Denis Arh
a547377f23
Fix nil-pointer panic in auth flow
2021-07-23 13:22:53 +02:00
Denis Arh
0cb917933b
Make OAuth2 runtime issues log as warnings (not errors)
2021-07-16 13:27:07 +02:00
Denis Arh
5962d19cd0
Fix external auth provider management
2021-07-14 21:38:52 +02:00
Denis Arh
20e05280b3
System wide RBAC changes
2021-07-08 11:42:18 +02:00
Denis Arh
b923953ca5
Removing superuser logic
2021-07-08 11:24:12 +02:00
Denis Arh
48e1d0e4aa
Optimized boot levels order & logic
2021-07-08 11:23:18 +02:00
Denis Arh
a229d0ec5f
Refactor options & env loading to respect order of execution
2021-06-29 13:44:46 +02:00
Mia Arh
2e98c285de
Replace background image for 21.6 release
2021-06-02 15:00:18 +02:00
Mia Arh
b96ab940fa
Replace background image for 21.6 release
2021-06-02 12:55:34 +02:00
Peter Grlica
670b160945
SAML payload id and validation on jwt claims
2021-05-27 11:54:41 +02:00
Peter Grlica
aedb2aef60
SAML payload fallback on jwt StandardClaims
2021-05-26 14:49:38 +02:00
Denis Arh
41dc9d8658
Basepath cleanup & improvements
2021-05-21 09:35:52 +02:00
Denis Arh
28e1774cd2
Rework/cleanup log stacktrace level, add LOG_STACKTRACE_LEVEL to control it
2021-05-21 06:58:41 +02:00
Peter Grlica
a4b61c044e
Added integration and unit tests
2021-05-19 11:10:42 +02:00
Peter Grlica
bb1043181c
Added SAML service
2021-05-18 08:07:50 +02:00
Denis Arh
1d59a3acf2
Allow custom URL prefix for all corteza endpoints
...
Add new env. variables and options
- HTTP_BASE_URL to control URL prefix, defaults to /
- HTTP_SSL_TERMINATED to explicitly set if Corteza is running behind HTTPS
Refresh and document webapp/Makefile with more dev tasks
Fix all absolute URLs in applications, logos, icons
Improve logic behind integrated webapp serving, inject/replace <base href> tag according to URL prefix
Prevent mounting api & webapps to the same base
2021-05-09 16:47:19 +02:00
Denis Arh
9259dd0cce
Make sure we set proper ses. lifetime on external login
2021-05-04 19:58:06 +02:00
Denis Arh
838c958162
Replace custom ext. logic with handleSuccessfulAuth()
2021-05-04 19:58:06 +02:00
Mia Arh
58aa46eeea
Scale down logo size on 400% browser zoom - accessibility improvement
2021-05-04 10:06:46 +02:00
Mia Arh
89ad43113d
Replace card header title tags - accessibility improvement
2021-05-04 09:22:31 +02:00
Denis Arh
10ef5b0df5
Improve how HTTP status on error is sent
2021-04-29 07:46:07 +02:00
Denis Arh
b245726c9b
Implement client_credentials g.type with user imp.
2021-04-29 07:46:07 +02:00
Denis Arh
64c9b664df
Added messagebus, generated store files, workflow triggers
2021-04-21 10:19:50 +02:00
Denis Arh
cfde435385
Return invalid token on /info endpoint as 403
2021-04-15 07:02:52 +02:00
Denis Arh
315596c603
Remap state param on def. client authorization
2021-04-13 09:57:56 +02:00
Denis Arh
f9d000f203
Load roles for user on signup
...
In scenario where new user was promoted (1st user) to admin
and email confirmation is not required (due to disabled SMTP),
user's session did not get role memebership info until re-login.
2021-04-03 18:13:19 +02:00
Denis Arh
f16bd31109
Reconfigure log & make auth more robust
2021-04-02 11:38:28 +02:00
Denis Arh
2dd9b7ab41
More flexible auth client redirect URI checking
2021-03-27 17:15:16 +01:00
Denis Arh
4c57c4a7b6
Failsafe for unexisting user meta
2021-03-27 16:11:25 +01:00
Denis Arh
cd2b0c8998
Add support for exporting auth assets, improve dev-exp
2021-03-26 08:11:31 +01:00
Denis Arh
1c3e3078b2
Clear KV from session after showing it to user
2021-03-20 17:54:48 +01:00
Denis Arh
4ffe124f98
Fix password reset flow
2021-03-20 17:26:18 +01:00
Denis Arh
79ed77a379
Fixed typos across the codebase (can not, cannot)
2021-03-17 17:25:05 +01:00
Peter Grlica
f96211b8c6
Removed session memstore, mocked it in tests
...
Updated mocked notification service
2021-03-12 13:21:10 +01:00
Peter Grlica
4a08f08f84
Added oauth2 interface to authRequest
2021-03-12 13:15:41 +01:00
Peter Grlica
6de0424b9f
Added auth tests
2021-03-12 13:15:36 +01:00
Mia Arh
a7c539af22
Add extra margin on empty authorized client list
2021-03-08 19:49:15 +01:00
Mia Arh
e4de4b1c8a
Adjust icons margin
2021-03-08 19:49:15 +01:00
Mia Arh
76c57ac82b
Style toast notifications
2021-03-08 19:49:15 +01:00
Mia Arh
71b96ef658
Update MFA screens
2021-03-08 19:02:28 +01:00
Mia Arh
f4dcf5bd18
Update security screen
2021-03-08 19:02:28 +01:00
Mia Arh
4f8a9e0d27
Update dev scenarios screen
2021-03-08 19:02:28 +01:00
Denis Arh
2972437421
Fix auth asset embeding & serving
2021-03-08 16:24:49 +01:00
Denis Arh
cbc5034e8f
Add support for MFA
2021-03-07 18:58:16 +01:00
Denis Arh
c653c5df90
Change alerts to toasts, add bootstrap's js libs
2021-03-06 16:45:22 +01:00
Denis Arh
4aa94b06e2
Add security page
2021-03-06 16:45:22 +01:00
Denis Arh
a837f88826
Fix auth dev screen nav&js
2021-03-06 16:45:22 +01:00
Denis Arh
34a58d3410
Add 'active' class to active nav item
2021-03-06 16:45:22 +01:00
Mia Arh
782ea71c87
Add missing bg image
2021-03-06 16:45:22 +01:00
Mia Arh
c822099cb7
Adjust screens for mobile responsive
2021-03-06 16:45:22 +01:00