Commit graph

91 commits

Author SHA1 Message Date
Firstyear def8f3f1bd
20221221 sync deploy (#1285) 2022-12-22 18:03:29 +10:00
Firstyear a74ac01b18
20221216 a little cleanup as a treat (#1266) 2022-12-18 13:26:20 +10:00
Firstyear e0e611f9df
20221123 iam migration work (#1258)
Add the bulk of the needed parts for IAM migrations.
2022-12-15 16:09:09 +10:00
Firstyear 8b90bf0cae
20221116 oauth2 app portal 2 (#1201) 2022-11-21 11:59:47 +10:00
Firstyear 40dd911d10
20221116 oauth2 app portal (#1200) 2022-11-17 10:06:13 +10:00
Firstyear 3589376525
1116 UI hints (#1199) 2022-11-16 19:17:24 +10:00
Firstyear 33b8fe0967
Reword security keys (#1196) 2022-11-14 19:47:14 +10:00
Firstyear 06c9e087cb
613 oauth2 logout (#1184)
* Oauth2 sessions
* Start to add session consistency
* Add tests for session consistency.
* Session refint works!
* Add support for oauth2 session removal
2022-11-13 14:10:45 +10:00
Firstyear 1ed4d7c1bd
20221103 ipa import driver (#1180) 2022-11-10 07:43:22 +10:00
Firstyear 38f9d9b467
1125 expired session cleanup (#1162) 2022-11-01 11:27:32 +10:00
Firstyear db75a0b344
Improve cookie/token handling (#1153) 2022-10-31 10:50:04 +10:00
Firstyear 15c3bde00e
Add new scim/sync files (#1152) 2022-10-29 19:07:54 +10:00
Firstyear a55c0ca68d
406 session revocation (#1123) 2022-10-17 20:09:47 +10:00
Firstyear 2845f8c4cc
20221011 sudo mode components (#1120) 2022-10-13 10:54:44 +10:00
Firstyear 821b2c05c4
Rework deps (#1079) 2022-10-01 16:08:51 +10:00
Firstyear 082464f786
20220911 api tokens (#1071) 2022-09-25 11:21:30 +10:00
Dominik Süß 2b11ad0ad5
feat: allow switch between spn and name for claims (#1043) 2022-09-15 11:42:08 +10:00
James Hodgkinson 66954213db
#896 kanidm_unixd UX updoots (#1024) 2022-09-08 13:37:03 +10:00
Dominik Süß 8416069c61
feat: add unix passwod reset to security web ui (#1014)
* feat: add unix passwod reset to security web ui
* refactor: fetch profile info in ViewsApp
prevents constant re-fetching of the profile page and allows every view
to access the current_user property
* refactor: move unix password change to component
* docs: add @theSuess to contributors
* fix: further specify kind of password updated
* refactor: perform validity check before submit
* chore: regenerate vendored wasm package
2022-09-07 11:40:54 +10:00
Firstyear 925c03b3fb
20220817 ldap service tokens (#1002) 2022-09-02 14:21:20 +10:00
James Hodgkinson 0cc71451bd
Password complexity phrasing (#1009)
* clippy calming 
* change KanidmClientConfig struct to public
2022-08-30 13:58:34 +10:00
James Hodgkinson e88d345c41
Fix WASM build post-version-thing (#1000)
* disable last-git-commit in WASM
* Print the version to the console when building in dev mode
2022-08-22 12:46:43 +10:00
James Hodgkinson 4d3e3765bd
Version argument for kanidm and kanidmd (#991) 2022-08-18 10:36:45 +10:00
Firstyear 4151897948
383 164 authentication updates 9 (#956)
* implementation of passkeys as an auth mech
* listing the current passkeys when asking to remove one
* tweaking insecure dev server config so passkeys will work
* Fix domain rename
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-30 22:10:24 +10:00
James Hodgkinson d8f195915d
More UI things (#911)
* Instead of wasm_bindgen creating a JS snippet to externalize code, we're now loading pure-JS util functions from wasmloader.js (#[wasm_bindgen(raw_module = "/pkg/wasmloader.js")])
* Sign out is now a confirmation box instead of "oh no I have to log back in because I'm clumsy and clicked a thing"
* Now using the urlencoding crate for encoding the TOTP URLs because string replacing encoded characters felt like writing our own crypto (and now you can call yourself whatever arbitrary string you want)
  * This fixed an issue in the web UI where the "Add a TOTP" interface would show URL-encoded things, but also made things easier for consistency.
* Moved the other web middleware objects into the middleware module because the main module was getting a bit unwieldy.
* Started auto-generating the integrity hashes in a different way on start up, which removes a middleware doing random string replacements to inject them, and means we can update modules without having to manually update the string values in the HTML.
2022-07-11 16:33:18 +10:00
Firstyear 8b84999640
68 replication basics (#908) 2022-07-07 13:28:36 +10:00
James Hodgkinson d2ea936b16
Domain Display Name (#872) 2022-07-07 13:03:08 +10:00
James Hodgkinson 664e2e4df0
bleep bloop what was I doing again (#870)
* human-facing message generator thingie
* doctests for new code
2022-06-28 09:22:31 +10:00
Firstyear 9d929b876c
636 consent remembering in oauth2 (#824) 2022-06-20 11:37:39 +10:00
Firstyear b97d13d284
383 170 164 authentication updates - credential update webui! (#809) 2022-06-05 16:30:08 +10:00
James Hodgkinson bbf074ee8c
Ok dependabot I will do the thing 2022-05-09 (#749)
* updating rust packages
* fixing some minor clippy lints
* adding more targets for dependabot
2022-05-10 13:07:20 +10:00
Firstyear 12852cf0a0
383 170 164 authentication updates 4 (#739)
* Codes and TOTP done!
* Cleanup
2022-05-06 09:52:58 +10:00
Firstyear 8dc0199380
383 170 164 authentication updates 3 (#723) 2022-04-29 13:03:21 +10:00
Firstyear 9ade567a52
383 170 164 authentication updates 2 (#716)
Add foundations for credential update sessions.
2022-04-27 10:56:18 +10:00
Euan Kemp 0c3ce226cf
Add 'account person set' command (#667)
* Add 'account person set' command

This command allows a user to modify, say, their legal name in a
self-service fashion.

This wasn't possible before by default since the 'extend' operation
required additional ACPs in order to operate which not every user would
have.

The new "person set" api is compatible with the default self_write ACP,
and so allows self-service modification.

* Add a short section on people attributes to the book
2022-04-02 13:24:07 +10:00
Firstyear d25e3b338a
Pre-release update and cleanup (#631) 2021-12-31 09:11:20 +10:00
Firstyear c6c564cebb
Finalise email changes for oidc (#629) 2021-12-25 09:47:14 +10:00
Firstyear 0f4189a57e
278 603 OIDC implementation (#608) 2021-11-21 16:41:49 +10:00
William Brown 8397f1b3ae Resolve docs error 2021-10-26 13:12:46 +10:00
Firstyear 761bed0569
20211010 rfc7662 token introspect (#607) 2021-10-26 13:00:02 +10:00
Firstyear 8e3525c736
Fix state parameter to be string (#602) 2021-10-20 14:00:14 +10:00
Firstyear c62b39c338
509 oauth2 scope mapping (#586) 2021-10-07 18:31:48 +10:00
Quinn a3c0b8ccfe
Customized tracing for tide::Middleware logging (#544) 2021-08-19 11:04:24 +10:00
Firstyear 3f27267ea4
508 token introspect (#565) 2021-08-18 09:41:04 +10:00
James Hodgkinson 6ff74c976e
Auto-publishing the book and rustdoc. (#534) 2021-07-24 11:12:35 +10:00
cuberoot74088 8306c3bc6a
Rename to SetCredentialRequest::BackupCodeGenerate (#524) 2021-07-22 12:04:56 +10:00
cuberoot74088 620a1717a8
495 backup codes cli extension (#517) 2021-07-08 12:50:55 +10:00
Firstyear e134fa5b40
Fix totp registration workflow with broken authenticators (#516) 2021-07-03 14:39:22 +10:00
Firstyear 4c6a28b7ad
511 upgrade failure - add debuging tools and improve debugging of the issue. (#512) 2021-07-01 14:51:25 +10:00
Firstyear 1de1b2db3b
Add the ability to configure and provide Oauth2 authentication for Kanidm. (#485) 2021-06-29 14:23:39 +10:00