Commit Graph

15779 Commits

Author SHA1 Message Date
Johannes Zellner ff697f8d33 oidc routes need settings to be loaded 2023-03-19 16:01:22 +01:00
Johannes Zellner bb5f8b6452 Allow single redirect uris 2023-03-19 16:01:22 +01:00
Johannes Zellner b792fb97d6 oidc: make clients more dynamic 2023-03-19 16:01:22 +01:00
Johannes Zellner cef34bfbb7 oidc: move routes to server.js for visibility 2023-03-19 16:01:22 +01:00
Johannes Zellner 2038a98e61 oidc: remove dead code 2023-03-19 16:01:22 +01:00
Johannes Zellner 51831e4bdf oidc: Some more claims debug 2023-03-19 16:01:22 +01:00
Johannes Zellner 9089616e85 Store oidc data in platformdata/oidc 2023-03-19 16:01:22 +01:00
Johannes Zellner df53cfb14c oidc: implement real profile claims 2023-03-19 16:01:22 +01:00
Johannes Zellner aae4acc419 oidc: Handle login without redirect from backend and set some default
ttls
2023-03-19 16:01:22 +01:00
Johannes Zellner 5e4e292b4d oidc: Remove rpInitiatedLogout again 2023-03-19 16:01:16 +01:00
Johannes Zellner 05a1cc58eb oidc: als add basic style for autorize page 2023-03-19 13:08:06 +01:00
Johannes Zellner 3b9336d3c9 oidc: Initial auth against our userdb is working 2023-03-19 13:08:06 +01:00
Johannes Zellner 57689ffdf4 oidc: apply basic style to login view 2023-03-19 13:08:06 +01:00
Johannes Zellner 36f8bfc229 Add oidc logout hooks 2023-03-19 13:08:06 +01:00
Johannes Zellner d6adbf46e6 Add initial oidc interaction pages 2023-03-19 13:08:06 +01:00
Johannes Zellner 31e900cb9c Add hooks for providing our own login UI 2023-03-19 13:08:06 +01:00
Johannes Zellner bab3de137b Fix typo 2023-03-19 13:08:06 +01:00
Johannes Zellner 4ac70d70f9 oidc: set interaction routes prefix to the same as the main oidc routes 2023-03-19 13:08:06 +01:00
Johannes Zellner 1ea76ebb60 oidc: add initial findAccount and fixup findByUid 2023-03-19 13:08:06 +01:00
Johannes Zellner 47e35d0b06 Support consume api 2023-03-19 13:08:06 +01:00
Johannes Zellner 5fcadcce9c Add initial OpenID connect support
This currently uses a fake json file storage and does not yet verify
credentials
2023-03-19 13:08:06 +01:00
Girish Ramakrishnan 33ad0829ad Add workaround for porkbun rate limit 2023-03-18 16:20:17 +01:00
Girish Ramakrishnan e38341eb85 typo 2023-03-18 10:10:27 +01:00
Girish Ramakrishnan f74e2cbee3 porkbun: cleanup implementation 2023-03-18 09:58:04 +01:00
Girish Ramakrishnan 3616fbb51c dns: add porkbun
domain setup ui
2023-03-16 20:21:39 +01:00
Girish Ramakrishnan 489b598cd6 curl|pipe makes retrying pointless
save to a temporary file so that curl retry logic can work
2023-03-16 12:04:17 +01:00
Girish Ramakrishnan 45a1122889 Revert back infra version to match 7.3
The code is not smart enough to do both infra bump and database major upgrades.
The db upgrade logic relies on the container to be running to export and re-import.
2023-03-15 21:16:08 +01:00
Girish Ramakrishnan abd6ab06de mongodb: fix restart 2023-03-14 11:59:25 +01:00
Girish Ramakrishnan e86a613d86 proxyauth: typo in basic auth validation 2023-03-14 11:35:24 +01:00
Girish Ramakrishnan ef3d23ebd9 Fix error message 2023-03-14 11:35:10 +01:00
Girish Ramakrishnan 53e9eccf72 unify totp check
the totp check is done in several places causing errors like 3552232e99

* ldap (addon)
* accesscontrol (dashboard)
* proxyauth
* directoryserver (exposed ldap)
* externalldap (the connector)

The code also makes externalldap auto-create work now across all the cases where there is a username
2023-03-12 16:01:12 +01:00
Girish Ramakrishnan 8e0d1b61af Make tests run again 2023-03-11 23:41:01 +01:00
Girish Ramakrishnan 3aa040bf01 apps: remove repository 2023-03-11 16:25:39 +01:00
Girish Ramakrishnan d242afd9fc pass debug object 2023-03-10 12:10:40 +01:00
Girish Ramakrishnan 5e606c50a4 docker: better error message when out of disk space 2023-03-10 12:09:23 +01:00
Johannes Zellner c2b1350fa0 Ensure we handle item selection context menu in filemanager correctly 2023-03-10 12:07:11 +01:00
Girish Ramakrishnan 59a8b001b7 Fix tests 2023-03-09 19:50:14 +01:00
Girish Ramakrishnan d144d6b273 Update test packages 2023-03-09 18:17:12 +01:00
Girish Ramakrishnan d2f0bb2b44 sftp: ed25519 keys 2023-03-09 11:03:13 +01:00
Girish Ramakrishnan d20958760b rename constant to have RSA in it 2023-03-09 10:36:49 +01:00
Girish Ramakrishnan d1398659a3 Move sftp to new base image 2023-03-09 09:18:26 +01:00
Girish Ramakrishnan 5d425fbce5 Update graphite 2023-03-09 01:55:12 +01:00
Girish Ramakrishnan 2402bf45f4 hold off on mongodb update because it needs avx 2023-03-09 00:44:58 +01:00
Girish Ramakrishnan b9a484f72e Update mongodb 2023-03-08 23:44:21 +01:00
Girish Ramakrishnan 8448d28f6f Implement HSTS preload
This allows browsers to query https directly instead of the initial http redirect

https://hstspreload.org/#opt-in says it should be explicitly opt in
2023-03-06 11:46:05 +01:00
Girish Ramakrishnan 5bbeb1196a add root as reserved name for gogs 2023-03-05 10:52:30 +01:00
Girish Ramakrishnan 9cd3874b57 mysql: set secure_file_priv 2023-03-02 21:20:46 +01:00
Johannes Zellner 2995f5894d Have a fallback preview of the current folder 2023-02-28 17:39:23 +01:00
Johannes Zellner 359396b2c7 Redirect / to /home in the router 2023-02-28 17:11:54 +01:00
Johannes Zellner 4f8f944282 Adjust animation 2023-02-27 00:35:20 +01:00