Commit graph

37 commits

Author SHA1 Message Date
Firstyear ceb6048bf0
122 password import design (#196)
Implements #122 password import. This adds most of the server core framework to allow password imports from other sources, with new types easily able to be added in credential.rs.
2020-03-27 08:27:07 +10:00
William Brown 8d8d5d02dd Finish up claim design 2020-03-26 11:56:20 +10:00
Firstyear 61c240e44b
20200307 137/132 cid/recyclebin (#192)
Implements #137 and parts of #132. This adds full support for CID's to the server, and some parts for recyclebin to work such as internal lessthan queries.
2020-03-22 11:31:02 +10:00
Firstyear b048115698
20200216 document internals (#187)
Add documentation of internal api
2020-02-17 08:09:32 +10:30
William Brown 678ec17909 Add design for enrolling another webauthn device to an account 2020-01-15 09:56:27 +10:00
William Brown 4360ea3d88 Add reference 2020-01-01 12:58:42 +11:00
Firstyear b579c5395c
20191202 documentation (#156)
Add an initial skeleton and draft of a book, which should be maintained and improved as the server is developed to help guide users.
2019-12-03 16:03:05 +10:00
Firstyear 000a24b49e
23 gidnumber generation (#154)
Implements #23 gidnumber generation. This automatically creates gid numbers for posixaccounts and posixgroups based on the UUID of the object. Alternately, these can be provided if manual allocation is desired. This is an important step in posix attribute support.
2019-11-30 09:39:31 +10:00
Firstyear 5049eac1e4
Design a downgrade process (#144) 2019-11-07 18:00:57 +10:00
Firstyear 4f28bb5bc3
Resolve 139, 140, 141, 142 (#143) 2019-11-07 17:08:11 +10:00
William Brown 516a128c5f Update images 2019-11-04 14:09:54 +10:00
William Brown 91ba26d0ee Update documentation 2019-11-04 14:07:17 +10:00
Firstyear 764b96323c
Add claims design (#119) 2019-10-14 15:31:48 +13:00
Firstyear 5429f8a6c0
Add draft trust document (#111) 2019-10-10 19:42:33 +10:00
Firstyear 09bc31e2f5
Add radius design draft (#115)
* Add radius design draft
2019-10-10 13:17:03 +10:00
Firstyear 1f2b965285
6 schema list (#112)
This adds rest endpoints for schema, group, account listing and individual item getting, client lib to call these end points, and tests for all of these.
2019-10-05 10:40:43 +10:00
Firstyear 4ba34d18e1
6 idm api design (#109)
Draft of the idm server rest api layout. This is no means a final representation of what this API will look like, but it's important that the ideas and direction, as well as capabilities were documented and discussed.
2019-09-30 19:01:20 +10:00
Firstyear 4f85883c32
Implement #8 indexing - today this is only eq and pres indexes, but (#102)
it does handle the cases correctly for test threshold, andnot, or,
and and exists shortcuts. It's also extremely well tested!
2019-09-25 12:38:20 +02:00
Firstyear 0d4509233b
87 default idm entries (#89)
This adds the fundamentals of the basic IDM layout. It contains the needed design document, and is designed such that the default admins while powerful, still have some limits upon them.
2019-09-16 04:05:26 +10:00
Firstyear b4fc71b27d
Docker improvements (#81)
Update the dockerfile to work correctly with the newer server options and runtime.
2019-09-06 13:05:27 +10:00
William Brown 8cc25b8374 Complete system protected objects implementation. This allows class: system
to be tagged to types that should not be externally edited.
2019-07-20 18:20:29 +09:00
Firstyear 94a6bde269
20190607 authentication (#55)
Implement #2 anonymous authentication. This also puts into place the majority of the authentication framework, and starts to build the IDM layers ontop of the DB engine.
2019-07-12 15:28:46 +10:00
Firstyear 426426a18f
Implement Access Control Profiles (#52)
This implements access controls, including a huge amount of refactor to support
them and their resolution with the "SelfUUID" keyword. Additionally, parts of
the event structure was improved to help, normalised was added as an entry state
and more.

And there are access controls! They work, have tests, and appear sane.
2019-06-07 11:19:09 +02:00
Firstyear 55008cd551
20190510 access profiles foundations (#51)
* Large refactor to improve the ava get interface

* Improve ACP parsing test

* ACP parsing complete

* Fix txn type tech debt

* Clean up queryserver name issue

* Integrate acp to query server, and add reload hooks

* Starting to write search acp enforcement

* Refactor event to take entry rather than UUID to allow acp to filter on the event properly.

* Most of the filter refactor is done

* Finish filter refactor!

* Write and implement basic filter optimiser with redundant term folding
2019-05-24 15:11:06 +10:00
Firstyear 9eca06c3e2
Implement memberof with direct/indirect tracking and testcases. (#48)
* Implement memberof with direct/indirect tracking and testcases.
2019-05-08 10:39:46 +10:00
William Brown e1c41d549a Docs update 2019-05-01 14:08:17 +10:00
Firstyear ff828e4f4a
Add DBVersioning for entries (#47) 2019-05-01 14:06:22 +10:00
William Brown 40d044e66b Update auth doc 2019-04-21 13:31:32 +10:00
Firstyear af9ac8f662
20190405 refint precursors (#40)
* Improved validation errors

* Fix some audit issues

* Make verify RO

* Added verify and plugin verify hooks

* Update plugin testing framework

* Update designs and macros
2019-04-17 13:00:03 +10:00
William Brown dc0d37d701 Add more design 2019-02-18 19:45:04 +10:00
William Brown 1078edb0de Add more design 2019-02-18 19:41:39 +10:00
William Brown 3d90b1daeb Working delete operation 2019-02-15 20:49:14 +10:00
William Brown 84ff865304 Add design documents as drafts 2019-02-14 12:49:45 +10:00
William Brown a22c8d56aa Major rework of filter to have a valid/invalid state type associated 2019-02-11 19:49:15 +10:00
William Brown cc00aafa8b Auth doc 2019-02-01 15:13:18 +10:00
William Brown 3ad0f0ca28 Finished major transaction refactor 2019-01-20 13:45:49 +13:00
William Brown 4c1a4406bb Begin datastructure and work on the core server 2018-11-03 10:30:57 +10:00