined
2020-02-19 16:18:31 +01:00
44cd03654d
core: base set maximum-scale to 1
2020-02-19 15:11:25 +01:00
3e2375f970
new release: 0.8.1-beta
2020-02-19 11:31:05 +01:00
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
e27a05a7fc
lib/sentry: ignore django validation error
2020-02-19 10:54:29 +01:00
e4886f0c6f
new release: 0.8.0-beta
2020-02-19 10:29:52 +01:00
8b2ce5476a
policies/expression: add annotation to update docs, name jinja filters/funcs more clearly
2020-02-19 10:23:42 +01:00
1b82283a20
docs: update policy types, add docs for expression policies
2020-02-19 10:21:28 +01:00
7f3d0113c2
policies: remove redundant policies which can be easily implemented with expressions
2020-02-19 09:51:15 +01:00
0f6dd33a6b
api: add expression policy to API URLs
2020-02-19 09:49:57 +01:00
5b79b3fd22
policies/expression: move evaluation code into separate class
2020-02-19 09:49:38 +01:00
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
865abc005a
sources/oauth: remove leading spaces in default URLs
2020-02-18 21:49:53 +01:00
a2725d5b82
sources/oauth: remove redundant OAuth2Clients
2020-02-18 21:49:40 +01:00
4a05bc6e02
sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz
2020-02-18 21:49:23 +01:00
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
ff25c1c057
admin: load custom policy templates
2020-02-18 21:35:21 +01:00
78cddca0d7
admin: fix user object being overwritten when deleting a user
2020-02-18 21:35:06 +01:00
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
591d2f89a1
audit: log event creation on save
2020-02-18 17:05:11 +01:00
7c353f9297
sources/oauth: remove supervisr
2020-02-18 17:01:08 +01:00
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
878169ea2e
core: only show icon on login page if defined
2020-02-18 17:00:26 +01:00
38dfb03668
new release: 0.7.17-beta
2020-02-18 16:29:23 +01:00
e2631cec0e
factors/view: show concise error message when domain is mis-configured
2020-02-18 16:29:04 +01:00
9f00843441
policies/expression: add Expression based policy
2020-02-18 15:12:50 +01:00
f31cd7dec6
core: check PropertyMapping's expression syntax before save
2020-02-18 15:12:05 +01:00
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00
fbd4bdef33
providers/saml: add modal to show metadata without download
2020-02-18 10:57:43 +01:00
5b22f9b6c3
providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form
2020-02-18 10:57:30 +01:00
083e317028
lib: add helper method for 400 response with message
2020-02-18 10:13:53 +01:00
95416623b3
sources/ldap: better handle property mapping evaluation errors
2020-02-18 10:13:05 +01:00
813b2676de
providers/saml: better handle PropertyMapping evaluation errors
2020-02-18 10:12:42 +01:00
aeca66a288
providers/saml: change assertion_valid_not_before default to -5 minutes
2020-02-17 21:32:23 +01:00
04a5428148
new release: 0.7.16-beta
2020-02-17 21:02:54 +01:00
73b173b92a
admin: fix form missing on update pages
2020-02-17 21:02:47 +01:00
7cbf20a71c
admin: fix CodeMirror field not loading correctly
2020-02-17 21:02:35 +01:00
7a98e6d92b
new release: 0.7.15-beta
2020-02-17 20:45:56 +01:00
3aa2f1e892
*: propertymapping template -> expression
2020-02-17 20:38:14 +01:00
bc4b7ef44d
providers/saml: add custom help text for templates, add docs for User Object reference
2020-02-17 20:30:14 +01:00
9400b01a55
admin: parameterise generic from's base template
2020-02-17 20:29:41 +01:00
e57da71dcf
sources/ldap: update LDAP source to use new property mappings
2020-02-17 17:55:48 +01:00
7268afaaf9
providers/saml: update to new PropertyMappings
2020-02-17 17:50:11 +01:00
205183445c
admin: add support for template field and Jinja2 highlighting
2020-02-17 17:48:53 +01:00
e6c47fee26
core: add template field to PropertyMapping
2020-02-17 17:47:51 +01:00
a5629c5155
providers/saml: add changeable signature and digest algorithm
2020-02-17 16:28:18 +01:00
41689fe3ce
sources/* add missing migrations
2020-02-17 16:27:35 +01:00
8e84208e2c
new release: 0.7.14-beta
2020-02-17 15:42:14 +01:00
32a48fa07a
providers/saml: more typehints
2020-02-17 15:40:49 +01:00
773a9c0692
policies/engine: fix cached policy results being ignored
2020-02-17 15:37:51 +01:00
8808e3afe0
policies/engine: set mp start method to fork to fix issues under macOS
2020-02-17 15:20:30 +01:00
ecea85f8ca
lib/config: remove autoreload handler as this API is gone in django 3
2020-02-17 15:20:11 +01:00
5dfa141e35
root/wsgi: log requests with event name of request
2020-02-16 14:36:31 +01:00
447e81d0b8
providers/saml: handle uncompressed SAML AuthNRequest
2020-02-16 14:08:35 +01:00
e138076e1d
sources/saml: move labels from forms to models
2020-02-16 12:34:46 +01:00
721d133dc3
sources/oauth: move labels from form to models
2020-02-16 12:34:33 +01:00
75b687ecbe
sources/ldap: move labels from form to models
2020-02-16 12:30:45 +01:00
bdd1863177
providers/saml: move field labels from Form into models
2020-02-16 12:30:26 +01:00
e5b85e8e6a
providers/saml: move default saml properties to DB
2020-02-16 12:29:53 +01:00
d7481c9de7
new release: 0.7.13-beta
2020-02-14 15:35:05 +01:00
571373866e
providers/saml: some more cleanup, fix get_time_string when called without argument
2020-02-14 15:34:24 +01:00
e36d7928e4
providers/saml: big cleanup, simplify base processor
...
add New fields for
- assertion_valid_not_before
- assertion_valid_not_on_or_after
- session_valid_not_on_or_after
allow flexible time durations for these fields
fall back to Provider's ACS if none is specified in AuthNRequest
2020-02-14 15:19:48 +01:00
2be026dd44
global: fix import order
2020-02-14 15:17:40 +01:00
d9ecb7070d
core: add more prometheus metrics
2020-01-19 21:01:26 +01:00
fc4a46bd9c
root: fix credential variables overwriting each other
2020-01-17 11:16:23 +01:00
7bf7bde856
root: fix prometheus path in ServiceMonitor, return WWW-Authenticate header so basic auth is sent
2020-01-17 10:55:11 +01:00
9bdff14403
providers/app_gw: fix wrong UPSTREAM parameter
2020-01-03 09:15:07 +01:00
f124314eab
new release: 0.7.12-beta
2020-01-02 20:22:44 +01:00
684e4ffdcf
providers/app_gw: fix formatting
2020-01-02 20:22:36 +01:00
d9ff5c69c8
providers/app_gw: fix assignment of response_types
2020-01-02 20:20:10 +01:00
8142e3df45
providers/oidc: fix application property of wrong object being used
2020-01-02 20:19:53 +01:00
86f16e2781
providers/oidc: fix incorrectly sorted imports
2020-01-02 16:42:52 +01:00
2ed8e72c62
new release: 0.7.11-beta
2020-01-02 16:38:11 +01:00
edeed18ae8
providers/oidc: fix error when using with app_gw
2020-01-02 16:38:01 +01:00
d24133d8a2
core: fix _redirect_with_qs appending an array to the URL
2020-01-02 16:14:56 +01:00
b9733e56aa
providers/app_gw: fix passbook domain being empty
2020-01-02 16:09:17 +01:00
cd34413914
providers/app_gw: separate host field into external_ and internal_
2020-01-02 16:09:04 +01:00
c3a4a76d43
providers/app_gw: fix Client's response_type not being set
2020-01-02 16:06:32 +01:00
dce1edbe53
new release: 0.7.10-beta
2020-01-02 14:54:52 +01:00
6207226bdf
new release: 0.7.9-beta
2020-01-02 14:09:58 +01:00
696cd1f247
new release: 0.7.8-beta
2020-01-02 14:03:36 +01:00
575739d07c
ci: add bandit for static security checks
2020-01-02 13:41:49 +01:00
2d7e70eebf
audit: fix import order
2020-01-02 13:20:41 +01:00
387f3c981f
audit: fix error when trying to save models with UUID as PK
2020-01-02 13:12:23 +01:00
7c706369cd
new release: 0.7.7-beta
2020-01-02 11:22:08 +01:00
c448f87027
new release: 0.7.6-beta
2020-01-02 10:34:34 +01:00
9d7ed9a0ed
new release: 0.7.7-beta
2019-12-31 14:02:01 +01:00
d77afd1ded
new release: 0.7.6-beta
2019-12-31 13:47:39 +01:00
766518ee0e
audit: sanitize kwargs when creating audit event
2019-12-31 13:33:07 +01:00
74b2b26a20
ci: disable pylint's bad-continuation to please black
2019-12-31 13:17:35 +01:00
3bd1eadd51
all: implement black as code formatter
2019-12-31 12:51:16 +01:00
8eb3f0f708
ci: upgrade pylint to latest version
...
core: also upgrade kombu as https://github.com/celery/kombu/issues/1101 is fixed now
2019-12-31 12:45:29 +01:00
31ea2e7139
audit: fix internal server error from passing models
2019-12-31 11:40:03 +01:00
f986dc89ad
all: migrate to github
2019-12-30 10:25:35 +01:00
b21fd10093
new release: 0.7.5-beta
2019-12-16 22:05:22 +01:00
b428ec5237
providers/oidc: remove duplicate fields
2019-12-14 14:28:36 +01:00
f22dbba931
providers/saml: add UID field
2019-12-13 13:45:10 +01:00
0946d6a25d
docs: add initial structure, add docs for policies and factors
2019-12-09 21:00:45 +01:00
807cbbeaaf
audit: rewrite to be independent of django http requests, allow custom actions
2019-12-05 16:14:08 +01:00
74cd0bc08f
all(minor): remove old, unused code
2019-12-05 15:07:37 +01:00
b08ec0477e
all(minor): replace django-ipware with custom implementation
2019-12-05 14:33:55 +01:00
328c999cb9
ci(minor): reenable prospector
2019-12-05 14:31:51 +01:00
c37e382c15
root(minor): fix incorrect user IP being shown
2019-12-02 18:05:06 +01:00
784dd0fdd6
root(minor): fix unnecessary redirect for prometheus
2019-12-02 18:04:55 +01:00
23146de2bf
new release: 0.7.4-beta
2019-11-20 13:15:46 +01:00
979bea17ed
root(minor): disable error reporting by default
2019-11-20 13:12:37 +01:00
99fadf2e55
new release: 0.7.3-beta
2019-11-19 18:14:06 +01:00
be642bc874
root(major): fix dbbackup not working with prometheus
2019-11-19 18:08:25 +01:00
089b48aad1
Merge branch 'agw'
2019-11-11 18:14:03 +01:00
2997cb83b1
providers/appgw(major): rewrite to use oauth2_proxy
2019-11-11 18:13:46 +01:00
08f0aca894
provider/oidc(minor): include claims in id_token
2019-11-11 13:19:54 +01:00
019a0cb14d
new release: 0.7.2-beta
2019-11-08 14:26:52 +01:00
7f150c96b4
new release: 0.7.1-beta
2019-11-08 14:04:59 +01:00
73558f30d1
root(minor): revert to django_redis cache
2019-11-08 13:58:10 +01:00
3d73aac3ab
helm(minor): add service monitors
2019-11-08 12:24:42 +01:00
e4fbcd3735
root(major): add prometheus
2019-11-08 12:23:51 +01:00
44c0eb37cf
sources/saml(minor): fix lint issue
2019-11-07 18:02:59 +01:00
adc3dcc2c4
sources/saml(minor): disallow login if source is not enabled
2019-11-07 17:35:25 +01:00
bac8227371
sources/saml(minor): fix fields not being shown
2019-11-07 17:28:59 +01:00
73d4d9dfe0
admin(major): fix incorrect permissions being set
2019-11-07 17:25:36 +01:00
dabce36667
sources/saml(major): add saml SP
2019-11-07 17:02:56 +01:00
3bd56ce522
api(minor): fix invalid fieldls being selected
2019-11-07 10:30:22 +01:00
ed1fcc3930
new release: 0.7.0-beta
2019-11-02 16:31:23 +00:00
c22ddc5394
root(minor): catch keyboardinput and s3 error from sentry
2019-11-02 16:27:28 +00:00
0b9fc9e444
root(minor): fallback to empty string if no Host header ise set
2019-11-01 12:50:38 +00:00
e862b97005
all(major): add API for all objects
2019-10-28 17:55:36 +01:00
cffe09b02e
all(major): add most models to API
2019-10-28 17:40:57 +01:00
846a86fb62
fix lint
2019-10-28 14:44:46 +01:00
463c130351
core(major): add api for most simple objects
2019-10-28 14:27:43 +01:00
ffca957838
audit(major): AuditEntry -> Event
2019-10-28 14:26:34 +01:00
543e949a48
api(minor): start with api v2
2019-10-28 14:26:07 +01:00
feb80049aa
Merge branch 'master' into guardian
2019-10-25 22:18:13 +02:00
5c59c8ccb6
new release: 0.6.11-beta
2019-10-15 16:56:24 +02:00
bf6c9e8c4a
new release: 0.6.10-beta
2019-10-15 16:05:51 +02:00
3353aa0298
root(minor): disable uwsgi request loggin and use custom logging instead
2019-10-15 15:57:37 +02:00
d4cb1a98c7
policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
2019-10-15 15:44:59 +02:00
13f4ea0b8b
root(minor): sort keys in log output
2019-10-15 15:40:38 +02:00
261d57ad7b
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/admin/views/invitations.py
# passbook/admin/views/policy.py
# passbook/admin/views/providers.py
# passbook/admin/views/sources.py
# passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
4086252979
core(major): add integrated database backup
2019-10-15 13:52:33 +02:00
8bdf12cff1
recovery(minor): add unittests
2019-10-14 17:12:56 +02:00
65a065c4ee
policy(minor): add unittests for policy engine
2019-10-14 16:08:24 +02:00
a691ee529c
new release: 0.6.9-beta
2019-10-14 15:00:30 +02:00
f1c4a62612
policy(major): fix error when policy.negate is enabled
2019-10-14 15:00:20 +02:00
358e39ced0
core(major): remove action field from policy
2019-10-14 13:57:38 +02:00
82d14f37c3
new release: 0.6.8-beta
2019-10-14 13:18:51 +02:00
2a27325dfd
admin(major): add pagination to all listviews
2019-10-14 13:15:42 +02:00
a6dee2e8ed
admin(minor): fix sidebar disappearing when editing user
2019-10-14 13:14:54 +02:00
2ff1635696
core/sources(minor): refactor Source's property
2019-10-13 16:47:13 +02:00
1cb6b5e984
new release: 0.6.7-beta
2019-10-12 14:23:14 +02:00
1fe420fd80
admin(major): add YAMLField for attributes, add codemirror editor
2019-10-12 14:23:03 +02:00
50172e58d8
sources/ldap(minor): save ldap password for user upon successful bind
2019-10-12 14:00:34 +02:00
d7483d129f
sources/ldap(minor): call set_unusable_password when creating new user
2019-10-12 13:59:52 +02:00
34ed0b3594
new release: 0.6.6-beta
2019-10-11 14:33:36 +02:00
9de950220f
core(minor): small css adjustment
2019-10-11 14:32:19 +02:00
567c90b4c6
new release: 0.6.5-beta
2019-10-11 14:26:20 +02:00
ae19236366
factors/email(minor): fix default timeout being 0, which breaks task
2019-10-11 14:24:58 +02:00
f9babe7089
core(minor): fix timezone warning when cleaning nonces
2019-10-11 14:23:59 +02:00
32abb27e61
sources/ldap(minor): fix lint
2019-10-11 13:43:35 +02:00
8478b03892
sources/ldap(major): implement membership sync, add more settings
2019-10-11 13:41:12 +02:00
e972f2b289
Merge branch 'master' into ldap-rewrite
2019-10-11 12:53:56 +02:00
22c4fb1414
sources/ldap(major): add sync_users and sync_groups, rewrite auth_user method
2019-10-11 12:53:48 +02:00
0154def916
root(minor): allow subapps to define CELERY_BEAT_SCHEDULE
2019-10-11 12:47:29 +02:00
fc69b6851d
core(minor): tags -> attributes, add attributes to user, add propertymappings to source
2019-10-11 12:47:06 +02:00
44a3c7fa5f
Merge branch 'master' into ldap-rewrite
2019-10-11 10:24:12 +02:00
37111fd07b
core(minor): merge migrations
2019-10-10 17:41:22 +02:00
4e6653e299
ldap(major): start rewrite
2019-10-10 17:36:09 +02:00
143a575369
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/core/models.py
2019-10-10 17:29:34 +02:00
c782585287
ci(minor): re-enable pylint
2019-10-10 17:22:56 +02:00
48a04744e0
new release: 0.6.4-beta
2019-10-10 16:09:38 +02:00
b9991465ee
recovery(new): add recovery app to create recovery links
2019-10-10 14:05:16 +02:00
3d8242be06
core(minor): add new, optional description field to nonce
2019-10-10 14:04:58 +02:00
344a8817c3
admin(minor): fix linting
2019-10-10 13:05:03 +02:00
3afb0d4f6d
admin(minor): remove partial API
2019-10-10 13:04:20 +02:00
c9714893bb
admin(major): rewrite all views to use guardian mixins
2019-10-10 13:01:49 +02:00
3185a86b22
core(minor): add separate permission to reset user's password
2019-10-10 13:01:36 +02:00
a53f7a49ac
root(minor): start implementing guardian
2019-10-10 10:45:51 +02:00
ca3bcc565d
ui(minor): simplify top navigation
2019-10-10 10:02:48 +02:00
c1dae0b599
sources/oauth(minor): fix wrong settings reference
2019-10-09 19:46:23 +02:00
e70d3b6286
new release: 0.6.3-beta
2019-10-09 14:44:50 +02:00
17e6bc921b
core(minor): fix import order
2019-10-09 14:37:40 +02:00
3b7e47dbe2
settings(minor): use cached_db for session, use localhost as domain
2019-10-09 14:30:53 +02:00
2e15b24f0a
*(minor): switch has_user_settings to return Optional dataclass instead of tuple
2019-10-09 12:47:14 +02:00
088b9592cd
core(minor): remove unused code
2019-10-08 15:04:38 +02:00
b1e4e32b83
providers/oidc(minor): correctly create audit entry on authz
2019-10-08 14:34:59 +02:00
d91a852eda
factors/email(minor): start rebuilding email integration as factor
2019-10-08 14:30:17 +02:00
171c5b9759
factors/password(minor): remove form from core
2019-10-08 14:23:02 +02:00
64290b2a37
admin(minor): add view to create user
2019-10-08 11:27:19 +02:00
72769b8a0a
lib(minor): cleanup default settings
2019-10-08 10:44:44 +02:00
6d0ecd228e
new release: 0.6.2-beta
2019-10-07 21:24:56 +02:00
a390bb7b59
factors/otp(minor): fix old URLs
2019-10-07 21:23:25 +02:00
17eea4a10c
new release: 0.6.1-beta
2019-10-07 18:53:04 +02:00
ec73b53340
providers/saml(minor): fix last wrong urls names
2019-10-07 18:36:09 +02:00
8f42a7f0b4
new release: 0.6.0-beta
2019-10-07 17:18:19 +02:00
2c221ea819
providers/oauth(minor): fix import order
2019-10-07 17:14:52 +02:00
93e0441b58
helm(minor): don't directly mount configmap
2019-10-07 17:14:08 +02:00
59fc223a85
factors/captcha(minor): load correct keys
2019-10-07 16:58:06 +02:00
0a6f555c23
otp(minor): disable autocomplete for code input
2019-10-07 16:57:54 +02:00
6a4233d6fd
providers/oauth(minor): fix urls not being mounted in the right path
2019-10-07 16:57:36 +02:00
15fa7e9652
ui(minor): merge menus
2019-10-07 16:50:13 +02:00
f2acc154cd
*(minor): small refactor
2019-10-07 16:33:48 +02:00
d21ec6c9a5
root(minor): get rid of duplicate settings
2019-10-04 16:09:35 +02:00
34cbf5f702
new release: 0.5.0-beta
2019-10-04 13:55:13 +02:00
1cd149c815
policy(minor): fix linting
2019-10-04 13:49:27 +02:00
4c6f562805
policy(minor): fix deadlock issue
2019-10-04 13:44:26 +02:00
e59c4ec1c7
root(minor): cleanup, remove unused log
2019-10-04 13:43:47 +02:00
1169db7530
docker(minor): move docker-related files into separate folder
2019-10-04 12:45:19 +02:00
1453008796
wsgi(minor): add proper request logging
2019-10-04 12:44:59 +02:00
2209b6d603
deploy(minor): fix robots.txt not being in the right path
...
fix path matching in docker compose
2019-10-04 12:01:38 +02:00
ccbc0384f9
deploy(minor): remove app-gw, add robots.txt
2019-10-04 11:57:41 +02:00
a48924c896
docker(minor): switch to debian based image so we can use wheels
2019-10-04 11:50:52 +02:00
afca94ceb8
policy(minor): improve loading of policy subclasses
2019-10-04 10:22:06 +02:00
0b86231a36
*(minor): make better use of structured logging
2019-10-04 10:21:33 +02:00
c0df1f38b8
*(minor): remove __name__ param from get_logger
2019-10-04 10:08:53 +02:00
2b8fed8f4e
saml_idp(minor): rewrite to use defusedxml instead of bs4
2019-10-04 09:50:25 +02:00
c7322a32a0
app_gw(minor): remove current implementation
2019-10-04 09:28:28 +02:00
64b75cab84
policy(minor): add data class for policy request
2019-10-03 10:45:31 +02:00
f58bc61999
new release: 0.4.2-beta
2019-10-02 21:05:51 +00:00
fb8ccc0283
lint(minor): fix import order
2019-10-02 21:05:37 +00:00
c38012f147
new release: 0.4.1-beta
2019-10-02 21:04:16 +00:00
920e705d75
policy(minor): lookup correct policy subclass
2019-10-02 22:28:58 +02:00
de0b137b1e
policy(minor): improve error handling
2019-10-02 22:28:39 +02:00
8745ac7932
new release: 0.4.0-beta
2019-10-01 17:01:30 +02:00
b8656858ec
k8s(minor): load secrets as env vars
2019-10-01 15:42:14 +02:00
aec1ccd88d
root(minor): fix redis password not being loaded
2019-10-01 15:30:35 +02:00
9d640efc88
new release: 0.3.0-beta
2019-10-01 13:50:50 +02:00
2bffc12ef9
ci(minor): fix default settings so CI works
2019-10-01 13:22:38 +02:00
7bff2734aa
lint(minor): fix all remaining pylint and prospector errors
2019-10-01 11:08:56 +02:00
84768c0ec6
helm(minor): remove rabbitmq
2019-10-01 10:48:55 +02:00
f4499a5459
*(minor): stdlib logging to structlog
2019-10-01 10:24:10 +02:00
b3aede5bba
policy(minor): Move policy-related code to separate package
2019-10-01 10:17:39 +02:00
c2c5ff6912
config(minor): CONFIG.get -> CONFIG.y
2019-09-30 18:04:04 +02:00
06d15d8a27
new release: 0.2.8-beta
2019-07-22 17:18:07 +02:00
4cf6c36f34
new release: 0.2.7-beta
2019-07-22 15:54:34 +02:00
62abe3f256
suspicious_policy: fix Request IP lookup
2019-07-22 15:46:41 +02:00
174472bb45
all: get rid of individual requirements file, remove version from every module
2019-07-22 15:20:17 +02:00
f97a5eeefb
api: *actually* fix drf dependency issue
2019-07-15 15:05:54 +00:00
10fd96981e
new release: 0.2.6-beta
2019-07-15 13:42:18 +00:00
67e3eb549c
api: fix wrong django-rest-framework dependency
2019-07-15 13:42:03 +00:00
30a6d1f0b1
new release: 0.2.5-beta
2019-07-15 13:31:04 +00:00
3d1fa9f048
app_gw: Rewrite redirect responses (replace upstream location with server_name)
2019-07-09 15:28:52 +02:00
1d2be6e68b
root: fix sentry sending wrong release
2019-07-05 16:00:01 +02:00
c21e343986
oidc_provider: fix error when creating a new provider
2019-07-05 15:59:52 +02:00
ff37ed095c
new release: 0.2.4-beta
2019-07-05 15:30:13 +02:00
8623a2c3fc
oidc_provider: fix error trying to create RSA Key before migrations are run
2019-07-05 15:27:04 +02:00
23d277eaf1
remove oidc from OAuth2, add dedicated OIDC provider
2019-07-05 15:21:48 +02:00
bccf424c5e
new release: 0.2.3-beta
2019-07-04 16:25:33 +02:00
ed25801e6e
core: revert to cherrypy for main webserver and use daphne only for app_gw
2019-07-04 15:23:05 +02:00
4d0148193f
root: migrate to new sentry instance
2019-07-03 17:35:54 +02:00
804ae15c2e
new release: 0.2.2-beta
2019-06-25 18:50:41 +02:00
b35a9fad86
Fix linting errors with current build-base image
2019-06-25 18:50:37 +02:00
a4f83bd28a
new release: 0.2.1-beta
2019-06-25 18:25:27 +02:00
2099bbb713
new release: 0.2.0-beta
2019-06-25 18:16:14 +02:00
67beba8f78
Fix wrong URLConf being loaded
2019-06-25 18:11:08 +02:00
a798412e17
separate passbook.core into passbook.root and passbook.core
...
Move Main Django Project into passbook.root while passbook.core holds core functionality.
passbook.root contains main settings, ASGI & WSGI, celery and URLs.
2019-06-25 18:00:54 +02:00
3b2c2d781f
Fix typo
2019-06-25 17:59:51 +02:00
98c844f3d6
improve OIDC compatibility
2019-06-25 17:57:25 +02:00
2645bd0132
new release: 0.1.38-beta
2019-04-29 23:26:18 +02:00
0ec1468058
remove unused import
2019-04-29 23:22:54 +02:00
5d1a3043b2
create SSOLoginPolicy, which allows factors to be applied when user comes from SSO login
...
implement SESSIION_IS_SSO_LOGIN for OAuth Client and core MFA
2019-04-29 23:19:37 +02:00
b46958d1f9
send session to task
2019-04-29 23:18:51 +02:00
5daa8d5fe3
fix missing/wrong widget inputs
2019-04-29 23:16:04 +02:00
31846f1d05
Show redirect URL in <pre> element
2019-04-29 22:32:22 +02:00
1fac964b8b
increase application close timeout
2019-04-29 22:19:26 +02:00
dfa6ed8ac2
add help to show how SAML Property Mapping substitutes variables
2019-04-29 22:19:13 +02:00
66fe10299e
new release: 0.1.37-beta
2019-04-29 21:43:18 +02:00
e0a3ec033f
fix IDP-Initiated SAML Login
2019-04-29 21:39:41 +02:00
7033ec0ab9
remove debug print
2019-04-29 21:39:30 +02:00
4004579905
remove nexus_upload command
2019-04-29 21:39:16 +02:00
9fe9e48a5c
new release: 0.1.36-beta
2019-04-29 20:57:57 +02:00
595a6c7fe6
remove guardian completely
2019-04-29 20:57:54 +02:00
11b5860d4a
new release: 0.1.35-beta
2019-04-29 20:47:32 +02:00
9bdbff4cda
fix gitlab-ci using incorrect variables for docker access
2019-04-29 20:42:24 +02:00
e0d597eeac
show cache on admin overview, add modal to clear cache, re-add logging to policy
2019-04-29 20:37:44 +02:00
f576985cc9
remove django guardian and check application access via PolicyEngine
2019-04-29 20:07:18 +02:00
22a6aef60b
fix wrong import
2019-04-29 20:06:52 +02:00
ec0a6e7854
new release: 0.1.34-beta
2019-04-29 19:22:20 +02:00
6904608e6f
fix clicking on administration always loading admin interface
2019-04-29 19:22:14 +02:00
cb3732cb2b
filter out connection errors for sentry
2019-04-29 19:16:49 +02:00
9f8fb7378a
add audience field, switch base processor, better handle processor loading failure
2019-04-18 11:30:21 +02:00
98cd646044
remove unneeded processors
2019-04-18 11:09:12 +02:00
53918462b6
new release: 0.1.33-beta
2019-04-18 10:28:12 +02:00
8e5c3f2f31
remove unused import
2019-04-17 17:53:45 +02:00
5a3b2fdd49
add Rancher SAML processor
2019-04-17 17:53:15 +02:00
e47b9f0d57
fix SAML Request not being parsed all the time
2019-04-17 17:53:05 +02:00
146dd747f1
fix EntityID being None in SAML Metadata
2019-04-17 17:52:24 +02:00
f2ce56063b
bump version: 0.1.31-beta -> 0.1.32-beta
2019-04-17 14:27:41 +02:00
9072b836c6
automatically add response_type if not given in OAuth Request
2019-04-17 14:25:51 +02:00
2fa57d064e
bump version: 0.1.30-beta -> 0.1.31-beta
2019-04-13 17:58:09 +02:00
e7129d18f6
fix inconsistent migrations
2019-04-13 17:52:11 +02:00
d2bf9f81d6
remove raven middleware
2019-04-13 17:46:51 +02:00
30acf0660b
Merge branch 'master' into 37-guardian
2019-04-13 17:43:02 +02:00
dda41af5c8
remove logging to increase speed, add more caching to policy and rewriter
2019-04-13 17:22:03 +02:00
9b5b03647b
move actual proxying logic to separate class
2019-04-13 16:05:11 +02:00
940b3eb943
move logging to separate thread
2019-04-13 16:04:48 +02:00
16eb629b71
only enable sentry when not DEBUG
2019-04-11 15:30:42 +02:00
755045b226
try to fix app_gw being null
2019-04-11 15:30:07 +02:00
61478db94e
use global urllib Pools
2019-04-11 15:29:35 +02:00
f69f959bdb
allow setting authentication_header to empty string (disabling the header)
2019-04-11 15:29:01 +02:00
146edb45d4
bump version: 0.1.29-beta -> 0.1.30-beta
2019-04-11 14:22:34 +02:00
045a802365
don't use context manager in web command
2019-04-11 14:22:32 +02:00
c90d8ddcff
bump version: 0.1.28-beta -> 0.1.29-beta
2019-04-11 14:03:08 +02:00
a3ef26b7ad
Run collectstatic before coverage, use autoreload on celery worker
2019-04-11 13:54:11 +02:00
19cd1624c1
replace cherrypy with daphne
2019-04-11 13:43:49 +02:00
366ef352c6
switch to whitenoise for static files
2019-04-11 13:43:08 +02:00
a1a5223b58
bump version: 0.1.27-beta -> 0.1.28-beta
2019-04-11 10:48:31 +02:00
b369eb28f1
set default log level to warn, fix clean_nonces not working
2019-04-11 10:43:13 +02:00
9b8f390e31
Merge branch '38-websocket-proxying' into 'master'
...
Resolve "Websocket Proxying"
Closes #38
See merge request BeryJu.org/passbook!24
2019-04-10 20:42:24 +00:00
11630c9a74
switch kubernetes deployment to daphne server
2019-04-10 22:38:25 +02:00
c9ac10f6f6
Implement websocket proxy
2019-04-10 19:03:42 +02:00
04d613cb28
Move code from django-revproxy to app_gw to fix cookie bug
2019-04-10 19:03:22 +02:00
40866f9ecd
Choose upstream more cleverly
2019-04-10 18:49:33 +02:00
d8585eb872
trigger autoreload from config files
2019-04-10 18:48:55 +02:00
15aaeda475
remove unused import
2019-04-10 18:47:21 +02:00
8536ef9e23
Add guardian for Application permissions
2019-04-10 18:46:33 +02:00
35b6bb6b3f
fix failing CI
2019-04-09 17:26:53 +02:00
eaa573c715
fully remove raven and switch WSGI and logging to sentry_sdk
2019-04-05 16:11:53 +02:00
660972e303
add ability to have non-expiring nonces, clean up expired nonces
2019-04-04 21:49:10 +02:00
a21012bf0c
switch from raven to sentry_sdk
2019-04-04 21:48:50 +02:00
80049413f0
bump version: 0.1.26-beta -> 0.1.27-beta
2019-03-22 14:51:13 +01:00
2739442d4a
prepare 0.1.27
2019-03-22 14:51:09 +01:00
c679f0a67c
bump version: 0.1.25-beta -> 0.1.26-beta
2019-03-22 12:48:00 +01:00
4d6bb60134
add custom template views
2019-03-22 12:16:30 +01:00
81ac951872
validate upstream in form
2019-03-22 10:55:26 +01:00
f33e553cfd
always parse url instead of once
2019-03-22 10:55:04 +01:00
9b0240dc26
bump version: 0.1.24-beta -> 0.1.25-beta
2019-03-21 16:50:00 +01:00
c327310392
prepare 0.1.24-beta release
2019-03-21 16:49:57 +01:00
7e87bfef5b
validate server_name in form
2019-03-21 16:36:38 +01:00
a7af5268de
Invalidate cache when ApplicationGateway instance is saved
2019-03-21 16:27:37 +01:00
6d916029bb
implement actual Rewriting logic
2019-03-21 16:22:07 +01:00
81fdcbadad
add compiled regex to RewriteRule
2019-03-21 16:21:51 +01:00
ec1e25fe71
cleanup property_mapping list
2019-03-21 16:21:11 +01:00
b5306e4a94
Redirect to login on reverse proxy
2019-03-21 15:15:01 +01:00
801b8a1e59
prevent ZeroDivisionError
2019-03-21 15:05:04 +01:00
3a52059793
cleanup post-migration mess
2019-03-21 15:02:33 +01:00
10b7d99b37
Merge branch 'master' into 30-application-security-gateway
...
# Conflicts:
# passbook/core/policies.py
# passbook/core/settings.py
2019-03-21 14:58:10 +01:00
6be8d0cbb2
Better handle policy timeouts
2019-03-21 14:53:57 +01:00
5b8e3689ec
Check for policies in app_gw
2019-03-21 14:53:47 +01:00
25a5d8f5da
Don't use LoginRequired for PermissionDenied View
2019-03-21 14:53:38 +01:00
883d439544
add timeout field to policy to prevent stuck policies
2019-03-21 14:48:51 +01:00
29913773a7
invalidate cache when policy is saved
2019-03-21 11:29:11 +01:00
0bc6a4fed4
explicitly use redis db
2019-03-21 11:28:57 +01:00
4645d8353f
utilise cache in PolicyEngine
2019-03-21 11:08:32 +01:00
260c5555fa
add redis dependency back in for caching
2019-03-21 11:08:08 +01:00
6f7b917c38
bump version: 0.1.23-beta -> 0.1.24-beta
2019-03-20 23:00:33 +01:00
ae3d3d0295
fix TypeError: can only concatenate list (not "str") to list
2019-03-20 22:50:09 +01:00
c23ceacd0b
initial implementation of reverse proxy, using django-revproxy from within a middleware
...
add new config entry "primary_domain" which is used to set the cookie domain
2019-03-20 22:42:47 +01:00
5155204283
Merge branch '32-automatically-set-owner-field-when-creating-oauth-provider' into 'master'
...
Resolve "Automatically set owner field when creating OAuth Provider"
Closes #32
See merge request BeryJu.org/passbook!16
2019-03-20 21:20:54 +00:00
d6f9b2e47d
remove user field from form. Closes #32
2019-03-20 20:09:27 +01:00
67aa4aef11
add modal for OAuth Providers showing the URLs
2019-03-20 20:03:28 +01:00
9e46c8bfec
bump version: 0.1.22-beta -> 0.1.23-beta
2019-03-18 20:54:31 +01:00
fccc8f4959
set issuer to root address instead of well-known path
2019-03-18 20:42:32 +01:00
c9f73d718e
start implementing openid connect discovery
2019-03-18 20:35:11 +01:00
bfa58be721
bump version: 0.1.21-beta -> 0.1.22-beta
2019-03-14 21:22:15 +01:00
81ab9092fc
Fix OAuth Client's disconnect view having invalid URL names
2019-03-14 21:19:14 +01:00
29d5962c4c
add Azure AD Source
2019-03-14 21:18:55 +01:00
5c75339946
point to correct icons
2019-03-14 21:18:13 +01:00
4774d9a46c
fix delete form not working
2019-03-14 21:17:41 +01:00
dbe16ba4fd
fix layout when on mobile viewport and scrolling
2019-03-14 21:17:28 +01:00
6972cf00a0
move icons to single folder, cleanup
2019-03-14 21:17:07 +01:00
0445be9712
fix missing debug template
2019-03-14 21:16:27 +01:00
89dbdd9585
bump version: 0.1.20-beta -> 0.1.21-beta
2019-03-14 18:08:02 +01:00
5f50fcfcf5
detect HTTPS from reverse proxy
2019-03-14 18:01:41 +01:00
96be087221
add request debug view
2019-03-14 18:01:27 +01:00
a53a269a8c
bump version: 0.1.19-beta -> 0.1.20-beta
2019-03-13 16:51:43 +01:00
ae3c092238
add user settings for Sources
2019-03-13 16:49:30 +01:00
e98e5e4e3e
fix GitHub Pretend again
2019-03-13 15:52:05 +01:00
d50c7ec8d4
bump version: 0.1.18-beta -> 0.1.19-beta
2019-03-13 15:16:48 +01:00
70c11c8988
fix GitHub Pretend throwing a 500 error
2019-03-13 15:12:13 +01:00
ae64024ef4
bump version: 0.1.17-beta -> 0.1.18-beta
2019-03-13 11:31:05 +01:00
01b0eb159a
fix Server Error when downloading metadata
2019-03-12 17:08:53 +01:00
63aa48d981
bump version: 0.1.16-beta -> 0.1.17-beta
2019-03-12 15:55:18 +01:00
b2ac57bb67
switch to vertical navigation
2019-03-12 13:35:09 +01:00
4c22e5c2c8
don't use celery heartbeat, use TCP keepalive instead
2019-03-12 13:34:54 +01:00
4a7b0ec8a9
remove Application.user_is_authorized
2019-03-12 10:56:01 +01:00
330118249e
bump version: 0.1.15-beta -> 0.1.16-beta
2019-03-11 21:35:11 +01:00
8d4dabde02
finalize RabbitMQ replacement, update debian package, remove redis tgz
2019-03-11 21:35:06 +01:00
cf7323c41b
bump version: 0.1.14-beta -> 0.1.15-beta
2019-03-11 21:01:18 +01:00
edd856df7d
redis -> rabbitmq
2019-03-11 20:46:19 +01:00
5e35859db6
bump version: 0.1.13-beta -> 0.1.14-beta
2019-03-11 11:44:34 +01:00
acabb2df54
fix unittests
2019-03-11 11:44:12 +01:00
e6376a05f7
bump version: 0.1.12-beta -> 0.1.13-beta
2019-03-11 11:31:12 +01:00
e1f1f617b6
fix UserChangePasswordView not requiring Login
2019-03-11 11:25:59 +01:00
7529b51358
Fix DoesNotExist error when running PolicyEngine against None user
2019-03-11 10:52:50 +01:00
c394066d99
bump version: 0.1.11-beta -> 0.1.12-beta
2019-03-11 09:51:00 +01:00
d408031304
fix OAuth Authorization View not requiring authentication
2019-03-11 09:48:36 +01:00
501fed1922
rewrite PasswordFactor to use backends setting instead of trying all backends
2019-03-10 21:47:08 +01:00
ad8125ac1c
bump version: 0.1.10-beta -> 0.1.11-beta
2019-03-10 19:56:30 +01:00
f7c0c0146a
add LDAP Group Membership Policy
2019-03-10 19:45:16 +01:00
e4baf8c21e
Add Group Member policy
2019-03-10 19:32:18 +01:00
364f040b36
always use FilteredSelectMultiple for many-to-many fields
2019-03-10 18:34:09 +01:00
2b8c2b2346
use Django's Admin FilteredSelectMultiple for Group Membership
2019-03-10 18:06:06 +01:00
5f861189e4
Merge branch 'master' into 23-groups
...
# Conflicts:
# passbook/admin/templates/administration/base.html
2019-03-10 17:13:29 +01:00
eebbae0677
bump version: 0.1.9-beta -> 0.1.10-beta
2019-03-10 15:54:50 +01:00
0e425418df
better show loading state when testing a policy
2019-03-10 15:46:49 +01:00
7fe0300b86
Fix button on policy test page
2019-03-10 15:36:49 +01:00
a5dc193cfd
bump version: 0.1.8-beta -> 0.1.9-beta
2019-03-10 12:17:48 +01:00
f1291fec8d
add impersonation middleware, add to templates
2019-03-10 02:41:31 +01:00
37aeeea239
slightly refactor Factor View, add more unittests
2019-03-10 02:08:09 +01:00
0fa1fc86da
add more Verbosity to PolicyEngine, rewrite SAML Authorisation check
2019-03-10 02:07:48 +01:00
c3034ab9ac
consistently using PolicyEngine
2019-03-10 02:07:18 +01:00
76694e037a
bump version: 0.1.7-beta -> 0.1.8-beta
2019-03-08 21:43:35 +01:00
787db41cc3
prepare for 0.1.7
2019-03-08 21:43:33 +01:00
74da3df7cd
bump version: 0.1.6-beta -> 0.1.7-beta
2019-03-08 21:37:59 +01:00
c313b496aa
Improve access control for saml
2019-03-08 21:30:16 +01:00
a7eaa74191
fix MATCH_EXACT not working as intended
2019-03-08 21:20:38 +01:00
11ecdc4fcf
bump version: 0.1.5-beta -> 0.1.6-beta
2019-03-08 20:39:27 +01:00
2f7781b67a
fix captcha factor not loading keys from Factor class
2019-03-08 20:08:28 +01:00
296d4f691a
add passing property to PolicyEngine
2019-03-08 19:49:53 +01:00
64033031b1
remove audit's login attempt
2019-03-08 19:45:50 +01:00
9daff7608d
fix password not getting set on user import
2019-03-08 19:45:41 +01:00
a54adb05c4
bump version: 0.1.4-beta -> 0.1.5-beta
2019-03-08 16:03:52 +01:00
2d7e8f1b50
add group administration
2019-03-08 15:49:45 +01:00
cf11f6b121
format data before inserting it
2019-03-08 15:16:25 +01:00
6dcdf7bcce
add custom DynamicArrayField to better handle arrays
2019-03-08 15:11:01 +01:00
56d872af15
add PropertyMapping Model, add Subclass for SAML, test with AWS
2019-03-08 12:47:50 +01:00
a7b86e46bc
bump version: 0.1.3-beta -> 0.1.4-beta
2019-03-07 16:24:09 +01:00
1232c487e9
bump version: 0.1.2-beta -> 0.1.3-beta
2019-03-07 16:13:05 +01:00
d7fd5a7fa6
Fix redis dependency being too old
2019-03-07 14:39:00 +01:00
4439378fd4
bump version: 0.1.1-beta -> 0.1.2-beta
2019-03-07 14:14:51 +01:00
acf65eafdd
make naming of Providers more consistent
2019-03-07 14:14:49 +01:00
c2ebff55ef
fix IDP-initiated login not working
2019-03-07 14:10:06 +01:00
99c82676b6
Add some more failsafe for administration
2019-03-07 14:09:52 +01:00
4991e9b825
Merge branch '1-suspicious-request' into 'master'
...
fix broken E-Mail templatetag
Closes #1
See merge request BeryJu.org/passbook!5
2019-03-03 20:18:23 +00:00
612f95c3ba
fix broken E-Mail templatetag
2019-03-03 21:05:17 +01:00
cd91d5ca15
Merge branch '1-suspicious-request' into 'master'
...
Resolve "Suspicious request detector (many invalid logins from one IP, many attempts on one username, etc)"
Closes #1
See merge request BeryJu.org/passbook!3
2019-03-03 20:04:56 +00:00
c1640b9411
fix prospector/isort errors
2019-03-03 20:54:23 +01:00
a4842c1f95
add sentry configuration
2019-03-03 20:48:31 +01:00
a4707ddc54
fix failing unittests
2019-03-03 20:34:00 +01:00
fb82d56307
create suspicious request detector and policy, add request to policy engine
2019-03-03 20:26:25 +01:00
1a1005f80d
remove audit's LoginAttempt
2019-03-03 20:13:54 +01:00
e86cae6cac
Merge branch '18-password-expiry' into 'master'
...
Resolve "Password Expiry"
Closes #18
See merge request BeryJu.org/passbook!2
2019-03-03 16:53:31 +00:00
0b282f45e0
fix pylint messages
2019-03-03 17:45:20 +01:00
791e88ffc1
Fix negate on FieldMatcherPolicy
2019-03-03 17:21:58 +01:00
7bd3c4bccf
Better handle Policy.action and Policy.negate
2019-03-03 17:12:53 +01:00
722e2e4050
Show warning when un-attached policies exist
2019-03-03 17:12:35 +01:00
c7fc444c95
add password policy
2019-03-03 17:12:05 +01:00
20ad062814
Log SAML Authorization actions
2019-03-03 00:34:34 +01:00
fcb5d36e07
cleanup SAML urls
2019-03-03 00:07:40 +01:00
9b131b619f
Show warning message when no Factor exists
2019-03-02 23:54:40 +01:00
54427f7c68
use HTML5 autocomplete values to better handle password managers
2019-03-02 23:19:58 +01:00
35eef9c28d
improve worker warning
2019-03-02 22:41:25 +01:00
e88a82553d
use separate Form for Admin user editing (allow is_staff and is_active)
2019-03-02 22:41:14 +01:00
01a9520140
add import_users script to import users from CSV with already hashed passwords
2019-03-02 22:40:47 +01:00
c6721a83a4
bump version: 0.1.1-alpha -> 0.1.1-beta
2019-02-27 17:45:10 +01:00
46866e8ef0
bump version: 0.1.0-beta -> 0.1.1-alpha
2019-02-27 17:43:28 +01:00
4c3fced4e9
bump version: 0.1.0-alpha -> 0.1.0-beta
2019-02-27 16:45:52 +01:00
172347d90f
bump version: 0.0.13-alpha -> 0.1.0-alpha
2019-02-27 16:42:52 +01:00
f54520b5cf
bump version: 0.0.12-alpha -> 0.0.13-alpha
2019-02-27 16:06:28 +01:00
d7c4697625
Only use one create template, get title from Form's Model
2019-02-27 16:06:20 +01:00
5584f5bda8
switch to PolicyEngine everywhere
2019-02-27 15:49:20 +01:00
2ce6f5a714
improve error display on forms
2019-02-27 15:49:05 +01:00
c66945623a
Improve admin interface more (back links, better headlines)
2019-02-27 15:48:33 +01:00
cbae05c74c
show more useful information on admin overview
2019-02-27 15:45:42 +01:00
5b771da972
switch from first_name and last_name to name
2019-02-27 15:09:05 +01:00
2db1738e4a
make Admin UI more consistent, better show when provider has no application assigned
2019-02-27 14:47:11 +01:00
95de6a14fd
bump version: 0.0.11-alpha -> 0.0.12-alpha
2019-02-27 13:18:28 +01:00
17132ebc19
Verify OAuth Username vuln and fix closes #9
2019-02-27 13:18:16 +01:00
289be46388
fix SAML Views not having LoginRequiredMixin
2019-02-27 12:36:18 +01:00
6c300b7b31
autofocus password field
2019-02-27 12:35:57 +01:00
b726583084
Keep GET parameters throughout entire login process
2019-02-27 12:35:48 +01:00
48055d1cfd
fix CSRF Bug in SAML
2019-02-27 11:20:52 +01:00
e7a02104db
fix display on mobile
2019-02-27 09:33:12 +01:00
556740d7bc
add PasswordPolicyForm back in
2019-02-26 15:41:11 +01:00
421f51770c
implement password policy checking on signup and password change closes #8
2019-02-26 15:40:58 +01:00
96f7e70f9e
enable always_eager when unittesting
2019-02-26 14:24:50 +01:00
ad96f7dbb8
add E-Mail support via celery task, untested, closes #17
2019-02-26 14:10:53 +01:00
e7fb48eba2
bump version: 0.0.10-alpha -> 0.0.11-alpha
2019-02-26 13:06:26 +01:00
b19b5b644d
remove hardcoded passwords
2019-02-26 13:06:22 +01:00
250b6691d4
bump version: 0.0.9-alpha -> 0.0.10-alpha
2019-02-26 12:44:02 +01:00
e3b02a6e78
fix isort/pylint issues
2019-02-26 12:43:59 +01:00
e94ef34d8f
bump version: 0.0.8-alpha -> 0.0.9-alpha
2019-02-26 12:35:28 +01:00
49e945307a
Re-enable OTP Disable View
2019-02-26 12:35:24 +01:00
edfe0e5450
fix broken Docker build and helm package
2019-02-26 12:34:51 +01:00
06b65a7882
add unittests, woo
2019-02-26 10:57:05 +01:00
ff9bc8aa70
Automatically create PasswordFactor on initial setup closes #16
2019-02-26 09:54:51 +01:00
28da67abe6
Improve partially broken Delete Views, show success message on deletion
2019-02-26 09:49:42 +01:00
39d9fe9bf0
add passbook.pretend to use passbook in applications which don't support generic OAuth
2019-02-26 09:10:37 +01:00
750117b0fd
Cleanup templates, handle OAuth Provider without application better
2019-02-26 09:09:19 +01:00
983462f80d
user/ -> _/user/ to prevent duplicate URLs
2019-02-26 09:08:49 +01:00
4ae31d409b
directly use paths instead of including oauth2_provider's
2019-02-26 09:08:22 +01:00
98b414f3e2
add SignUp Confirmation (required by default, can be disabled in invitations) closes #6
2019-02-25 21:03:24 +01:00
a0d42092e3
add Nonce (one-time links), add password reset function (missing e-mail verification), closes #7
2019-02-25 20:46:23 +01:00
f2569b6424
improve placeholder on login template
2019-02-25 19:43:33 +01:00
9d344d887c
add more information to administrator Overview
2019-02-25 17:52:51 +01:00
7e9154a0ea
bump version: 0.0.7-alpha -> 0.0.8-alpha
2019-02-25 17:39:39 +01:00
e0ef061771
fix pylint errors....
2019-02-25 17:32:52 +01:00
b8694a7ade
fix bandit error (SHA1 has to be used)
2019-02-25 17:23:42 +01:00
10d6a30f2c
add experimental HaveIBeenPwned Password Policy
2019-02-25 17:21:56 +01:00
8c94aef6d0
add stub test so coverage doesn't crash
2019-02-25 17:21:06 +01:00
8611ac624c
Make links on admin overview site actually useful
2019-02-25 17:11:52 +01:00
fa93b59a8c
switch to toast notifications everywhere
2019-02-25 16:41:53 +01:00
8b66b40f0d
move forgot password to PasswordFactor
2019-02-25 16:41:33 +01:00
c2756f15fc
Correctly display action on Create/Update templates
2019-02-25 16:40:46 +01:00
408e205c5f
add signal for password change, add field for password policies
2019-02-25 15:41:36 +01:00
5f3ab49535
fix bug when Empty username is given to LoginAttempt.attempt
2019-02-25 14:10:29 +01:00
33431ae013
improve OAuth Source Setup process, fix login template, closes #3
2019-02-25 14:10:10 +01:00
b40ac6dc5d
more Icons cause everyone loves icons
2019-02-25 13:31:11 +01:00
fec9b5cf94
bump version: 0.0.6-alpha -> 0.0.7-alpha
2019-02-25 13:20:12 +01:00
986fed3e7c
add hook for Factors to show user settings. closes #5
2019-02-25 13:20:07 +01:00
da5568b571
cleanup, fix Permission Denied when Cancelling login, fix display of messages on login template
2019-02-25 13:02:50 +01:00
bb81bb5a8d
totp => otp, integrate with factors, new setup form
2019-02-25 12:29:40 +01:00
9c2cfd7db4
use Inheritance for Factors instead of JSONField
2019-02-24 22:39:09 +01:00
292fbecca0
add password change view
2019-02-23 20:56:41 +01:00
e5a405bf43
Register applications with Branded name for UI Dropdown
2019-02-23 20:42:14 +01:00
66c0fc9d9a
Move factor base template to form_with_user
2019-02-23 20:41:43 +01:00
5fa8711bfa
change hostname to localhost for k8s CI
2019-02-21 17:04:46 +01:00
dd9cd7aa0c
automatically fill slug field while typing
2019-02-21 17:01:12 +01:00
8bc8765035
use postgres service for CI
2019-02-21 16:50:36 +01:00
b7ac4f1dd2
add psycopg2 as dependency
2019-02-21 16:30:56 +01:00
183308e444
fix Contains not working correctly
2019-02-21 16:21:45 +01:00
c941107d42
Rules -> Policies, more things
2019-02-21 16:06:57 +01:00
d3d75737ed
switch to drf_yasg
2019-02-21 16:05:59 +01:00
7601351f51
add help texts to explain naming
2019-02-16 11:25:53 +01:00
df45797b4a
fix inconsistent naming again
2019-02-16 11:13:00 +01:00
744a320731
fix inconsistent naming
2019-02-16 10:59:23 +01:00
89722336e3
fix duplicate Class naming
2019-02-16 10:54:15 +01:00
d6f4832e90
Rule -> Policies
2019-02-16 10:24:31 +01:00
d32699b332
remove reversion
2019-02-16 09:53:32 +01:00
59a15c988f
Move Factor instances to database
2019-02-16 09:52:37 +01:00
6649eb401e
bump version: 0.0.5-alpha -> 0.0.6-alpha
2019-02-13 16:41:59 +01:00
b657d7319d
fix failing docker build and failing helm packaging
2019-02-13 16:41:51 +01:00
a9d29067bf
bump version: 0.0.4-alpha -> 0.0.5-alpha
2019-02-11 18:01:45 +01:00
b4cb157257
bump version: 0.0.3-alpha -> 0.0.4-alpha
2019-02-11 17:44:42 +01:00
d5ab20ee12
fix coverage failing
2019-02-11 17:36:36 +01:00
0e73702fca
add PasswordPolicyRule (not used yet)
2019-02-10 20:09:47 +01:00
58ebd15ada
fix mismatched Version numbers and missing verbose_names
2019-02-10 20:08:29 +01:00
1a998e5020
bump version: 0.0.2-alpha -> 0.0.3-alpha
2019-02-08 15:19:31 +01:00
d8eb926a76
fix migration import order
2019-02-08 15:19:29 +01:00
4459f9c529
bump version: 0.0.1-alpha -> 0.0.2-alpha
2019-02-08 15:09:22 +01:00
648f614a1a
redo migrations, cleanup
2019-02-08 14:57:59 +01:00
26a23a448d
admin: fix requirements not being installed
2018-12-27 12:36:30 +01:00
d4a6e28fe6
core: add custom group model with hierarchy , add tree admin
2018-12-27 00:38:42 +01:00
ebda84bcaf
saml_idp: cleanup, fix XML signing
2018-12-26 21:56:08 +01:00
aa7e3c2a15
saml_idp: cleanup settings, add was processor
2018-12-26 21:55:37 +01:00
0c9a00acbe
admin: only add link if function returns not None
2018-12-26 21:55:14 +01:00
4d5f688a44
saml_idp: fix bandit issues
2018-12-26 17:26:17 +01:00
60d4a30992
saml_idp: cleanup urls, codex -> utils, remove registry
2018-12-26 17:21:20 +01:00
2eae37107d
core: add slug to application
2018-12-26 17:17:39 +01:00
7178468135
admin: add support for extra links
2018-12-26 17:17:24 +01:00
70afabec7e
Switch to explicit AppConfig declaration
2018-12-26 14:32:33 +01:00
856687475d
core: show text if no applications are defined
2018-12-19 10:17:30 +01:00
af77a768fb
core: only show Admin menu if user is admin
2018-12-19 10:17:17 +01:00
85468f386e
audit: fix usage of timezone-naive date-time
2018-12-19 10:16:52 +01:00
9abcc8852d
core: add more logging
2018-12-18 15:35:30 +01:00
2e4a0297a4
audit: add basic login attempt tracking
2018-12-18 15:35:23 +01:00
0c53a95b06
core: mfa cleanup session after successful login
2018-12-18 15:34:26 +01:00
c140c6f524
core: better handle MFA BackendFactor failures
2018-12-18 15:34:15 +01:00
f26962268e
core: fix error display on login form
2018-12-18 15:33:52 +01:00
1d4f49d269
core: fix invalid mfa-denied URL declaration
2018-12-18 15:33:06 +01:00
d729dc45d5
lib: enable email as uid field by default
2018-12-18 15:32:52 +01:00
b718be6593
Audit: fix invalid signal signature
2018-12-18 13:27:01 +01:00
5f9befb5ee
core: load db from yml
2018-12-18 13:26:47 +01:00
8383df2441
core: add temporary login form with support for sources
2018-12-18 13:26:14 +01:00
b0fa302718
core: add is_link and get_url property to base Source
2018-12-18 13:24:58 +01:00
f6c5f10d65
oauth_client: cleanup
2018-12-18 13:24:26 +01:00
76d70ed3b0
core: slightly adjust login form
2018-12-18 10:40:59 +01:00
65bdca30ae
oauth_client: add separate forms for Provider Types
2018-12-18 10:40:46 +01:00
Jens Langhammer
Langhammer, Jens
Jens Langhammer