William Brown
985462590b
Remove dependency on git webauthn authentication versions
2022-08-26 16:02:02 +10:00
Firstyear
a8c8fa5b8f
(cargo-release) version 1.1.0-alpha.9 ( #962 )
2022-08-02 13:14:25 +10:00
James Hodgkinson
845cabb206
A pile of Wasm UI tweaks ( #958 )
2022-08-01 15:52:01 +10:00
Firstyear
4151897948
383 164 authentication updates 9 ( #956 )
...
* implementation of passkeys as an auth mech
* listing the current passkeys when asking to remove one
* tweaking insecure dev server config so passkeys will work
* Fix domain rename
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-30 22:10:24 +10:00
dependabot[bot]
49fe0249b0
Bump tokio from 1.19.2 to 1.20.0 ( #923 )
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.19.2 to 1.20.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.19.2...tokio-1.20.0 )
---
updated-dependencies:
- dependency-name: tokio
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 20:04:52 +10:00
dependabot[bot]
4833482447
Bump serde from 1.0.138 to 1.0.139 ( #928 )
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.138 to 1.0.139.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.138...v1.0.139 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-18 19:57:33 +10:00
James Hodgkinson
799bf13cdf
Tide route map things ( #913 )
...
* magic routemap things
2022-07-11 18:16:41 +10:00
James Hodgkinson
d8f195915d
More UI things ( #911 )
...
* Instead of wasm_bindgen creating a JS snippet to externalize code, we're now loading pure-JS util functions from wasmloader.js (#[wasm_bindgen(raw_module = "/pkg/wasmloader.js")])
* Sign out is now a confirmation box instead of "oh no I have to log back in because I'm clumsy and clicked a thing"
* Now using the urlencoding crate for encoding the TOTP URLs because string replacing encoded characters felt like writing our own crypto (and now you can call yourself whatever arbitrary string you want)
* This fixed an issue in the web UI where the "Add a TOTP" interface would show URL-encoded things, but also made things easier for consistency.
* Moved the other web middleware objects into the middleware module because the main module was getting a bit unwieldy.
* Started auto-generating the integrity hashes in a different way on start up, which removes a middleware doing random string replacements to inject them, and means we can update modules without having to manually update the string values in the HTML.
2022-07-11 16:33:18 +10:00
dependabot[bot]
8683d452fe
Bump openssl from 0.10.40 to 0.10.41 ( #915 )
...
Bumps [openssl](https://github.com/sfackler/rust-openssl ) from 0.10.40 to 0.10.41.
- [Release notes](https://github.com/sfackler/rust-openssl/releases )
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.40...openssl-v0.10.41 )
---
updated-dependencies:
- dependency-name: openssl
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 08:32:36 +10:00
dependabot[bot]
b51edbd29e
Bump compact_jwt from 0.2.2 to 0.2.3 ( #914 )
...
Bumps [compact_jwt](https://github.com/kanidm/compact_jwt ) from 0.2.2 to 0.2.3.
- [Release notes](https://github.com/kanidm/compact_jwt/releases )
- [Commits](https://github.com/kanidm/compact_jwt/commits )
---
updated-dependencies:
- dependency-name: compact_jwt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 07:40:05 +10:00
James Hodgkinson
403016b0f8
WebUI Cleanup, icons, Profile Wireframing ( #910 )
...
* account person extend was showing failure when succeeding
* first run on a user profile page, did some other CSS tweaks to the UI
* UI neatening, profile wireframing, robotstxt, PWA manifest
* adding domain_display_name to webmanifest
2022-07-07 18:57:28 +10:00
James Hodgkinson
d2ea936b16
Domain Display Name ( #872 )
2022-07-07 13:03:08 +10:00
James Hodgkinson
fedc21ddca
Windows build support ( #903 )
...
`kanidmd` builds and runs in Windows now. Currently skipping file permissions checks on startup, but it's tested OK on a Windows 10 box.
2022-07-06 10:53:43 +10:00
dependabot[bot]
9c900380d3
Bump tide-compress from 0.10.3 to 0.10.4 ( #902 )
...
Bumps [tide-compress](https://github.com/Fishrock123/tide-compress ) from 0.10.3 to 0.10.4.
- [Release notes](https://github.com/Fishrock123/tide-compress/releases )
- [Changelog](https://github.com/Fishrock123/tide-compress/blob/main/Changelog.md )
- [Commits](https://github.com/Fishrock123/tide-compress/compare/0.10.3...0.10.4 )
---
updated-dependencies:
- dependency-name: tide-compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-05 17:44:49 +10:00
dependabot[bot]
fa576eba43
Bump serde from 1.0.137 to 1.0.138 ( #881 )
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.137 to 1.0.138.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.137...v1.0.138 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-04 09:05:52 +10:00
dependabot[bot]
50b5d492d9
Bump serde_json from 1.0.81 to 1.0.82 ( #883 )
2022-07-04 07:31:25 +10:00
dependabot[bot]
04cf27ab9f
Bump tracing-subscriber from 0.3.11 to 0.3.14 ( #889 )
2022-07-04 07:29:26 +10:00
James Hodgkinson
65cf0c7f12
adding compression middleware to tide ( #878 )
...
* adding compression middleware to tide
* added notes, tests for regex things
2022-07-03 11:17:46 +10:00
James Hodgkinson
664e2e4df0
bleep bloop what was I doing again ( #870 )
...
* human-facing message generator thingie
* doctests for new code
2022-06-28 09:22:31 +10:00
James Hodgkinson
57f8fa9d2b
Update to account recovery UX ( #859 )
...
* JSON-formatted output for recover_account, moved a bunch of logs to debug instead of info
* updated documentation
2022-06-26 18:02:16 +10:00
James Hodgkinson
4b1989ee22
updating csp headers ( #852 )
...
* removing confetti loader (we still package it, for now)
* 📎 -happiness
* updating WASM build scripts and rebuilding
* updated CSP headers to change self to 'self' and remove some insecure https: options
2022-06-22 22:30:08 +10:00
James Hodgkinson
febabf4b56
tweaks to CSP headers, adding more docs
2022-06-22 09:54:48 +10:00
dependabot[bot]
2724064189
Bump async-std from 1.11.0 to 1.12.0 ( #830 )
...
Bumps [async-std](https://github.com/async-rs/async-std ) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/async-rs/async-std/releases )
- [Changelog](https://github.com/async-rs/async-std/blob/main/CHANGELOG.md )
- [Commits](https://github.com/async-rs/async-std/compare/v1.11.0...v1.12.0 )
---
updated-dependencies:
- dependency-name: async-std
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 14:55:09 +10:00
Firstyear
9d929b876c
636 consent remembering in oauth2 ( #824 )
2022-06-20 11:37:39 +10:00
dependabot[bot]
831aef5eec
Bump reqwest from 0.11.10 to 0.11.11 ( #827 )
...
Bumps [reqwest](https://github.com/seanmonstar/reqwest ) from 0.11.10 to 0.11.11.
- [Release notes](https://github.com/seanmonstar/reqwest/releases )
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md )
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.11.10...v0.11.11 )
---
updated-dependencies:
- dependency-name: reqwest
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 09:47:41 +10:00
dependabot[bot]
a97f4402b5
Bump uuid from 1.1.1 to 1.1.2 ( #821 )
2022-06-13 08:51:38 +10:00
dependabot[bot]
a18ff9e2e4
Bump tracing from 0.1.34 to 0.1.35 ( #820 )
2022-06-13 08:51:23 +10:00
James Hodgkinson
c5ea14d0cf
adding new favicon and square logo, updating build scripts ( #819 )
2022-06-10 15:07:19 +10:00
dependabot[bot]
9a7c6eeec7
Bump tokio-util from 0.7.2 to 0.7.3 ( #814 )
...
Bumps [tokio-util](https://github.com/tokio-rs/tokio ) from 0.7.2 to 0.7.3.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-util-0.7.2...tokio-util-0.7.3 )
---
updated-dependencies:
- dependency-name: tokio-util
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:26:05 +10:00
dependabot[bot]
ed32e10547
Bump uuid from 1.1.0 to 1.1.1 ( #813 )
...
Bumps [uuid](https://github.com/uuid-rs/uuid ) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/1.1.0...1.1.1 )
---
updated-dependencies:
- dependency-name: uuid
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:23:41 +10:00
dependabot[bot]
032c324295
Bump tokio from 1.18.2 to 1.19.1 ( #812 )
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.18.2 to 1.19.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.18.2...tokio-1.19.1 )
---
updated-dependencies:
- dependency-name: tokio
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:22:36 +10:00
Firstyear
b97d13d284
383 170 164 authentication updates - credential update webui! ( #809 )
2022-06-05 16:30:08 +10:00
James Hodgkinson
7d27612174
Windows automagical buildingtons ( #798 )
...
* windows build automation
* making fmt happy, fixing windows-related bug
* disabled cargo_incremental when using `sccache`, added build options ARG to Dockerfile, limit docker build to one job
2022-05-31 14:13:21 +10:00
James Hodgkinson
f93e2cbf28
closes #788 - moves info messsage about webui path ( #790 )
2022-05-27 22:49:08 +10:00
dependabot[bot]
40b29e14ca
Bump uuid from 1.0.0 to 1.1.0 ( #784 )
...
Bumps [uuid](https://github.com/uuid-rs/uuid ) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/1.0.0...1.1.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-26 22:03:37 +10:00
James Hodgkinson
b6d3a0511f
Yak shaving 2343443 ( #779 )
2022-05-26 14:58:53 +10:00
Firstyear
241e0eeb4d
At some point, you have to pay for your tech debt. ( #759 )
...
This replaces the unmaintained serde_cbor with serde_json in both
db and IPC contexts. It changes the database on disk format to align
better to how we structure values in memory making it faster to load
entries when they aren't cached. And this breaks down the horrible
ValueSet enum to dyn trait types, which has a huge performance
improvement to the server.
2022-05-24 10:49:34 +10:00
dependabot[bot]
92fe11ce41
Bump libc from 0.2.125 to 0.2.126 ( #763 )
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.125 to 0.2.126.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.125...0.2.126 )
---
updated-dependencies:
- dependency-name: libc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-23 08:16:48 +10:00
dependabot[bot]
7d7656ec24
Bump tokio-util from 0.7.1 to 0.7.2 ( #757 )
2022-05-17 12:50:41 +10:00
James Hodgkinson
d5fbb91a1c
Adding Content-Security-Policy Headers and auto-generating integrity hashes ( #740 )
...
* Adding Content-Security-Policy Headers and auto-generating integrity hashes
* created favicon and WASM loader as their own files
* adding .map files from bootstrap
2022-05-06 14:20:52 +10:00
Firstyear
12852cf0a0
383 170 164 authentication updates 4 ( #739 )
...
* Codes and TOTP done!
* Cleanup
2022-05-06 09:52:58 +10:00
dependabot[bot]
71f6c193a0
Bump serde from 1.0.136 to 1.0.137 ( #731 )
2022-05-02 10:30:09 +10:00
dependabot[bot]
3f898ab66b
Bump libc from 0.2.124 to 0.2.125 ( #732 )
2022-05-02 10:06:52 +10:00
dependabot[bot]
cca1eee3d2
Bump serde_json from 1.0.79 to 1.0.80 ( #733 )
2022-05-02 10:06:40 +10:00
William Brown
b6be05248c
(cargo-release) version 1.1.0-alpha.8
2022-05-01 13:58:18 +10:00
Firstyear
53f3260285
Remove async references ( #724 )
2022-04-29 13:23:46 +10:00
Firstyear
8dc0199380
383 170 164 authentication updates 3 ( #723 )
2022-04-29 13:03:21 +10:00
Firstyear
a58edc5128
20220427 dependency updates ( #718 )
2022-04-27 13:35:26 +10:00
Firstyear
9ade567a52
383 170 164 authentication updates 2 ( #716 )
...
Add foundations for credential update sessions.
2022-04-27 10:56:18 +10:00
Euan Kemp
0c3ce226cf
Add 'account person set' command ( #667 )
...
* Add 'account person set' command
This command allows a user to modify, say, their legal name in a
self-service fashion.
This wasn't possible before by default since the 'extend' operation
required additional ACPs in order to operate which not every user would
have.
The new "person set" api is compatible with the default self_write ACP,
and so allows self-service modification.
* Add a short section on people attributes to the book
2022-04-02 13:24:07 +10:00