Commit Graph

4684 Commits

Author SHA1 Message Date
Benjamin Dauvergne 15ed6bbdf8 Copy attribute's DRF field kwargs before use (#36098)
gitea/authentic/pipeline/head Build started... Details
Without it we get parameters from previous calls to
Attribute.get_kind().
2019-09-13 12:45:18 +02:00
Benjamin Dauvergne 2884230fe4 auth_fc: differentiate registration login block with a class (#29227) 2019-09-09 13:48:30 +02:00
Benjamin Dauvergne beb8327f40 a2_rbac: add ROLE_ADMIN_RESTRICT_TO_OU_USERS setting (fixes #35391)
It limits visibility of role's administrators to users of the same OU as
the role administered.
2019-09-09 13:05:20 +02:00
Benjamin Dauvergne 5133e00c04 a2_rbac: use bulk update of admin_role permissions (#35391) 2019-09-09 13:05:20 +02:00
Benjamin Dauvergne 43cb2f9c8c a2_rbac: remove unused argument to Role.get_admin_role() (#35391) 2019-09-09 13:05:20 +02:00
Benjamin Dauvergne 4c9fcce47f a2_rbac: validate uniqueness of Role.slug (#35767) 2019-09-09 13:04:48 +02:00
Benjamin Dauvergne 1a8783b8e7 a2_rbac: move tests (#35767) 2019-09-09 13:04:48 +02:00
Benjamin Dauvergne 7a7da5a984 authenticators: select default OU based on service's ACL (#35213) 2019-09-09 13:04:02 +02:00
Nicolas Roche 6d1731c08e api: add non blank validation on required attributes (#35647) 2019-09-06 17:07:48 +02:00
Nicolas Roche c98f24d13c api: add a hashed_password attribute for user api (#35482) 2019-09-05 15:31:40 +02:00
Benjamin Dauvergne ba6e8892b6 views: sign next parameter in logout() (#35782) 2019-09-05 15:16:51 +02:00
Benjamin Dauvergne bc3ef6f057 utils: add signed next_url support to make_url() (#35782) 2019-09-05 15:16:51 +02:00
Benjamin Dauvergne cb021541c6 custom_user: user DRF field to serializer custom attributes to JSON (#24401) 2019-09-05 12:52:00 +02:00
Benjamin Dauvergne ba721dbda5 api: factorize making a DRF field for an attribute (#24401) 2019-09-05 12:52:00 +02:00
Thomas NOËL 58f1c5d4b6 update french translation 2019-09-04 15:26:18 +02:00
Frédéric Péters 870ab13f79 misc: mark template-in-code string for translation (#32794) 2019-09-04 15:18:54 +02:00
Frédéric Péters 837c5de24b emails: always provide a site variable (#32789) 2019-09-04 15:04:46 +02:00
Benjamin Dauvergne aa584ad97d api: recreate get/update_or_create mixin at the view level (#35710) 2019-09-02 14:34:34 +02:00
Paul Marillonnet 7669f2d659 auth_oidc: make OIDCProvider.jwkset always be a jwcrypto JWKSet obj (#35346) 2019-08-27 16:03:02 +02:00
Frédéric Péters 900c8dab0f Revert "Revert "misc: remove auth2_ssl entrypoint (#35418)""
This reverts commit c8bce84a7a.
2019-08-19 17:37:17 +02:00
Frédéric Péters c8bce84a7a Revert "misc: remove auth2_ssl entrypoint (#35418)"
This reverts commit e9897ce3a2.
2019-08-19 17:05:23 +02:00
Benjamin Dauvergne 595f312b1c migrations: remove dependency on auth2_ssl (#35418) 2019-08-19 16:55:27 +02:00
Benjamin Dauvergne 40307f519c auth_saml: add more mapping actions in A2_ATTRIBUTE_MAPPING (#35302) 2019-08-19 16:49:12 +02:00
Benjamin Dauvergne 94486a726b utils: add module to evaluate condition expressions safely (#35302) 2019-08-19 16:49:12 +02:00
Benjamin Dauvergne 5cb84716c8 create authentic2.utils package (#35302) 2019-08-19 16:49:12 +02:00
Benjamin Dauvergne 0f17a56202 log_filters: get user and ip from record if present (#35302) 2019-08-19 16:49:12 +02:00
Frédéric Péters e9897ce3a2 misc: remove auth2_ssl entrypoint (#35418) 2019-08-19 16:37:25 +02:00
Frédéric Péters 983eb2084d build: limit to django-jsonfield<1.3, for Python 2 support 2019-08-18 11:39:53 +02:00
Frédéric Péters 8e4a5ef39a forms: mark fields expecting a new password (#26385) 2019-08-18 09:30:04 +02:00
Benjamin Dauvergne 5732f219c5 a2_rbac: rename role's admin role on role's rename (#34774) 2019-08-16 19:42:17 +02:00
Benjamin Dauvergne d6fbfaa0c8 a2_rbac: do not use lazy string in model name (#34774) 2019-08-16 19:42:17 +02:00
Benjamin Dauvergne 4a28edd5ae a2_rbac: remove unused symbol (#34774) 2019-08-16 19:42:17 +02:00
Benjamin Dauvergne d79de5eca4 api: prevent password change on get_or_create (#34950) 2019-08-12 11:29:34 +02:00
Paul Marillonnet e274ba1a16 auth_oidc: properly redirect to authz endpoint when logging in (#35294) 2019-08-07 16:22:33 +02:00
Benjamin Dauvergne 21257d1a55 auth_saml: implement attribute provisionning after first login (#35283)
Also fix bug in finish_create_user() where modified user was not saved.
2019-08-07 14:42:46 +02:00
Benjamin Dauvergne 0fd98047ee remember 5 last selected ous on login form (#35209) 2019-08-02 16:57:44 +02:00
Frédéric Péters ab5ee3179b translation update 2019-07-19 09:11:17 +02:00
Benjamin Dauvergne b9caa42dd4 add new switch-user tool (#34308) 2019-07-16 12:24:42 +02:00
Benjamin Dauvergne 6b39c1c9a0 remove switch_back view (#34308) 2019-07-16 12:24:42 +02:00
Benjamin Dauvergne 6f0b83fad1 manager: use l10n for state name of import (#34750) 2019-07-16 11:48:53 +02:00
Benjamin Dauvergne 6fa10186d2 manager: csv import, translation row action (#34748) 2019-07-16 11:13:37 +02:00
Benjamin Dauvergne 0bcd0a8b3f manager: use change_user permission for "me" view (#15264) 2019-07-16 11:05:15 +02:00
Frédéric Péters ca239e9928 a11y: don't hide focus ring on focused franceconnect button (#34815) 2019-07-15 15:34:03 +02:00
Frédéric Péters a62b4355c6 templates: use gadjo to render account edit form (#26546) 2019-07-12 15:05:48 +02:00
Frédéric Péters b77bf5d35b manager: add opacity transition when refresh is in progress (#8543) 2019-07-12 15:05:39 +02:00
Frédéric Péters 8aaa47826c saml: do not propose normal users to add a service provider (#5836) 2019-07-12 15:05:39 +02:00
Benjamin Dauvergne 1b5e53a2c7 manager: add a me/ view (#15264)
This view redirects to the user's manager view if possible or to
/accounts/.
2019-07-12 14:51:16 +02:00
Benjamin Dauvergne 14d0a34325 tests: add tests to check for role's admin role cleanup (#34774) 2019-07-12 09:32:15 +02:00
Frédéric Péters 01880fdd9c fix mispelling in translation 2019-07-11 08:32:51 +02:00
Benjamin Dauvergne 3bb74a68e8 tests: fix test on role creation (#34704) 2019-07-09 20:14:05 +02:00