8de66b27ad
flows/*: Initial flows stage1 implementation
2020-05-07 20:51:06 +02:00
179f0097c0
provider/samlv2: more samlv2 progres
2020-05-07 19:25:15 +02:00
b40bffdf38
providers/samlv2: start implementing new SAML Provider
2020-05-07 01:20:08 +02:00
813dd2894f
*: add pyright type checking
2020-05-07 00:32:03 +02:00
80d90b91e8
core: add general admin.py loader, remove individual files
2020-05-07 00:05:10 +02:00
fff05e35ac
providers/saml: optionally verify SAML Signature
2020-05-06 18:03:12 +02:00
75bb59a22a
ui: fix help text not being shown for checkboxes
2020-05-06 17:59:19 +02:00
aac7e6be90
lib: fix ram usage due to bootstrap
...
bootstrap now exits (0) when all services are up, instead continuously running. This is combined with a simple bash script, which does this job instead.
This also adds /bootstrap.sh as docker ENTRYPOINT
2020-04-22 11:45:11 +02:00
c77f4204c0
new release: 0.8.15-beta
2020-04-10 21:57:20 +02:00
5f4452470b
providers/saml: fix metadata rendering when no singing keypair is selected
...
closes PASSBOOK-44
2020-04-10 21:54:23 +02:00
9a1270c693
providers/saml: fix wrong signing property being checked
...
closes PASSBOOK-45
2020-04-10 21:52:03 +02:00
7b9d1a1159
new release: 0.8.14-beta
2020-04-10 21:23:55 +02:00
e43db2e065
new release: 0.8.13-beta
2020-04-10 21:11:24 +02:00
d1c74d2160
lib: fix imports being changed every time
2020-03-05 17:28:03 +01:00
f2119ce567
providers/saml: fix signing_kp typo
2020-03-05 17:09:08 +01:00
f2154d9875
crypto: add property for private_key
2020-03-04 19:43:18 +01:00
80a50f9bdb
providers/saml: switch to new crypto
2020-03-03 23:35:50 +01:00
dc8b89a6b9
sources/saml: switch to new crypto
2020-03-03 23:35:38 +01:00
8df55f22aa
crypto: implement simple certificate-key pair for easier management
2020-03-03 23:35:25 +01:00
f6c322be27
providers/oidc: fix skip_authorization not being synced to oidc_client
2020-03-02 17:40:38 +01:00
a144552059
providers/oidc: fill claims with userinfo
2020-03-01 22:55:56 +01:00
535d529193
ui: fix title, fix navigation on user settings
2020-02-29 14:46:58 +01:00
6ed2e137a2
new release: 0.8.12-beta
2020-02-28 11:54:03 +01:00
45bd63c720
api: update old field names
2020-02-28 11:48:55 +01:00
736e13fc35
ui: add template for csrf errors
2020-02-28 11:41:28 +01:00
966fff008c
ui: re-enable branding on navbar
2020-02-28 11:37:07 +01:00
64f15eadbd
providers/saml: fix CSRF errors with POST binding
2020-02-28 10:50:16 +01:00
81b66ecdcd
core: remove some more dead code, add more help texts for factors
2020-02-27 16:39:30 +01:00
53e5cf7826
admin: fix some models not being paginated
2020-02-27 15:30:28 +01:00
82654b3fd9
ui: re-organize some of the navigation to make it cleaner for end-users
2020-02-27 14:59:34 +01:00
9b72c604dd
docs: fix some typos
2020-02-27 13:00:55 +01:00
5fb1b8044c
new release: 0.8.11-beta
2020-02-25 11:38:50 +01:00
b8daab4377
providers/saml: fix AccessRequiredView.dispatch not being called
2020-02-25 11:38:26 +01:00
c5b91bdae8
providers/saml: fix CannotHandleAssertion Error still being sent to sentry
2020-02-24 19:14:43 +01:00
39a208c55f
providers/saml: fix wrong key being used for params
2020-02-24 17:48:03 +01:00
a5bfef9b6b
providers/saml: fix leftover data in session, fix IdP initiated login
...
move can_handle calls to binding endpoints (/login/ and /login/initiate/), so that /login/authorize/ works either way, can clean up the session and audit
2020-02-24 17:34:52 +01:00
f1f4cbef9b
lib/sentry: fix SentryIgnoredException not being ignored correctly
2020-02-24 17:01:31 +01:00
8388120b06
new release: 0.8.10-beta
2020-02-24 15:30:57 +01:00
2bf96828f1
root: fix logging.basicConfig being called by pyjwkest
2020-02-24 15:30:28 +01:00
22838e66fe
providers/saml: fix users being able to authenticate without audit logs being created
2020-02-24 14:40:12 +01:00
484dd6de09
providers/oidc: add error template
2020-02-24 14:19:02 +01:00
b743736c26
lib/logging: fix typo
2020-02-24 14:10:58 +01:00
af91e2079b
core: sort provider by pk when selection application provider
2020-02-24 14:10:51 +01:00
120d32e4dc
new release: 0.8.9-beta
2020-02-24 13:23:20 +01:00
238b489e07
root: add process ID to logging output
2020-02-24 13:20:32 +01:00
4daa70c894
core: fix saving of policy not correctly clearing it's cache
2020-02-24 13:15:52 +01:00
f8599438df
ui: fix lists not being rendered correctly
2020-02-24 13:13:42 +01:00
155c9a4c3f
ui: update remaining forms, completely remove jQuery
2020-02-24 13:13:28 +01:00
8433b5e583
ui: fix automatic slug generation
2020-02-24 12:40:16 +01:00
dc5ba144f1
ui: fix height of multiple select input
2020-02-24 12:40:06 +01:00
521a8b5356
ui: update more remaining templates
2020-02-23 22:49:56 +01:00
3453077d7b
root: set SameSite to None when debugging
2020-02-23 22:49:33 +01:00
70ede8581a
core: sort sources on login view
2020-02-23 20:19:01 +01:00
6a7545fd43
lib: add bootstrap command
2020-02-23 19:52:41 +01:00
a8926cbd07
lib: add more errors to sentry ignore
2020-02-23 19:48:14 +01:00
64d7b009ab
sources/oauth: fix invalid headers, fix invalid function signature
2020-02-23 19:42:57 +01:00
2b5fddb7bf
policies: add unittests for evaluator
2020-02-23 15:54:26 +01:00
b99d23c119
all: remove dead code
2020-02-23 15:32:20 +01:00
03905b74ff
admin: exclude anonymous user from listing
2020-02-23 15:27:28 +01:00
6b8a59cfbd
admin: show prettified yaml
2020-02-23 15:27:11 +01:00
d6fdcd3ef9
ui: re-add automatic slug generation
2020-02-23 15:20:41 +01:00
53ebc551d2
ui: fix icon sizing on login
2020-02-23 15:13:18 +01:00
3d4f43d6e3
ui: show default icon for source without icon
2020-02-23 15:09:58 +01:00
074cde7cd5
audit: save model's name or string representation
2020-02-23 15:04:30 +01:00
382e563590
new release: 0.8.8-beta
2020-02-23 14:45:45 +01:00
ca61a7cc21
audit: don't pop password as its censored already
2020-02-23 14:43:33 +01:00
fa2870afe0
sources: remove policies as they are not used currently
2020-02-23 14:40:06 +01:00
0f46207ea4
admin: fix provider list not having pagination
2020-02-23 14:29:21 +01:00
f4a676e2fb
sources/oauth: slugify provider type instead of just lowercase
2020-02-23 13:53:16 +01:00
b2c10e2387
ui: add missing discord and twitter icons
2020-02-23 13:47:21 +01:00
8c329dca7d
core: add migration to fix null fields in core.application
2020-02-22 19:26:34 +01:00
83da175749
policies/expression: add pb_client_ip field
2020-02-22 19:26:16 +01:00
995c87938f
core: fix default Null causing issues in translation
2020-02-21 23:10:00 +01:00
40678b2f84
new release: 0.8.7-beta
2020-02-21 22:17:11 +01:00
8dbbe9102b
ui: fix application grid icons, fix SAML Authorize
2020-02-21 22:16:58 +01:00
2f51f354de
ui: fix app icon not showing
2020-02-21 22:02:44 +01:00
04b815a33e
admin: show object usage count instead of list
2020-02-21 22:02:03 +01:00
2a4d68911b
helm: change static healthcheck and port
2020-02-21 21:50:16 +01:00
4d5a2d61ff
new release: 0.8.6-beta
2020-02-21 21:36:04 +01:00
efd88c27ad
audit: *crit* fix audit log not being protected correctly
2020-02-21 21:33:42 +01:00
80d361ccd2
audit: fix failed login events not being logged
2020-02-21 21:27:25 +01:00
6ed4501615
ui: fix branding viewport
2020-02-21 21:18:55 +01:00
a3ae827839
ui: centrally load CodeMirror and init via data tag
2020-02-21 21:02:03 +01:00
88c1ad4c1c
providers/saml: fix 500 when SAML Provider not assigned to application
2020-02-21 20:54:00 +01:00
1147c4901b
ui: clean up some more remaining templates
2020-02-21 20:40:40 +01:00
063181d7a7
ui: use compact templates
2020-02-21 20:24:02 +01:00
1285ba6fbb
ui: include font-awesome
2020-02-21 18:00:09 +01:00
a09a1793ec
ui: update templates for jinja2-related fields
2020-02-21 15:36:37 +01:00
50caa3ac3e
ui: update static docker image to download NPM modules
2020-02-21 15:33:54 +01:00
9440d24358
static: use codemirror from npm
2020-02-21 15:18:13 +01:00
26bf6fd22f
all: add more helpful help_text to models
2020-02-21 15:12:16 +01:00
e2f836feae
all: fix left over references to error templates
2020-02-21 15:05:32 +01:00
b6326f399c
ui: clean up more generic forms, remove is_login everywhere
2020-02-21 15:00:45 +01:00
ea6a1422f7
ui: rewrite admin templates to pf4, add some helper scripts
2020-02-21 14:20:16 +01:00
8fd86a28ff
ui: fixup minor issues, add static app
2020-02-21 11:20:55 +01:00
d88283a7a9
Merge branch 'master' into pf4
...
# Conflicts:
# passbook/core/static/img/logos/discord.svg
# passbook/core/static/js/passbook.js
# passbook/core/templates/login/with_sources.html
# passbook/core/templates/overview/index.html
# passbook/core/views/authentication.py
2020-02-21 09:05:40 +01:00
32a15f84c0
root: run bandit as part of pre-commit
2020-02-21 09:03:59 +01:00
93ba4b7f62
root: use defusedxml's defuse_stdlib globally
2020-02-21 09:00:28 +01:00
187780dab2
new release: 0.8.5-beta
2020-02-20 21:39:13 +01:00
d988f37afc
lib: add SentryIgnoredException, to easily ignore exceptions from sentry
2020-02-20 21:38:53 +01:00
295c0bae3f
sources/saml: validate SAMLResponse signature
2020-02-20 21:34:25 +01:00
38a22ddf13
providers/saml: cleanup encoding
2020-02-20 21:33:10 +01:00
d06f1abb89
providers/saml: add POST binding support to Metadata
2020-02-20 17:38:42 +01:00
027a64fad2
providers/saml: change default NameID Format to emailAddress
2020-02-20 17:37:09 +01:00
84fc54ddaa
sources/saml: entity_id -> issuer
2020-02-20 17:23:27 +01:00
0b5caa85f5
all: sort imports and cleanup
2020-02-20 17:23:05 +01:00
14e0a17dbc
ui: don't remove dashes when auto generating slug
2020-02-20 17:13:50 +01:00
3c04afa31f
root: use different cookie names for dev instance
2020-02-20 17:08:11 +01:00
40a2a26904
sources/saml: fix Metadata cert including PEM header
2020-02-20 17:05:11 +01:00
c8b3c6e51a
sources/saml: fix `build_full_url` using incorrect URL parameter
2020-02-20 17:04:54 +01:00
e0272a6422
providers/saml: Show error message when trying to get metadata without assigning application
2020-02-20 17:04:20 +01:00
b290bbf6d7
new release: 0.8.4-beta
2020-02-20 16:17:23 +01:00
8d875cb01d
providers/saml: fix /login/ pointing to wrong view
2020-02-20 16:13:55 +01:00
36b1f8ba36
new release: 0.8.3-beta
2020-02-20 15:14:49 +01:00
6c889eff27
core: fix application icons not loading, fix with_sources being broken
2020-02-20 14:30:06 +01:00
9d8675e54b
new release: 0.8.2-beta
2020-02-20 13:57:46 +01:00
22ae986c0b
root: add logger name to log output
2020-02-20 13:52:14 +01:00
2bef5f3911
policies: struct -> types to match core
2020-02-20 13:52:05 +01:00
3c2b8e5ee1
all: prefix all UI related methods with ui_, switch to property and return dataclass
2020-02-20 13:51:41 +01:00
c96571bdba
core: fix discord logo being hard to see
2020-02-20 13:50:05 +01:00
2dfd93afb1
core: add more fields for metadata of applications
2020-02-20 13:45:22 +01:00
f1d77d475c
ui: start patternfly v4 migration
2020-02-19 21:03:39 +01:00
1d22e30c70
lib: sentry ignore Redis and OSError
2020-02-19 17:13:44 +01:00
07b7951390
sources/ldap: handle user_sync errors better, show warning when user exists already
2020-02-19 16:20:33 +01:00
995615d0a0
policies/expression: Return False if Policy returns Undefined and log warning
2020-02-19 16:19:02 +01:00
ac273aab75
core: raise PropertyMappingExpressionException when PropertyMapping returns Undefined
2020-02-19 16:18:31 +01:00
44cd03654d
core: base set maximum-scale to 1
2020-02-19 15:11:25 +01:00
3e2375f970
new release: 0.8.1-beta
2020-02-19 11:31:05 +01:00
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
e27a05a7fc
lib/sentry: ignore django validation error
2020-02-19 10:54:29 +01:00
e4886f0c6f
new release: 0.8.0-beta
2020-02-19 10:29:52 +01:00
8b2ce5476a
policies/expression: add annotation to update docs, name jinja filters/funcs more clearly
2020-02-19 10:23:42 +01:00
1b82283a20
docs: update policy types, add docs for expression policies
2020-02-19 10:21:28 +01:00
7f3d0113c2
policies: remove redundant policies which can be easily implemented with expressions
2020-02-19 09:51:15 +01:00
0f6dd33a6b
api: add expression policy to API URLs
2020-02-19 09:49:57 +01:00
5b79b3fd22
policies/expression: move evaluation code into separate class
2020-02-19 09:49:38 +01:00
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
865abc005a
sources/oauth: remove leading spaces in default URLs
2020-02-18 21:49:53 +01:00
a2725d5b82
sources/oauth: remove redundant OAuth2Clients
2020-02-18 21:49:40 +01:00
4a05bc6e02
sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz
2020-02-18 21:49:23 +01:00
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
ff25c1c057
admin: load custom policy templates
2020-02-18 21:35:21 +01:00
78cddca0d7
admin: fix user object being overwritten when deleting a user
2020-02-18 21:35:06 +01:00
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
591d2f89a1
audit: log event creation on save
2020-02-18 17:05:11 +01:00
7c353f9297
sources/oauth: remove supervisr
2020-02-18 17:01:08 +01:00
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
878169ea2e
core: only show icon on login page if defined
2020-02-18 17:00:26 +01:00
38dfb03668
new release: 0.7.17-beta
2020-02-18 16:29:23 +01:00
e2631cec0e
factors/view: show concise error message when domain is mis-configured
2020-02-18 16:29:04 +01:00
9f00843441
policies/expression: add Expression based policy
2020-02-18 15:12:50 +01:00
f31cd7dec6
core: check PropertyMapping's expression syntax before save
2020-02-18 15:12:05 +01:00
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00
fbd4bdef33
providers/saml: add modal to show metadata without download
2020-02-18 10:57:43 +01:00
5b22f9b6c3
providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form
2020-02-18 10:57:30 +01:00
083e317028
lib: add helper method for 400 response with message
2020-02-18 10:13:53 +01:00
95416623b3
sources/ldap: better handle property mapping evaluation errors
2020-02-18 10:13:05 +01:00
813b2676de
providers/saml: better handle PropertyMapping evaluation errors
2020-02-18 10:12:42 +01:00
aeca66a288
providers/saml: change assertion_valid_not_before default to -5 minutes
2020-02-17 21:32:23 +01:00
04a5428148
new release: 0.7.16-beta
2020-02-17 21:02:54 +01:00
73b173b92a
admin: fix form missing on update pages
2020-02-17 21:02:47 +01:00
7cbf20a71c
admin: fix CodeMirror field not loading correctly
2020-02-17 21:02:35 +01:00
7a98e6d92b
new release: 0.7.15-beta
2020-02-17 20:45:56 +01:00
3aa2f1e892
*: propertymapping template -> expression
2020-02-17 20:38:14 +01:00
bc4b7ef44d
providers/saml: add custom help text for templates, add docs for User Object reference
2020-02-17 20:30:14 +01:00
9400b01a55
admin: parameterise generic from's base template
2020-02-17 20:29:41 +01:00
e57da71dcf
sources/ldap: update LDAP source to use new property mappings
2020-02-17 17:55:48 +01:00
7268afaaf9
providers/saml: update to new PropertyMappings
2020-02-17 17:50:11 +01:00
205183445c
admin: add support for template field and Jinja2 highlighting
2020-02-17 17:48:53 +01:00
e6c47fee26
core: add template field to PropertyMapping
2020-02-17 17:47:51 +01:00
a5629c5155
providers/saml: add changeable signature and digest algorithm
2020-02-17 16:28:18 +01:00
41689fe3ce
sources/* add missing migrations
2020-02-17 16:27:35 +01:00
8e84208e2c
new release: 0.7.14-beta
2020-02-17 15:42:14 +01:00
32a48fa07a
providers/saml: more typehints
2020-02-17 15:40:49 +01:00
773a9c0692
policies/engine: fix cached policy results being ignored
2020-02-17 15:37:51 +01:00
8808e3afe0
policies/engine: set mp start method to fork to fix issues under macOS
2020-02-17 15:20:30 +01:00
ecea85f8ca
lib/config: remove autoreload handler as this API is gone in django 3
2020-02-17 15:20:11 +01:00
5dfa141e35
root/wsgi: log requests with event name of request
2020-02-16 14:36:31 +01:00
447e81d0b8
providers/saml: handle uncompressed SAML AuthNRequest
2020-02-16 14:08:35 +01:00
e138076e1d
sources/saml: move labels from forms to models
2020-02-16 12:34:46 +01:00
721d133dc3
sources/oauth: move labels from form to models
2020-02-16 12:34:33 +01:00
75b687ecbe
sources/ldap: move labels from form to models
2020-02-16 12:30:45 +01:00
bdd1863177
providers/saml: move field labels from Form into models
2020-02-16 12:30:26 +01:00
e5b85e8e6a
providers/saml: move default saml properties to DB
2020-02-16 12:29:53 +01:00
d7481c9de7
new release: 0.7.13-beta
2020-02-14 15:35:05 +01:00
571373866e
providers/saml: some more cleanup, fix get_time_string when called without argument
2020-02-14 15:34:24 +01:00
e36d7928e4
providers/saml: big cleanup, simplify base processor
...
add New fields for
- assertion_valid_not_before
- assertion_valid_not_on_or_after
- session_valid_not_on_or_after
allow flexible time durations for these fields
fall back to Provider's ACS if none is specified in AuthNRequest
2020-02-14 15:19:48 +01:00
2be026dd44
global: fix import order
2020-02-14 15:17:40 +01:00
d9ecb7070d
core: add more prometheus metrics
2020-01-19 21:01:26 +01:00
fc4a46bd9c
root: fix credential variables overwriting each other
2020-01-17 11:16:23 +01:00
7bf7bde856
root: fix prometheus path in ServiceMonitor, return WWW-Authenticate header so basic auth is sent
2020-01-17 10:55:11 +01:00
9bdff14403
providers/app_gw: fix wrong UPSTREAM parameter
2020-01-03 09:15:07 +01:00
f124314eab
new release: 0.7.12-beta
2020-01-02 20:22:44 +01:00
684e4ffdcf
providers/app_gw: fix formatting
2020-01-02 20:22:36 +01:00
d9ff5c69c8
providers/app_gw: fix assignment of response_types
2020-01-02 20:20:10 +01:00
8142e3df45
providers/oidc: fix application property of wrong object being used
2020-01-02 20:19:53 +01:00
86f16e2781
providers/oidc: fix incorrectly sorted imports
2020-01-02 16:42:52 +01:00
2ed8e72c62
new release: 0.7.11-beta
2020-01-02 16:38:11 +01:00
Jens Langhammer