Commit graph

68 commits

Author SHA1 Message Date
Firstyear 082464f786
20220911 api tokens (#1071) 2022-09-25 11:21:30 +10:00
James Hodgkinson 657cefb4f1
TLS is now required for all connections (#1069) 2022-09-21 13:36:58 +10:00
James Hodgkinson 5c5b2d6c94
Initial admin UI things (#1044)
* wireframed up the admin menu and components
* banner-shaped yak shaving
* making some nicer messages in the cert script
* removing wee_alloc
* adding admin_groups ui
* adding oauth2 basics
* added group view page
* changing to expect_throw
* serde-wasm-bindgen fixes
* adding view person and view service account basics
* adding basic testy things
* dropping breadcrumbs all over the place
* minor changes to oauth2 admin interface, adding automation around wasm testing
2022-09-20 14:23:54 +10:00
dependabot[bot] 3810c16758
Bump tokio from 1.21.0 to 1.21.1 (#1046)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.21.0 to 1.21.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.21.0...tokio-1.21.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 12:16:05 +10:00
dependabot[bot] 15109171d0
Bump url from 2.3.0 to 2.3.1 (#1054)
Bumps [url](https://github.com/servo/rust-url) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/compare/v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: url
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 09:47:04 +10:00
dependabot[bot] 3d6ddfb62f
Bump tokio-util from 0.7.3 to 0.7.4 (#1032)
Bumps [tokio-util](https://github.com/tokio-rs/tokio) from 0.7.3 to 0.7.4.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-util-0.7.3...tokio-util-0.7.4)

---
updated-dependencies:
- dependency-name: tokio-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-12 08:45:20 +10:00
dependabot[bot] 21a21d924c
Bump url from 2.2.2 to 2.3.0 (#1031)
Bumps [url](https://github.com/servo/rust-url) from 2.2.2 to 2.3.0.
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/compare/v2.2.2...v2.3.0)

---
updated-dependencies:
- dependency-name: url
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-12 08:45:01 +10:00
dependabot[bot] f2feb88310 Bump tokio from 1.20.1 to 1.21.0 (#1016)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.20.1 to 1.21.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.20.1...tokio-1.21.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-05 14:37:31 +10:00
Firstyear 925c03b3fb
20220817 ldap service tokens (#1002) 2022-09-02 14:21:20 +10:00
Firstyear c6f18f3dbe
Remove dependency on git webauthn authentication versions (#1004) 2022-08-27 08:48:15 +10:00
James Hodgkinson 1a80e76c9b
Web-standards-compliance (#1001)
* minor tweaks to make browser things happier
2022-08-22 12:47:40 +10:00
dependabot[bot] 238d6ec43e
Bump libc from 0.2.126 to 0.2.127 (#978)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.126 to 0.2.127.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.126...0.2.127)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-09 18:38:07 +10:00
Firstyear 3f22470c1c
969 improve errors 1 (#987) 2022-08-09 13:07:06 +10:00
dependabot[bot] f23004b3f2
Bump serde from 1.0.141 to 1.0.142 (#981)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.141 to 1.0.142.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.141...v1.0.142)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-09 08:50:26 +10:00
dependabot[bot] 4507bcd60c
Bump serde_json from 1.0.82 to 1.0.83 (#974)
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.82 to 1.0.83.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.82...v1.0.83)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-08 09:05:28 +10:00
Firstyear a8c8fa5b8f
(cargo-release) version 1.1.0-alpha.9 (#962) 2022-08-02 13:14:25 +10:00
James Hodgkinson 845cabb206
A pile of Wasm UI tweaks (#958) 2022-08-01 15:52:01 +10:00
Firstyear 4151897948
383 164 authentication updates 9 (#956)
* implementation of passkeys as an auth mech
* listing the current passkeys when asking to remove one
* tweaking insecure dev server config so passkeys will work
* Fix domain rename
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-30 22:10:24 +10:00
dependabot[bot] 49fe0249b0
Bump tokio from 1.19.2 to 1.20.0 (#923)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.19.2 to 1.20.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.19.2...tokio-1.20.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 20:04:52 +10:00
dependabot[bot] 4833482447
Bump serde from 1.0.138 to 1.0.139 (#928)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.138 to 1.0.139.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.138...v1.0.139)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-18 19:57:33 +10:00
James Hodgkinson 799bf13cdf
Tide route map things (#913)
* magic routemap things
2022-07-11 18:16:41 +10:00
James Hodgkinson d8f195915d
More UI things (#911)
* Instead of wasm_bindgen creating a JS snippet to externalize code, we're now loading pure-JS util functions from wasmloader.js (#[wasm_bindgen(raw_module = "/pkg/wasmloader.js")])
* Sign out is now a confirmation box instead of "oh no I have to log back in because I'm clumsy and clicked a thing"
* Now using the urlencoding crate for encoding the TOTP URLs because string replacing encoded characters felt like writing our own crypto (and now you can call yourself whatever arbitrary string you want)
  * This fixed an issue in the web UI where the "Add a TOTP" interface would show URL-encoded things, but also made things easier for consistency.
* Moved the other web middleware objects into the middleware module because the main module was getting a bit unwieldy.
* Started auto-generating the integrity hashes in a different way on start up, which removes a middleware doing random string replacements to inject them, and means we can update modules without having to manually update the string values in the HTML.
2022-07-11 16:33:18 +10:00
dependabot[bot] 8683d452fe
Bump openssl from 0.10.40 to 0.10.41 (#915)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.40 to 0.10.41.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.40...openssl-v0.10.41)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 08:32:36 +10:00
dependabot[bot] b51edbd29e
Bump compact_jwt from 0.2.2 to 0.2.3 (#914)
Bumps [compact_jwt](https://github.com/kanidm/compact_jwt) from 0.2.2 to 0.2.3.
- [Release notes](https://github.com/kanidm/compact_jwt/releases)
- [Commits](https://github.com/kanidm/compact_jwt/commits)

---
updated-dependencies:
- dependency-name: compact_jwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 07:40:05 +10:00
James Hodgkinson 403016b0f8
WebUI Cleanup, icons, Profile Wireframing (#910)
* account person extend was showing failure when succeeding
* first run on a user profile page, did some other CSS tweaks to the UI
* UI neatening, profile wireframing, robotstxt, PWA manifest
* adding domain_display_name to webmanifest
2022-07-07 18:57:28 +10:00
James Hodgkinson d2ea936b16
Domain Display Name (#872) 2022-07-07 13:03:08 +10:00
James Hodgkinson fedc21ddca
Windows build support (#903)
`kanidmd` builds and runs in Windows now. Currently skipping file permissions checks on startup, but it's tested OK on a Windows 10 box.
2022-07-06 10:53:43 +10:00
dependabot[bot] 9c900380d3
Bump tide-compress from 0.10.3 to 0.10.4 (#902)
Bumps [tide-compress](https://github.com/Fishrock123/tide-compress) from 0.10.3 to 0.10.4.
- [Release notes](https://github.com/Fishrock123/tide-compress/releases)
- [Changelog](https://github.com/Fishrock123/tide-compress/blob/main/Changelog.md)
- [Commits](https://github.com/Fishrock123/tide-compress/compare/0.10.3...0.10.4)

---
updated-dependencies:
- dependency-name: tide-compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-05 17:44:49 +10:00
dependabot[bot] fa576eba43
Bump serde from 1.0.137 to 1.0.138 (#881)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.137 to 1.0.138.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.137...v1.0.138)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-04 09:05:52 +10:00
dependabot[bot] 50b5d492d9
Bump serde_json from 1.0.81 to 1.0.82 (#883) 2022-07-04 07:31:25 +10:00
dependabot[bot] 04cf27ab9f
Bump tracing-subscriber from 0.3.11 to 0.3.14 (#889) 2022-07-04 07:29:26 +10:00
James Hodgkinson 65cf0c7f12
adding compression middleware to tide (#878)
* adding compression middleware to tide
* added notes, tests for regex things
2022-07-03 11:17:46 +10:00
James Hodgkinson 664e2e4df0
bleep bloop what was I doing again (#870)
* human-facing message generator thingie
* doctests for new code
2022-06-28 09:22:31 +10:00
James Hodgkinson 57f8fa9d2b
Update to account recovery UX (#859)
* JSON-formatted output for recover_account, moved a bunch of logs to debug instead of info
* updated documentation
2022-06-26 18:02:16 +10:00
James Hodgkinson 4b1989ee22
updating csp headers (#852)
* removing confetti loader (we still package it, for now)
* 📎-happiness
* updating WASM build scripts and rebuilding
* updated CSP headers to change self to 'self' and remove some insecure https: options
2022-06-22 22:30:08 +10:00
James Hodgkinson febabf4b56 tweaks to CSP headers, adding more docs 2022-06-22 09:54:48 +10:00
dependabot[bot] 2724064189
Bump async-std from 1.11.0 to 1.12.0 (#830)
Bumps [async-std](https://github.com/async-rs/async-std) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/async-rs/async-std/releases)
- [Changelog](https://github.com/async-rs/async-std/blob/main/CHANGELOG.md)
- [Commits](https://github.com/async-rs/async-std/compare/v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: async-std
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 14:55:09 +10:00
Firstyear 9d929b876c
636 consent remembering in oauth2 (#824) 2022-06-20 11:37:39 +10:00
dependabot[bot] 831aef5eec
Bump reqwest from 0.11.10 to 0.11.11 (#827)
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.11.10 to 0.11.11.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.11.10...v0.11.11)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 09:47:41 +10:00
dependabot[bot] a97f4402b5
Bump uuid from 1.1.1 to 1.1.2 (#821) 2022-06-13 08:51:38 +10:00
dependabot[bot] a18ff9e2e4
Bump tracing from 0.1.34 to 0.1.35 (#820) 2022-06-13 08:51:23 +10:00
James Hodgkinson c5ea14d0cf
adding new favicon and square logo, updating build scripts (#819) 2022-06-10 15:07:19 +10:00
dependabot[bot] 9a7c6eeec7
Bump tokio-util from 0.7.2 to 0.7.3 (#814)
Bumps [tokio-util](https://github.com/tokio-rs/tokio) from 0.7.2 to 0.7.3.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-util-0.7.2...tokio-util-0.7.3)

---
updated-dependencies:
- dependency-name: tokio-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:26:05 +10:00
dependabot[bot] ed32e10547
Bump uuid from 1.1.0 to 1.1.1 (#813)
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/1.1.0...1.1.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:23:41 +10:00
dependabot[bot] 032c324295
Bump tokio from 1.18.2 to 1.19.1 (#812)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.18.2 to 1.19.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.18.2...tokio-1.19.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:22:36 +10:00
Firstyear b97d13d284
383 170 164 authentication updates - credential update webui! (#809) 2022-06-05 16:30:08 +10:00
James Hodgkinson 7d27612174
Windows automagical buildingtons (#798)
* windows build automation
* making fmt happy, fixing windows-related bug
* disabled cargo_incremental when using `sccache`, added build options ARG to Dockerfile, limit docker build to one job
2022-05-31 14:13:21 +10:00
James Hodgkinson f93e2cbf28
closes #788 - moves info messsage about webui path (#790) 2022-05-27 22:49:08 +10:00
dependabot[bot] 40b29e14ca
Bump uuid from 1.0.0 to 1.1.0 (#784)
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/1.0.0...1.1.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-26 22:03:37 +10:00
James Hodgkinson b6d3a0511f
Yak shaving 2343443 (#779) 2022-05-26 14:58:53 +10:00