995615d0a0
policies/expression: Return False if Policy returns Undefined and log warning
2020-02-19 16:19:02 +01:00
ac273aab75
core: raise PropertyMappingExpressionException when PropertyMapping returns Undefined
2020-02-19 16:18:31 +01:00
44cd03654d
core: base set maximum-scale to 1
2020-02-19 15:11:25 +01:00
3e2375f970
new release: 0.8.1-beta
2020-02-19 11:31:05 +01:00
38ad8e5fd3
policies/expression: fix pb_is_sso_flow
2020-02-19 11:01:20 +01:00
e27a05a7fc
lib/sentry: ignore django validation error
2020-02-19 10:54:29 +01:00
e4886f0c6f
new release: 0.8.0-beta
2020-02-19 10:29:52 +01:00
8b2ce5476a
policies/expression: add annotation to update docs, name jinja filters/funcs more clearly
2020-02-19 10:23:42 +01:00
1b82283a20
docs: update policy types, add docs for expression policies
2020-02-19 10:21:28 +01:00
7f3d0113c2
policies: remove redundant policies which can be easily implemented with expressions
2020-02-19 09:51:15 +01:00
0f6dd33a6b
api: add expression policy to API URLs
2020-02-19 09:49:57 +01:00
5b79b3fd22
policies/expression: move evaluation code into separate class
2020-02-19 09:49:38 +01:00
d68c72f1fa
lib: remove method_decorator Mixins
2020-02-18 22:28:47 +01:00
9267d0c1dd
all: general maintenance, prepare for pyright
2020-02-18 22:12:51 +01:00
865abc005a
sources/oauth: remove leading spaces in default URLs
2020-02-18 21:49:53 +01:00
a2725d5b82
sources/oauth: remove redundant OAuth2Clients
2020-02-18 21:49:40 +01:00
4a05bc6e02
sources/oauth: improve default OAuth2 Client, send access_token as Bearer Authz
2020-02-18 21:49:23 +01:00
4e8238603a
all: cleanup logging to be structured
2020-02-18 21:35:58 +01:00
ff25c1c057
admin: load custom policy templates
2020-02-18 21:35:21 +01:00
78cddca0d7
admin: fix user object being overwritten when deleting a user
2020-02-18 21:35:06 +01:00
0c2dc309e7
providers/saml: fix metadata URLs using incorrect params
2020-02-18 20:14:28 +01:00
74ad1b6759
factors: strip port for domain check
2020-02-18 17:05:30 +01:00
591d2f89a1
audit: log event creation on save
2020-02-18 17:05:11 +01:00
7c353f9297
sources/oauth: remove supervisr
2020-02-18 17:01:08 +01:00
cd1af15c56
core: sort applications by name
2020-02-18 17:00:56 +01:00
878169ea2e
core: only show icon on login page if defined
2020-02-18 17:00:26 +01:00
38dfb03668
new release: 0.7.17-beta
2020-02-18 16:29:23 +01:00
e2631cec0e
factors/view: show concise error message when domain is mis-configured
2020-02-18 16:29:04 +01:00
9f00843441
policies/expression: add Expression based policy
2020-02-18 15:12:50 +01:00
f31cd7dec6
core: check PropertyMapping's expression syntax before save
2020-02-18 15:12:05 +01:00
1c1afca31f
providers/saml: fix linting error
2020-02-18 11:34:04 +01:00
fbd4bdef33
providers/saml: add modal to show metadata without download
2020-02-18 10:57:43 +01:00
5b22f9b6c3
providers/saml: transition to dataclass from dict, cleanup unused templates, add missing autosubmit_form
2020-02-18 10:57:30 +01:00
083e317028
lib: add helper method for 400 response with message
2020-02-18 10:13:53 +01:00
95416623b3
sources/ldap: better handle property mapping evaluation errors
2020-02-18 10:13:05 +01:00
813b2676de
providers/saml: better handle PropertyMapping evaluation errors
2020-02-18 10:12:42 +01:00
aeca66a288
providers/saml: change assertion_valid_not_before default to -5 minutes
2020-02-17 21:32:23 +01:00
04a5428148
new release: 0.7.16-beta
2020-02-17 21:02:54 +01:00
73b173b92a
admin: fix form missing on update pages
2020-02-17 21:02:47 +01:00
7cbf20a71c
admin: fix CodeMirror field not loading correctly
2020-02-17 21:02:35 +01:00
7a98e6d92b
new release: 0.7.15-beta
2020-02-17 20:45:56 +01:00
3aa2f1e892
*: propertymapping template -> expression
2020-02-17 20:38:14 +01:00
bc4b7ef44d
providers/saml: add custom help text for templates, add docs for User Object reference
2020-02-17 20:30:14 +01:00
9400b01a55
admin: parameterise generic from's base template
2020-02-17 20:29:41 +01:00
e57da71dcf
sources/ldap: update LDAP source to use new property mappings
2020-02-17 17:55:48 +01:00
7268afaaf9
providers/saml: update to new PropertyMappings
2020-02-17 17:50:11 +01:00
205183445c
admin: add support for template field and Jinja2 highlighting
2020-02-17 17:48:53 +01:00
e6c47fee26
core: add template field to PropertyMapping
2020-02-17 17:47:51 +01:00
a5629c5155
providers/saml: add changeable signature and digest algorithm
2020-02-17 16:28:18 +01:00
41689fe3ce
sources/* add missing migrations
2020-02-17 16:27:35 +01:00
8e84208e2c
new release: 0.7.14-beta
2020-02-17 15:42:14 +01:00
32a48fa07a
providers/saml: more typehints
2020-02-17 15:40:49 +01:00
773a9c0692
policies/engine: fix cached policy results being ignored
2020-02-17 15:37:51 +01:00
8808e3afe0
policies/engine: set mp start method to fork to fix issues under macOS
2020-02-17 15:20:30 +01:00
ecea85f8ca
lib/config: remove autoreload handler as this API is gone in django 3
2020-02-17 15:20:11 +01:00
5dfa141e35
root/wsgi: log requests with event name of request
2020-02-16 14:36:31 +01:00
447e81d0b8
providers/saml: handle uncompressed SAML AuthNRequest
2020-02-16 14:08:35 +01:00
e138076e1d
sources/saml: move labels from forms to models
2020-02-16 12:34:46 +01:00
721d133dc3
sources/oauth: move labels from form to models
2020-02-16 12:34:33 +01:00
75b687ecbe
sources/ldap: move labels from form to models
2020-02-16 12:30:45 +01:00
bdd1863177
providers/saml: move field labels from Form into models
2020-02-16 12:30:26 +01:00
e5b85e8e6a
providers/saml: move default saml properties to DB
2020-02-16 12:29:53 +01:00
d7481c9de7
new release: 0.7.13-beta
2020-02-14 15:35:05 +01:00
571373866e
providers/saml: some more cleanup, fix get_time_string when called without argument
2020-02-14 15:34:24 +01:00
e36d7928e4
providers/saml: big cleanup, simplify base processor
...
add New fields for
- assertion_valid_not_before
- assertion_valid_not_on_or_after
- session_valid_not_on_or_after
allow flexible time durations for these fields
fall back to Provider's ACS if none is specified in AuthNRequest
2020-02-14 15:19:48 +01:00
2be026dd44
global: fix import order
2020-02-14 15:17:40 +01:00
d9ecb7070d
core: add more prometheus metrics
2020-01-19 21:01:26 +01:00
fc4a46bd9c
root: fix credential variables overwriting each other
2020-01-17 11:16:23 +01:00
7bf7bde856
root: fix prometheus path in ServiceMonitor, return WWW-Authenticate header so basic auth is sent
2020-01-17 10:55:11 +01:00
9bdff14403
providers/app_gw: fix wrong UPSTREAM parameter
2020-01-03 09:15:07 +01:00
f124314eab
new release: 0.7.12-beta
2020-01-02 20:22:44 +01:00
684e4ffdcf
providers/app_gw: fix formatting
2020-01-02 20:22:36 +01:00
d9ff5c69c8
providers/app_gw: fix assignment of response_types
2020-01-02 20:20:10 +01:00
8142e3df45
providers/oidc: fix application property of wrong object being used
2020-01-02 20:19:53 +01:00
86f16e2781
providers/oidc: fix incorrectly sorted imports
2020-01-02 16:42:52 +01:00
2ed8e72c62
new release: 0.7.11-beta
2020-01-02 16:38:11 +01:00
edeed18ae8
providers/oidc: fix error when using with app_gw
2020-01-02 16:38:01 +01:00
d24133d8a2
core: fix _redirect_with_qs appending an array to the URL
2020-01-02 16:14:56 +01:00
b9733e56aa
providers/app_gw: fix passbook domain being empty
2020-01-02 16:09:17 +01:00
cd34413914
providers/app_gw: separate host field into external_ and internal_
2020-01-02 16:09:04 +01:00
c3a4a76d43
providers/app_gw: fix Client's response_type not being set
2020-01-02 16:06:32 +01:00
dce1edbe53
new release: 0.7.10-beta
2020-01-02 14:54:52 +01:00
6207226bdf
new release: 0.7.9-beta
2020-01-02 14:09:58 +01:00
696cd1f247
new release: 0.7.8-beta
2020-01-02 14:03:36 +01:00
575739d07c
ci: add bandit for static security checks
2020-01-02 13:41:49 +01:00
2d7e70eebf
audit: fix import order
2020-01-02 13:20:41 +01:00
387f3c981f
audit: fix error when trying to save models with UUID as PK
2020-01-02 13:12:23 +01:00
7c706369cd
new release: 0.7.7-beta
2020-01-02 11:22:08 +01:00
c448f87027
new release: 0.7.6-beta
2020-01-02 10:34:34 +01:00
9d7ed9a0ed
new release: 0.7.7-beta
2019-12-31 14:02:01 +01:00
d77afd1ded
new release: 0.7.6-beta
2019-12-31 13:47:39 +01:00
766518ee0e
audit: sanitize kwargs when creating audit event
2019-12-31 13:33:07 +01:00
74b2b26a20
ci: disable pylint's bad-continuation to please black
2019-12-31 13:17:35 +01:00
3bd1eadd51
all: implement black as code formatter
2019-12-31 12:51:16 +01:00
8eb3f0f708
ci: upgrade pylint to latest version
...
core: also upgrade kombu as https://github.com/celery/kombu/issues/1101 is fixed now
2019-12-31 12:45:29 +01:00
31ea2e7139
audit: fix internal server error from passing models
2019-12-31 11:40:03 +01:00
f986dc89ad
all: migrate to github
2019-12-30 10:25:35 +01:00
b21fd10093
new release: 0.7.5-beta
2019-12-16 22:05:22 +01:00
b428ec5237
providers/oidc: remove duplicate fields
2019-12-14 14:28:36 +01:00
f22dbba931
providers/saml: add UID field
2019-12-13 13:45:10 +01:00
0946d6a25d
docs: add initial structure, add docs for policies and factors
2019-12-09 21:00:45 +01:00
807cbbeaaf
audit: rewrite to be independent of django http requests, allow custom actions
2019-12-05 16:14:08 +01:00
74cd0bc08f
all(minor): remove old, unused code
2019-12-05 15:07:37 +01:00
b08ec0477e
all(minor): replace django-ipware with custom implementation
2019-12-05 14:33:55 +01:00
328c999cb9
ci(minor): reenable prospector
2019-12-05 14:31:51 +01:00
c37e382c15
root(minor): fix incorrect user IP being shown
2019-12-02 18:05:06 +01:00
784dd0fdd6
root(minor): fix unnecessary redirect for prometheus
2019-12-02 18:04:55 +01:00
23146de2bf
new release: 0.7.4-beta
2019-11-20 13:15:46 +01:00
979bea17ed
root(minor): disable error reporting by default
2019-11-20 13:12:37 +01:00
99fadf2e55
new release: 0.7.3-beta
2019-11-19 18:14:06 +01:00
be642bc874
root(major): fix dbbackup not working with prometheus
2019-11-19 18:08:25 +01:00
089b48aad1
Merge branch 'agw'
2019-11-11 18:14:03 +01:00
2997cb83b1
providers/appgw(major): rewrite to use oauth2_proxy
2019-11-11 18:13:46 +01:00
08f0aca894
provider/oidc(minor): include claims in id_token
2019-11-11 13:19:54 +01:00
019a0cb14d
new release: 0.7.2-beta
2019-11-08 14:26:52 +01:00
7f150c96b4
new release: 0.7.1-beta
2019-11-08 14:04:59 +01:00
73558f30d1
root(minor): revert to django_redis cache
2019-11-08 13:58:10 +01:00
3d73aac3ab
helm(minor): add service monitors
2019-11-08 12:24:42 +01:00
e4fbcd3735
root(major): add prometheus
2019-11-08 12:23:51 +01:00
44c0eb37cf
sources/saml(minor): fix lint issue
2019-11-07 18:02:59 +01:00
adc3dcc2c4
sources/saml(minor): disallow login if source is not enabled
2019-11-07 17:35:25 +01:00
bac8227371
sources/saml(minor): fix fields not being shown
2019-11-07 17:28:59 +01:00
73d4d9dfe0
admin(major): fix incorrect permissions being set
2019-11-07 17:25:36 +01:00
dabce36667
sources/saml(major): add saml SP
2019-11-07 17:02:56 +01:00
3bd56ce522
api(minor): fix invalid fieldls being selected
2019-11-07 10:30:22 +01:00
ed1fcc3930
new release: 0.7.0-beta
2019-11-02 16:31:23 +00:00
c22ddc5394
root(minor): catch keyboardinput and s3 error from sentry
2019-11-02 16:27:28 +00:00
0b9fc9e444
root(minor): fallback to empty string if no Host header ise set
2019-11-01 12:50:38 +00:00
e862b97005
all(major): add API for all objects
2019-10-28 17:55:36 +01:00
cffe09b02e
all(major): add most models to API
2019-10-28 17:40:57 +01:00
846a86fb62
fix lint
2019-10-28 14:44:46 +01:00
463c130351
core(major): add api for most simple objects
2019-10-28 14:27:43 +01:00
ffca957838
audit(major): AuditEntry -> Event
2019-10-28 14:26:34 +01:00
543e949a48
api(minor): start with api v2
2019-10-28 14:26:07 +01:00
feb80049aa
Merge branch 'master' into guardian
2019-10-25 22:18:13 +02:00
5c59c8ccb6
new release: 0.6.11-beta
2019-10-15 16:56:24 +02:00
bf6c9e8c4a
new release: 0.6.10-beta
2019-10-15 16:05:51 +02:00
3353aa0298
root(minor): disable uwsgi request loggin and use custom logging instead
2019-10-15 15:57:37 +02:00
d4cb1a98c7
policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
2019-10-15 15:44:59 +02:00
13f4ea0b8b
root(minor): sort keys in log output
2019-10-15 15:40:38 +02:00
261d57ad7b
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/admin/views/invitations.py
# passbook/admin/views/policy.py
# passbook/admin/views/providers.py
# passbook/admin/views/sources.py
# passbook/admin/views/users.py
2019-10-15 15:09:11 +02:00
4086252979
core(major): add integrated database backup
2019-10-15 13:52:33 +02:00
8bdf12cff1
recovery(minor): add unittests
2019-10-14 17:12:56 +02:00
65a065c4ee
policy(minor): add unittests for policy engine
2019-10-14 16:08:24 +02:00
a691ee529c
new release: 0.6.9-beta
2019-10-14 15:00:30 +02:00
f1c4a62612
policy(major): fix error when policy.negate is enabled
2019-10-14 15:00:20 +02:00
358e39ced0
core(major): remove action field from policy
2019-10-14 13:57:38 +02:00
82d14f37c3
new release: 0.6.8-beta
2019-10-14 13:18:51 +02:00
2a27325dfd
admin(major): add pagination to all listviews
2019-10-14 13:15:42 +02:00
a6dee2e8ed
admin(minor): fix sidebar disappearing when editing user
2019-10-14 13:14:54 +02:00
2ff1635696
core/sources(minor): refactor Source's property
2019-10-13 16:47:13 +02:00
1cb6b5e984
new release: 0.6.7-beta
2019-10-12 14:23:14 +02:00
1fe420fd80
admin(major): add YAMLField for attributes, add codemirror editor
2019-10-12 14:23:03 +02:00
50172e58d8
sources/ldap(minor): save ldap password for user upon successful bind
2019-10-12 14:00:34 +02:00
d7483d129f
sources/ldap(minor): call set_unusable_password when creating new user
2019-10-12 13:59:52 +02:00
34ed0b3594
new release: 0.6.6-beta
2019-10-11 14:33:36 +02:00
9de950220f
core(minor): small css adjustment
2019-10-11 14:32:19 +02:00
567c90b4c6
new release: 0.6.5-beta
2019-10-11 14:26:20 +02:00
ae19236366
factors/email(minor): fix default timeout being 0, which breaks task
2019-10-11 14:24:58 +02:00
f9babe7089
core(minor): fix timezone warning when cleaning nonces
2019-10-11 14:23:59 +02:00
32abb27e61
sources/ldap(minor): fix lint
2019-10-11 13:43:35 +02:00
8478b03892
sources/ldap(major): implement membership sync, add more settings
2019-10-11 13:41:12 +02:00
e972f2b289
Merge branch 'master' into ldap-rewrite
2019-10-11 12:53:56 +02:00
22c4fb1414
sources/ldap(major): add sync_users and sync_groups, rewrite auth_user method
2019-10-11 12:53:48 +02:00
0154def916
root(minor): allow subapps to define CELERY_BEAT_SCHEDULE
2019-10-11 12:47:29 +02:00
fc69b6851d
core(minor): tags -> attributes, add attributes to user, add propertymappings to source
2019-10-11 12:47:06 +02:00
44a3c7fa5f
Merge branch 'master' into ldap-rewrite
2019-10-11 10:24:12 +02:00
37111fd07b
core(minor): merge migrations
2019-10-10 17:41:22 +02:00
4e6653e299
ldap(major): start rewrite
2019-10-10 17:36:09 +02:00
143a575369
Merge branch 'master' into guardian
...
# Conflicts:
# Pipfile
# Pipfile.lock
# passbook/core/models.py
2019-10-10 17:29:34 +02:00
c782585287
ci(minor): re-enable pylint
2019-10-10 17:22:56 +02:00
48a04744e0
new release: 0.6.4-beta
2019-10-10 16:09:38 +02:00
b9991465ee
recovery(new): add recovery app to create recovery links
2019-10-10 14:05:16 +02:00
3d8242be06
core(minor): add new, optional description field to nonce
2019-10-10 14:04:58 +02:00
344a8817c3
admin(minor): fix linting
2019-10-10 13:05:03 +02:00
3afb0d4f6d
admin(minor): remove partial API
2019-10-10 13:04:20 +02:00
c9714893bb
admin(major): rewrite all views to use guardian mixins
2019-10-10 13:01:49 +02:00
3185a86b22
core(minor): add separate permission to reset user's password
2019-10-10 13:01:36 +02:00
a53f7a49ac
root(minor): start implementing guardian
2019-10-10 10:45:51 +02:00
ca3bcc565d
ui(minor): simplify top navigation
2019-10-10 10:02:48 +02:00
c1dae0b599
sources/oauth(minor): fix wrong settings reference
2019-10-09 19:46:23 +02:00
e70d3b6286
new release: 0.6.3-beta
2019-10-09 14:44:50 +02:00
17e6bc921b
core(minor): fix import order
2019-10-09 14:37:40 +02:00
3b7e47dbe2
settings(minor): use cached_db for session, use localhost as domain
2019-10-09 14:30:53 +02:00
2e15b24f0a
*(minor): switch has_user_settings to return Optional dataclass instead of tuple
2019-10-09 12:47:14 +02:00
088b9592cd
core(minor): remove unused code
2019-10-08 15:04:38 +02:00
b1e4e32b83
providers/oidc(minor): correctly create audit entry on authz
2019-10-08 14:34:59 +02:00
d91a852eda
factors/email(minor): start rebuilding email integration as factor
2019-10-08 14:30:17 +02:00
171c5b9759
factors/password(minor): remove form from core
2019-10-08 14:23:02 +02:00
64290b2a37
admin(minor): add view to create user
2019-10-08 11:27:19 +02:00
72769b8a0a
lib(minor): cleanup default settings
2019-10-08 10:44:44 +02:00
6d0ecd228e
new release: 0.6.2-beta
2019-10-07 21:24:56 +02:00
a390bb7b59
factors/otp(minor): fix old URLs
2019-10-07 21:23:25 +02:00
17eea4a10c
new release: 0.6.1-beta
2019-10-07 18:53:04 +02:00
ec73b53340
providers/saml(minor): fix last wrong urls names
2019-10-07 18:36:09 +02:00
8f42a7f0b4
new release: 0.6.0-beta
2019-10-07 17:18:19 +02:00
2c221ea819
providers/oauth(minor): fix import order
2019-10-07 17:14:52 +02:00
93e0441b58
helm(minor): don't directly mount configmap
2019-10-07 17:14:08 +02:00
59fc223a85
factors/captcha(minor): load correct keys
2019-10-07 16:58:06 +02:00
0a6f555c23
otp(minor): disable autocomplete for code input
2019-10-07 16:57:54 +02:00
Jens Langhammer
Langhammer, Jens
Jens Langhammer