Commit graph

761 commits

Author SHA1 Message Date
Jens Langhammer 1b82283a20 docs: update policy types, add docs for expression policies 2020-02-19 10:21:28 +01:00
Jens Langhammer 7f3d0113c2 policies: remove redundant policies which can be easily implemented with expressions 2020-02-19 09:51:15 +01:00
Jens Langhammer 0f6dd33a6b api: add expression policy to API URLs 2020-02-19 09:49:57 +01:00
Jens Langhammer 5b79b3fd22 policies/expression: move evaluation code into separate class 2020-02-19 09:49:38 +01:00
Jens Langhammer d68c72f1fa lib: remove method_decorator Mixins 2020-02-18 22:28:47 +01:00
Jens Langhammer 9267d0c1dd all: general maintenance, prepare for pyright 2020-02-18 22:12:51 +01:00
Jens Langhammer 865abc005a sources/oauth: remove leading spaces in default URLs 2020-02-18 21:49:53 +01:00
Jens Langhammer a2725d5b82 sources/oauth: remove redundant OAuth2Clients 2020-02-18 21:49:40 +01:00
Jens Langhammer 4a05bc6e02 sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz 2020-02-18 21:49:23 +01:00
Jens Langhammer 4e8238603a all: cleanup logging to be structured 2020-02-18 21:35:58 +01:00
Jens Langhammer ff25c1c057 admin: load custom policy templates 2020-02-18 21:35:21 +01:00
Jens Langhammer 78cddca0d7 admin: fix user object being overwritten when deleting a user 2020-02-18 21:35:06 +01:00
Jens Langhammer 0c2dc309e7 providers/saml: fix metadata URLs using incorrect params 2020-02-18 20:14:28 +01:00
Jens Langhammer 74ad1b6759 factors: strip port for domain check 2020-02-18 17:05:30 +01:00
Jens Langhammer 591d2f89a1 audit: log event creation on save 2020-02-18 17:05:11 +01:00
Jens Langhammer 7c353f9297 sources/oauth: remove supervisr 2020-02-18 17:01:08 +01:00
Jens Langhammer cd1af15c56 core: sort applications by name 2020-02-18 17:00:56 +01:00
Jens Langhammer 878169ea2e core: only show icon on login page if defined 2020-02-18 17:00:26 +01:00
Jens Langhammer 38dfb03668 new release: 0.7.17-beta 2020-02-18 16:29:23 +01:00
Jens Langhammer e2631cec0e factors/view: show concise error message when domain is mis-configured 2020-02-18 16:29:04 +01:00
Jens Langhammer 9f00843441 policies/expression: add Expression based policy 2020-02-18 15:12:50 +01:00
Jens Langhammer f31cd7dec6 core: check PropertyMapping's expression syntax before save 2020-02-18 15:12:05 +01:00
Jens Langhammer 1c1afca31f providers/saml: fix linting error 2020-02-18 11:34:04 +01:00
Jens Langhammer fbd4bdef33 providers/saml: add modal to show metadata without download 2020-02-18 10:57:43 +01:00
Jens Langhammer 5b22f9b6c3 providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form 2020-02-18 10:57:30 +01:00
Jens Langhammer 083e317028 lib: add helper method for 400 response with message 2020-02-18 10:13:53 +01:00
Jens Langhammer 95416623b3 sources/ldap: better handle property mapping evaluation errors 2020-02-18 10:13:05 +01:00
Jens Langhammer 813b2676de providers/saml: better handle PropertyMapping evaluation errors 2020-02-18 10:12:42 +01:00
Jens Langhammer aeca66a288 providers/saml: change assertion_valid_not_before default to -5 minutes 2020-02-17 21:32:23 +01:00
Jens Langhammer 04a5428148 new release: 0.7.16-beta 2020-02-17 21:02:54 +01:00
Jens Langhammer 73b173b92a admin: fix form missing on update pages 2020-02-17 21:02:47 +01:00
Jens Langhammer 7cbf20a71c admin: fix CodeMirror field not loading correctly 2020-02-17 21:02:35 +01:00
Jens Langhammer 7a98e6d92b new release: 0.7.15-beta 2020-02-17 20:45:56 +01:00
Jens Langhammer 3aa2f1e892 *: propertymapping template -> expression 2020-02-17 20:38:14 +01:00
Jens Langhammer bc4b7ef44d providers/saml: add custom help text for templates, add docs for User Object reference 2020-02-17 20:30:14 +01:00
Jens Langhammer 9400b01a55 admin: parameterise generic from's base template 2020-02-17 20:29:41 +01:00
Jens Langhammer e57da71dcf sources/ldap: update LDAP source to use new property mappings 2020-02-17 17:55:48 +01:00
Jens Langhammer 7268afaaf9 providers/saml: update to new PropertyMappings 2020-02-17 17:50:11 +01:00
Jens Langhammer 205183445c admin: add support for template field and Jinja2 highlighting 2020-02-17 17:48:53 +01:00
Jens Langhammer e6c47fee26 core: add template field to PropertyMapping 2020-02-17 17:47:51 +01:00
Jens Langhammer a5629c5155 providers/saml: add changeable signature and digest algorithm 2020-02-17 16:28:18 +01:00
Jens Langhammer 41689fe3ce sources/* add missing migrations 2020-02-17 16:27:35 +01:00
Jens Langhammer 8e84208e2c new release: 0.7.14-beta 2020-02-17 15:42:14 +01:00
Jens Langhammer 32a48fa07a providers/saml: more typehints 2020-02-17 15:40:49 +01:00
Jens Langhammer 773a9c0692 policies/engine: fix cached policy results being ignored 2020-02-17 15:37:51 +01:00
Jens Langhammer 8808e3afe0 policies/engine: set mp start method to fork to fix issues under macOS 2020-02-17 15:20:30 +01:00
Jens Langhammer ecea85f8ca lib/config: remove autoreload handler as this API is gone in django 3 2020-02-17 15:20:11 +01:00
Jens Langhammer 5dfa141e35 root/wsgi: log requests with event name of request 2020-02-16 14:36:31 +01:00
Jens Langhammer 447e81d0b8 providers/saml: handle uncompressed SAML AuthNRequest 2020-02-16 14:08:35 +01:00
Jens Langhammer e138076e1d sources/saml: move labels from forms to models 2020-02-16 12:34:46 +01:00
Jens Langhammer 721d133dc3 sources/oauth: move labels from form to models 2020-02-16 12:34:33 +01:00
Jens Langhammer 75b687ecbe sources/ldap: move labels from form to models 2020-02-16 12:30:45 +01:00
Jens Langhammer bdd1863177 providers/saml: move field labels from Form into models 2020-02-16 12:30:26 +01:00
Jens Langhammer e5b85e8e6a providers/saml: move default saml properties to DB 2020-02-16 12:29:53 +01:00
Jens Langhammer d7481c9de7 new release: 0.7.13-beta 2020-02-14 15:35:05 +01:00
Jens Langhammer 571373866e providers/saml: some more cleanup, fix get_time_string when called without argument 2020-02-14 15:34:24 +01:00
Jens Langhammer e36d7928e4 providers/saml: big cleanup, simplify base processor
add New fields for
 - assertion_valid_not_before
 - assertion_valid_not_on_or_after
 - session_valid_not_on_or_after
allow flexible time durations for these fields
fall back to Provider's ACS if none is specified in AuthNRequest
2020-02-14 15:19:48 +01:00
Jens Langhammer 2be026dd44 global: fix import order 2020-02-14 15:17:40 +01:00
Jens Langhammer d9ecb7070d core: add more prometheus metrics 2020-01-19 21:01:26 +01:00
Jens Langhammer fc4a46bd9c root: fix credential variables overwriting each other 2020-01-17 11:16:23 +01:00
Jens Langhammer 7bf7bde856 root: fix prometheus path in ServiceMonitor, return WWW-Authenticate header so basic auth is sent 2020-01-17 10:55:11 +01:00
Jens Langhammer 9bdff14403 providers/app_gw: fix wrong UPSTREAM parameter 2020-01-03 09:15:07 +01:00
Jens Langhammer f124314eab new release: 0.7.12-beta 2020-01-02 20:22:44 +01:00
Jens Langhammer 684e4ffdcf providers/app_gw: fix formatting 2020-01-02 20:22:36 +01:00
Jens Langhammer d9ff5c69c8 providers/app_gw: fix assignment of response_types 2020-01-02 20:20:10 +01:00
Jens Langhammer 8142e3df45 providers/oidc: fix application property of wrong object being used 2020-01-02 20:19:53 +01:00
Jens Langhammer 86f16e2781 providers/oidc: fix incorrectly sorted imports 2020-01-02 16:42:52 +01:00
Jens Langhammer 2ed8e72c62 new release: 0.7.11-beta 2020-01-02 16:38:11 +01:00
Jens Langhammer edeed18ae8 providers/oidc: fix error when using with app_gw 2020-01-02 16:38:01 +01:00
Jens Langhammer d24133d8a2 core: fix _redirect_with_qs appending an array to the URL 2020-01-02 16:14:56 +01:00
Jens Langhammer b9733e56aa providers/app_gw: fix passbook domain being empty 2020-01-02 16:09:17 +01:00
Jens Langhammer cd34413914 providers/app_gw: separate host field into external_ and internal_ 2020-01-02 16:09:04 +01:00
Jens Langhammer c3a4a76d43 providers/app_gw: fix Client's response_type not being set 2020-01-02 16:06:32 +01:00
Jens Langhammer dce1edbe53 new release: 0.7.10-beta 2020-01-02 14:54:52 +01:00
Jens Langhammer 6207226bdf new release: 0.7.9-beta 2020-01-02 14:09:58 +01:00
Jens Langhammer 696cd1f247 new release: 0.7.8-beta 2020-01-02 14:03:36 +01:00
Jens Langhammer 575739d07c ci: add bandit for static security checks 2020-01-02 13:41:49 +01:00
Jens Langhammer 2d7e70eebf audit: fix import order 2020-01-02 13:20:41 +01:00
Jens Langhammer 387f3c981f audit: fix error when trying to save models with UUID as PK 2020-01-02 13:12:23 +01:00
Jens Langhammer 7c706369cd new release: 0.7.7-beta 2020-01-02 11:22:08 +01:00
Jens Langhammer c448f87027 new release: 0.7.6-beta 2020-01-02 10:34:34 +01:00
Jens Langhammer 9d7ed9a0ed new release: 0.7.7-beta 2019-12-31 14:02:01 +01:00
Jens Langhammer d77afd1ded new release: 0.7.6-beta 2019-12-31 13:47:39 +01:00
Jens Langhammer 766518ee0e audit: sanitize kwargs when creating audit event 2019-12-31 13:33:07 +01:00
Jens Langhammer 74b2b26a20 ci: disable pylint's bad-continuation to please black 2019-12-31 13:17:35 +01:00
Jens Langhammer 3bd1eadd51 all: implement black as code formatter 2019-12-31 12:51:16 +01:00
Jens Langhammer 8eb3f0f708 ci: upgrade pylint to latest version
core: also upgrade kombu as https://github.com/celery/kombu/issues/1101 is fixed now
2019-12-31 12:45:29 +01:00
Jens Langhammer 31ea2e7139 audit: fix internal server error from passing models 2019-12-31 11:40:03 +01:00
Jens Langhammer f986dc89ad all: migrate to github 2019-12-30 10:25:35 +01:00
Jens Langhammer b21fd10093 new release: 0.7.5-beta 2019-12-16 22:05:22 +01:00
Jens Langhammer b428ec5237 providers/oidc: remove duplicate fields 2019-12-14 14:28:36 +01:00
Jens Langhammer f22dbba931 providers/saml: add UID field 2019-12-13 13:45:10 +01:00
Jens Langhammer 0946d6a25d docs: add initial structure, add docs for policies and factors 2019-12-09 21:00:45 +01:00
Jens Langhammer 807cbbeaaf audit: rewrite to be independent of django http requests, allow custom actions 2019-12-05 16:14:08 +01:00
Jens Langhammer 74cd0bc08f all(minor): remove old, unused code 2019-12-05 15:07:37 +01:00
Jens Langhammer b08ec0477e all(minor): replace django-ipware with custom implementation 2019-12-05 14:33:55 +01:00
Jens Langhammer 328c999cb9 ci(minor): reenable prospector 2019-12-05 14:31:51 +01:00
Jens Langhammer c37e382c15 root(minor): fix incorrect user IP being shown 2019-12-02 18:05:06 +01:00
Jens Langhammer 784dd0fdd6 root(minor): fix unnecessary redirect for prometheus 2019-12-02 18:04:55 +01:00
Langhammer, Jens 23146de2bf new release: 0.7.4-beta 2019-11-20 13:15:46 +01:00
Langhammer, Jens 979bea17ed root(minor): disable error reporting by default 2019-11-20 13:12:37 +01:00
Langhammer, Jens 99fadf2e55 new release: 0.7.3-beta 2019-11-19 18:14:06 +01:00
Langhammer, Jens be642bc874 root(major): fix dbbackup not working with prometheus 2019-11-19 18:08:25 +01:00
Langhammer, Jens 089b48aad1 Merge branch 'agw' 2019-11-11 18:14:03 +01:00
Langhammer, Jens 2997cb83b1 providers/appgw(major): rewrite to use oauth2_proxy 2019-11-11 18:13:46 +01:00
Langhammer, Jens 08f0aca894 provider/oidc(minor): include claims in id_token 2019-11-11 13:19:54 +01:00
Langhammer, Jens 019a0cb14d new release: 0.7.2-beta 2019-11-08 14:26:52 +01:00
Langhammer, Jens 7f150c96b4 new release: 0.7.1-beta 2019-11-08 14:04:59 +01:00
Langhammer, Jens 73558f30d1 root(minor): revert to django_redis cache 2019-11-08 13:58:10 +01:00
Langhammer, Jens 3d73aac3ab helm(minor): add service monitors 2019-11-08 12:24:42 +01:00
Langhammer, Jens e4fbcd3735 root(major): add prometheus 2019-11-08 12:23:51 +01:00
Langhammer, Jens 44c0eb37cf sources/saml(minor): fix lint issue 2019-11-07 18:02:59 +01:00
Langhammer, Jens adc3dcc2c4 sources/saml(minor): disallow login if source is not enabled 2019-11-07 17:35:25 +01:00
Langhammer, Jens bac8227371 sources/saml(minor): fix fields not being shown 2019-11-07 17:28:59 +01:00
Langhammer, Jens 73d4d9dfe0 admin(major): fix incorrect permissions being set 2019-11-07 17:25:36 +01:00
Langhammer, Jens dabce36667 sources/saml(major): add saml SP 2019-11-07 17:02:56 +01:00
Langhammer, Jens 3bd56ce522 api(minor): fix invalid fieldls being selected 2019-11-07 10:30:22 +01:00
Jens Langhammer ed1fcc3930 new release: 0.7.0-beta 2019-11-02 16:31:23 +00:00
Jens Langhammer c22ddc5394 root(minor): catch keyboardinput and s3 error from sentry 2019-11-02 16:27:28 +00:00
Jens Langhammer 0b9fc9e444 root(minor): fallback to empty string if no Host header ise set 2019-11-01 12:50:38 +00:00
Langhammer, Jens e862b97005 all(major): add API for all objects 2019-10-28 17:55:36 +01:00
Langhammer, Jens cffe09b02e all(major): add most models to API 2019-10-28 17:40:57 +01:00
Langhammer, Jens 846a86fb62 fix lint 2019-10-28 14:44:46 +01:00
Langhammer, Jens 463c130351 core(major): add api for most simple objects 2019-10-28 14:27:43 +01:00
Langhammer, Jens ffca957838 audit(major): AuditEntry -> Event 2019-10-28 14:26:34 +01:00
Langhammer, Jens 543e949a48 api(minor): start with api v2 2019-10-28 14:26:07 +01:00
Langhammer, Jens feb80049aa Merge branch 'master' into guardian 2019-10-25 22:18:13 +02:00
Langhammer, Jens 5c59c8ccb6 new release: 0.6.11-beta 2019-10-15 16:56:24 +02:00
Langhammer, Jens bf6c9e8c4a new release: 0.6.10-beta 2019-10-15 16:05:51 +02:00
Langhammer, Jens 3353aa0298 root(minor): disable uwsgi request loggin and use custom logging instead 2019-10-15 15:57:37 +02:00
Langhammer, Jens d4cb1a98c7 policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes 2019-10-15 15:44:59 +02:00
Langhammer, Jens 13f4ea0b8b root(minor): sort keys in log output 2019-10-15 15:40:38 +02:00
Langhammer, Jens 261d57ad7b Merge branch 'master' into guardian
# Conflicts:
#	Pipfile
#	Pipfile.lock
#	passbook/admin/views/invitations.py
#	passbook/admin/views/policy.py
#	passbook/admin/views/providers.py
#	passbook/admin/views/sources.py
#	passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
Langhammer, Jens 4086252979 core(major): add integrated database backup 2019-10-15 13:52:33 +02:00
Langhammer, Jens 8bdf12cff1 recovery(minor): add unittests 2019-10-14 17:12:56 +02:00
Langhammer, Jens 65a065c4ee policy(minor): add unittests for policy engine 2019-10-14 16:08:24 +02:00
Langhammer, Jens a691ee529c new release: 0.6.9-beta 2019-10-14 15:00:30 +02:00
Langhammer, Jens f1c4a62612 policy(major): fix error when policy.negate is enabled 2019-10-14 15:00:20 +02:00
Langhammer, Jens 358e39ced0 core(major): remove action field from policy 2019-10-14 13:57:38 +02:00
Langhammer, Jens 82d14f37c3 new release: 0.6.8-beta 2019-10-14 13:18:51 +02:00
Langhammer, Jens 2a27325dfd admin(major): add pagination to all listviews 2019-10-14 13:15:42 +02:00
Langhammer, Jens a6dee2e8ed admin(minor): fix sidebar disappearing when editing user 2019-10-14 13:14:54 +02:00
Langhammer, Jens 2ff1635696 core/sources(minor): refactor Source's property 2019-10-13 16:47:13 +02:00
Langhammer, Jens 1cb6b5e984 new release: 0.6.7-beta 2019-10-12 14:23:14 +02:00
Langhammer, Jens 1fe420fd80 admin(major): add YAMLField for attributes, add codemirror editor 2019-10-12 14:23:03 +02:00
Langhammer, Jens 50172e58d8 sources/ldap(minor): save ldap password for user upon successful bind 2019-10-12 14:00:34 +02:00
Langhammer, Jens d7483d129f sources/ldap(minor): call set_unusable_password when creating new user 2019-10-12 13:59:52 +02:00
Langhammer, Jens 34ed0b3594 new release: 0.6.6-beta 2019-10-11 14:33:36 +02:00
Langhammer, Jens 9de950220f core(minor): small css adjustment 2019-10-11 14:32:19 +02:00
Langhammer, Jens 567c90b4c6 new release: 0.6.5-beta 2019-10-11 14:26:20 +02:00