cfc181eed1
sources/oauth: fix wrong comparions
...
closes #118
2020-07-07 21:46:16 +02:00
91bea38b8e
lib: ignore APM errors
2020-07-07 21:45:36 +02:00
d95c5aa739
root: allow changing of APM verify_server_cert setting
2020-07-07 19:59:32 +02:00
0b250b897e
new release: 0.9.0-pre6
2020-07-07 19:14:29 +02:00
c6880a0f16
Merge pull request #117 from BeryJu/apm
...
Support for Elastic APM
2020-07-07 18:48:40 +02:00
231e448b1a
lib/eval: fix import order
2020-07-07 18:05:38 +02:00
b3b8cd807d
root: expose APM settings in helm chart
2020-07-07 17:54:07 +02:00
9021bbd5de
root: implement APM support
2020-07-07 17:43:10 +02:00
169475ab39
crypto: add colon seperator for fingerprint
2020-07-07 17:05:31 +02:00
c00e01626e
sources/ldap: adjust task schedule name
2020-07-07 17:04:07 +02:00
05d4a9ef62
policies/reputation: rewrite to save score into cache and save into DB via worker
2020-07-07 17:03:57 +02:00
17a2ac73e7
stages/user_write: add signals
2020-07-07 15:49:02 +02:00
6bc6f947dd
stages/invitation: move invite signals from core to app
2020-07-07 15:46:13 +02:00
363940ee8d
root: fix API requests erroring
2020-07-07 14:02:20 +02:00
b12182c1d1
admin: improve overview layout
2020-07-07 13:13:15 +02:00
d8f27f595a
admin: use django cache for admin version (expiry)
2020-07-07 13:12:54 +02:00
2dc1b65718
ui: fix modal layout
2020-07-06 20:50:14 +02:00
af22f507f4
sources/oauth: fix template for user settings
2020-07-06 17:48:53 +02:00
9958019bf3
core: fix user's sidebar links for sources
2020-07-06 17:46:41 +02:00
02d65972cb
admin: fix submit button on update form
2020-07-06 17:46:30 +02:00
24ad893350
admin: fix token_list template
2020-07-06 17:43:20 +02:00
094d191bff
new release: 0.9.0-pre5
2020-07-06 12:52:34 +02:00
78e5d471e3
core: fix type annotation for user settings
2020-07-05 23:49:33 +02:00
2e2c9f5287
api: add token authentication
2020-07-05 23:37:58 +02:00
d5a3e09a98
core: add token Intents
2020-07-05 23:14:57 +02:00
2402cfe29d
providers/* use name for __str__
2020-07-05 23:00:40 +02:00
26613b6ea9
core: fix application overview
2020-07-05 22:58:52 +02:00
e5165abf04
stages/user_login: Allow changing of session duration
2020-07-04 15:20:45 +02:00
b26882a450
flows: FlowStageBinding group Stage by type
2020-07-04 15:02:21 +02:00
94281bee88
admin: improve policy binding listing by showing Target object type
2020-07-04 00:18:19 +02:00
16b966c16e
policies: Show grouped Dropdown for Target
2020-07-04 00:16:16 +02:00
d3b0992456
flows: FlowStageBinding: rename .flow to .target to fix select_subclasses()
2020-07-04 00:14:21 +02:00
1d9c92d548
admin: add generic form tests
2020-07-02 22:29:30 +02:00
bead19c64c
flows: cleanup denied view, use everywhere
2020-07-02 13:48:42 +02:00
ae83ee6d31
providers/saml: fix access result not being checked properly
2020-07-02 00:23:52 +02:00
4701374021
admin: remove duplicate code into new base classes
2020-07-02 00:13:33 +02:00
bd40585247
providers/samlv2: remove SAMLv2 from master
2020-07-01 23:21:58 +02:00
cc0b8164b0
providers/*: use PolicyAccessMixin to simplify
2020-07-01 23:18:10 +02:00
310b31a8b7
core: fix linting
2020-07-01 22:35:38 +02:00
13900bc603
lib: cleanup unused widgets
2020-07-01 22:27:58 +02:00
6634cc2edf
root: add group_membership policy
2020-07-01 21:18:05 +02:00
3478a2cf6d
admin: add filter to hide classes with `__debug_only__` when Debug is disabled
2020-07-01 18:53:13 +02:00
3b70d12a5f
*: rephrase strings
2020-07-01 18:40:52 +02:00
219acf76d5
core: fix forms for radio buttons
2020-07-01 12:47:27 +02:00
ec6f467fa2
ui: Make Checkbox label click trigger checkbox toggle
2020-07-01 12:37:13 +02:00
0e6561987e
admin: fix user and group create not triggering sidebar
2020-07-01 12:36:44 +02:00
62c20b6e67
admin: add list of all tokens
2020-07-01 12:27:30 +02:00
13084562c5
admin: fix Password Recovery function not working
2020-07-01 12:10:12 +02:00
02c1c434a2
core: update styling of impersonate banner
2020-07-01 12:01:58 +02:00
5f04a75878
new release: 0.9.0-pre4
2020-07-01 09:50:21 +02:00
89c33060d4
core: fix user settings sidebar buttons not being enabled
2020-06-30 21:26:43 +02:00
b61f595562
core: ensure user settings are sorted by name
2020-06-30 21:24:58 +02:00
ce2230f774
stages/otp_*: update user setting design
2020-06-30 21:23:37 +02:00
c59c6aa728
stages/*: minor UI updates, cleanup
2020-06-30 19:06:41 +02:00
729910c383
stages/*: minor string updates
2020-06-30 18:52:18 +02:00
37fe637422
stages/password: make template inherit form_with_user
2020-06-30 18:50:24 +02:00
2ca5e1eedb
stages/otp_*: fix linting
2020-06-30 16:12:19 +02:00
d2bf579ff6
stages/otp_static: start implementing static stage
2020-06-30 15:44:34 +02:00
3716bda76e
stages/otp_time: fix linting
2020-06-30 13:44:09 +02:00
a76eb4d30f
stages/otp_time: Cleanup, use django_otp's URL generator
2020-06-30 12:42:39 +02:00
7c191b0984
stages/otp_validate: Implement OTP Validation stage
2020-06-30 12:42:12 +02:00
9613fcde89
Squashed commit of the following:
...
commit 885a2ed057
2020-06-30 12:18:01 +02:00
b270fb0742
stages/otp_time: implement TOTP Setup stage
2020-06-30 12:14:40 +02:00
285a69d91f
Merge branch 'master' into otp-rework
2020-06-30 11:23:09 +02:00
de3b753a26
flows: show error message in flow when stage raises
2020-06-30 11:18:39 +02:00
34be1dd9f4
admin: add execute button to flow which executes flow without cache
2020-06-30 11:18:20 +02:00
a4c0fb9e75
otp_time: fix linting
2020-06-30 10:42:27 +02:00
f040223646
audit: move events list from admin to audit app
2020-06-30 10:23:54 +02:00
bf297b8593
admin: add info about latest version
2020-06-30 10:23:39 +02:00
b746ce97ba
Merge branch 'master' into flows-cancel
2020-06-30 00:20:33 +02:00
dbee714dac
api: fix consent stage missing from API
2020-06-30 00:19:06 +02:00
d33f632203
flows: add CancelView to cancel current flow execution
2020-06-30 00:11:01 +02:00
920858ff72
Merge branch 'master' into otp-rework
...
# Conflicts:
# passbook/flows/models.py
# passbook/stages/otp/models.py
# swagger.yaml
2020-06-29 22:54:18 +02:00
8d31eef47d
stages/password: assign default password change flow to password stage
...
add e2e tests for password change flow
2020-06-29 21:47:20 +02:00
96a6ac85df
audit: add cleanse_dict function to ensure no passwords end in logs
2020-06-29 19:13:07 +02:00
21ba969072
stages/password: create default password change flow
2020-06-29 16:26:21 +02:00
d6a8d8292d
core: UIUserSettings: remove icon, rename view_name to URL for complete URL
2020-06-29 16:20:33 +02:00
693a92ada5
audit: fix sanitize_dict updating source dict
2020-06-29 16:19:56 +02:00
ec823aebed
flows: update migrations to use update_or_create
2020-06-29 16:19:39 +02:00
b8654c06bf
flows: remove generic "password change" designation and add setup_stage
2020-06-29 11:12:51 +02:00
9d03c4c7d2
flows: Stage ui_user_settings -> staticmethod with context as argument
2020-06-28 10:31:26 +02:00
8c36ab89e8
stages/otp: start separation into 3 stages, otp_time, otp_static and otp_validate
2020-06-28 10:30:35 +02:00
cc7e4ad0e2
e2e: show browser logs to debug CI issues
2020-06-26 15:06:46 +02:00
768464dc6a
new release: 0.9.0-pre3
2020-06-25 20:39:50 +02:00
5a11206fe9
Merge branch 'master' into e2e
2020-06-25 17:58:51 +02:00
9675fbb07d
e2e: add tests for enrollment with email
2020-06-25 17:45:06 +02:00
57a7bed99d
sources/oauth: fix facebook provider
2020-06-25 10:24:53 +02:00
b8b5069df1
build(deps): bump @patternfly/patternfly in /passbook/static/static
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 4.10.31 to 4.16.7.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/prerelease-v4.10.31...prerelease-v4.16.7 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-06-25 09:21:20 +02:00
9eaceb9ec6
e2e: add tests for SAML source
2020-06-24 23:24:45 +02:00
05778d8065
sources/saml: minor formatting fixes
2020-06-24 22:46:20 +02:00
831e228f80
api: fix SAMLSource missing from API
2020-06-24 22:28:40 +02:00
31e0d74495
sources/saml: correctly cleanup transient users, update forms
2020-06-24 22:27:14 +02:00
05999cb8c7
sources/saml: start implementing transient NameID format
2020-06-24 21:50:30 +02:00
c0d8aa2303
sources/saml: fix SAMLRequest not being encoded properly for Redirect bindings
2020-06-24 13:12:34 +02:00
db6cb5ad51
core: make generic error template work with shell executor
2020-06-23 21:49:43 +02:00
52f138d402
sources/saml: improve error handing of invalid signatures
2020-06-23 21:49:27 +02:00
59b8b1e92a
build(deps): bump codemirror in /passbook/static/static ( #86 )
...
Bumps [codemirror](https://github.com/codemirror/CodeMirror ) from 5.54.0 to 5.55.0.
- [Release notes](https://github.com/codemirror/CodeMirror/releases )
- [Changelog](https://github.com/codemirror/CodeMirror/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codemirror/CodeMirror/compare/5.54.0...5.55.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-22 10:55:16 +02:00
491e507d49
stages/email: check saved get params for token
2020-06-21 20:46:48 +02:00
de1be2df88
flows: save entire GET params from shell executor
2020-06-21 20:46:38 +02:00
39f51ec33d
stages/email: fix email account confirmation email template
2020-06-21 20:13:59 +02:00
1b3c0adf75
e2e: cleanup, always take screenshots on teardown
2020-06-21 15:09:01 +02:00
6122dcacc7
flows: fix flow cache not being cleared correctly when stages are saved
2020-06-21 12:40:01 +02:00
4d81172a48
providers/oauth: add support for consent stage, cleanup
2020-06-20 23:30:53 +02:00
c97b946a00
providers/saml: make SAML provider compatible with consent
2020-06-20 22:30:45 +02:00
3753275453
providers/saml: make metadata accessible without authentication
2020-06-20 21:51:52 +02:00
e4cb9b7ff9
providers/saml: fix provider has no attribute sp_binding
2020-06-20 21:49:48 +02:00
a0f05caf8e
providers/saml: move templates into correct folder
2020-06-20 21:49:16 +02:00
42e9ce4f72
providers/*: fix plan stages not being injected properly
2020-06-20 19:40:25 +02:00
331faa53bc
providers/saml: fix metadata template using wrong templates
2020-06-20 19:35:48 +02:00
68efcc7bf2
e2e: add custom testcase class to simplify code
2020-06-20 17:06:00 +02:00
7b7305607c
root: enable debug logging when testing
2020-06-20 15:48:54 +02:00
14fd137f89
root: improve test detection
2020-06-19 22:27:20 +02:00
af8cdb34ee
*: fix not all migrations using db_alias
2020-06-19 20:43:27 +02:00
03b1a67b44
flows: change wording of consent on flows
2020-06-19 20:33:41 +02:00
3a40e50fa0
providers/oidc: add template for consent
2020-06-19 20:19:31 +02:00
fa5c2bd85c
stages/consent: add FlowPlan context variable for template name
2020-06-19 20:19:18 +02:00
73e7158178
e2e: add OIDC Provider test against grafana, more formatting, minor bug fixes
2020-06-19 19:45:27 +02:00
8c6a4a4968
e2e: test against standalone chrome instance, start implementing oidc provider test
2020-06-19 18:19:20 +02:00
c83216ece0
Merge branch 'master' into e2e
...
# Conflicts:
# Pipfile.lock
# docs/installation/docker-compose.md
2020-06-19 09:00:46 +02:00
b0fec4f3e2
build(deps): bump @fortawesome/fontawesome-free ( #80 )
...
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome ) from 5.13.0 to 5.13.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases )
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/master/CHANGELOG.md )
- [Commits](https://github.com/FortAwesome/Font-Awesome/compare/5.13.0...5.13.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-19 08:53:29 +02:00
dab53cfd03
flows/executor: call plan.next before pop so we can save plan
...
ReevaluateMarker: use PolicyEngine without cache
2020-06-18 22:54:09 +02:00
6a4086c490
flows: introduce FlowPlan markers, which indicate when a stage needs … ( #79 )
...
* flows: introduce FlowPlan markers, which indicate when a stage needs re-evaluation
Implement re_evaluate_policies
add unittests for several different scenarios
closes #78
* flows: move markers to separate files, cleanup formatting
* flows: fix self.next is not callable
2020-06-18 22:43:51 +02:00
bdf0e74af3
docs: add supported scopes of oauth provider
2020-06-18 19:39:58 +02:00
5e8a1e3c0d
*: make email naming consistent
2020-06-18 19:35:59 +02:00
afc8baff5f
flows/shell: check for elements with autofocus attribute and call .focus();
...
closes #76
2020-06-18 19:09:12 +02:00
3713d111a4
core: fix integrity error for default user
...
closes #75
2020-06-18 19:04:13 +02:00
1d3460b670
new release: 0.9.0-pre2
2020-06-15 19:08:17 +02:00
feba3e2430
stages/prompt: Add username type field
...
add autocomplete attributes for username and password
2020-06-15 19:05:18 +02:00
b49d39a685
stages/identification: improve support for password managers
2020-06-15 18:38:09 +02:00
34c1b3b68b
stages/password: Improve support for password managers
2020-06-15 18:37:59 +02:00
e3d6ca6ab4
root: revert to non-prometheus db backend
2020-06-15 12:12:32 +02:00
6f0e292c43
root: add lgtm
2020-06-15 11:56:20 +02:00
9df1e7900d
stages/email: add noopener noreferrer
2020-06-15 11:56:14 +02:00
2a3166bf7e
ui: (pf4) Update pagination and toolbar
2020-06-09 13:40:03 +02:00
62fe4d617b
ui: (pf4) update admin overview
2020-06-09 13:39:44 +02:00
b86b36f947
ui: (pf4) update forms
2020-06-09 13:39:35 +02:00
d6b9e67e78
ui: (pf4) fix navbar
2020-06-09 13:11:54 +02:00
f589da4e72
ui: (pf4) fix empty state
2020-06-09 09:52:25 +02:00
2e5170f631
build(deps): bump @patternfly/patternfly in /passbook/static/static ( #58 )
...
Bumps [@patternfly/patternfly](https://github.com/patternfly/patternfly ) from 2.71.6 to 4.10.31.
- [Release notes](https://github.com/patternfly/patternfly/releases )
- [Changelog](https://github.com/patternfly/patternfly/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/patternfly/patternfly/compare/v2.71.6...prerelease-v4.10.31 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-09 09:32:56 +02:00
bd312b60fc
gatekeeper: update upstream docker image
2020-06-09 09:26:03 +02:00
26aa7e1fef
sources/ldap: fix 'LDAPSource' object has no attribute '_connection'
2020-06-09 01:17:17 +02:00
5265064b10
new release: 0.9.0-pre1
2020-06-08 15:47:22 +02:00
ee8313142f
Merge branch 'docs-flows'
...
# Conflicts:
# passbook/core/templates/partials/form_horizontal.html
2020-06-08 15:43:46 +02:00
fc2eb003ea
e2e: add apply_default_data to load data from migrations after tables have been truncated
2020-06-07 19:31:16 +02:00
aa440c17b7
Merge branch 'master' into e2e
2020-06-07 17:52:51 +02:00
4915205678
WIP Use Flows for Sources and Providers ( #32 )
...
* core: start migrating to flows for authorisation
* sources/oauth: start type-hinting
* core: create default user
* core: only show user delete button if an unenrollment flow exists
* flows: Correctly check initial policies on flow with context
* policies: add more verbosity to engine
* sources/oauth: migrate to flows
* sources/oauth: fix typing errors
* flows: add more tests
* sources/oauth: start implementing unittests
* sources/ldap: add option to disable user sync, move connection init to model
* sources/ldap: re-add default PropertyMappings
* providers/saml: re-add default PropertyMappings
* admin: fix missing stage count
* stages/identification: fix sources not being shown
* crypto: fix being unable to save with private key
* crypto: re-add default self-signed keypair
* policies: rewrite cache_key to prevent wrong cache
* sources/saml: migrate to flows for auth and enrollment
* stages/consent: add new stage
* admin: fix PropertyMapping widget not rendering properly
* core: provider.authorization_flow is mandatory
* flows: add support for "autosubmit" attribute on form
* flows: add InMemoryStage for dynamic stages
* flows: optionally allow empty flows from FlowPlanner
* providers/saml: update to authorization_flow
* sources/*: fix flow executor URL
* flows: fix pylint error
* flows: wrap responses in JSON object to easily handle redirects
* flow: dont cache plan's context
* providers/oauth: rewrite OAuth2 Provider to use flows
* providers/*: update docstrings of models
* core: fix forms not passing help_text through safe
* flows: fix HttpResponses not being converted to JSON
* providers/oidc: rewrite to use flows
* flows: fix linting
2020-06-07 16:35:08 +02:00
07da5f7122
Merge branch 'master' into docs-flows
2020-06-05 20:30:59 +02:00
f91e02a0ec
flows: allow username for default flow
2020-06-05 20:30:47 +02:00
c62794c738
admin: fix PropertyMapping widget not rendering properly
2020-06-05 20:27:18 +02:00
7664b428e7
sources/ldap: fix expression field not being CodeMirror
2020-06-05 20:18:45 +02:00
Jens Langhammer
Jens L
dependabot-preview[bot]