Jens L
|
db95dfe38d
|
security: fix CVE 2022 46145 (#4140)
* add flow authentication requirement
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add website for cve
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: handle FlowNonApplicableException without policy result
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add release notes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-12-02 16:14:25 +01:00 |
Bastien Rivière
|
93fee5f0e5
|
web: fix authentification with Plex on iOS (#4095)
* web: fix authentification with Plex on iOS
Fixes issue #3822
* fixup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add fallback button
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-12-01 13:32:00 +01:00 |
Jens Langhammer
|
474677017f
|
web/admin: fix empty request being sent due to multiple forms in duo import modal
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-24 12:08:06 +01:00 |
Jens Langhammer
|
0813a49ca5
|
web/admin: clarify phrasing that user ID is required
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-24 11:37:54 +01:00 |
Jens Langhammer
|
94833dd1e7
|
web/admin: reset cookie_domain when setting non-domain forward auth
closes #4063
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-22 20:46:20 +01:00 |
Jens Langhammer
|
14f341f504
|
web/admin: fix error when importing duo devices
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-21 21:36:10 +01:00 |
Jens Langhammer
|
c30aa90888
|
web: fix lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-21 20:54:02 +01:00 |
Jens Langhammer
|
a2e512c36c
|
stages/authenticator_validate: add flag to configure user_verification for webauthn devices
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-21 17:52:37 +01:00 |
Jens L
|
9f5fb692ba
|
sources: add custom icon support (#4022)
* add source icon
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add to oauth form
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add to other browser sources
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add migration, return icon in UI challenges
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* deduplicate file upload
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-16 14:10:10 +01:00 |
Jens L
|
88594075b2
|
policies/password: merge hibp add zxcvbn (#4001)
* initial zxcvbn
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add api and port tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add ui
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* update docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add api diff
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-14 14:42:43 +01:00 |
Jens L
|
ffe6f65af5
|
outposts/kubernetes: ingress class (#4002)
* add support for ingressClassName
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add option to disable ssl verification for k8s controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* update website
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-14 14:24:11 +01:00 |
Jens Langhammer
|
88153cd490
|
web/admin: fix typo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-31 20:30:11 +01:00 |
Jens Langhammer
|
f1b143606e
|
web/admin: fix scrolling in remaning modals
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-20 10:20:32 +02:00 |
Jens Langhammer
|
0b6dd49f36
|
web/admin: show oauth2 docs on oauth2 provider view page
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-19 10:11:15 +02:00 |
Jens L
|
b06a3a8f9f
|
admin: add authorisations metric (#3811)
add authorizations metric
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-19 00:06:45 +02:00 |
Jens Langhammer
|
a8bca5edd0
|
web: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-18 22:29:28 +02:00 |
Jens L
|
0efee2a660
|
flows: improved import (#3807)
* return logs when importing flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* improve error handling, show logs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-18 22:01:42 +02:00 |
Jens Langhammer
|
96a30af0eb
|
sources/oauth: allow overriding of all scopes
closes #3747
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-16 21:21:43 +02:00 |
Jens L
|
363872715d
|
sources/saml: revamp SAML Source (#3785)
* update saml source to use user connections, add all attributes to flow context
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* check for SAML Status in response, add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* package apple icon
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add webui for connections
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-14 17:04:47 +02:00 |
Jens L
|
217e145d23
|
stages/authenticator_sms: make sms stage payload customisable (#3780)
* make sms stage payload customisable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* update phrasing for webhook mapping
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-14 11:53:01 +02:00 |
Jens L
|
8ed2f7fe9e
|
providers/oauth2: add device flow (#3334)
* start device flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix inconsistent app filtering
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add tenant device code flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add throttling to device code view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* somewhat unrelated changes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add initial device code entry flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add finish stage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* it works
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add support for verification_uri_complete
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add some tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-11 12:42:10 +02:00 |
Jens Langhammer
|
52e0566695
|
web: fix blank api drawer
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-10-10 12:52:14 +03:00 |
Jens L
|
44e4f2e561
|
crypto: make certificate parsing optional for crypto api (#3711)
|
2022-10-01 00:06:00 +02:00 |
Jens Langhammer
|
c0270cc3b3
|
web: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-29 10:13:27 +02:00 |
Jens Langhammer
|
0c48b40848
|
web/admin: allow web-based sources to have empty enrollment/authentication flow
closes #3683
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-28 18:45:50 +02:00 |
Jens Langhammer
|
d0241e8063
|
web/admin: set card headers and icons in card class
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-25 16:37:52 +02:00 |
Jens L
|
4c606fb0ba
|
web/admin: more diagrams (#3630)
* separate diagram element
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add more
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-22 21:27:29 +02:00 |
Jens Langhammer
|
7932b390dc
|
web: cleanup old FlowDiagram colours
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-21 20:23:20 +02:00 |
Jens L
|
1583d53e54
|
web: use mermaidjs (#3623)
* flows: move flow diagram logic to separate file
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* idk
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* make web component work
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* remove subgraph for now
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* cleanup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add denied connection
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* wrong list
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* use custom styles
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* i18n
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix typing issues, make diagram centered
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-21 09:58:23 +02:00 |
Jens Langhammer
|
05ccff4651
|
web: fix checkbox styling on applications form
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-19 17:38:04 +02:00 |
Jens L
|
be64296494
|
stages/authenticator_duo: improved import (#3601)
* prepare for duo admin integration
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* make duo import params required
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add UI to import devices
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* rework form, automatic import
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* limit amount of concurrent tasks on worker
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* load tasks
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix API codes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix tests and such
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* sigh
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* make stage better
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* basic stage test
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-17 12:10:47 +02:00 |
Kevin Rutkay
|
02e2c117ac
|
web: Fixed typo in stages/user_write form (#3604)
|
2022-09-17 11:51:15 +02:00 |
Jens L
|
4a91a7d2e2
|
web: re-organise frontend and cleanup common code (#3572)
* fix repo in api client
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: re-organise files to match their interface
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: include version in script tags
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* cleanup maybe broken
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* revert rename
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: get rid of Client.ts
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* move more to common
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* more moving
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* format
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* unfuck files that vscode fucked, thanks
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* move more
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* finish moving (maybe)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* ok more moving
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix more stuff that vs code destroyed
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* get rid "web" prefix for virtual package
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix locales
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* use custom base element
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix css file
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* don't run autoDetectLanguage when importing locale
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix circular dependencies
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix build
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-09-15 00:05:21 +02:00 |