969581343c
Implement split-credentials-check auth flow
2021-08-05 20:09:44 +02:00
4b485b7bf5
Refactor auth tests to allow setting customization
2021-08-05 20:08:52 +02:00
6977ade5df
Add ValidConfiguration and test for external auth provider
2021-08-05 19:09:48 +02:00
a547377f23
Fix nil-pointer panic in auth flow
2021-07-23 13:22:53 +02:00
0cb917933b
Make OAuth2 runtime issues log as warnings (not errors)
2021-07-16 13:27:07 +02:00
5962d19cd0
Fix external auth provider management
2021-07-14 21:38:52 +02:00
20e05280b3
System wide RBAC changes
2021-07-08 11:42:18 +02:00
b923953ca5
Removing superuser logic
2021-07-08 11:24:12 +02:00
48e1d0e4aa
Optimized boot levels order & logic
2021-07-08 11:23:18 +02:00
a229d0ec5f
Refactor options & env loading to respect order of execution
2021-06-29 13:44:46 +02:00
2e98c285de
Replace background image for 21.6 release
2021-06-02 15:00:18 +02:00
b96ab940fa
Replace background image for 21.6 release
2021-06-02 12:55:34 +02:00
670b160945
SAML payload id and validation on jwt claims
2021-05-27 11:54:41 +02:00
aedb2aef60
SAML payload fallback on jwt StandardClaims
2021-05-26 14:49:38 +02:00
41dc9d8658
Basepath cleanup & improvements
2021-05-21 09:35:52 +02:00
28e1774cd2
Rework/cleanup log stacktrace level, add LOG_STACKTRACE_LEVEL to control it
2021-05-21 06:58:41 +02:00
a4b61c044e
Added integration and unit tests
2021-05-19 11:10:42 +02:00
bb1043181c
Added SAML service
2021-05-18 08:07:50 +02:00
1d59a3acf2
Allow custom URL prefix for all corteza endpoints
...
Add new env. variables and options
- HTTP_BASE_URL to control URL prefix, defaults to /
- HTTP_SSL_TERMINATED to explicitly set if Corteza is running behind HTTPS
Refresh and document webapp/Makefile with more dev tasks
Fix all absolute URLs in applications, logos, icons
Improve logic behind integrated webapp serving, inject/replace <base href> tag according to URL prefix
Prevent mounting api & webapps to the same base
2021-05-09 16:47:19 +02:00
9259dd0cce
Make sure we set proper ses. lifetime on external login
2021-05-04 19:58:06 +02:00
838c958162
Replace custom ext. logic with handleSuccessfulAuth()
2021-05-04 19:58:06 +02:00
58aa46eeea
Scale down logo size on 400% browser zoom - accessibility improvement
2021-05-04 10:06:46 +02:00
89ad43113d
Replace card header title tags - accessibility improvement
2021-05-04 09:22:31 +02:00
10ef5b0df5
Improve how HTTP status on error is sent
2021-04-29 07:46:07 +02:00
b245726c9b
Implement client_credentials g.type with user imp.
2021-04-29 07:46:07 +02:00
64c9b664df
Added messagebus, generated store files, workflow triggers
2021-04-21 10:19:50 +02:00
cfde435385
Return invalid token on /info endpoint as 403
2021-04-15 07:02:52 +02:00
315596c603
Remap state param on def. client authorization
2021-04-13 09:57:56 +02:00
f9d000f203
Load roles for user on signup
...
In scenario where new user was promoted (1st user) to admin
and email confirmation is not required (due to disabled SMTP),
user's session did not get role memebership info until re-login.
2021-04-03 18:13:19 +02:00
f16bd31109
Reconfigure log & make auth more robust
2021-04-02 11:38:28 +02:00
2dd9b7ab41
More flexible auth client redirect URI checking
2021-03-27 17:15:16 +01:00
4c57c4a7b6
Failsafe for unexisting user meta
2021-03-27 16:11:25 +01:00
cd2b0c8998
Add support for exporting auth assets, improve dev-exp
2021-03-26 08:11:31 +01:00
1c3e3078b2
Clear KV from session after showing it to user
2021-03-20 17:54:48 +01:00
4ffe124f98
Fix password reset flow
2021-03-20 17:26:18 +01:00
79ed77a379
Fixed typos across the codebase (can not, cannot)
2021-03-17 17:25:05 +01:00
f96211b8c6
Removed session memstore, mocked it in tests
...
Updated mocked notification service
2021-03-12 13:21:10 +01:00
4a08f08f84
Added oauth2 interface to authRequest
2021-03-12 13:15:41 +01:00
6de0424b9f
Added auth tests
2021-03-12 13:15:36 +01:00
a7c539af22
Add extra margin on empty authorized client list
2021-03-08 19:49:15 +01:00
e4de4b1c8a
Adjust icons margin
2021-03-08 19:49:15 +01:00
76c57ac82b
Style toast notifications
2021-03-08 19:49:15 +01:00
71b96ef658
Update MFA screens
2021-03-08 19:02:28 +01:00
f4dcf5bd18
Update security screen
2021-03-08 19:02:28 +01:00
4f8a9e0d27
Update dev scenarios screen
2021-03-08 19:02:28 +01:00
2972437421
Fix auth asset embeding & serving
2021-03-08 16:24:49 +01:00
cbc5034e8f
Add support for MFA
2021-03-07 18:58:16 +01:00
c653c5df90
Change alerts to toasts, add bootstrap's js libs
2021-03-06 16:45:22 +01:00
4aa94b06e2
Add security page
2021-03-06 16:45:22 +01:00
a837f88826
Fix auth dev screen nav&js
2021-03-06 16:45:22 +01:00
Denis Arh
Andre Perry
Mia Arh
Peter Grlica