3
0
Commit Graph

93 Commits

Author SHA1 Message Date
Denis Arh
a547377f23 Fix nil-pointer panic in auth flow 2021-07-23 13:22:53 +02:00
Denis Arh
0cb917933b Make OAuth2 runtime issues log as warnings (not errors) 2021-07-16 13:27:07 +02:00
Denis Arh
5962d19cd0 Fix external auth provider management 2021-07-14 21:38:52 +02:00
Denis Arh
20e05280b3 System wide RBAC changes 2021-07-08 11:42:18 +02:00
Denis Arh
b923953ca5 Removing superuser logic 2021-07-08 11:24:12 +02:00
Denis Arh
48e1d0e4aa Optimized boot levels order & logic 2021-07-08 11:23:18 +02:00
Denis Arh
a229d0ec5f Refactor options & env loading to respect order of execution 2021-06-29 13:44:46 +02:00
Mia Arh
2e98c285de Replace background image for 21.6 release 2021-06-02 15:00:18 +02:00
Mia Arh
b96ab940fa Replace background image for 21.6 release 2021-06-02 12:55:34 +02:00
Peter Grlica
670b160945 SAML payload id and validation on jwt claims 2021-05-27 11:54:41 +02:00
Peter Grlica
aedb2aef60 SAML payload fallback on jwt StandardClaims 2021-05-26 14:49:38 +02:00
Denis Arh
41dc9d8658 Basepath cleanup & improvements 2021-05-21 09:35:52 +02:00
Denis Arh
28e1774cd2 Rework/cleanup log stacktrace level, add LOG_STACKTRACE_LEVEL to control it 2021-05-21 06:58:41 +02:00
Peter Grlica
a4b61c044e Added integration and unit tests 2021-05-19 11:10:42 +02:00
Peter Grlica
bb1043181c Added SAML service 2021-05-18 08:07:50 +02:00
Denis Arh
1d59a3acf2 Allow custom URL prefix for all corteza endpoints
Add new env. variables and options
 - HTTP_BASE_URL to control URL prefix, defaults to /
 - HTTP_SSL_TERMINATED to explicitly set if Corteza is running behind HTTPS
Refresh and document webapp/Makefile with more dev tasks
Fix all absolute URLs in applications, logos, icons
Improve logic behind integrated webapp serving, inject/replace <base href> tag according to URL prefix
Prevent mounting api & webapps to the same base
2021-05-09 16:47:19 +02:00
Denis Arh
9259dd0cce Make sure we set proper ses. lifetime on external login 2021-05-04 19:58:06 +02:00
Denis Arh
838c958162 Replace custom ext. logic with handleSuccessfulAuth() 2021-05-04 19:58:06 +02:00
Mia Arh
58aa46eeea Scale down logo size on 400% browser zoom - accessibility improvement 2021-05-04 10:06:46 +02:00
Mia Arh
89ad43113d Replace card header title tags - accessibility improvement 2021-05-04 09:22:31 +02:00
Denis Arh
10ef5b0df5 Improve how HTTP status on error is sent 2021-04-29 07:46:07 +02:00
Denis Arh
b245726c9b Implement client_credentials g.type with user imp. 2021-04-29 07:46:07 +02:00
Denis Arh
64c9b664df Added messagebus, generated store files, workflow triggers 2021-04-21 10:19:50 +02:00
Denis Arh
cfde435385 Return invalid token on /info endpoint as 403 2021-04-15 07:02:52 +02:00
Denis Arh
315596c603 Remap state param on def. client authorization 2021-04-13 09:57:56 +02:00
Denis Arh
f9d000f203 Load roles for user on signup
In scenario where new user was promoted (1st user) to admin
and email confirmation is not required (due to disabled SMTP),
user's session did not get role memebership info until re-login.
2021-04-03 18:13:19 +02:00
Denis Arh
f16bd31109 Reconfigure log & make auth more robust 2021-04-02 11:38:28 +02:00
Denis Arh
2dd9b7ab41 More flexible auth client redirect URI checking 2021-03-27 17:15:16 +01:00
Denis Arh
4c57c4a7b6 Failsafe for unexisting user meta 2021-03-27 16:11:25 +01:00
Denis Arh
cd2b0c8998 Add support for exporting auth assets, improve dev-exp 2021-03-26 08:11:31 +01:00
Denis Arh
1c3e3078b2 Clear KV from session after showing it to user 2021-03-20 17:54:48 +01:00
Denis Arh
4ffe124f98 Fix password reset flow 2021-03-20 17:26:18 +01:00
Denis Arh
79ed77a379 Fixed typos across the codebase (can not, cannot) 2021-03-17 17:25:05 +01:00
Peter Grlica
f96211b8c6 Removed session memstore, mocked it in tests
Updated mocked notification service
2021-03-12 13:21:10 +01:00
Peter Grlica
4a08f08f84 Added oauth2 interface to authRequest 2021-03-12 13:15:41 +01:00
Peter Grlica
6de0424b9f Added auth tests 2021-03-12 13:15:36 +01:00
Mia Arh
a7c539af22 Add extra margin on empty authorized client list 2021-03-08 19:49:15 +01:00
Mia Arh
e4de4b1c8a Adjust icons margin 2021-03-08 19:49:15 +01:00
Mia Arh
76c57ac82b Style toast notifications 2021-03-08 19:49:15 +01:00
Mia Arh
71b96ef658 Update MFA screens 2021-03-08 19:02:28 +01:00
Mia Arh
f4dcf5bd18 Update security screen 2021-03-08 19:02:28 +01:00
Mia Arh
4f8a9e0d27 Update dev scenarios screen 2021-03-08 19:02:28 +01:00
Denis Arh
2972437421 Fix auth asset embeding & serving 2021-03-08 16:24:49 +01:00
Denis Arh
cbc5034e8f Add support for MFA 2021-03-07 18:58:16 +01:00
Denis Arh
c653c5df90 Change alerts to toasts, add bootstrap's js libs 2021-03-06 16:45:22 +01:00
Denis Arh
4aa94b06e2 Add security page 2021-03-06 16:45:22 +01:00
Denis Arh
a837f88826 Fix auth dev screen nav&js 2021-03-06 16:45:22 +01:00
Denis Arh
34a58d3410 Add 'active' class to active nav item 2021-03-06 16:45:22 +01:00
Mia Arh
782ea71c87 Add missing bg image 2021-03-06 16:45:22 +01:00
Mia Arh
c822099cb7 Adjust screens for mobile responsive 2021-03-06 16:45:22 +01:00