Commit Graph

502 Commits

Author SHA1 Message Date
Bubka
f2c9f8aaa8 Fix missing admin permissions on WebAuthn login - Closes #326 2024-03-19 18:13:35 +01:00
Bubka
704166cfd6 Fix php doc 2024-03-15 08:02:36 +01:00
Bubka
b56ee8b04f Fix call on null object 2024-03-14 15:09:34 +01:00
Bubka
86e7601328 Replace PUT by PATCH to promote admin permissions 2024-03-14 15:09:05 +01:00
Bubka
e956959f69 Fix ownership verification - Closes #305, closes #320 2024-03-14 14:49:49 +01:00
Bubka
e6d201d882 Add a keepSsoRegistrationEnabled admin setting - Closes #317 2024-03-08 15:07:44 +01:00
Bubka
edd810cafd Add a Clear cache feature - Closes #316 2024-03-07 14:13:02 +01:00
Bubka
9519d5838c Fix inactivity detection followed by logout - Fixes #267 2024-03-06 08:40:29 +01:00
Bubka
3eed7c8f5b Add an email registration policy feature - Closes #250 2024-02-29 14:03:30 +01:00
Bubka
88d37394d3 Add a test email feature to the admin panel - Closes #307 2024-02-26 15:06:26 +01:00
Bubka
04078b09aa Add a listener to automatically log notification sends 2024-02-26 15:05:00 +01:00
Bubka
21fa77f348 Move debug information to the admin section - Closes #303 2024-02-23 16:42:42 +01:00
Bubka
a5b722c560 Change user logs format & Remove Updated On information 2024-02-23 16:42:42 +01:00
Bubka
96f883d19a Add User management features to back-end 2024-02-23 16:39:32 +01:00
Bubka
37e4711071 Refactor user deletion logic in a User observer 2024-02-23 16:39:32 +01:00
Bubka
fab67097bc Update logged message 2024-02-23 16:39:32 +01:00
Bubka
db3a732b15 Add a User policy to control authorization on User model 2024-02-23 16:39:32 +01:00
Bubka
3b156df8a2 Fix the useWebauthnOnly preference not being saved at webauthn reset 2024-02-23 16:39:32 +01:00
Bubka
6fe00585e5 Target db tables using config helper rather than hard coded strings 2024-02-23 16:39:32 +01:00
Bubka
8b397750e8 Control & Promote administrator status via a method rather than a prop 2024-02-23 16:39:32 +01:00
Bubka
f2d4c43239 Fix reset emails not being rendered - Fixes #298 2024-02-17 22:10:02 +01:00
Bubka
f4edbcd044 Set missing parameters to null to prevent error at import - Fixes #277 2024-01-17 08:33:03 +01:00
Bubka
ecd905c36c Apply Pint fixes 2023-12-20 16:55:58 +01:00
Bubka
c5d173f45c Fix user registration via SSO with existing email and name 2023-12-14 15:39:14 +01:00
Bubka
36b4cd008a Fix access modifier to match the abstract class declaration 2023-12-14 11:34:14 +01:00
Bubka
e503826012 Add the ability to set a proxy for outgoing requests - Closes #252 2023-12-13 17:15:26 +01:00
Bubka
15c31c3341 Soften 2FAs migrations detection by ignoring schema version - Fixes #253 2023-12-11 14:10:51 +01:00
Bubka
9ff35195f0 Complete SSO (user model, error cases, tests, views) & Add github provider 2023-12-09 17:22:24 +01:00
Bubka
a407f4742e Merge branch 'feature/openid-support' of https://github.com/indykoning/2FAuth into indykoning-feature/openid-support 2023-12-06 09:27:20 +01:00
Bubka
4685e23fdb Set the new landing view for Vue 3 2023-12-05 14:41:57 +01:00
Bubka
a8eea1037a Allow letters with diacritic marks in Group name - Closes #241 2023-12-01 18:26:56 +01:00
Bubka
ee02fb5d92 Change HTTP code returned for routes rejected in reverse proxy setup 2023-11-23 12:56:09 +01:00
Bubka
9ae52ae78f Replace the draggable component by the vueuse one 2023-11-21 13:45:52 +01:00
Bubka
9d72525b38 Make the back-end returns the user email on login/register 2023-11-21 13:45:48 +01:00
Bubka
7efc20e74f Set up the Register view (without webauthn registration) 2023-11-21 13:45:48 +01:00
Bubka
0435cecd53 Adapt back-end to the new front-end auth management 2023-11-21 13:45:47 +01:00
Bubka
11d9da51d4 Set a dedicated blade landing view 2023-11-21 13:45:46 +01:00
indy koning
160f55fa6b Add support for an openid provider 2023-11-20 23:25:36 +01:00
Bubka
bd1d3bcf71 Add 2fauth:fix-orphan command 2023-09-20 15:43:50 +02:00
Bubka
d28b8e7e11 Update 2fauth:install command description 2023-09-20 15:25:19 +02:00
Bubka
78d52e2cdd Hide some 2fauth artisan commands 2023-09-20 14:55:28 +02:00
Bubka
08c54328ca Enhance output message of 2fauth:check-db-connection command 2023-09-20 14:54:26 +02:00
Bubka
7530a17e12 Set email length validation to max SQL string length - Fixes #214 2023-08-04 09:48:47 +02:00
Bubka
6c78be8d0b Fix checkForUpdate setting not being displayed - Closes #213 2023-08-01 17:26:56 +02:00
Bubka
44c04ebd25 Complete Laravel 10 upgrade 2023-08-01 16:33:55 +02:00
Bubka
1ad1b62caf Refactor Rules to Laravel 10 format 2023-08-01 15:10:58 +02:00
Bubka
fe5d807170 Upgrade to Laravel 10 & phpunit 10 2023-08-01 11:26:58 +02:00
Bubka
48bdf69d4e Add support for MS Corporate URIs - fixes #134, fixes #143, fixes #147 2023-07-06 17:10:19 +02:00
Bubka
a51f0bb2d9 Merge branch 'hotfix-sql-xss-injection' into dev 2023-06-30 17:01:04 +02:00
Bubka
9646afd2cc Change GroupStore request validation 2023-06-30 15:19:47 +02:00
Bubka
bac39882c3 Fix various possible XSS attacks 2023-06-30 14:50:57 +02:00
Bubka
3d59b8b3c9 Fix possible sql injection in whereRaw query 2023-06-28 21:11:13 +02:00
Bubka
1352634b0f Fallback Account to Issuer during Aegis import to prevent failure 2023-06-07 17:49:12 +02:00
Bubka
d2fc93d78f Let the Import feature accept migrations with missing data 2023-06-07 17:47:14 +02:00
Bubka
d902e3ecae Fix getOfficialIcons being ignored & Add relevant tests - Fix #194 2023-06-07 16:24:06 +02:00
Bubka
b8c810f885 Generate and Show all OTPs directly on the main view - Complete #153 2023-04-28 17:03:06 +02:00
Bubka
4f81b30fcd Add admin setting to disable user registration - Complete #170 2023-04-28 16:52:04 +02:00
Bubka
5de9a2df27 Add artisan ':install' command 2023-04-28 15:47:52 +02:00
Bubka
a584c21670 Set user to orphan 2FAs/groups when behind auth proxy - Fix #176 2023-04-19 08:38:48 +02:00
Bubka
e4c9e87522 Fix icon fetched twice or forgotten during import 2023-03-29 17:43:41 +02:00
Bubka
3e012ae4e2 Update phpdocs 2023-03-26 23:04:06 +02:00
Bubka
ac6c715e9a Apply Laravel Pint fixes 2023-03-26 17:13:32 +02:00
Bubka
ad8db3ae3b Drop PHP 8.0 support & Fix unique validation rules 2023-03-25 12:26:01 +01:00
Bubka
fe5dce8d38 Log when user is set as admin during registration 2023-03-24 17:58:29 +01:00
Bubka
dae0a93ce8 Fix duplicate detection being made on all twofaccounts in db 2023-03-22 15:39:51 +01:00
Bubka
9c5f18bb46 Enhance test coverage 2023-03-18 17:33:43 +01:00
Bubka
b5f8322ea3 Remove unused seeders & Fix phpdocs 2023-03-17 17:17:04 +01:00
Bubka
2eaaf2bea8 Enhance logging during Release radar scan 2023-03-17 13:37:56 +01:00
Bubka
140cc70cef Make Login & API throttling editable using the .env file - Close #163 2023-03-17 11:08:03 +01:00
Bubka
9913560787 Enhance logging during authentication (#163) 2023-03-16 15:58:00 +01:00
Bubka
960d1ca5f9 Fix missing login throttling on WebAuthn login controller 2023-03-16 13:23:58 +01:00
Bubka
82717077be Remove invalid calls to the Settings facade 2023-03-15 16:26:32 +01:00
Bubka
4d8180a8c1 Replace the useWebauthnAsDefault option by a client side form toggle 2023-03-15 14:44:51 +01:00
Bubka
f359a1ade3 Fix user preferences not being applied correctly after sign-in 2023-03-15 11:46:37 +01:00
Bubka
5ced8cbf0e Make the User Name unique 2023-03-13 14:53:42 +01:00
Bubka
dc71d87f61 Make the RemoteUserProvider use a db persisted user & Update tests 2023-03-12 17:47:40 +01:00
Bubka
dce3d16c37 Apply Laravel Pint fixes 2023-03-10 22:59:46 +01:00
Bubka
4753401827 Prevent last admin deletion & Update the Delete user feature 2023-03-10 16:02:56 +01:00
Bubka
fd6941d300 Update the About view and its controller to split user & admin vars 2023-03-10 16:01:23 +01:00
Bubka
6b6ad12bb7 Add an Admin scope to retrieve Admin users easily 2023-03-10 15:58:05 +01:00
Bubka
a2e0c52189 Add a Unique rule for user email validation in update/store requests 2023-03-10 15:57:34 +01:00
Bubka
0a8807d87a Update & Complete API controllers tests and Unit tests 2023-03-08 17:49:52 +01:00
Bubka
823acde49d Fix the TwoFAccount Export feature & add related tests 2023-03-08 09:41:57 +01:00
Bubka
af4400a74d Update Authorizations, Logs and Tests for TwoFAccounts management 2023-03-08 09:41:18 +01:00
Bubka
b07150a14a Refactor groups service and controller again 2023-03-07 17:45:40 +01:00
Bubka
79bc9020b2 Add ide-helper files & Update phpdocs 2023-03-02 15:24:57 +01:00
Bubka
4006deb1e0 Fix the user provider not honoring the useWebauthnOnly option 2023-03-02 15:07:46 +01:00
Bubka
47be24b60f Fix calls to Setting instead of User preferences 2023-03-02 14:34:05 +01:00
Bubka
c5daeb5376 Refactor groups service and controller for better authorization handling 2023-03-02 14:32:53 +01:00
Bubka
9133436020 Update logs messages 2023-02-27 00:33:42 +01:00
Bubka
27717d05b8 Move Authorization checks to Service for Groups & Update tests 2023-02-27 00:32:49 +01:00
Bubka
fe9eb19825 Make the reset-testing command create multi-user test data 2023-02-25 22:29:55 +01:00
Bubka
1788887f85 Fix twofaccounts count missing in groups listing & Active group saving 2023-02-25 22:24:44 +01:00
Bubka
c8c1530b51 Apply Laravel Pint fixes 2023-02-25 22:23:38 +01:00
Bubka
e0f0afc505 Bind Groups to Users & Add relevant authorizations with policies 2023-02-23 16:59:16 +01:00
Bubka
3c77503fb1 Bind TwoFAccounts to Users & Add relevant authorizations with policies 2023-02-23 10:53:58 +01:00
Bubka
ed3a17a4fb Add IDs to logs to identify the user concerned by the logged event 2023-02-21 14:09:36 +01:00
Bubka
5c83e17752 Let the WebAuthn form log in any user 2023-02-21 09:29:05 +01:00
Bubka
90f322f3b1 Set the first user to be an admin 2023-02-20 17:12:24 +01:00
Bubka
3c3d35bff5 Enable creation of multiple users 2023-02-20 17:09:59 +01:00