Commit graph

54 commits

Author SHA1 Message Date
William Brown 985462590b Remove dependency on git webauthn authentication versions 2022-08-26 16:02:02 +10:00
Firstyear a8c8fa5b8f
(cargo-release) version 1.1.0-alpha.9 (#962) 2022-08-02 13:14:25 +10:00
James Hodgkinson 845cabb206
A pile of Wasm UI tweaks (#958) 2022-08-01 15:52:01 +10:00
Firstyear 4151897948
383 164 authentication updates 9 (#956)
* implementation of passkeys as an auth mech
* listing the current passkeys when asking to remove one
* tweaking insecure dev server config so passkeys will work
* Fix domain rename
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-30 22:10:24 +10:00
dependabot[bot] 49fe0249b0
Bump tokio from 1.19.2 to 1.20.0 (#923)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.19.2 to 1.20.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.19.2...tokio-1.20.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-18 20:04:52 +10:00
dependabot[bot] 4833482447
Bump serde from 1.0.138 to 1.0.139 (#928)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.138 to 1.0.139.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.138...v1.0.139)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
2022-07-18 19:57:33 +10:00
James Hodgkinson 799bf13cdf
Tide route map things (#913)
* magic routemap things
2022-07-11 18:16:41 +10:00
James Hodgkinson d8f195915d
More UI things (#911)
* Instead of wasm_bindgen creating a JS snippet to externalize code, we're now loading pure-JS util functions from wasmloader.js (#[wasm_bindgen(raw_module = "/pkg/wasmloader.js")])
* Sign out is now a confirmation box instead of "oh no I have to log back in because I'm clumsy and clicked a thing"
* Now using the urlencoding crate for encoding the TOTP URLs because string replacing encoded characters felt like writing our own crypto (and now you can call yourself whatever arbitrary string you want)
  * This fixed an issue in the web UI where the "Add a TOTP" interface would show URL-encoded things, but also made things easier for consistency.
* Moved the other web middleware objects into the middleware module because the main module was getting a bit unwieldy.
* Started auto-generating the integrity hashes in a different way on start up, which removes a middleware doing random string replacements to inject them, and means we can update modules without having to manually update the string values in the HTML.
2022-07-11 16:33:18 +10:00
dependabot[bot] 8683d452fe
Bump openssl from 0.10.40 to 0.10.41 (#915)
Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.40 to 0.10.41.
- [Release notes](https://github.com/sfackler/rust-openssl/releases)
- [Commits](https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.40...openssl-v0.10.41)

---
updated-dependencies:
- dependency-name: openssl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 08:32:36 +10:00
dependabot[bot] b51edbd29e
Bump compact_jwt from 0.2.2 to 0.2.3 (#914)
Bumps [compact_jwt](https://github.com/kanidm/compact_jwt) from 0.2.2 to 0.2.3.
- [Release notes](https://github.com/kanidm/compact_jwt/releases)
- [Commits](https://github.com/kanidm/compact_jwt/commits)

---
updated-dependencies:
- dependency-name: compact_jwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-11 07:40:05 +10:00
James Hodgkinson 403016b0f8
WebUI Cleanup, icons, Profile Wireframing (#910)
* account person extend was showing failure when succeeding
* first run on a user profile page, did some other CSS tweaks to the UI
* UI neatening, profile wireframing, robotstxt, PWA manifest
* adding domain_display_name to webmanifest
2022-07-07 18:57:28 +10:00
James Hodgkinson d2ea936b16
Domain Display Name (#872) 2022-07-07 13:03:08 +10:00
James Hodgkinson fedc21ddca
Windows build support (#903)
`kanidmd` builds and runs in Windows now. Currently skipping file permissions checks on startup, but it's tested OK on a Windows 10 box.
2022-07-06 10:53:43 +10:00
dependabot[bot] 9c900380d3
Bump tide-compress from 0.10.3 to 0.10.4 (#902)
Bumps [tide-compress](https://github.com/Fishrock123/tide-compress) from 0.10.3 to 0.10.4.
- [Release notes](https://github.com/Fishrock123/tide-compress/releases)
- [Changelog](https://github.com/Fishrock123/tide-compress/blob/main/Changelog.md)
- [Commits](https://github.com/Fishrock123/tide-compress/compare/0.10.3...0.10.4)

---
updated-dependencies:
- dependency-name: tide-compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-05 17:44:49 +10:00
dependabot[bot] fa576eba43
Bump serde from 1.0.137 to 1.0.138 (#881)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.137 to 1.0.138.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.137...v1.0.138)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-04 09:05:52 +10:00
dependabot[bot] 50b5d492d9
Bump serde_json from 1.0.81 to 1.0.82 (#883) 2022-07-04 07:31:25 +10:00
dependabot[bot] 04cf27ab9f
Bump tracing-subscriber from 0.3.11 to 0.3.14 (#889) 2022-07-04 07:29:26 +10:00
James Hodgkinson 65cf0c7f12
adding compression middleware to tide (#878)
* adding compression middleware to tide
* added notes, tests for regex things
2022-07-03 11:17:46 +10:00
James Hodgkinson 664e2e4df0
bleep bloop what was I doing again (#870)
* human-facing message generator thingie
* doctests for new code
2022-06-28 09:22:31 +10:00
James Hodgkinson 57f8fa9d2b
Update to account recovery UX (#859)
* JSON-formatted output for recover_account, moved a bunch of logs to debug instead of info
* updated documentation
2022-06-26 18:02:16 +10:00
James Hodgkinson 4b1989ee22
updating csp headers (#852)
* removing confetti loader (we still package it, for now)
* 📎-happiness
* updating WASM build scripts and rebuilding
* updated CSP headers to change self to 'self' and remove some insecure https: options
2022-06-22 22:30:08 +10:00
James Hodgkinson febabf4b56 tweaks to CSP headers, adding more docs 2022-06-22 09:54:48 +10:00
dependabot[bot] 2724064189
Bump async-std from 1.11.0 to 1.12.0 (#830)
Bumps [async-std](https://github.com/async-rs/async-std) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/async-rs/async-std/releases)
- [Changelog](https://github.com/async-rs/async-std/blob/main/CHANGELOG.md)
- [Commits](https://github.com/async-rs/async-std/compare/v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: async-std
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 14:55:09 +10:00
Firstyear 9d929b876c
636 consent remembering in oauth2 (#824) 2022-06-20 11:37:39 +10:00
dependabot[bot] 831aef5eec
Bump reqwest from 0.11.10 to 0.11.11 (#827)
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.11.10 to 0.11.11.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.11.10...v0.11.11)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 09:47:41 +10:00
dependabot[bot] a97f4402b5
Bump uuid from 1.1.1 to 1.1.2 (#821) 2022-06-13 08:51:38 +10:00
dependabot[bot] a18ff9e2e4
Bump tracing from 0.1.34 to 0.1.35 (#820) 2022-06-13 08:51:23 +10:00
James Hodgkinson c5ea14d0cf
adding new favicon and square logo, updating build scripts (#819) 2022-06-10 15:07:19 +10:00
dependabot[bot] 9a7c6eeec7
Bump tokio-util from 0.7.2 to 0.7.3 (#814)
Bumps [tokio-util](https://github.com/tokio-rs/tokio) from 0.7.2 to 0.7.3.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-util-0.7.2...tokio-util-0.7.3)

---
updated-dependencies:
- dependency-name: tokio-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:26:05 +10:00
dependabot[bot] ed32e10547
Bump uuid from 1.1.0 to 1.1.1 (#813)
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/1.1.0...1.1.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:23:41 +10:00
dependabot[bot] 032c324295
Bump tokio from 1.18.2 to 1.19.1 (#812)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.18.2 to 1.19.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.18.2...tokio-1.19.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-06 08:22:36 +10:00
Firstyear b97d13d284
383 170 164 authentication updates - credential update webui! (#809) 2022-06-05 16:30:08 +10:00
James Hodgkinson 7d27612174
Windows automagical buildingtons (#798)
* windows build automation
* making fmt happy, fixing windows-related bug
* disabled cargo_incremental when using `sccache`, added build options ARG to Dockerfile, limit docker build to one job
2022-05-31 14:13:21 +10:00
James Hodgkinson f93e2cbf28
closes #788 - moves info messsage about webui path (#790) 2022-05-27 22:49:08 +10:00
dependabot[bot] 40b29e14ca
Bump uuid from 1.0.0 to 1.1.0 (#784)
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/1.0.0...1.1.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-26 22:03:37 +10:00
James Hodgkinson b6d3a0511f
Yak shaving 2343443 (#779) 2022-05-26 14:58:53 +10:00
Firstyear 241e0eeb4d
At some point, you have to pay for your tech debt. (#759)
This replaces the unmaintained serde_cbor with serde_json in both
db and IPC contexts. It changes the database on disk format to align
better to how we structure values in memory making it faster to load
entries when they aren't cached. And this breaks down the horrible
ValueSet enum to dyn trait types, which has a huge performance
improvement to the server.
2022-05-24 10:49:34 +10:00
dependabot[bot] 92fe11ce41
Bump libc from 0.2.125 to 0.2.126 (#763)
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.125 to 0.2.126.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.125...0.2.126)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-23 08:16:48 +10:00
dependabot[bot] 7d7656ec24
Bump tokio-util from 0.7.1 to 0.7.2 (#757) 2022-05-17 12:50:41 +10:00
James Hodgkinson d5fbb91a1c
Adding Content-Security-Policy Headers and auto-generating integrity hashes (#740)
* Adding Content-Security-Policy Headers and auto-generating integrity hashes
* created favicon and WASM loader as their own files
* adding .map files from bootstrap
2022-05-06 14:20:52 +10:00
Firstyear 12852cf0a0
383 170 164 authentication updates 4 (#739)
* Codes and TOTP done!
* Cleanup
2022-05-06 09:52:58 +10:00
dependabot[bot] 71f6c193a0
Bump serde from 1.0.136 to 1.0.137 (#731) 2022-05-02 10:30:09 +10:00
dependabot[bot] 3f898ab66b
Bump libc from 0.2.124 to 0.2.125 (#732) 2022-05-02 10:06:52 +10:00
dependabot[bot] cca1eee3d2
Bump serde_json from 1.0.79 to 1.0.80 (#733) 2022-05-02 10:06:40 +10:00
William Brown b6be05248c (cargo-release) version 1.1.0-alpha.8 2022-05-01 13:58:18 +10:00
Firstyear 53f3260285
Remove async references (#724) 2022-04-29 13:23:46 +10:00
Firstyear 8dc0199380
383 170 164 authentication updates 3 (#723) 2022-04-29 13:03:21 +10:00
Firstyear a58edc5128
20220427 dependency updates (#718) 2022-04-27 13:35:26 +10:00
Firstyear 9ade567a52
383 170 164 authentication updates 2 (#716)
Add foundations for credential update sessions.
2022-04-27 10:56:18 +10:00
Euan Kemp 0c3ce226cf
Add 'account person set' command (#667)
* Add 'account person set' command

This command allows a user to modify, say, their legal name in a
self-service fashion.

This wasn't possible before by default since the 'extend' operation
required additional ACPs in order to operate which not every user would
have.

The new "person set" api is compatible with the default self_write ACP,
and so allows self-service modification.

* Add a short section on people attributes to the book
2022-04-02 13:24:07 +10:00