Commit Graph

5370 Commits

Author SHA1 Message Date
Benjamin Dauvergne 5ae4bac1c8 tests: use pytest style (#48352)
gitea/authentic/pipeline/head Build started... Details
2020-11-14 09:23:47 +01:00
Benjamin Dauvergne e51b20fbe7 misc: specialize user search for phone numbers (#48352) 2020-11-14 09:23:47 +01:00
Benjamin Dauvergne 3d1fbb6af2 attribute_kinds: normalize local phone numbers prefix (#48546) 2020-11-13 22:42:00 +01:00
Benjamin Dauvergne 0c705e7922 api: check and normalize phone numbers (#48350) 2020-11-13 22:01:22 +01:00
Benjamin Dauvergne f89842ffab misc: add more checks on email address localpart (#48133) 2020-11-05 20:39:19 +01:00
Benjamin Dauvergne 9dea38f1b4 misc: clean LDAP accounts of deleted users (#48168) 2020-11-03 19:56:35 +01:00
Benjamin Dauvergne 5ece3924bf auth_saml: clean accounts of deleted users (#48168) 2020-11-03 19:56:11 +01:00
Benjamin Dauvergne 0e24a314f4 auth_fc: clean accounts of deleted users (#48168) 2020-11-03 19:55:43 +01:00
Benjamin Dauvergne c56e4d684a auth_oidc: clean accounts of deleted users (#48168) 2020-11-03 19:55:11 +01:00
Benjamin Dauvergne 9b135fac07 misc: emit signals on DeletedUser creations (#48168) 2020-11-03 19:51:15 +01:00
Benjamin Dauvergne 7e013975f7 misc: set unusable password on federated users (#48136) 2020-11-03 17:31:33 +01:00
Benjamin Dauvergne 8b89b7cadc auth_oidc: normalize unicode strings (#48174) 2020-11-03 11:12:17 +01:00
Benjamin Dauvergne 5d28c9034c auth_oidc: make account unique on (provider, user) and (provider, sub) (#48174) 2020-11-03 11:12:17 +01:00
Benjamin Dauvergne 0dac935c96 translation update 2020-11-02 22:38:46 +01:00
Paul Marillonnet a0f1062077 auth_fc: misc django 2 compatibility (#48158) 2020-10-30 16:43:53 +01:00
Paul Marillonnet 1cc2fdf70d misc: defer null-character check in api to submodule initialization (#48114) 2020-10-30 10:18:09 +01:00
Benjamin Dauvergne 8d6b4653e3 auth_saml: reorganize and fix tests (#48117) 2020-10-29 16:32:01 +01:00
Benjamin Dauvergne 7b002f861f auth_oidc: use a signed state (#47825)
State is no more stored in the session, it's made using signing.dumps()
instead, to be more resilient. It's associated to a cookie scoped to the
callback path and the nonce created from the state id using an HMAC
construction with settings.SECRET_KEY.
2020-10-29 00:34:41 +01:00
Benjamin Dauvergne 6cd84ac407 auth_saml: always add mapping as MappingError details (#47760) 2020-10-29 00:18:25 +01:00
Benjamin Dauvergne d47bc8e1ad misc: prevent internal URL leak in browser history (#47302) 2020-10-29 00:17:58 +01:00
Benjamin Dauvergne dcb4b40b39 misc: add registration redirect URL to whitelist (#47302) 2020-10-29 00:17:58 +01:00
Benjamin Dauvergne e5e560982e misc: coding style (#47302) 2020-10-29 00:17:48 +01:00
Benjamin Dauvergne 7a3be23b0d validators: work around lack of NULL char check in forms.CharField (#46625) 2020-10-28 23:33:36 +01:00
Benjamin Dauvergne d3c962e095 misc: check null characters in query-string and form data (#46625) 2020-10-28 23:33:36 +01:00
Benjamin Dauvergne 2600bfab90 auth_fc: update first_name and last_name only when required (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne cbd43d4f4c auth fc: make fc_display_name more resilient (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne 4e0be8c7c3 auth_fc: add tests on login with minimal user_info (#47566) 2020-10-28 23:33:08 +01:00
Benjamin Dauvergne e28713c583 tests: simplify FranceConnect tests (#48042) 2020-10-28 23:32:47 +01:00
Frédéric Péters 9f08f5c475 auth saml: put newly created user in default OU (#46484) 2020-10-27 20:06:49 +01:00
Serghei Mihai 79045bf99d api: allow anonymous requests to address autocomplete endpoint (#48031) 2020-10-27 10:36:09 +01:00
Benjamin Dauvergne 976dec4225 idp_oidc: make ending slash optional (#47918) 2020-10-27 09:52:59 +01:00
Benjamin Dauvergne b4b23cdf63 debian: disable write exception in uwsgi.ini (#47809) 2020-10-27 09:52:30 +01:00
Valentin Deniaud d2d0372b44 auth_saml: rename toggle-role action to add-role (#46857) 2020-10-26 10:25:50 +01:00
Benjamin Dauvergne f7228347ce misc: add caption before external ids in check-and-repair (#42179) 2020-10-23 10:35:55 +02:00
Benjamin Dauvergne 89814b519b misc: fix admin role bad permissions using get_admin_role (#42179) 2020-10-23 10:35:55 +02:00
Paul Marillonnet 7c4f725bfc a2_rbac: do not break unicity when get-or-creating admin role (#42179) 2020-10-23 10:35:52 +02:00
Paul Marillonnet 45a93bb273 manage: hide journal app whose icon is missing (#47891) 2020-10-21 14:04:27 +02:00
Valentin Deniaud 911f847b24 test_journal: add missing make_naive (#47872) 2020-10-20 10:31:40 +02:00
Frédéric Péters 1fc76fd66e misc: don't expose journal in publik menu (#47813) 2020-10-19 09:42:41 +02:00
Benjamin Dauvergne e8fa64c228 MANIFEST.in: add templates from journal 2020-10-17 09:13:10 +02:00
Benjamin Dauvergne db0789ee2e translation update (#47773) 2020-10-17 08:46:27 +02:00
Benjamin Dauvergne 13bb51ecef misc: modify strings for translation (#47773) 2020-10-17 08:46:20 +02:00
Lauréline Guérin 11869fb4b8
profile: fix address autocomplete JS loading (#47796) 2020-10-16 15:22:05 +02:00
Serghei Mihai 4fed275ba3 auth_saml: raise error when no saml attribute value received (#47706) 2020-10-15 17:35:15 +02:00
Benjamin Dauvergne 8487d33cff misc: integration of journal in manager (#47155) 2020-10-15 15:22:31 +02:00
Benjamin Dauvergne 1cc04e3ad7 misc: integration of journal authentic views (#47155) 2020-10-15 15:22:31 +02:00
Benjamin Dauvergne 9a1631b18a misc: add journal application (#47155) 2020-10-15 15:22:31 +02:00
Nicolas Roche 8899d25376 manager: use selected ou by default in add roles form (#46643) 2020-10-14 17:46:36 +02:00
Valentin Deniaud 8ae42a05d8 manager: look for duplicates on user creation (#45419) 2020-10-14 15:00:02 +02:00
Valentin Deniaud 41ef79557c models: add missing migration (#47627) 2020-10-13 16:15:53 +02:00