010e834149
root: update security.md
2020-12-29 21:34:34 +01:00
16d5e1d9ff
release: 0.14.1-stable
2020-12-29 21:25:49 +01:00
765ae80698
providers/oauth2: fix error when creating RefreshToken
2020-12-29 21:22:49 +01:00
bbd0ff24d8
docs: add grafana integration docs
2020-12-29 20:43:27 +01:00
7a403613b2
Suggested changes ( #434 )
...
L112 - L115 is a suggestion I'm unsure of, but wanted to somehow improve it. Feel free to discard, but I still recommend signup>sign-up on L114 of origin.
On L124, the resulting webpage shows "Active- Directory" (note the space after the hyphen). Not sure how to fix this though.
2020-12-29 20:17:35 +01:00
4ad184a3fb
build(deps-dev): bump @typescript-eslint/parser in /web ( #439 )
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 4.11.0 to 4.11.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.11.1/packages/parser )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-29 14:53:40 +01:00
48d5f28e7a
build(deps-dev): bump @typescript-eslint/eslint-plugin in /web ( #438 )
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 4.11.0 to 4.11.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.11.1/packages/eslint-plugin )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-29 14:43:30 +01:00
0cb48121b2
build(deps): bump boto3 from 1.16.43 to 1.16.44 ( #436 )
...
Bumps [boto3](https://github.com/boto/boto3 ) from 1.16.43 to 1.16.44.
- [Release notes](https://github.com/boto/boto3/releases )
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst )
- [Commits](https://github.com/boto/boto3/compare/1.16.43...1.16.44 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-29 13:41:19 +01:00
4194ffe2d4
build(deps): bump channels from 3.0.2 to 3.0.3 ( #437 )
...
Bumps [channels](https://github.com/django/channels ) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/django/channels/releases )
- [Changelog](https://github.com/django/channels/blob/master/CHANGELOG.txt )
- [Commits](https://github.com/django/channels/compare/3.0.2...3.0.3 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-29 13:34:10 +01:00
4636fe7e64
Add migrate command to 0.14 docs. ( #435 )
2020-12-28 21:51:22 +01:00
182d714b16
docs: fix typo
2020-12-28 18:15:32 +01:00
540c22ce15
release: 0.14.0-stable
2020-12-28 17:49:45 +01:00
8c3008abce
release: 0.14.0-rc2
2020-12-28 17:49:39 +01:00
8a22c86aaa
release: 0.14.0-rc1
2020-12-28 17:49:35 +01:00
22ce142cb8
outposts: include protocol in outpost deployment ports
2020-12-28 17:21:02 +01:00
1a292feebb
outposts: always check metadata on reconcile
2020-12-28 17:11:37 +01:00
09f4d812b3
outposts: set field_manager
2020-12-28 17:11:33 +01:00
2bab4ebfe8
core: fix library url pattern not matching SPA
2020-12-28 15:06:25 +01:00
a8647caca9
build(deps): bump @types/codemirror from 0.0.102 to 0.0.103 in /web ( #433 )
...
Bumps [@types/codemirror](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/codemirror ) from 0.0.102 to 0.0.103.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/codemirror )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 14:32:57 +01:00
590597caf6
events: replace list view with SPA Page
2020-12-28 14:32:34 +01:00
7b43777b22
web: reset expanded rows on fetch
2020-12-28 14:04:07 +01:00
77861b52e3
web: fix search loading old results when using enter
2020-12-28 13:56:33 +01:00
5f9c1e229c
root: return API dates as timestamp
2020-12-28 13:07:49 +01:00
119adb3e7b
web: fix old default URL
2020-12-28 13:07:35 +01:00
5db38bd0b7
web: lazy-render expanded table
2020-12-28 13:07:20 +01:00
0e1587bc1a
providers/oauth2: don't write authorization code to event log
2020-12-28 01:07:18 +01:00
dc16a8a4c9
providers/proxy: set proxy-size for nginx for larger response
2020-12-28 00:45:58 +01:00
a6d0c8c26c
providers/saml: Metadata Import ( #432 )
...
* providers/saml: add basic metadata parser
* providers/saml: add importer for Singing certificate, validate signature, add tests
* providers/saml: add provider name to form,
* web: don't use trailing slash for spa URLs
* providers/saml: formatting fixes
* sources/*: add verbose_name to source serializers
* admin: add button launch import modal
2020-12-27 22:38:04 +01:00
5797a3743a
docs: prepare 0.14 release
2020-12-27 22:16:31 +01:00
b7e43efb34
docs: use version-0.13 branch for 0.13 instructions
2020-12-27 22:11:53 +01:00
48df12d045
proxy: update to latest stable oauth2_proxy version
2020-12-27 20:14:08 +01:00
4fea0f5939
web: fix error when applications have no provider assigned
2020-12-27 19:40:50 +01:00
a7bdd63e4d
web: make siteshell's loading be relative to parent
2020-12-27 19:36:30 +01:00
e216efb6ec
providers/oauth2: create access tokens as JWT
2020-12-27 19:36:17 +01:00
378fe38b12
providers/oauth2: ensure response is URL fragment only when implicit or hybrid
2020-12-27 19:07:42 +01:00
ce9fb8801c
providers/oauth2: ensure nonce is validated on all OIDC flows
2020-12-27 18:13:41 +01:00
67ca83c228
providers/oauth2: add c_hash field
2020-12-27 18:13:13 +01:00
ee2e737782
providers/oauth2: remove response_type field as spec doesn't require validation
2020-12-27 18:12:47 +01:00
b04c9a2098
providers/oauth2: check redirect_uri before request object
2020-12-27 17:15:36 +01:00
7f7b7e37c1
docs: rename upgrading to release notes
2020-12-27 15:35:58 +01:00
e7c96eb70d
providers/oauth2: Make AuthorizeError's state parameter requireed
2020-12-27 15:33:29 +01:00
e8debce9c8
providers/oauth2: fix infinite loops when prompt=login
2020-12-27 15:23:26 +01:00
bcd0686a33
providers/oauth2: redirect back correctly with state on AuthorizationError
2020-12-27 15:22:53 +01:00
55322995a1
providers/oauth2: make iss field configurable
2020-12-27 15:02:12 +01:00
dff5eb69c8
providers/oauth2: fix token endpoint creating invalid token when no scopes are passed
2020-12-27 14:48:44 +01:00
b747022bc1
providers/oauth2: fix old id_token being sent when using token endpoint with grant_type=refresh_token
2020-12-27 14:33:51 +01:00
885fcff495
providers/oauth2: add grant_types_supported to discovery endpoint
2020-12-27 14:17:40 +01:00
5b18e28753
providers/oauth2: fix include_claims_in_id_token not being shown in form/API
2020-12-27 14:05:10 +01:00
9848c5f3eb
providers/oauth2: implement discovery's scopes_supported better
2020-12-27 13:36:14 +01:00
fc98c3934a
providers/*: implement configuration_error
2020-12-27 13:15:31 +01:00
Jens Langhammer
tigattack
dependabot[bot]
Jens L