Commit Graph

15244 Commits

Author SHA1 Message Date
Johannes Zellner 22f9ffd119 Fixup many linter errors 2023-03-21 14:46:09 +01:00
Johannes Zellner 0743296bef Add eslint dev dependency for sublime-text lsp linter 2023-03-21 14:40:40 +01:00
Johannes Zellner e9fc355ac5 Move openid provider into its own express server 2023-03-21 14:39:58 +01:00
Johannes Zellner 46c233bad6 oidc: Add clients manage routes 2023-03-21 13:54:40 +01:00
Johannes Zellner e14b0a721a Set ulimit nofile for mysql test container to make it work on arch 2023-03-20 17:39:21 +01:00
Johannes Zellner 8a1cb6b9b3 Support .well-known/openid-configuration directly 2023-03-20 15:48:38 +01:00
Johannes Zellner 98b93537ac Provide custom logout views 2023-03-19 16:01:22 +01:00
Johannes Zellner a832a95a62 oidc: use the username for mapping 2023-03-19 16:01:22 +01:00
Johannes Zellner 260925229a oidc: post logout redirect uris is an array 2023-03-19 16:01:22 +01:00
Johannes Zellner 5465bbb6d7 Remove openid test client 2023-03-19 16:01:22 +01:00
Johannes Zellner 27ff2316b9 oidc: initial logout redirect URI support 2023-03-19 16:01:22 +01:00
Johannes Zellner 39f2308ba1 oidc: Attempt to replace built-in session end 2023-03-19 16:01:22 +01:00
Johannes Zellner cd2fa9478c Specify supported claims 2023-03-19 16:01:22 +01:00
Johannes Zellner 4b7e4731a8 oidc: put clients into the db 2023-03-19 16:01:22 +01:00
Johannes Zellner da77b1ae5d oidc: set route prfix for issues 2023-03-19 16:01:22 +01:00
Johannes Zellner ff697f8d33 oidc routes need settings to be loaded 2023-03-19 16:01:22 +01:00
Johannes Zellner bb5f8b6452 Allow single redirect uris 2023-03-19 16:01:22 +01:00
Johannes Zellner b792fb97d6 oidc: make clients more dynamic 2023-03-19 16:01:22 +01:00
Johannes Zellner cef34bfbb7 oidc: move routes to server.js for visibility 2023-03-19 16:01:22 +01:00
Johannes Zellner 2038a98e61 oidc: remove dead code 2023-03-19 16:01:22 +01:00
Johannes Zellner 51831e4bdf oidc: Some more claims debug 2023-03-19 16:01:22 +01:00
Johannes Zellner 9089616e85 Store oidc data in platformdata/oidc 2023-03-19 16:01:22 +01:00
Johannes Zellner df53cfb14c oidc: implement real profile claims 2023-03-19 16:01:22 +01:00
Johannes Zellner aae4acc419 oidc: Handle login without redirect from backend and set some default
ttls
2023-03-19 16:01:22 +01:00
Johannes Zellner 5e4e292b4d oidc: Remove rpInitiatedLogout again 2023-03-19 16:01:16 +01:00
Johannes Zellner 05a1cc58eb oidc: als add basic style for autorize page 2023-03-19 13:08:06 +01:00
Johannes Zellner 3b9336d3c9 oidc: Initial auth against our userdb is working 2023-03-19 13:08:06 +01:00
Johannes Zellner 57689ffdf4 oidc: apply basic style to login view 2023-03-19 13:08:06 +01:00
Johannes Zellner 36f8bfc229 Add oidc logout hooks 2023-03-19 13:08:06 +01:00
Johannes Zellner d6adbf46e6 Add initial oidc interaction pages 2023-03-19 13:08:06 +01:00
Johannes Zellner 31e900cb9c Add hooks for providing our own login UI 2023-03-19 13:08:06 +01:00
Johannes Zellner bab3de137b Fix typo 2023-03-19 13:08:06 +01:00
Johannes Zellner 4ac70d70f9 oidc: set interaction routes prefix to the same as the main oidc routes 2023-03-19 13:08:06 +01:00
Johannes Zellner 1ea76ebb60 oidc: add initial findAccount and fixup findByUid 2023-03-19 13:08:06 +01:00
Johannes Zellner 47e35d0b06 Support consume api 2023-03-19 13:08:06 +01:00
Johannes Zellner 5fcadcce9c Add initial OpenID connect support
This currently uses a fake json file storage and does not yet verify
credentials
2023-03-19 13:08:06 +01:00
Girish Ramakrishnan 33ad0829ad Add workaround for porkbun rate limit 2023-03-18 16:20:17 +01:00
Girish Ramakrishnan e38341eb85 typo 2023-03-18 10:10:27 +01:00
Girish Ramakrishnan f74e2cbee3 porkbun: cleanup implementation 2023-03-18 09:58:04 +01:00
Girish Ramakrishnan 3616fbb51c dns: add porkbun
domain setup ui
2023-03-16 20:21:39 +01:00
Girish Ramakrishnan 489b598cd6 curl|pipe makes retrying pointless
save to a temporary file so that curl retry logic can work
2023-03-16 12:04:17 +01:00
Girish Ramakrishnan 45a1122889 Revert back infra version to match 7.3
The code is not smart enough to do both infra bump and database major upgrades.
The db upgrade logic relies on the container to be running to export and re-import.
2023-03-15 21:16:08 +01:00
Girish Ramakrishnan abd6ab06de mongodb: fix restart 2023-03-14 11:59:25 +01:00
Girish Ramakrishnan e86a613d86 proxyauth: typo in basic auth validation 2023-03-14 11:35:24 +01:00
Girish Ramakrishnan ef3d23ebd9 Fix error message 2023-03-14 11:35:10 +01:00
Girish Ramakrishnan 53e9eccf72 unify totp check
the totp check is done in several places causing errors like 3552232e99

* ldap (addon)
* accesscontrol (dashboard)
* proxyauth
* directoryserver (exposed ldap)
* externalldap (the connector)

The code also makes externalldap auto-create work now across all the cases where there is a username
2023-03-12 16:01:12 +01:00
Girish Ramakrishnan 8e0d1b61af Make tests run again 2023-03-11 23:41:01 +01:00
Girish Ramakrishnan 3aa040bf01 apps: remove repository 2023-03-11 16:25:39 +01:00
Girish Ramakrishnan d242afd9fc pass debug object 2023-03-10 12:10:40 +01:00
Girish Ramakrishnan 5e606c50a4 docker: better error message when out of disk space 2023-03-10 12:09:23 +01:00