169 Commits

Author	SHA1	Message	Date
Bubka	6ef67fbc64	Fix #82 - Add a proxy logout URL and skip auto lock when it is not set	2022-05-16 23:51:33 +02:00
Bubka	070c6a2486	Fix #73 - CSRF token mismatch	2022-05-14 13:45:12 +02:00
Bubka	233c61d659	Clean logout mixin and session middleware	2022-05-13 16:44:01 +02:00
Bubka	5e0ea50e76	Restore Demo flags	2022-05-10 08:57:45 +02:00
Bubka	7f2806e7d9	Fix test error on kick-out inactive user	2022-05-10 00:59:07 +02:00
Bubka	ebdca6bb42	Force logout of inactive users	2022-05-09 18:39:06 +02:00
Bubka	bf495f9019	Add trusted proxies as an env var	2022-04-14 11:34:40 +02:00
Bubka	ee22e24cf1	Fix and complete tests	2022-03-31 11:24:02 +02:00
Bubka	5eee3de134	Refactor routes rejection using middlewares	2022-03-31 11:24:02 +02:00
Bubka	a786efc6e8	Apply Demo restrictions on more routes	2022-03-31 11:24:01 +02:00
Bubka	cdfda1591b	Add possibility to delete the registered user and reset 2FAuth data	2022-03-31 11:24:01 +02:00
Bubka	dbb17b3f12	Remove useless routeMiddlewares	2022-03-31 11:24:01 +02:00
Bubka	9b96c5fd70	Code cleaning	2022-03-31 11:24:01 +02:00
Bubka	725c012042	Fix and complete reverse-proxy support & Adjust front-end views	2022-03-31 11:24:01 +02:00
Bubka	911e18c9c4	Add reverse-proxy guard to support authentication proxy	2022-03-31 11:24:01 +02:00
Bubka	f3c6b9da5b	Add WebAuthn authentication	2022-03-31 11:24:01 +02:00
Bubka	9f574feada	Add support of the Accept_language header for UI localization	2022-03-31 11:24:01 +02:00
Bubka	20856d62c6	Upgrade to Laravel 8	2022-03-31 11:24:01 +02:00
Bubka	65da59db64	Drop appstract/laravel-options package	2022-03-31 11:24:01 +02:00
Bubka	4ee3557cc1	Refactor login FormRequest and email case sensitive validation rule	2022-03-31 11:24:01 +02:00
Bubka	eea7cec043	Fix inactivity middleware trying to logout stateless request	2022-03-31 11:24:01 +02:00
Bubka	0383f07ad7	Add versioning to Laravel routes	2022-03-31 11:24:01 +02:00
Bubka	9ca9fcc9ef	Reorganize files to prepare API versioning	2022-03-31 11:24:01 +02:00
Bubka	affd4bdf8d	Enable CORS	2022-03-31 11:24:01 +02:00
Bubka	8318f0f7a6	Disable inactivity tracking for user authenticated against bearer token	2022-03-31 11:24:01 +02:00
Bubka	d6306e5dd0	Use FreshApiToken instead of Personal access token for front-end auth	2022-03-31 11:24:01 +02:00
Bubka	5db549fe5e	Add logs	2022-03-31 11:24:01 +02:00
Bubka	c7b43de835	Replace DbProtection class by an Encryption service	2022-03-31 11:24:01 +02:00
Bubka	2cb4578109	Move options to config/2fauth	2022-03-31 11:24:01 +02:00
Bubka	7bef68e731	Fix TwoFAccount update validation rules again	2022-03-31 11:24:01 +02:00
Bubka	8eae21e4da	Fix TwoFAccount controller update method not returning an API resource	2022-03-31 11:24:01 +02:00
Bubka	1d503ca313	Fix TwoFAccount update validation rules	2022-03-31 11:24:01 +02:00
Bubka	d329b82a30	Fix comma-separated regex rule for ids	2022-03-31 11:24:01 +02:00
Bubka	c27bef1819	Fix change password validation rule not checking for confirmation	2022-03-31 11:24:01 +02:00
Bubka	b79570bcd9	Fix regex validation rule for TwoFAccounts batch delete	2022-03-31 11:24:01 +02:00
Bubka	361ee38cf2	Change Settings attributes and routes	2022-03-31 11:24:01 +02:00
Bubka	8dc5e7d6e9	Fix Group resource overriding TwoFAccounts count	2022-03-31 11:24:01 +02:00
Bubka	a5514ba06b	Refactor Auth controllers : thicker, with Form requests & API resource	2022-03-31 11:24:01 +02:00
Bubka	1a51cf967a	Remove useless overrides since json is the default response format	2022-03-31 11:24:01 +02:00
Bubka	77cf15cf5e	Move isDemoApp to a new 2FAuth config file	2022-03-31 11:24:01 +02:00
Bubka	3aef29717f	Clean unused namespaces	2022-03-31 11:24:01 +02:00
Bubka	10fc144246	Refactor Options to a Setting service bound with the service container	2022-03-31 11:24:01 +02:00
Bubka	afaa1a0a7a	Update phpdocs	2022-03-31 11:24:01 +02:00
Bubka	037ebaa8ba	Add groups accounts fetching with dedicated route	2022-03-31 11:24:01 +02:00
Bubka	6761b9e40b	Set controllers to use Group service & API resources	2022-03-31 11:24:01 +02:00
Bubka	c7e273a580	Add Form Requests for Groups validation	2022-03-31 11:24:01 +02:00
Bubka	1091b95e49	Set mass DELETE according to REST (no request body) for twofaccounts	2022-03-31 11:24:00 +02:00
Bubka	5959b692de	Change order saving endpoint and remove position property	2022-03-31 11:24:00 +02:00
Bubka	59a63f5a2a	Move TwoFAccounts order saving to business service	2022-03-31 11:24:00 +02:00
Bubka	898ba1629e	Make some cleaning	2022-03-31 11:24:00 +02:00