Commit Graph

326 Commits

Author SHA1 Message Date
Jens Langhammer a54adb05c4 bump version: 0.1.4-beta -> 0.1.5-beta 2019-03-08 16:03:52 +01:00
Jens Langhammer 2d7e8f1b50 add group administration 2019-03-08 15:49:45 +01:00
Jens Langhammer 6dcdf7bcce add custom DynamicArrayField to better handle arrays 2019-03-08 15:11:01 +01:00
Jens Langhammer 56d872af15 add PropertyMapping Model, add Subclass for SAML, test with AWS 2019-03-08 12:47:50 +01:00
Jens Langhammer a7b86e46bc bump version: 0.1.3-beta -> 0.1.4-beta 2019-03-07 16:24:09 +01:00
Jens Langhammer 1232c487e9 bump version: 0.1.2-beta -> 0.1.3-beta 2019-03-07 16:13:05 +01:00
Jens Langhammer d7fd5a7fa6 Fix redis dependency being too old 2019-03-07 14:39:00 +01:00
Jens Langhammer 4439378fd4 bump version: 0.1.1-beta -> 0.1.2-beta 2019-03-07 14:14:51 +01:00
Jens Langhammer 99c82676b6 Add some more failsafe for administration 2019-03-07 14:09:52 +01:00
Jens Langhammer cd91d5ca15 Merge branch '1-suspicious-request' into 'master'
Resolve "Suspicious request detector (many invalid logins from one IP, many attempts on one username, etc)"

Closes #1

See merge request BeryJu.org/passbook!3
2019-03-03 20:04:56 +00:00
Jens Langhammer c1640b9411 fix prospector/isort errors 2019-03-03 20:54:23 +01:00
Jens Langhammer a4842c1f95 add sentry configuration 2019-03-03 20:48:31 +01:00
Jens Langhammer a4707ddc54 fix failing unittests 2019-03-03 20:34:00 +01:00
Jens Langhammer fb82d56307 create suspicious request detector and policy, add request to policy engine 2019-03-03 20:26:25 +01:00
Jens Langhammer e86cae6cac Merge branch '18-password-expiry' into 'master'
Resolve "Password Expiry"

Closes #18

See merge request BeryJu.org/passbook!2
2019-03-03 16:53:31 +00:00
Jens Langhammer 791e88ffc1 Fix negate on FieldMatcherPolicy 2019-03-03 17:21:58 +01:00
Jens Langhammer 7bd3c4bccf Better handle Policy.action and Policy.negate 2019-03-03 17:12:53 +01:00
Jens Langhammer c7fc444c95 add password policy 2019-03-03 17:12:05 +01:00
Jens Langhammer 54427f7c68 use HTML5 autocomplete values to better handle password managers 2019-03-02 23:19:58 +01:00
Jens Langhammer 01a9520140 add import_users script to import users from CSV with already hashed passwords 2019-03-02 22:40:47 +01:00
Jens Langhammer c6721a83a4 bump version: 0.1.1-alpha -> 0.1.1-beta 2019-02-27 17:45:10 +01:00
Jens Langhammer 46866e8ef0 bump version: 0.1.0-beta -> 0.1.1-alpha 2019-02-27 17:43:28 +01:00
Jens Langhammer 4c3fced4e9 bump version: 0.1.0-alpha -> 0.1.0-beta 2019-02-27 16:45:52 +01:00
Jens Langhammer 172347d90f bump version: 0.0.13-alpha -> 0.1.0-alpha 2019-02-27 16:42:52 +01:00
Jens Langhammer f54520b5cf bump version: 0.0.12-alpha -> 0.0.13-alpha 2019-02-27 16:06:28 +01:00
Jens Langhammer 5584f5bda8 switch to PolicyEngine everywhere 2019-02-27 15:49:20 +01:00
Jens Langhammer 2ce6f5a714 improve error display on forms 2019-02-27 15:49:05 +01:00
Jens Langhammer 5b771da972 switch from first_name and last_name to name 2019-02-27 15:09:05 +01:00
Jens Langhammer 2db1738e4a make Admin UI more consistent, better show when provider has no application assigned 2019-02-27 14:47:11 +01:00
Jens Langhammer 95de6a14fd bump version: 0.0.11-alpha -> 0.0.12-alpha 2019-02-27 13:18:28 +01:00
Jens Langhammer 6c300b7b31 autofocus password field 2019-02-27 12:35:57 +01:00
Jens Langhammer b726583084 Keep GET parameters throughout entire login process 2019-02-27 12:35:48 +01:00
Jens Langhammer e7a02104db fix display on mobile 2019-02-27 09:33:12 +01:00
Jens Langhammer 556740d7bc add PasswordPolicyForm back in 2019-02-26 15:41:11 +01:00
Jens Langhammer 421f51770c implement password policy checking on signup and password change closes #8 2019-02-26 15:40:58 +01:00
Jens Langhammer 96f7e70f9e enable always_eager when unittesting 2019-02-26 14:24:50 +01:00
Jens Langhammer ad96f7dbb8 add E-Mail support via celery task, untested, closes #17 2019-02-26 14:10:53 +01:00
Jens Langhammer e7fb48eba2 bump version: 0.0.10-alpha -> 0.0.11-alpha 2019-02-26 13:06:26 +01:00
Jens Langhammer b19b5b644d remove hardcoded passwords 2019-02-26 13:06:22 +01:00
Jens Langhammer 250b6691d4 bump version: 0.0.9-alpha -> 0.0.10-alpha 2019-02-26 12:44:02 +01:00
Jens Langhammer e94ef34d8f bump version: 0.0.8-alpha -> 0.0.9-alpha 2019-02-26 12:35:28 +01:00
Jens Langhammer edfe0e5450 fix broken Docker build and helm package 2019-02-26 12:34:51 +01:00
Jens Langhammer 06b65a7882 add unittests, woo 2019-02-26 10:57:05 +01:00
Jens Langhammer ff9bc8aa70 Automatically create PasswordFactor on initial setup closes #16 2019-02-26 09:54:51 +01:00
Jens Langhammer 28da67abe6 Improve partially broken Delete Views, show success message on deletion 2019-02-26 09:49:42 +01:00
Jens Langhammer 39d9fe9bf0 add passbook.pretend to use passbook in applications which don't support generic OAuth 2019-02-26 09:10:37 +01:00
Jens Langhammer 750117b0fd Cleanup templates, handle OAuth Provider without application better 2019-02-26 09:09:19 +01:00
Jens Langhammer 983462f80d user/ -> _/user/ to prevent duplicate URLs 2019-02-26 09:08:49 +01:00
Jens Langhammer 98b414f3e2
add SignUp Confirmation (required by default, can be disabled in invitations) closes #6 2019-02-25 21:03:24 +01:00
Jens Langhammer a0d42092e3
add Nonce (one-time links), add password reset function (missing e-mail verification), closes #7 2019-02-25 20:46:23 +01:00
Jens Langhammer f2569b6424
improve placeholder on login template 2019-02-25 19:43:33 +01:00
Jens Langhammer 7e9154a0ea bump version: 0.0.7-alpha -> 0.0.8-alpha 2019-02-25 17:39:39 +01:00
Jens Langhammer e0ef061771 fix pylint errors.... 2019-02-25 17:32:52 +01:00
Jens Langhammer 10d6a30f2c add experimental HaveIBeenPwned Password Policy 2019-02-25 17:21:56 +01:00
Jens Langhammer 8c94aef6d0 add stub test so coverage doesn't crash 2019-02-25 17:21:06 +01:00
Jens Langhammer fa93b59a8c switch to toast notifications everywhere 2019-02-25 16:41:53 +01:00
Jens Langhammer 8b66b40f0d move forgot password to PasswordFactor 2019-02-25 16:41:33 +01:00
Jens Langhammer 408e205c5f add signal for password change, add field for password policies 2019-02-25 15:41:36 +01:00
Jens Langhammer 5f3ab49535 fix bug when Empty username is given to LoginAttempt.attempt 2019-02-25 14:10:29 +01:00
Jens Langhammer 33431ae013 improve OAuth Source Setup process, fix login template, closes #3 2019-02-25 14:10:10 +01:00
Jens Langhammer fec9b5cf94 bump version: 0.0.6-alpha -> 0.0.7-alpha 2019-02-25 13:20:12 +01:00
Jens Langhammer 986fed3e7c add hook for Factors to show user settings. closes #5 2019-02-25 13:20:07 +01:00
Jens Langhammer da5568b571 cleanup, fix Permission Denied when Cancelling login, fix display of messages on login template 2019-02-25 13:02:50 +01:00
Jens Langhammer bb81bb5a8d totp => otp, integrate with factors, new setup form 2019-02-25 12:29:40 +01:00
Jens Langhammer 9c2cfd7db4 use Inheritance for Factors instead of JSONField 2019-02-24 22:39:09 +01:00
Jens Langhammer 292fbecca0 add password change view 2019-02-23 20:56:41 +01:00
Jens Langhammer 66c0fc9d9a Move factor base template to form_with_user 2019-02-23 20:41:43 +01:00
Jens Langhammer dd9cd7aa0c automatically fill slug field while typing 2019-02-21 17:01:12 +01:00
Jens Langhammer b7ac4f1dd2 add psycopg2 as dependency 2019-02-21 16:30:56 +01:00
Jens Langhammer 183308e444 fix Contains not working correctly 2019-02-21 16:21:45 +01:00
Jens Langhammer c941107d42 Rules -> Policies, more things 2019-02-21 16:06:57 +01:00
Jens Langhammer 7601351f51 add help texts to explain naming 2019-02-16 11:25:53 +01:00
Jens Langhammer df45797b4a fix inconsistent naming again 2019-02-16 11:13:00 +01:00
Jens Langhammer 744a320731 fix inconsistent naming 2019-02-16 10:59:23 +01:00
Jens Langhammer 89722336e3 fix duplicate Class naming 2019-02-16 10:54:15 +01:00
Jens Langhammer d6f4832e90 Rule -> Policies 2019-02-16 10:24:31 +01:00
Jens Langhammer d32699b332 remove reversion 2019-02-16 09:53:32 +01:00
Jens Langhammer 59a15c988f Move Factor instances to database 2019-02-16 09:52:37 +01:00
Jens Langhammer 6649eb401e bump version: 0.0.5-alpha -> 0.0.6-alpha 2019-02-13 16:41:59 +01:00
Jens Langhammer b657d7319d fix failing docker build and failing helm packaging 2019-02-13 16:41:51 +01:00
Jens Langhammer a9d29067bf bump version: 0.0.4-alpha -> 0.0.5-alpha 2019-02-11 18:01:45 +01:00
Jens Langhammer b4cb157257 bump version: 0.0.3-alpha -> 0.0.4-alpha 2019-02-11 17:44:42 +01:00
Jens Langhammer d5ab20ee12 fix coverage failing 2019-02-11 17:36:36 +01:00
Jens Langhammer 0e73702fca add PasswordPolicyRule (not used yet) 2019-02-10 20:09:47 +01:00
Jens Langhammer 1a998e5020 bump version: 0.0.2-alpha -> 0.0.3-alpha 2019-02-08 15:19:31 +01:00
Jens Langhammer d8eb926a76 fix migration import order 2019-02-08 15:19:29 +01:00
Jens Langhammer 4459f9c529 bump version: 0.0.1-alpha -> 0.0.2-alpha 2019-02-08 15:09:22 +01:00
Jens Langhammer 648f614a1a redo migrations, cleanup 2019-02-08 14:57:59 +01:00
Jens Langhammer d4a6e28fe6
core: add custom group model with hierarchy , add tree admin 2018-12-27 00:38:42 +01:00
Jens Langhammer 2eae37107d
core: add slug to application 2018-12-26 17:17:39 +01:00
Jens Langhammer 70afabec7e
Switch to explicit AppConfig declaration 2018-12-26 14:32:33 +01:00
Jens Langhammer 856687475d core: show text if no applications are defined 2018-12-19 10:17:30 +01:00
Jens Langhammer af77a768fb core: only show Admin menu if user is admin 2018-12-19 10:17:17 +01:00
Jens Langhammer 9abcc8852d core: add more logging 2018-12-18 15:35:30 +01:00
Jens Langhammer 0c53a95b06 core: mfa cleanup session after successful login 2018-12-18 15:34:26 +01:00
Jens Langhammer c140c6f524 core: better handle MFA BackendFactor failures 2018-12-18 15:34:15 +01:00
Jens Langhammer f26962268e core: fix error display on login form 2018-12-18 15:33:52 +01:00
Jens Langhammer 1d4f49d269 core: fix invalid mfa-denied URL declaration 2018-12-18 15:33:06 +01:00
Jens Langhammer 5f9befb5ee core: load db from yml 2018-12-18 13:26:47 +01:00
Jens Langhammer 8383df2441 core: add temporary login form with support for sources 2018-12-18 13:26:14 +01:00
Jens Langhammer b0fa302718 core: add is_link and get_url property to base Source 2018-12-18 13:24:58 +01:00
Jens Langhammer 76d70ed3b0 core: slightly adjust login form 2018-12-18 10:40:59 +01:00
Jens Langhammer 764282ea9e
saml_idp: Rewrite to CBV 2018-12-16 17:09:26 +01:00
Jens Langhammer 9e289e9937
core: add about modal 2018-12-16 16:02:03 +01:00
Jens Langhammer 9117e09f1c
core: update brand 2018-12-16 15:43:23 +01:00
Jens Langhammer e81f525cea core,oauth_provider: cleanup templates, add MFA error view 2018-12-14 15:18:02 +01:00
Jens Langhammer 196be4b3b0 Add captcha_factor 2018-12-14 13:51:12 +01:00
Jens Langhammer c4cd602fcb core: cleanup templates, add template for backend authentication 2018-12-14 13:50:58 +01:00
Jens Langhammer a373054e90 admin: add basic audit display 2018-12-14 10:28:37 +01:00
Jens Langhammer fbf58801ec totp: rename tfa to totp 2018-12-14 10:09:57 +01:00
Jens Langhammer 52d1920914 core: fix mfa, split up into multiple files, move factors to settings 2018-12-14 09:49:34 +01:00
Jens Langhammer 83ed1d857b core: implement new mfa authentication 2018-12-13 18:02:08 +01:00
Jens Langhammer 3267d7fb99 core: shrink login wallpaper 2018-12-13 18:01:21 +01:00
Jens Langhammer 2e2752c2e2 core: fix url being active in navbar 2018-12-11 15:30:15 +01:00
Jens Langhammer 26618afb5a core: add generic error view 2018-12-11 15:29:58 +01:00
Jens Langhammer 71f41e655f core: add user settings and user delete 2018-12-10 16:58:35 +01:00
Jens Langhammer 85a2280eaf core; fix variable being shadowed 2018-12-10 15:42:13 +01:00
Jens Langhammer bba10c6db4 core: set request.user after signup for audit 2018-12-10 15:28:08 +01:00
Jens Langhammer 564483cab8 core: prevent duplicate fixed_username/email 2018-12-10 15:27:55 +01:00
Jens Langhammer 111b0ec4fb core: make SignUpForm’s fields readonly if there is an initial value 2018-12-10 15:26:53 +01:00
Jens Langhammer d0099edac4 all: fully switch to Invitation 2018-12-10 14:49:15 +01:00
Jens Langhammer 57f285ae54 admin: set invitation’s created_by properly, remove edit of invite 2018-12-10 14:38:44 +01:00
Jens Langhammer 6bcb5ef8ef Fix bandit and prospector errors 2018-12-10 14:26:10 +01:00
Jens Langhammer 545795ebc6 all: invites -> invitations 2018-12-10 14:21:42 +01:00
Jens Langhammer 89c2b8d49c admin: add invite administration 2018-12-10 14:13:18 +01:00
Jens Langhammer 64c8458c90 core: properly handle invites; audit: log invite creation and usage 2018-12-10 14:05:27 +01:00
Jens Langhammer 274c9daded core: switch to dynamic login form 2018-12-10 13:51:50 +01:00
Jens Langhammer 2a500b3e4a core: add placeholders for forms, add sign-up view 2018-12-10 13:51:38 +01:00
Jens Langhammer cc12f1d8b3 Fix import order 2018-12-10 13:51:16 +01:00
Jens Langhammer 4b25924274 core: add invite model for sign-up 2018-12-10 13:48:22 +01:00
Jens Langhammer 633660c602 core: make FieldMatcherRule’s user_field into dropdown 2018-12-10 11:15:53 +01:00
Jens Langhammer 19a8ecb55a core: show applications on overview page 2018-12-10 10:50:19 +01:00
Jens Langhammer 1a8f3fb18a Cleanup migrations (again) 2018-12-10 10:49:50 +01:00
Jens Langhammer dae5fc6265
core: cleanup provider select 2018-12-09 23:05:55 +01:00
Jens Langhammer 43fe9e062d
core: add static root 2018-12-09 22:12:41 +01:00
Jens Langhammer 57f01952bd
core: fix bandit issues 2018-12-09 21:20:34 +01:00
Jens Langhammer bc691f4f4c
ci: fix dependencies 2018-12-09 21:11:43 +01:00
Jens Langhammer 0754b07765
core: cleanup 2018-12-09 21:07:38 +01:00
Jens Langhammer e7f7a3127c
core: add loading view for authorisation views 2018-12-09 21:07:18 +01:00
Jens Langhammer db3ae58a21
core: switch to different cookie names 2018-12-09 21:06:36 +01:00
Jens Langhammer 60b1c1b493
core: add DebugRule which takes random amount of time to process 2018-12-09 21:06:21 +01:00
Jens Langhammer af3df16b90
core: add uuid to user, use as sub for OpenID 2018-12-09 21:05:25 +01:00
Jens Langhammer f4c5ba27cc disable pymysql import 2018-12-09 17:41:25 +01:00
Jens Langhammer 0ce242e956 core: fix rule engine not working 2018-11-30 14:33:33 +01:00
Jens Langhammer b5ed371575 core: add basic rule engine, needs celery debugging 2018-11-28 14:01:59 +01:00
Jens Langhammer 62ee5db752 core: Remove AppTask Inheritance from Models 2018-11-28 14:01:46 +01:00
Jens Langhammer 005d0f1c8f core: fix prospector error 2018-11-27 16:38:34 +01:00
Jens Langhammer a4046ea264 Add missing PyMySQL to requirements 2018-11-27 16:35:37 +01:00
Jens Langhammer 65f34ece8b core: add celery and redis to requirements 2018-11-27 16:30:42 +01:00
Jens Langhammer 731b745d0c core: switch role evaluating to celery worker 2018-11-27 16:23:29 +01:00
Jens Langhammer 4b047802c0 core: Add Webhook Rule 2018-11-27 16:23:04 +01:00
Jens Langhammer cde35515c7 Fix prospector errors and move secret_key to yaml config 2018-11-27 10:56:40 +01:00
Jens Langhammer b656cd1139 admin: add source admin 2018-11-26 22:09:04 +01:00
Jens Langhammer caf6580ccb Admin: add rule admin 2018-11-26 22:08:48 +01:00
Jens Langhammer c507e310b5 switch to self-rendered forms 2018-11-26 22:07:40 +01:00
Jens Langhammer 15ed14046e Fixup verbose names 2018-11-26 17:17:32 +01:00
Jens Langhammer ca80ebc0cc use logo on favicon and login 2018-11-26 17:17:04 +01:00
Jens Langhammer 15c624b16f Add better logo 2018-11-26 17:16:47 +01:00
Jens Langhammer 4eb105eace
oauth_provider: rewrite view to check for access 2018-11-25 20:39:09 +01:00
Jens Langhammer 6c4e3fde6e
core: add order to rule 2018-11-25 20:38:49 +01:00
Jens Langhammer 1039555113
core: change provider to one-to-one field 2018-11-25 20:38:37 +01:00
Jens Langhammer 76a43a7818
Fix oauth2 authorisation form not working 2018-11-25 12:31:55 +01:00
Jens Langhammer 2a3107ea3c
Rebuild migrations again 2018-11-25 12:31:11 +01:00
Jens Langhammer 28557806c5
Fix some settings not being overwritten 2018-11-24 22:27:02 +01:00
Jens Langhammer 32945250b6
Move skip_authorization to base Provider 2018-11-24 22:26:28 +01:00
Jens Langhammer d0a7bf5ecc Add api and audit structure 2018-11-23 17:05:41 +01:00
Jens Langhammer 00cf64ef31 add logout view 2018-11-23 09:44:30 +01:00
Jens Langhammer e9e6f632e3 Fix message icons and show messages on login view 2018-11-23 09:44:22 +01:00
Jens Langhammer 095a5c0268 core: add basic model against which rules can be checked 2018-11-22 13:12:59 +01:00
Jens Langhammer 6748241905 *: redo migrations again 2018-11-22 13:12:07 +01:00
Jens Langhammer 61b79e90e5 passbook: implement dynamic URL loading 2018-11-22 10:28:13 +01:00
Jens Langhammer b5bc371a04 code is now clean but still not working 2018-11-16 13:08:37 +01:00
Jens Langhammer c1276e9695 redo models again 2018-11-16 11:41:14 +01:00
Jens Langhammer a2904d3ade more cleanup, remove supervisr imports 2018-11-16 10:08:15 +01:00
Jens Langhammer fbaab4efaf
Many broken things 2018-11-16 09:10:35 +01:00
Jens Langhammer 5aa245cac0
add working oauth and ldap client 2018-11-11 13:41:48 +01:00