Commit Graph

6458 Commits

Author SHA1 Message Date
Valentin Deniaud 5f0c03e32f a2_rbac: move role attributes to real model fields (#69895) 2022-11-29 14:05:38 +01:00
Paul Marillonnet 9ba3df609b translation update 2022-11-29 12:34:35 +01:00
Paul Marillonnet 9141583b58 idp_oidc: add api access and profile management to BO config (#71820) 2022-11-29 11:26:43 +01:00
Paul Marillonnet 0c5da1c832 idp_oidc: remove client config through django's admin pages (#71700)
This removal ensures that OIDC configuration happens through
/manage/ pages as part of Publik's backoffice interface.
2022-11-29 11:09:16 +01:00
Benjamin Dauvergne d19ac19469 auth_fc: close FranceConnect session when linking fails (#71607) 2022-11-28 15:05:46 +01:00
Benjamin Dauvergne cfefbd553c tests: do not follow redirects in login_with_fc (#71607)
Because it will break when we introduce a redirection to FranceConnect
to close the FranceConnect session on failure to link.
2022-11-28 15:05:46 +01:00
Benjamin Dauvergne a8ebccc5aa translation update (#69989) 2022-11-28 15:05:01 +01:00
Benjamin Dauvergne 9171c30feb auth_fc: show warning on password change page if user is linked to FranceConnect (#69989) 2022-11-28 15:05:01 +01:00
Benjamin Dauvergne 89b526066d auth_fc: store id_token in session when linking (#69989)
Password change view is hidden only if the current session was opened
with FranceConnect and if the id_token is visible in the session, this
change will enforce the second condition when during the same session
the account is unlinked and linked again to FranceConnect.

It will also permit to launch a logout if the link fails.
2022-11-28 15:05:01 +01:00
Paul Marillonnet 5a821a8883 a2_rbac: add global management role for api clients (#71267)
ou-wise api-client management roles will be added in #71275.
2022-11-28 09:12:47 +01:00
Thomas NOËL e9ccac7303 MANIFEST.in: add missing auth_fc txt templates (#71695) 2022-11-25 00:56:39 +01:00
Benjamin Dauvergne 5a3f82bd51 settings: mute warning about auto fields
See https://docs.djangoproject.com/en/dev/releases/3.2/#customizing-type-of-auto-created-primary-keys
2022-11-23 15:15:17 +01:00
Benjamin Dauvergne 823240daf0 tox: ignore tests/ when updating locales (#71523) 2022-11-22 12:05:28 +01:00
Benjamin Dauvergne eadb683b11 translation update (#71523) 2022-11-22 12:05:28 +01:00
Frédéric Péters 7fa087db54 translation update 2022-11-21 17:49:54 +01:00
Benjamin Dauvergne 01190b740a api: add keepalive option to user syncronization API (#67901) 2022-11-21 10:22:54 +01:00
Benjamin Dauvergne 23956e98dd tests: simplify user synchronization API tests (#67901) 2022-11-16 11:39:07 +01:00
Benjamin Dauvergne 5a592baf31 tests: split user synchronization API tests (#67901) 2022-11-16 11:39:07 +01:00
Benjamin Dauvergne 0cb14c0138 api: refactor user synchronization API endpoint (#67901) 2022-11-16 11:39:07 +01:00
Benjamin Dauvergne ff581d6617 misc: adapt clean-unused-account for keepalive (#67901) 2022-11-16 11:39:07 +01:00
Benjamin Dauvergne fa52e3739c models: add User.keepalive field (#67901) 2022-11-16 11:39:07 +01:00
Frédéric Péters 35de406c1b translation update 2022-11-15 19:49:53 +01:00
Emmanuel Cazenave 41fa87af45 apiclient: make description non mandatory (#69524)
gitea/authentic/pipeline/head Build started... Details
2022-11-14 17:37:59 +01:00
Frédéric Péters b806723bba general: add a new "language" attribute kind (#71033) 2022-11-14 15:38:37 +01:00
Frédéric Péters d885b0f4a8 trivial: update FC translation to match button text (#71075) 2022-11-14 15:09:45 +01:00
Frédéric Péters a461d29823 misc: remove unnecessary parameter in SIRET regex validation (#71032) 2022-11-14 15:09:06 +01:00
Valentin Deniaud f8f19e14b5 django_rbac: remove utils (#70894) 2022-11-14 12:00:15 +01:00
Valentin Deniaud 58dd0ae0be a2_rbac: move managers from django_rbac (#70894) 2022-11-14 12:00:15 +01:00
Valentin Deniaud 14e25ac186 django_rbac: remove unused code (#70894) 2022-11-14 12:00:15 +01:00
Valentin Deniaud ba71c350b4 a2_rbac: move context_processors from django_rbac (#70894) 2022-11-14 12:00:15 +01:00
Valentin Deniaud 8d600641e9 translation update 2022-11-14 10:05:32 +01:00
Valentin Deniaud 588fd61628 auth_fc: send email on registration (#65839) 2022-11-08 17:48:18 +01:00
Frédéric Péters 59644444ef translation update 2022-11-04 13:30:32 +01:00
Benjamin Dauvergne 5c4318d707 misc: use LANCZOS instead of PIL.Image.Antialias (#70634)
PIL.Image.Antialias is deprecated.
2022-11-04 08:07:14 +01:00
Valentin Deniaud 65e5a32250 auth_saml: add name id policy format choices (#70750) 2022-11-03 10:09:38 +01:00
Paul Marillonnet 9670f4d857 tests: pass a valid get_response upon middleware initialization (#70861) 2022-11-02 10:59:38 +01:00
Valentin Deniaud 0474974f8c translation update 2022-10-31 18:57:21 +01:00
Valentin Deniaud 89cb39d808 add forgotten period in translation 2022-10-31 18:29:47 +01:00
Valentin Deniaud 4599cbc739 auth_saml: remove metadata file path field (#70491) 2022-10-31 10:21:01 +01:00
Valentin Deniaud 9cd4b44d5e authenticators: add manager role (#66984) 2022-10-31 10:19:33 +01:00
Valentin Deniaud f932904e8a auth_saml: improve lookup by attributes description (#70700) 2022-10-31 10:17:19 +01:00
Valentin Deniaud 1144f915b6 auth_saml: display xml metadata in separate view (#70492) 2022-10-31 10:15:19 +01:00
Valentin Deniaud b4c684b685 auth_saml: validate xml metadata (#70492) 2022-10-31 10:15:19 +01:00
Valentin Deniaud c76884ba6f auth_oidc: remove admin views (#68429) 2022-10-31 10:14:45 +01:00
Benjamin Dauvergne 6f9ebfd827 misc: do not instantatiate StoreRequestMiddleware without an argument (#70631)
If fixes this warning :

  src/authentic2/utils/misc.py:699: RemovedInDjango40Warning: Passing None for the middleware get_response argument is deprecated.
    request = middleware.StoreRequestMiddleware().get_request()
2022-10-28 10:35:04 +02:00
Benjamin Dauvergne 427021b5b2 misc: do not use dns.resolver.query on later versions of dnspython (#70632) 2022-10-28 10:34:16 +02:00
Paul Marillonnet 6eea42ff67 auth_oidc: do not attempt to generate one's own client credentials (#70749)
these credentials must be issued to authentic by the OIDC provider,
    see for instance https://datatracker.ietf.org/doc/html/rfc6749#section-2.2
2022-10-28 08:55:00 +02:00
Frédéric Péters d87e9bb16c debian: make migrate_schemas verbose (#70799) 2022-10-28 08:02:41 +02:00
Frédéric Péters 97c4ed3618 misc: fix spelling of OpenID Connect (#70747) 2022-10-28 08:02:41 +02:00
Frédéric Péters 4065abcdd2 ci: update pyupgrade to 3.1.0 (#70693) 2022-10-28 08:02:41 +02:00