2023-05-05T23:22:16Z - 2024-05-05T23:22:16Z
Overview
62 Releases published by 7 users
Published
v5.40
Published
v5.39
Published
v5.38
Published
v5.37
Published
v5.36
Published
v5.35
Published
v5.34
Published
v5.33
Published
v5.32
Published
v5.31
Published
v5.30
Published
v5.29
Published
v5.28
Published
v5.27
Published
v5.26
Published
v5.25
Published
v5.24
Published
v5.23
Published
v5.22
Published
v5.21
Published
v5.20
Published
v5.19
Published
v5.18
Published
v5.17
Published
v5.16
Published
v5.15
Published
v5.14
Published
v5.13
Published
v5.12
Published
v5.11
Published
v5.10
Published
v5.9
Published
v5.8
Published
v5.7
Published
v5.6
Published
v5.5
Published
v5.4
Published
v5.3
Published
v5.2
Published
v5.1
Published
v5.0
Published
v4.99
Published
v4.98
Published
v4.97
Published
v4.96
Published
v4.95
Published
v4.94
Published
v4.93
Published
v4.92
Published
v4.91
Published
v4.90
Published
v4.89
Published
v4.88
Published
v4.87
Published
v4.86
Published
v4.85
Published
v4.84
Published
v4.83
Published
v4.82
Published
v4.81
Published
v4.80
Published
v4.79
204 Pull requests merged by 11 users
Merged
#294 [authn tél] uniformiser les messages d’erreur de format à la saisie du numéro de tél (#90190)
Merged
#293 passwords: do not assume email input on account recovery (#90191)
Merged
#295 misc: use samesite=None for opened session cookie (#90197)
Merged
#286 phone-authn: on registration, inform user of existing duplicate (#88163)
Merged
#284 hide fields' requisiteness on phone-enabled password-reset (#88147)
Merged
#278 password_reset: provide phone authn config in template ctx (#88158)
Merged
#276 login registration: provide phone authn config in template ctx (#88144)
Merged
#280 /accounts/: compute profile completion ratio (#88287)
Merged
#289 Recherche sur les rôles insensibles aux accents (#87906)
Merged
#287 authn tél : rendre paramétrable dans le BO la durée de vie des codes SMS reçus (#88786)
Merged
#273 auth tél : à la création de compte, sur un numéro de téléphone déclaré dans un format erroné, afficher un exemple de numéro attendu (#88045)
Merged
#181 Faire que l’api générique crud sur les usagers gère l’unicité du numéro en cas d’authn tél activée (#83700)
Merged
#288 auth_oidc: prevent trace when jwkset_json is None (#88885)
Merged
#272 manager: search role with unaccent lookup (#87906)
Merged
#285 authenticators: add helper functions for show condition (#67986)
Merged
#279 misc: remove dead logged-in JSONP endpoint (#88195)
Merged
#277 manager: add display condition on homepage sidebar title (#87961)
Merged
#281 widgets: add check on field_id parameter for select2.json urls (#88250)
Merged
#271 forms: add an example of email address in registration form (#83254)
Merged
#282 manager: forbid sort on role inheritance table member column (#88249)
Merged
#274 urls: use uuid routing parameter for sms code opaque urls (#88044)
Merged
#275 login registration: provide phone authn config in template ctx (#88144)
Merged
#270 tests: remove httmock from tox.ini deps (#87799)
Merged
#269 tests: replace httmock with responses for auth_oidc tests (#85702)
Merged
#265 tests: replace httmock by responses in auth_fc tests (#85701)
Merged
#266 journal: fix get_message for user.login.failure events (#87616)
Merged
#264 manager: add multi-word role search (#86979)
Merged
#263 csv_import: accept empty unmandatory phone (#87581)
Merged
#261 auth_oidc: ignore missing kid when comparing keysets (#72462)
Merged
#259 idp oidc: use min() to cap login retry timeout (#87442)
Merged
#192 Ne pas utiliser Lock.lock_email si on est pas dans la création d'un nouvel utilisateur et donc dans une transaction (#70439)
Merged
#258 ignorer la casse de l'adresse de courriel lors de la recherche d'un nouvel utilisateur LDAP (#67600)
Merged
#251 api/statistics: add service_ou filter when not group-by (#86179)
Merged
#222 a2_rbac: set admin role view permissions to role's OU users (#84706)
Merged
#236 Ne pas lever d'erreur en l'absence en présence d'une URL de JWKset mais de JWKSet JSON explicite (#85934)
Merged
#242 idp_cas: fix retrieval of LDAP user attributes (#86089)
Merged
#248 utils: ExpressionError is already a ValidationError (#86266)
Merged
#235 api/statistics: add inactivity-related events (#85790)
Merged
#238 manager: do not display empty menu on users page (#85199)
Merged
#241 idp_oidc: add slug edition field in edit form (#76223)
Merged
#237 templates: add true, false, & null aliases to context (#83795)
Merged
#245 manager: add link to role in api_client details (#76473)
Merged
#240 manager: add homepage link on service page (#76005)
Merged
#247 api: remove deprecated statistics from API listing (#86177)
Merged
#239 auth_saml: do not load disabled authenticators (#86075)
Merged
#211 auth_oidc: do not use logging inside a failed transaction (#84540)
Merged
#244 saml: get uploaded metadata file content as a string (#86217)
Merged
#42 misc: make opened session cookie http only and secure (#76809)
Merged
#204 misc: use atomicwriter to write roles-summary.json (#84096)
Merged
#123 user_details: use model's effective alert date when relevant (#75255)
Merged
#234 misc: do not use the ORM in Command.__init__ (#85699)
Merged
#233 misc: replace PASSWORD_RESET_TIMEOUT_DAYS by PASSWORD_RESET_TIMEOUT (#81386)
Merged
#230 tests: deprecate httmock (#85304)
Merged
#232 auth_oidc: suppress error log on non error condition (#85669)
Merged
#224 API: routes utilisant le slug pour les OUs et les rôles (#52226)
Merged
#197 auth_fc: add mapping from gender to title (#84093)
Merged
#231 Utiliser la session lié au code OIDC pour créer le sid dans le endpoint token (#85643)
Merged
#190 idp_oidc: build the sid using the client_id instead of the sector identifier (#84017)
Merged
#229 api/tests: test get_or_create & force_password_reset jointly (#85363)
Merged
#226 management: send sms alert to email-less inactive users (#85235)
Merged
#202 auth_oidc : renouvellement automatique du JWKSet d’un fournisseur (#83841)
Merged
#166 Écran de sélection du compte sur numéro de téléphone déjà connu à la tentative de création de compte (#82737)
Merged
#200 ldap: set LDAP url on raised LDAPError for the technical information view (#83425)
Merged
#175 manager: fix slug computing on role creation (#82389)
Merged
#186 css: improve layout of role summary page (#82541)
Merged
#225 auth_oidc: fix warning message formatting on id token error (#85119)
Merged
#183 wip/83730-authenticators-fix-helptext
Merged
#195 idp_cas: does not revalidate the session key (#10688)
Merged
#223 tests: decrease concurrency to 20 (#84960)
Merged
#196 manager: fix ordering in user's roles table (#16474)
Merged
#141 Afficher un message spécifique quand une connexion d'un agent qui échoue parce que l'annuaire est down (#81969)
Merged
#218 api: discard obsolete registration endpoint (#83234)
Merged
#220 data_transfer: handle MultipleObjectsReturned in search_role() (#84766)
Merged
#216 forms: do not assume identifier presence at password reset (#84666)
Merged
#189 Permettre l'utilisation de pylint>3 (#84019)
Merged
#221 tests: skip test_null_byte after python 3.11 (#84824)
Merged
#212 auth_saml: show OU in authenticator configuration form (#84560)
Merged
#213 auth_saml: create user on authenticator's OU (#84563)
Merged
#217 CI : éclater tests/api/test_all.py en plusieurs fichiers pour une meilleure exécution distribuée des tests (#84679)
Merged
#215 CI: let (now more powerful) jenkins run more concurrent threads (#84578)
Merged
#210 misc: add dependency on publik-django-templatetags to setup.py (#84358)
Merged
#170 Si la création de compte sur numéro de mobile est activée, dans le listing des users, ajouter en colonne l'attribut recevant le numéro de téléphone (#83261)
Merged
#188 Pouvoir interroger des fiches w.c.s. depuis des expressions de gabarit django (#83698)
Merged
#209 permettre aux 'context_processors" de faire le boulot dans le template de sidebar des utilisateurs (#83885)
Merged
#207 idp_oidc: implémenter le mécanisme PKCE (#84200)
Merged
#208 manager: feed template vars to views (#83885)
Merged
#176 templates: add message about form errors in page title (#83164)
Merged
#185 manage: display users advanced config form as popup (#83848)
Merged
#206 role_summary: support objects with no dependencies (#84132)
Merged
#203 tests: use deterministic suffixes (#83710)
Merged
#193 views: forbid registration view to authenticated users (#12382)
Merged
#205 journaliser les requêtes dans build_roles_summary_cache (#84098)
Merged
#201 idp_oidc: warn admin on changed sector_id in /manage/ (#84097)
Merged
#198 idp_oidc: prevent ambiguous redirect uris when used as sector id (#84092)
Merged
#199 ldap: do not crash when simple_bind_s raises STRONG_AUTH_REQUIRED (#83539)
Merged
#191 auth_fc: ignore invalid emails (#49623)
Merged
#180 auth_oidc: check provider.jwkset before using it (#75786)
Merged
#187 tox.ini: remove last constraints on psycopg2-binary (#83888)
Merged
#182 setup: compute pep440 compliant dirty version number (#81731)
Merged
#140 Paramétrage de l’affichage de temporalité des rôles en barre latérale de page BO d’un compte usager (#81389)
Merged
#162 accounts: fix deletion message on missing phone (#82739)
Merged
#153 manage: discard irrelevant "deletion" info for ldap users (#82522)
Merged
#168 manager: don't use service type in deletion popup title (#83197)
Merged
#178 manager: reword a label on the role summary page (#83448)
Merged
#177 manager: get rid of management infos on the role summary view (#83404)
Merged
#173 idp_oidc: authorization code flow, provide "sid" claim in id_token (#83365)
Merged
#172 manager: expose role summary page (#83303)
Merged
#165 misc: give a name to sample roles CSV file (#83107)
Merged
#164 debian: run roles-summary every night (#83097)
Merged
#163 wip/82837-role-summary-cache (#82837)
Merged
#158 misc: use select2 widget for roles in AddRoleAction (#82092)
Merged
#159 idp_oidc: raise error on inconsistent authz storage config (#83013)
Merged
#154 idp_oidc: make "do not ask again" choix optionnal (#82729)
Merged
#157 accounts: add phone-change view title (#82733)
Merged
#149 misc: add autocomplete attribute to email field on register form (#82158)
Merged
#155 misc: add a proper title to role summage page (#82838)
Merged
#96 manager: start role summary page (#79620)
Merged
#56 Ajout du support de ppolicy lors de la modification du mot de passe (#66416)
Merged
#151 wip/50571-OIDC-entete-Access-Control-Allow
Merged
#150 idp_saml2: add CORS headers to SSO endpoint (#82266)
Merged
#145 Fonctionner avec django-import-export 3 (#81941)
Merged
#148 authenticators: fix bad empty conditions in AddRoleAction (#82128)
Merged
#146 a11y: add back link label in "what is FranceConnect?" link title (#82093)
Merged
#144 Fonctionner avec djangorestframework 3.14 (#81943)
Merged
#143 Fonctionner avec jwcrypto 1.1 (#81945)
Merged
#142 fix translation (#81987)
Merged
#133 utiliser strict_word_similarity pour la recherche de doublons (#80940)
Merged
#139 ci: keep on using pylint 2 while pylint-django is not ready (#81905)
Merged
#134 utils: disallow any redirect URL starting with /\ or \\ (#81522)
Merged
#136 authenticators: add condition to role attribution (#81388)
Merged
#137 ldap: mark error block with errornotice class (#81664)
Merged
#135 csv_import: detect inconsistent password hash formats (#81478)
Merged
#132 manage: discard redundant detailed apiclient description (#81444)
Merged
#125 retrait du champ phone du BaseUserSerializer (#80950)
Merged
#124 api: make users pagination offset as a setting (#81100)
Merged
#130 manage: display relevant info on apiclient detail page (#81333)
Merged
#121 clients d’API : pour l’endpoint d’API authentic /users/ en particulier, définir la liste des attributs auxquels le client a accès (#78332)
Merged
#126 API, possibilité de créer un rôle avec un ?update_or_create pointant l'OU (#80957)
Merged
#128 auth_saml: forbid empty json fields (#81011)
Merged
#120 utils/evaluate: allow DNS blocklisting of IPv6 addresses (#80508)
Merged
#119 custom_user: use any identifier for full name fallback display (#80473)
Merged
#122 auth_oidc: fix role attribution when no user info or it misses expected attribute (#80548)
Merged
#103 authenticators: include user attributes in password strength check (#79807)
Merged
#104 add custom dictionary for password strength checks (#79806)
Merged
#117 authenticators: accept longer login button labels (#80424)
Merged
#114 warn users on password change confirmation (#78111)
Merged
#116 manager: avoid crash in slug creation from long names (#80383)
Merged
#111 Changement de numéro de téléphone sans avoir à retaper son mot de passe (#79891)
Merged
#115 accounts: adapt first email declaration action label (#80361)
Merged
#113 Chacune des interactions de /accounts/ menant à l’envoi de SMS devrait avertir l’usager de SMS déjà envoyés précédemment (#80342)
Merged
#108 registration: perform proper identifier verification (#79865)
Merged
#112 Déclaration d’une première adresse email sur un compte existant (#79801)
Merged
#110 tests phone authn and OU selection compatibility (#78454)
Merged
#109 forms: rephrase authentication form error message (#80286)
Merged
#107 pre commit et single quote (#80252)
Merged
#95 Parcours de suppression de compte à l’aide du numéro de téléphone (#72615)
Merged
#106 general: add a timestamp to static URLs, to avoid caching issues (#80226)
Merged
#101 authenticators: improve login field label selection (#79808)
Merged
#105 manager: add breadcrumbs in service config edition page (#79260)
Merged
#98 add role action based on received SSO attribute (#77756)
Merged
#100 api: add api/users/<uuid>/service/<slug> endpoint (#79230)
Merged
#99 misc: remove old Django version support (#79851)
Merged
#80 Parcours de modification du numéro de téléphone identifiant (#72614)
Merged
#85 api: provide an authentication healthcheck endpoint (#79183)
Merged
#90 api: add full_name to serialized users (#79504)
Merged
#79 authenticators: add view for login failure events (#76781)
Merged
#97 tests: raise unrealistic user csv import timeouts (#79725)
Merged
#46 attribute_kinds: check types at date (de)serialization time (#76883)
Merged
#28 ldap_backend: periodically update mapped roles list (#75611)
Merged
#24 auth_oidc: exclude disabled attributes in claim mapping form (#75474)
Merged
#94 auth_saml: hide unused ou field in authenticator settings (#79489)
Merged
#93 authenticators: explain static password strength checks (#79528)
Merged
#92 authenticators: translate boolean values on details page (#79507)
Merged
#86 visibilité des rôles d'admin (#77243)
Merged
#84 custom_user : déprécier le champ de base User.phone (#79135)
Merged
#89 manager: use get_full_name to display user in title and breadcrumb (#79502)
Merged
#91 manager: redirect to account page after user switch (#79550)
Merged
#88 api: do not crash on invalid filter (#79447)
Merged
#87 registration: forbid too long email addresses (#78400)
Merged
#83 authenticators: enable password strength meter by default (#79072)
Merged
#82 authenticators: force first migration after a2_rbac migrations (#79083)
Merged
#78 authenticators: migrate min_password_strength to password authenticator (#78232)
Merged
#75 Pouvoir définir quels attributs de type téléphone sont à vocation identifiante pour l’usager (#78046)
Merged
#77 a11y: remove autofocus of username input field (#78108)
Merged
#76 misc: mark "Users export" title for translation (#78659)
Merged
#72 authenticators: migrate some settings to password authenticator (#41671)
Merged
#74 registration: fix phone form field validation (#78244)
Merged
#50 Personnalisation de la page “Mon compte” en fonction du service connecté (#75142)
Merged
#73 Gestion d’une next_url tout au long de la séquence de récupération de mot de passe par numéro de téléphone (#78409)
Merged
#64 Conservation de la next_url tout au long de l’enregistrement par numéro de téléphone (#72441)
Merged
#70 Nettoyage de quelques settings obsolètes (#78230)
Merged
#58 idp_oidc: simplify OIDCClientForm implementation (#77593)
Merged
#69 authenticators: fix permission checking when editing related objects (#77366)
Merged
#59 manager: remove role permission views (#77410)
Merged
#66 authenticators: move registration_open flag to password authenticator (#77789)
Merged
#67 a11y: remove erroneous <p> around registration form (#78109)
Merged
#57 tests: add check on behaviour of OICDClient's clean (#77452)
Merged
#63 manager: do not include erroneous link to deleted users (#62204)
Merged
#62 templates: fix service info fragment broken links (#77844)
Merged
#61 misc: fix "remotre" typo in authenticator condition (#77834)
Merged
#51 use fallback appearance for SAML2 services only (#77296)
Merged
#55 tests: remove mention of unused saml role action name (#77483)
Merged
#53 a11y: add role="status" to "an email has been sent" messages (#75680)
Merged
#52 a11y: add proper text to close email input help (#71069)
29 Pull requests proposed by 6 users
Proposed
#65 WIP: Signature de la next_url tout au long de la ré-initialisation de mot de passe par numéro de téléphone (#78096)
Proposed
#71 wip/78157-phone-registration-enforce-signed-next-url (#78157)
Proposed
#81 a2_rbac: grant adequate scoped permissions to authn local admins (#78919)
Proposed
#118 WIP: cleanup: launch a vacuum for cleaned up tables (#80236)
Proposed
#127 WIP: script de statistiques des divergences entre User.phone (déprécié) et l’attribut de profil étendu phone (#81152)
Proposed
#129 Retrait de la colonne User.phone (#81282)
Proposed
#131 manage: split apiclient config edition in separate tabs (#81334)
Proposed
#138 BO : afficher le premier onglet en erreur à la validation d’un formulaire (#81845)
Proposed
#152 page “Mon compte” : action de validation d’un numéro de téléphone existant (#82388)
Proposed
#161 misc: consider user-initiated account creation as authn event (#82736)
Proposed
#171 empêcher le contrôle des redirections sur les mails d'enregistrement et de réinitialisation de mot de passe (#76835)
Proposed
#174 WIP: manager: offer to refresh the role summary cache (#83078)
Proposed
#179 WIP: a11y: add title attribute to password policy rules (#83211)
Proposed
#219 nettoyage des applications obsolètes/squash des migrations (#40685)
Proposed
#249 manager: add inherited roles in api_client details (#76359)
Proposed
#250 idp_oidc: add client_id & client_secret fields in edit form (#76224)
Proposed
#252 manager: ignore FileNotFoundError during user import run (#86086)
Proposed
#253 idp_oidc : pouvoir fournir des claims issues d’attributs multiples (#86663)
Proposed
#254 /api/users/ : gestion des attributs multivalués (#86670)
Proposed
#255 accounts: test multiple attributes's readonly display (#86671)
Proposed
#256 custom_user : pouvoir définir qu’un attribut multivalué prend ses valeurs dans un ensemble bien défini (#86937)
Proposed
#257 a2_rbac: restrict permissions granted to role administration (#75205)
Proposed
#260 manager: implement csv import of role emails (#72462)
Proposed
#262 nettoyage des applications obsolètes/squash des migrations (#40685) (série partielle)
Proposed
#267 WIP: manager, IndexError lors d'un filtrage par OU (#56850)
Proposed
#268 use only required attributes as phone identifier candidates (#87701)
Proposed
#290 WIP: misc: set reason on login failure coming from the model backend (#89627)
Proposed
#291 api: change client's password handling (#89456)
Proposed
#292 auth_oidc: add early debug log of id_token content (#89940)
1 Unresolved Conversation
Open
#45
Ne pas permettre la réutilisation des signature de next_url (#76858)