Commit Graph

5389 Commits

Author SHA1 Message Date
Benjamin Dauvergne 3a596034fa misc: ignore name argument for compatibility with DRF==3.4 (#49110)
gitea/authentic/pipeline/head Build started... Details
2020-12-16 13:30:01 +01:00
Valentin Deniaud ebfbd66552 csv_import: use absolute URL for password reset (#49479) 2020-12-15 16:40:05 +01:00
Frédéric Péters d915700420 translation update 2020-12-04 08:28:06 +01:00
Benjamin Dauvergne e8d20c6b36 misc: decode bytes in User.set_random_password() (#49072) 2020-12-03 11:53:13 +01:00
Benjamin Dauvergne be38c3ab23 tox.ini: only show warnings from authentic2 2020-12-03 09:52:36 +01:00
Valentin Deniaud 2cc198dd70 api: add statistics endpoints (#48845) 2020-12-03 09:17:48 +01:00
Benjamin Dauvergne 206fec2122 tests: fix indentation (#47943) 2020-12-02 19:16:44 +01:00
Benjamin Dauvergne 550e5d1bf6 manage: ensure created users have a password (#47943) 2020-12-02 19:16:44 +01:00
Benjamin Dauvergne 9fe6ce378f misc: use set_random_password() in csv_import (#47943) 2020-12-02 19:16:44 +01:00
Benjamin Dauvergne 4a2305459f misc: add User.set_random_password() (#47943) 2020-12-02 19:16:44 +01:00
Paul Marillonnet 8c3902b2c2 misc: do not modify email when marking users as deleted (#48264) 2020-12-02 09:56:08 +01:00
Valentin Deniaud c1345a3356 journal: add event type statistics (#47467) 2020-12-01 17:36:22 +01:00
Benjamin Dauvergne 5371f986b6 backends: define a total ordering for user's querysets (#49009) 2020-12-01 12:28:01 +01:00
Frédéric Péters fda0fe2080 misc: don't display "Manually enter..." checkbox on disabled widget (#48953) 2020-11-30 12:46:26 +01:00
Paul Marillonnet c5d9257bc1 misc: remove references to deprecated menu module (#48906) 2020-11-27 11:35:26 +01:00
Paul Marillonnet a888b11c90 misc: remove references to deprecated dashboard module (#48906) 2020-11-27 11:35:16 +01:00
Serghei Mihai ed055e0892 authentic2_idp_oidc: verify next url againts clients redirect_uris (#48739) 2020-11-27 10:07:39 +01:00
Benjamin Dauvergne 1a995c8c8a translation update 2020-11-23 23:43:20 +01:00
Benjamin Dauvergne 08827ac552 api: check and normalize phone numbers (#48350) 2020-11-23 10:34:09 +01:00
Benjamin Dauvergne b2f926388b auth_oidc: handle case of multiple users with same email but email should be unique (#48339) 2020-11-20 12:34:54 +01:00
Benjamin Dauvergne 7fdf868b5c debian: restore use of launch-authentic2.sh in authentic2 package (#48701) 2020-11-20 09:30:47 +01:00
Benjamin Dauvergne 60c182181d misc: cleanup remaining tables from django-admin-tools (#48614) 2020-11-17 16:39:56 +01:00
Benjamin Dauvergne 0153163669 misc: remove check on sync-metadata --source option (#48500) 2020-11-13 21:41:15 +01:00
Benjamin Dauvergne f89842ffab misc: add more checks on email address localpart (#48133) 2020-11-05 20:39:19 +01:00
Benjamin Dauvergne 9dea38f1b4 misc: clean LDAP accounts of deleted users (#48168) 2020-11-03 19:56:35 +01:00
Benjamin Dauvergne 5ece3924bf auth_saml: clean accounts of deleted users (#48168) 2020-11-03 19:56:11 +01:00
Benjamin Dauvergne 0e24a314f4 auth_fc: clean accounts of deleted users (#48168) 2020-11-03 19:55:43 +01:00
Benjamin Dauvergne c56e4d684a auth_oidc: clean accounts of deleted users (#48168) 2020-11-03 19:55:11 +01:00
Benjamin Dauvergne 9b135fac07 misc: emit signals on DeletedUser creations (#48168) 2020-11-03 19:51:15 +01:00
Benjamin Dauvergne 7e013975f7 misc: set unusable password on federated users (#48136) 2020-11-03 17:31:33 +01:00
Benjamin Dauvergne 8b89b7cadc auth_oidc: normalize unicode strings (#48174) 2020-11-03 11:12:17 +01:00
Benjamin Dauvergne 5d28c9034c auth_oidc: make account unique on (provider, user) and (provider, sub) (#48174) 2020-11-03 11:12:17 +01:00
Benjamin Dauvergne 0dac935c96 translation update 2020-11-02 22:38:46 +01:00
Paul Marillonnet a0f1062077 auth_fc: misc django 2 compatibility (#48158) 2020-10-30 16:43:53 +01:00
Paul Marillonnet 1cc2fdf70d misc: defer null-character check in api to submodule initialization (#48114) 2020-10-30 10:18:09 +01:00
Benjamin Dauvergne 8d6b4653e3 auth_saml: reorganize and fix tests (#48117) 2020-10-29 16:32:01 +01:00
Benjamin Dauvergne 7b002f861f auth_oidc: use a signed state (#47825)
State is no more stored in the session, it's made using signing.dumps()
instead, to be more resilient. It's associated to a cookie scoped to the
callback path and the nonce created from the state id using an HMAC
construction with settings.SECRET_KEY.
2020-10-29 00:34:41 +01:00
Benjamin Dauvergne 6cd84ac407 auth_saml: always add mapping as MappingError details (#47760) 2020-10-29 00:18:25 +01:00
Benjamin Dauvergne d47bc8e1ad misc: prevent internal URL leak in browser history (#47302) 2020-10-29 00:17:58 +01:00
Benjamin Dauvergne dcb4b40b39 misc: add registration redirect URL to whitelist (#47302) 2020-10-29 00:17:58 +01:00
Benjamin Dauvergne e5e560982e misc: coding style (#47302) 2020-10-29 00:17:48 +01:00
Benjamin Dauvergne 7a3be23b0d validators: work around lack of NULL char check in forms.CharField (#46625) 2020-10-28 23:33:36 +01:00
Benjamin Dauvergne d3c962e095 misc: check null characters in query-string and form data (#46625) 2020-10-28 23:33:36 +01:00
Benjamin Dauvergne 2600bfab90 auth_fc: update first_name and last_name only when required (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne cbd43d4f4c auth fc: make fc_display_name more resilient (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne 4e0be8c7c3 auth_fc: add tests on login with minimal user_info (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne e28713c583 tests: simplify FranceConnect tests (#48042) 2020-10-28 23:32:47 +01:00
Frédéric Péters 9f08f5c475 auth saml: put newly created user in default OU (#46484) 2020-10-27 20:06:49 +01:00
Serghei Mihai 79045bf99d api: allow anonymous requests to address autocomplete endpoint (#48031) 2020-10-27 10:36:09 +01:00
Benjamin Dauvergne 976dec4225 idp_oidc: make ending slash optional (#47918) 2020-10-27 09:52:59 +01:00