Commit Graph

19744 Commits

Author SHA1 Message Date
Johannes Zellner 461eb38d88 Add comment why unused import exists v9.1.5 2026-03-18 14:49:18 +01:00
Johannes Zellner ba0bb62fa3 hardcode CLI name for cid-cli in device auth flow 2026-03-18 14:37:15 +01:00
Johannes Zellner 1ca62dd38e Restyle oidc device login views 2026-03-18 14:28:28 +01:00
Johannes Zellner 1b1328c601 Fix more ejs usage in oidc device login views 2026-03-18 11:13:21 +01:00
Johannes Zellner 9633036887 vueify OIDC device views 2026-03-18 10:58:12 +01:00
Girish Ramakrishnan e3d76ea9f4 uninstall: must continue to teardown other addons 2026-03-18 15:26:06 +05:30
Girish Ramakrishnan d7212e69b5 unprovision: clear the default backup site 2026-03-18 15:14:11 +05:30
Girish Ramakrishnan ead58bd6f6 test: use profile to check for passkey 2026-03-18 15:00:45 +05:30
Girish Ramakrishnan fbe13b75df passkey: fix tests 2026-03-18 14:53:00 +05:30
Girish Ramakrishnan 6085a8231f uninstall: ignore services error as services may never have started 2026-03-18 14:38:47 +05:30
Johannes Zellner e15cd190b3 Prevent user setup form if passwords dont match 2026-03-18 09:57:56 +01:00
Girish Ramakrishnan 3d55423deb Fix usage of safe() 2026-03-18 14:26:42 +05:30
Girish Ramakrishnan f62df52c1d passkey: disallow in demo mode 2026-03-18 12:28:57 +05:30
Girish Ramakrishnan 7829f94ac4 update changelog 2026-03-18 11:16:15 +05:30
Girish Ramakrishnan e9d42b9cdd migration: if no autoupdate setting, use defaults 2026-03-18 11:15:24 +05:30
Girish Ramakrishnan 1f05a8d92a network: fix crash v9.1.4 2026-03-18 07:04:45 +05:30
Johannes Zellner 69ae2b2997 Update eslint to v10 2026-03-17 16:16:00 +01:00
Johannes Zellner b86e47de02 Update pankow 2026-03-17 16:14:51 +01:00
Girish Ramakrishnan ea7647f43c oidcserver: fix jwks_rsaonly response 2026-03-17 17:49:52 +05:30
Johannes Zellner ae7df52780 Reduce font-weight on no apps placeholder 2026-03-17 10:27:09 +01:00
Girish Ramakrishnan bc5737b9b0 passkey: implement passwordless login 2026-03-16 20:10:59 +05:30
Girish Ramakrishnan d0745d1914 2fa: provider passkey or totp 2026-03-16 18:49:12 +05:30
Girish Ramakrishnan 2b4c926a70 only clear passkeys on location change
calling this on initialize makes it lose all passkeys
2026-03-16 18:49:01 +05:30
Girish Ramakrishnan d922c1c80f missing translation for passkey login failure 2026-03-16 17:30:14 +05:30
Girish Ramakrishnan 67500a7689 profile: hasPasskey 2026-03-16 17:20:22 +05:30
Girish Ramakrishnan 1c8aa7440c lint 2026-03-16 17:05:44 +05:30
Girish Ramakrishnan d128dbec4c fix 2fa translations 2026-03-16 17:04:30 +05:30
Girish Ramakrishnan 676cb8810b loginview: remove reset password from tab order 2026-03-16 16:40:54 +05:30
Girish Ramakrishnan 189e3d5599 allow totp and passkey to co-exist 2026-03-16 16:38:48 +05:30
Girish Ramakrishnan 009d0b39f9 rename twoFactor* to totp 2026-03-16 16:38:42 +05:30
Girish Ramakrishnan 81a8aa7c3d login: move forgot password on top of the password
making way for passkey login
2026-03-16 15:59:00 +05:30
Johannes Zellner 6c6761d14b Update to vite 8 2026-03-16 08:37:19 +01:00
Johannes Zellner 7d2e3df929 Update frontend dependencies 2026-03-16 08:33:23 +01:00
Girish Ramakrishnan f334c696cb update: add policy to update apps separately from platform 2026-03-16 10:19:18 +05:30
Girish Ramakrishnan db974d72d5 oidcserver: permit origin "*" from localhost testing 2026-03-16 07:21:55 +05:30
Girish Ramakrishnan c15e342bb8 webadmin: remove the implicit flow
we now use pkce . main advantage is that we don't see the access token
in the url anymore.

in pkce, the auth code by itself is useless. need the verifier.

fixes #844
2026-03-15 17:38:27 +05:30
Girish Ramakrishnan dc1449c7b6 oidcserver: convert to trace 2026-03-15 17:32:03 +05:30
Girish Ramakrishnan 0b305caf58 sites: add conflict detection
Fixes #863
2026-03-15 14:59:35 +05:30
Girish Ramakrishnan 8f1f3645b2 app update: if backup fails, provide a notification
fixes #851
2026-03-15 14:48:07 +05:30
Girish Ramakrishnan 0079162efe notifications: only title is bold 2026-03-15 14:26:30 +05:30
Girish Ramakrishnan 7afec06d4c apps: operators can now view backup logs and manage the backup task
we spun off the app backup as a separate task and this is not tracked
by app.taskId .

fixes #856
2026-03-15 10:18:31 +05:30
Girish Ramakrishnan 29f85a8fd2 test: fix debug 2026-03-15 09:54:55 +05:30
Girish Ramakrishnan 6e0dc24eca rsync: escape U+2028/U+2029
JSON strings can contain unescaped U+2028 LINE SEPARATOR and U+2029 PARAGRAPH SEPARATOR
characters while ECMAScript strings cannot. ES2019 now allows those unescaped.

The integrity code assumes that each JSON is a single line but that assumption does
not hold true when these characters are there in the string. Fix is to escape them.
2026-03-15 09:20:40 +05:30
Girish Ramakrishnan cee1180aa7 9.1.4 changes 2026-03-14 19:10:04 +05:30
Girish Ramakrishnan 6db2b55e63 oidcserver: custom templates for device login
the default one uses google fonts :/
2026-03-13 13:25:57 +05:30
Girish Ramakrishnan a3c038781f oidc: implement Device Authorization Grant 2026-03-13 12:44:39 +05:30
Girish Ramakrishnan 59c9e5397e ldapserver, directoryserver: all traces 2026-03-12 23:30:12 +05:30
Girish Ramakrishnan a4c253b9a9 users: modify verify log calls to trace
this is only useful when we are debugging and not useful to end user
without further context
2026-03-12 23:27:13 +05:30
Girish Ramakrishnan f12b4faf34 lint 2026-03-12 23:23:23 +05:30
Girish Ramakrishnan ff49759f42 promise-retry: rename api to log 2026-03-12 23:11:16 +05:30