entrouvert
/
authentic
16
0
Fork 0
Code Issues Pull Requests 35 Releases Activity
4,009 Commits 190 Branches 448 Tags 29 MiB
Commit Graph

4009 Commits

Author SHA1 Message Date
Benjamin Dauvergne a1417cb452 attribute_kinds: remove +33 from french translation of phone number example (fixes #20238) 2017-11-23 14:16:07 +01:00
Benjamin Dauvergne 508983fc09 ldap_backend: paginate ldap search results (fixes #20129) 2017-11-23 13:48:37 +01:00
Benjamin Dauvergne f33b0167ba manager: review all page titles (fixes #20126) 2017-11-21 17:00:49 +01:00
Benjamin Dauvergne 1c14005934 update french translation (#19416) 2017-11-21 16:28:40 +01:00
Benjamin Dauvergne 8c67ef4074 registration: pep8ness (#19416) 2017-11-21 16:28:40 +01:00
Benjamin Dauvergne 9a5bc18a87 registration: send a registration success email (fixes #19416) 2017-11-21 16:28:40 +01:00
Benjamin Dauvergne da39574b9e registration: factorize registration success (#19416) 2017-11-21 16:27:38 +01:00
Benjamin Dauvergne c46c138e39 manager: fix typo in role_views (fixes #20183) 2017-11-21 12:11:33 +01:00
Benjamin Dauvergne 39c8cbb989 views: fix bug introduced in EmailChangeVerifyView by 16afddc6b9 (fixes #20186) 
Ref #19712
 2017-11-21 11:20:26 +01:00
Benjamin Dauvergne 95add8fba7 tests: factorize extraction of links from outbound mails (#20186) 2017-11-21 11:20:25 +01:00
Benjamin Dauvergne 6b762fc275 manager: fix removal of user's OU field from edit form (fixes #20126) 2017-11-20 12:32:38 +01:00
Benjamin Dauvergne e654a4d910 manager: re-initialize select2 fields after an ajax update (fixes #20161) 2017-11-20 10:58:26 +01:00
Benjamin Dauvergne 173325b2b2 misc: move javascript out of logout.html content block (fixes #9197) 2017-11-17 18:04:51 +01:00
Paul Marillonnet d16c32cf8a saml/admin L10N : SAML provider metadata fields (#16314) 2017-11-17 17:58:25 +01:00
Paul Marillonnet 1a7336f39f saml/admin I18N : SAML provider metadata fields (#16314) 2017-11-17 17:50:42 +01:00
Paul Marillonnet 988e3b1c12 password reset request l10n (#16298) 2017-11-17 17:18:50 +01:00
Paul Marillonnet f3131e4373 profile_views: help message for password reset requests (#16298) 2017-11-17 17:16:20 +01:00
Benjamin Dauvergne e4e1bccdf3 manager: hide roles informations in user detail view if useless (fixes #20128) 
Also add a new behaviour to the .authorize() method of manager views: if it
returns a response, it hijack the normal response from the view.
 2017-11-17 16:55:22 +01:00
Benjamin Dauvergne 711389c526 update french translation (#19712) 2017-11-17 16:55:15 +01:00
Benjamin Dauvergne 16afddc6b9 views: enforce A2_EMAIL_IS_UNIQUE on email change (fixes #19712) 2017-11-17 16:52:08 +01:00
Benjamin Dauvergne 2ad841c017 forms: validate new email is different from current one (#19712) 2017-11-17 16:52:08 +01:00
Benjamin Dauvergne d11bfb5534 profile_urls: call event hook password-change (fixes #20141) 2017-11-17 16:52:08 +01:00
Benjamin Dauvergne c8a6d06854 manager: deprecate ROLES_SHOW_PERMISSIONS (fixes #20130) 
It's now handled through the permission a2_rbac.admin_permission which only
superusers have.
 2017-11-17 16:52:08 +01:00
Benjamin Dauvergne a1d9f785e4 tests: fix hooks fixture (#20100) 2017-11-17 16:52:08 +01:00
Josue Kouka 52610ad76f misc: oidc remove useless sub creation (#20049) 2017-11-17 11:40:41 +01:00
Thomas NOËL 4be465484e debian: suggests postgresql instead of recommend it (#20000) 2017-11-17 11:12:02 +01:00
Paul Marillonnet 3d2117ad1b French translation update (#20102) 2017-11-17 10:27:33 +01:00
Paul Marillonnet 5e2d4d2b84 improve password creation help message (#20102) 2017-11-17 10:25:48 +01:00
Frédéric Péters 8605f8a3cb settings: get select2 from local xstatic copy (#16814) 2017-11-17 09:25:09 +04:00
Benjamin Dauvergne 7a53f3ff43 do not apply user filters to delegated authentications (fixes #19597) 2017-11-16 23:49:18 +01:00
Benjamin Dauvergne 05a778b717 auth_ssl: clean code (#19597) 2017-11-16 16:29:13 +01:00
Benjamin Dauvergne 4aec4f62cb add settings to filter user authorized to authenticate (fixes #19597) 
Added:
- A2_USER_FILTER and A2_USER_EXCLUDE settings, contains kwargs for
  User.filter() and User.exclude(),
- two helper methods for backends: authentic2.backend.get_user_queryset() and
  authentic2.backend.is_user_authenticable(),
- all backends modified to use those.
 2017-11-16 16:29:13 +01:00
Benjamin Dauvergne 1c68e6730b idp_oidc: change french translation (#20107) 2017-11-16 16:26:23 +01:00
Benjamin Dauvergne 2df5e4644c add a service field to login and registration view (fixes #20100) 
It should contain the slug of the service from which the user was coming before
requiring login or registration. It's passed to the 'login' and 'registration'
event hooks.
 2017-11-16 16:26:23 +01:00
Benjamin Dauvergne 704432d412 tests: add fixture to test hooks (#20100) 2017-11-16 16:26:23 +01:00
Benjamin Dauvergne 71f3af72aa auth_frontends: apply exponential retry timeout only if it's more than 2 seconds (fixes #19921) 2017-11-16 16:26:23 +01:00
Frédéric Péters c489931a45 saml: fix return of soap faults (#20088) 2017-11-15 17:41:43 +04:00
Benjamin Dauvergne 94edd32e8c add global event hook (fixes #20066) 
It's called like this:

  hooks.call_hooks('event', name='event-name', **kwargs)

The hook handler must have the following open signature as you can't be sure of
the event parameters:

  def a2_hook_event(self, name, **kwargs)
    pass

The list of current event names and their kwargs:
* login: user, how
* sso-request: idp, service
* sso-success: idp, service, user

* edit-profile: user, form
* password-reset: email, users
* password-reset-confirm: user, token, form
* change-email: user, email
* change-email-confirm: user, email

* registration: user, view, form, token
* delete-account: user

* manager-add-user: user, instance, form
* manager-edit-user: user, instance, form
* manager-delete-user: user, instance, form
* manager-action: user, action, instance
* manager-change-password: user, instance, form
* manager-add-role: user, instance, form
* manager-edit-role: user, instance, form
* manager-delete-role: user, role
* manager-add-role-member: user, role, member
* manager-remove-role-member: user, role, member
* manager-add-child-role: user, parent, child
* manager-remove-child-role: user, parent, child
* manager-add-permission: user, role, permission
* manager-remove-permission: user, role, permission
* manager-add-admin-role: user, role, admin_role
* manager-remove-admin-role: user, role, admin_role
* manager-add-admin-role-user: user, role, admin
* manager-remove-admin-role-user: user, role, admin
 2017-11-14 16:09:56 +01:00
Benjamin Dauvergne a7d3752784 tests: clear has_providers.cache in auth_oidc tests 2017-11-14 11:52:55 +01:00
Frédéric Péters 305cbfe27b views: add allow_password_change setting to account view context (#19986) 2017-11-13 14:25:47 +04:00
Benjamin Dauvergne 0317112625 manager: fix ou search for administrators with visibility only on OUs (fixes #19992) 2017-11-10 17:23:24 +01:00
Benjamin Dauvergne d1f4035c6b manager: catch TypeError when checking ou field in OUSearchForm (fixes #19992) 2017-11-09 12:21:38 +01:00
Benjamin Dauvergne 49aebd97b0 auth_oidc: allow hiding a provider from the login page (bis) (fixes #19449) 
I missed the has_providers() helper.
 2017-11-08 17:41:02 +01:00
Benjamin Dauvergne 43e5a907e3 idp_oidc: handle interaction betwen A2_EMAIL_IS_UNIQUE and STRATEGY_CREATE (fixes #19974) 
It should limit the possibity of duplicate accounts BUT as the email field is
not really unique at the database level, we cannot really garantee it.

To improve on the current state we should dynamically create unique constraints
on the mail field based on OU.email_is_unique or A2_EMAIL_IS_UNIQUE parameters.
That's not in the current scope.
 2017-11-08 16:44:48 +01:00
Benjamin Dauvergne 0d54ed1d81 set content_type=text/plain on all HttpResponse returning simple text (fixes #19976) 
To prevent XSS attacks.
 2017-11-08 15:03:52 +01:00
Benjamin Dauvergne eef12bc564 manager: add all and none OU filters to the user search form (fixes #19228) 
Also show the search form on role members page (fixes #19645, #19627).
 2017-11-08 10:51:37 +01:00
Benjamin Dauvergne 40b8aa8553 manager: disable add user link (fixes #19646) 2017-11-08 10:51:37 +01:00
Benjamin Dauvergne 5f1d5adc81 manager: update french translation (#19228, #19644) 2017-11-08 10:51:37 +01:00
Benjamin Dauvergne 1d08509a46 manager: show users' count when search is mandatory (fixes #19644) 2017-11-08 10:51:37 +01:00
Frédéric Péters 4711da2b0e manager: add by uuid URL for user detail view (#19873) 2017-11-05 12:41:31 +01:00