 Johannes Zellner
|
4d2ba2adaa
|
Use subdomains table in appdb
|
2018-06-29 23:14:06 +02:00 |
|
|
Johannes Zellner
|
c97e8d6bd4
|
add subdomains table with migration scripts
|
2018-06-29 23:14:06 +02:00 |
|
|
Girish Ramakrishnan
|
b15029de11
|
Send tokenScopes as an array
|
2018-06-29 09:53:12 -07:00 |
|
|
Girish Ramakrishnan
|
9aa74c99fc
|
Make setup route return tokenScopes
This is used by the dashboard logic during initial activation
|
2018-06-29 08:27:34 -07:00 |
|
|
Girish Ramakrishnan
|
35c9e99102
|
Move the update info into separate route (since it is sensitive)
|
2018-06-28 17:50:27 -07:00 |
|
|
Girish Ramakrishnan
|
cab9bc3a61
|
Unify the config routes into /api/v1/config
No more separate config routes for different types of user
|
2018-06-28 17:40:57 -07:00 |
|
|
Girish Ramakrishnan
|
712c920b86
|
Move caas config to separate route
|
2018-06-28 17:28:46 -07:00 |
|
|
Girish Ramakrishnan
|
9978dff627
|
Add API to set and transfer ownership
|
2018-06-28 16:48:04 -07:00 |
|
|
Girish Ramakrishnan
|
ff5bd42bef
|
remove mostly dead comment
|
2018-06-28 14:19:56 -07:00 |
|
|
Girish Ramakrishnan
|
dfa318e898
|
Add ownerId for apps
This tracks who installed the app.
|
2018-06-28 14:13:12 -07:00 |
|
|
Girish Ramakrishnan
|
38977858aa
|
When issuing token intersect with the existing user roles
Also:
* Move token validation to accesscontrol.js
* Use clients.addTokenByUserId everywhere
|
2018-06-28 00:07:43 -07:00 |
|
|
Girish Ramakrishnan
|
6510240c0a
|
Fix accesscontrol.intersectScopes
|
2018-06-27 18:08:38 -07:00 |
|
|
Girish Ramakrishnan
|
d66dc11f01
|
Make canonicalScopeString return sorted array
|
2018-06-27 14:07:25 -07:00 |
|
|
Girish Ramakrishnan
|
ce4424d115
|
debug out the scope
|
2018-06-27 13:54:10 -07:00 |
|
|
Girish Ramakrishnan
|
a958c01974
|
digest: drop the Cloudron prefix in the subject
|
2018-06-27 11:00:41 -07:00 |
|
|
Girish Ramakrishnan
|
877f181f8d
|
Put ts in app listing as well
|
2018-06-26 19:58:21 -07:00 |
|
|
Girish Ramakrishnan
|
02c0137dc1
|
Add a timestamp column to apps table
this field can be used in UI to see if more detailed app information
has to be fetched (since it calls the list apps REST API periodically)
|
2018-06-26 18:16:39 -07:00 |
|
|
Girish Ramakrishnan
|
d0b34cc43e
|
Fix schema
|
2018-06-26 18:05:34 -07:00 |
|
|
Girish Ramakrishnan
|
93a2cab355
|
Ignore internal mailbox conflict errors
|
2018-06-26 17:44:14 -07:00 |
|
|
Girish Ramakrishnan
|
6907475f7a
|
Add app management scope
This splits the apps API into those who have just 'read' access
and those who have 'manage' access.
|
2018-06-26 08:56:30 -07:00 |
|
|
Girish Ramakrishnan
|
9bf93b026b
|
rename to removeInternalFields
|
2018-06-25 16:40:16 -07:00 |
|
|
Girish Ramakrishnan
|
f932f8b3d3
|
Add user management scope
This splits the user and groups API into those who have just 'read' access
and those who have 'manage' access.
|
2018-06-25 16:10:00 -07:00 |
|
|
Girish Ramakrishnan
|
7ab5d5e50d
|
Add domain management scope
This splits the domains API into those who have just 'read' access
(i.e without configuration details) and those who have 'manage' access.
|
2018-06-25 15:12:22 -07:00 |
|
|
Johannes Zellner
|
5028230354
|
Update cloudron-syslog
Fixes #564
|
2018-06-25 19:35:13 +02:00 |
|
|
Girish Ramakrishnan
|
80e9214f5b
|
Reduce password length for sendmail/recvmail
Fixes #565
|
2018-06-22 16:37:34 -07:00 |
|
|
Girish Ramakrishnan
|
5ca64dd642
|
Normalize host path to prevent access to arbitrary paths
|
2018-06-22 08:29:08 -07:00 |
|
|
Girish Ramakrishnan
|
24d9d3063b
|
Allow specifying bindMounts array to localstorage addon
|
2018-06-21 22:04:06 -07:00 |
|
|
Girish Ramakrishnan
|
74b1df17c0
|
Fix groups test and route to make name optional
|
2018-06-20 09:31:50 -07:00 |
|
|
Girish Ramakrishnan
|
7880a2f9c3
|
API returns 403 for incorrect password
|
2018-06-20 09:27:24 -07:00 |
|
|
Girish Ramakrishnan
|
8a84872704
|
Wrong password logs out the user
|
2018-06-18 18:52:35 -07:00 |
|
|
Girish Ramakrishnan
|
5d13cc363f
|
Allow group name to be changed
|
2018-06-18 18:30:40 -07:00 |
|
|
Girish Ramakrishnan
|
987a42b448
|
Fix syntax
|
2018-06-18 17:58:35 -07:00 |
|
|
Girish Ramakrishnan
|
3601e4f8a6
|
if -> while
|
2018-06-18 17:39:15 -07:00 |
|
|
Girish Ramakrishnan
|
60ed290179
|
validate role names against existing roles
|
2018-06-18 17:32:07 -07:00 |
|
|
Girish Ramakrishnan
|
ff73bc121f
|
Make tokenScope plural
|
2018-06-18 15:10:02 -07:00 |
|
|
Girish Ramakrishnan
|
6cd0601629
|
Map group roles to scopes
|
2018-06-18 14:52:39 -07:00 |
|
|
Girish Ramakrishnan
|
b5c8e7a52a
|
Rename to getGroups
|
2018-06-18 14:10:29 -07:00 |
|
|
Girish Ramakrishnan
|
7f3114e67d
|
Rename to get/setMembership (to indicate IDs and not group objects
|
2018-06-18 13:57:17 -07:00 |
|
|
Girish Ramakrishnan
|
1dbcf2a46a
|
Rename to groups.update
|
2018-06-18 13:41:27 -07:00 |
|
|
Girish Ramakrishnan
|
898cbd01b3
|
tokens table always has canonical scope
|
2018-06-17 23:11:36 -07:00 |
|
|
Girish Ramakrishnan
|
b6b7d08af3
|
Rename to accesscontrol.canonicalScopeString
|
2018-06-17 22:43:42 -07:00 |
|
|
Girish Ramakrishnan
|
6a2dacb08a
|
Make intersectScopes take an array
|
2018-06-17 22:39:33 -07:00 |
|
|
Girish Ramakrishnan
|
1015b0ad9c
|
validateScope -> validateScopeString
|
2018-06-17 22:29:17 -07:00 |
|
|
Girish Ramakrishnan
|
106e17f7ff
|
caas: verify dns config
this is so that it fails if someone gives invalid token via API call
|
2018-06-17 22:22:05 -07:00 |
|
|
Girish Ramakrishnan
|
6ca28d9a58
|
validate dns config parameters
|
2018-06-17 22:21:51 -07:00 |
|
|
Girish Ramakrishnan
|
ad6bc191f9
|
Make hasScopes take an array
|
2018-06-17 21:06:17 -07:00 |
|
|
Girish Ramakrishnan
|
682f7a710c
|
Add an appstore scope for subscription settings
|
2018-06-17 18:09:13 -07:00 |
|
|
Girish Ramakrishnan
|
f24a099e79
|
Remove user.admin property
The UI will now base itself entirely off the scopes of the token
|
2018-06-17 16:49:56 -07:00 |
|
|
Girish Ramakrishnan
|
156ffb40c9
|
Remove scope from users.get
|
2018-06-17 16:07:20 -07:00 |
|
|
Girish Ramakrishnan
|
db8b6838bb
|
Move skip password verification logic to accesscontrol.js
|
2018-06-17 15:20:27 -07:00 |
|