1ec6b76f89
Remove otp field ( #942 )
2021-10-30 21:09:04 +02:00
4ce1b71c57
Fix when no records returned by API ( #923 )
...
For some reason when some programs delete a record we get an entry returned with records: []
2021-10-30 21:07:42 +02:00
79457bdc85
Bug domain parse ( #936 )
2021-10-30 21:06:44 +02:00
282c630eb8
dyndns: Respond with HTTP header 'WWW-Authenticate' to unauthed requests
...
The common procedure for HTTP Basic Auth is that a client does /not/
immediately send out credentials via an 'Authorization'-header, but to
wait until the server tells the client to do so - which the server
indicates via the 'WWW-Authenticate'-header.
PowerDNS-Admin (and flask in general), though, abort the whole
communication if no Authorization header was found in the initial
request - resulting in '200 "badauth"'.
While this might work for /some/ HTTP clients - which right away add an
Authorization header crafted from provided credentials (via args or
extracted from given URL), this is /not/ standard and /not/ common.
Hence add the 'WWW-Authenticate'-header for every unauthenticated call
checking for dyndns authorisation.
Note, though, this changes the status code from 200 to 401 in this case,
which - given the explanation why 200 was chosen in the first place -
might cause side effects.
2021-10-20 15:12:17 +00:00
10dc2b0273
bg_domain button for operators and higher
2021-08-13 20:03:06 +03:00
993e02b635
limit user to only create domains for the accounts he belongs to ( #970 )
2021-08-05 19:42:58 +02:00
07c71fb0bf
setting account_user_ids to empty list on GET /account/edit ( #966 )
2021-08-05 19:41:28 +02:00
c4a9498898
respect_bg_domain_updates in routes/api ( #962 )
2021-08-05 19:39:26 +02:00
6e04d0419b
Provision PDA user privileges based On LDAP Attributes ( #980 )
2021-08-05 19:37:48 +02:00
9c00e48f0f
routes/index.py: Make package 'onelogin.saml2.utils' optional
...
The onelogin package is not part of all saml packages for whatever
reason (e.g. Debian) and not easily installable from pypi (requires
CC toolchain).
As the onelogin functionality is already guarded by whether
SAML_ENABLED is set in other places (services/saml.py), also do so
in routes/index.py.
2021-07-23 06:56:09 +00:00
d6e64dce8e
fix some jinja typos
2021-06-04 15:24:49 +02:00
b069cea8d1
add css to base as well
2021-06-02 09:44:15 +02:00
fd933f8dbc
remove unrelated files and changes as best as possible
2021-06-02 09:41:08 +02:00
0505b934a1
remove unrelated files and changes as best as possible
2021-06-02 09:39:39 +02:00
083a023e57
fix include
2021-06-01 16:41:26 +02:00
054e0e6eba
add rule for 'custom_css' setting
2021-06-01 16:24:07 +02:00
c13dd2d835
add 'custom_css' setting to model; check for 'custom_css' in template; create custom css dir in dockerfile
2021-06-01 16:15:31 +02:00
43a6e46e66
add setting to hide otp_token field on login page
2021-05-27 22:51:07 +02:00
36fdb3733f
Merge remote-tracking branch 'origin/master' into remove_otp_field
2021-05-25 15:30:32 +02:00
b197491a86
remove traceback
2021-05-25 12:44:07 +02:00
d23a57da50
handle decode error, output warning
2021-05-25 12:35:53 +02:00
4180882fb7
show traceback
2021-05-21 15:10:17 +02:00
bbbcf271fe
remove otp token from login page, depending on Setting
2021-05-20 15:21:56 +02:00
32983635c6
Delete blank comments. Fix for ngoduykhanh/PowerDNS-Admin#919 ( #920 )
2021-05-07 23:43:44 +02:00
39cddd3b34
SAML improvements for Docker ( #929 )
...
* Fix typo in managing user account membership with SAML assertion
* Support more config options from Docker env.
* Improve support for SAML key and cert from Docker secrets
Co-authored-by: Ian Bobbitt <ibobbitt@globalnoc.iu.edu >
2021-05-07 23:36:55 +02:00
b66b37ecfd
delete history records when a domain is deleted ( #916 )
...
Co-authored-by: Jody <jody.gilbert@edftrading.com >
2021-05-07 22:55:45 +02:00
98db953820
Allow user role to view history ( #890 )
2021-03-27 19:33:11 +01:00
86700f8fd7
upd: improve user api ( #878 )
2021-03-16 19:39:53 +01:00
46993e08c0
Add punycode (IDN) support ( #879 )
2021-03-16 19:37:05 +01:00
4c19f95928
Improve account creation/permission handling based on Azure oAuth group membership ( #877 )
2021-01-31 11:31:56 +01:00
3a4efebf95
enh: display b64 encoded apikey on creation through the API ( #870 )
2021-01-24 09:43:51 +01:00
7f86730909
allow-server-side-sessions ( #855 )
2021-01-24 09:09:53 +01:00
8f6a800836
fix: account API output^ ( #874 )
2021-01-24 09:08:32 +01:00
3cd98251b3
fix: API (apikeys) behaviour does not match swagger definition ( #868 )
2021-01-24 09:06:51 +01:00
54b257768f
feat: Implement apikeys/<id> endpoint from swagger spec. ( #864 )
2021-01-16 20:49:41 +01:00
718b41e3d1
feat: limit zone list for users on servers endpoint ( #862 )
2021-01-16 20:45:02 +01:00
dd0a5f6326
feat: Allow sync domain with basic auth ( #861 )
2021-01-16 20:37:11 +01:00
c3d438842f
fix: user jsonify to set response headers to json ( #863 )
2021-01-16 20:29:40 +01:00
33e7ffb747
fix: Follow PDNS Api return format ( #858 )
2021-01-07 23:26:48 +01:00
2c18e5c88f
fix: User role was not assigned upon creation ( #860 )
2021-01-07 23:07:20 +01:00
c6e0293177
Tweaks to allow user apikey usage with powerdns terraform provider ( #845 )
2020-12-07 22:06:37 +01:00
680e4cf431
Avoid Safari telephone number detection
...
Using PowerDNS-Admin on an iPad with Safari can cause incorrect identification of some record data as a telephone number. When submitted, the record with the incorrectly identified data causes an error because of the additional markup present on the submitted data. This was noted in particular with the SOA record.
The proposed change is to add the Safari meta tag to disable format detection:
https://developer.apple.com/library/archive/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html#//apple_ref/doc/uid/TP40008193-SW5
2020-10-14 17:21:59 +02:00
70b1accaa0
Merge pull request #801 from cyso/pr/sync-accounts
...
Implement account update method
2020-10-12 12:48:22 +02:00
7254a94497
Merge pull request #825 from ngoduykhanh/adjustment
...
Add index on history table
2020-10-11 13:11:09 +02:00
3034630bc0
Merge pull request #761 from ngoduykhanh/record_rollback
...
Fix #752 - Rollback the removed record if apply operation failed
2020-10-11 13:01:26 +02:00
d72709e0f4
Add index on history table
2020-10-11 12:49:28 +02:00
76562f8a46
Fix typo
...
Remove space from oidc_oauth_last_name default value
2020-10-10 21:03:34 +02:00
0dfced4968
Upgrade pip packages
2020-10-10 20:27:09 +02:00
55ad73d92e
Merge pull request #800 from cyso/pr/oidc-account
...
OIDC User and Account management during login
2020-10-10 14:32:14 +02:00
a679073928
Merge pull request #773 from terbolous/azure-oauth
...
Add Account creation/permission handling based on Azure oAuth group membership
2020-10-10 14:20:26 +02:00
