Commit Graph

81 Commits

Author SHA1 Message Date
9e90dde144 Merge pull request #1158 from AdvanticGmbH/domain_xss
Render domain data table fields only as text
2022-04-11 13:05:43 +03:00
9c62208c2e Updated repository URL 2022-04-11 12:21:34 +03:00
e596de37f4 Render Name, Type, Status, TTL, Data and Edit as text 2022-04-04 14:16:40 +02:00
930932d131 Render domain data table fields only as text 2022-04-04 14:06:31 +02:00
fcb8287f14 Update login.html 2022-02-25 12:59:23 +02:00
10603fbb36 fixed csrf expiration for login page 2022-02-17 18:10:06 +02:00
b9cf7245a5 fixed csrf expiration for login page 2022-02-17 17:02:11 +02:00
0b2ad520b7 History table: relocate HTML for modal window (#1090)
- Store HTML for modal window inside an invisible <div> element instead
  of inside the <button> element's value attribute
- Mark history.detailed_msg as safe as it is already manually run
  through the template engine beforehand and would be broken if escaped
  a second time
2022-01-01 21:20:01 +01:00
302e793665 Add button for admin page in single Domain view (#1076)
* Added button for admin page in domain overview
2021-12-31 00:55:59 +01:00
7808febad8 login.html: don't suggest previous OTP tokens
This change has been tested to work with:
- Chromium 96.0.4664.93
- Firefox 95.0
- Edge 96.0.1054.57
2021-12-17 12:48:11 +01:00
94a923a965 Add 'otp_force' basic setting (#1051)
If the 'otp_force' and 'otp_field_enabled' basic settings are both enabled, automatically enable 2FA for the user after login or signup, if needed, by setting a new OTP secret. Redirect the user to a welcome page for scanning the QR code.

Also show the secret key in ASCII form on the user profile page for easier copying into other applications.
2021-12-17 11:41:51 +01:00
caa48b7fe5 Merge branch 'quotes-fix'
Conflicts:
	powerdnsadmin/routes/admin.py
2021-12-03 14:17:39 +00:00
940551e99e feat: Associate an API Key with accounts (#1044) 2021-12-03 14:12:11 +00:00
6c1dfd2408 Datepicker replace (#1059)
* replaced jquery-ui-datepicker with bootstrap-datepicker

* removed obsolete static files
2021-12-02 11:59:36 +01:00
1332c8d29d History Tab Overhaul & Domain Record Modifications Changelog (#1042)
Co-authored-by: Konstantinos Kouris <85997752+konkourgr@users.noreply.github.com>
Co-authored-by: vmarkop <billy.mark.b.m.10@gmail.com>
Co-authored-by: KostasMparmparousis <mparmparousis.kostas@gmail.com>
Co-authored-by: dimpapac <demispapa@gmail.com>
2021-11-30 11:02:37 +02:00
c7b4aa3434 fix: actually store OIDC logout URL (#988) 2021-11-05 17:28:21 +02:00
0e655c1357 user_profile tpl: set email input type attr to "email" (#1020)
It is then consistent with the email address input elements declared in
admin_edit_account.html, admin_edit_user.html and register.html.
2021-10-30 21:30:26 +02:00
bf83662108 allow users to remove domain (#952) 2021-10-30 21:21:45 +02:00
1f34dbf810 fix for api key (#950) 2021-10-30 21:19:49 +02:00
b7197948c1 Reslove conflicts
Signed-off-by: Khanh Ngo <khanh.ngo@taxfix.de>
2021-10-30 21:19:01 +02:00
ddf2d4788b Reslove conflicts
Signed-off-by: Khanh Ngo <khanh.ngo@taxfix.de>
2021-10-30 21:15:04 +02:00
1ec6b76f89 Remove otp field (#942) 2021-10-30 21:09:04 +02:00
6e04d0419b Provision PDA user privileges based On LDAP Attributes (#980) 2021-08-05 19:37:48 +02:00
d6e64dce8e fix some jinja typos 2021-06-04 15:24:49 +02:00
b069cea8d1 add css to base as well 2021-06-02 09:44:15 +02:00
fd933f8dbc remove unrelated files and changes as best as possible 2021-06-02 09:41:08 +02:00
083a023e57 fix include 2021-06-01 16:41:26 +02:00
c13dd2d835 add 'custom_css' setting to model; check for 'custom_css' in template; create custom css dir in dockerfile 2021-06-01 16:15:31 +02:00
43a6e46e66 add setting to hide otp_token field on login page 2021-05-27 22:51:07 +02:00
bbbcf271fe remove otp token from login page, depending on Setting 2021-05-20 15:21:56 +02:00
98db953820 Allow user role to view history (#890) 2021-03-27 19:33:11 +01:00
46993e08c0 Add punycode (IDN) support (#879) 2021-03-16 19:37:05 +01:00
680e4cf431 Avoid Safari telephone number detection
Using PowerDNS-Admin on an iPad with Safari can cause incorrect identification of some record data as a telephone number. When submitted, the record with the incorrectly identified data causes an error because of the additional markup present on the submitted data. This was noted in particular with the SOA record. 

The proposed change is to add the Safari meta tag to disable format detection:
https://developer.apple.com/library/archive/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html#//apple_ref/doc/uid/TP40008193-SW5
2020-10-14 17:21:59 +02:00
3034630bc0 Merge pull request #761 from ngoduykhanh/record_rollback
Fix #752 - Rollback the removed record if apply operation failed
2020-10-11 13:01:26 +02:00
55ad73d92e Merge pull request #800 from cyso/pr/oidc-account
OIDC User and Account management during login
2020-10-10 14:32:14 +02:00
a679073928 Merge pull request #773 from terbolous/azure-oauth
Add Account creation/permission handling based on Azure oAuth group membership
2020-10-10 14:20:26 +02:00
f3bcf1b834 Merge pull request #763 from RoeiGanor/fix_gravatar
Fix gravatar offline mode
2020-10-10 14:16:57 +02:00
74b89b1b7e Add API Key to the UI 2020-08-08 13:41:18 +00:00
f9f966df75 Allow for configuration of logout url 2020-08-06 15:29:02 +02:00
27f5c89f70 Manage Account membership on oidc login 2020-08-06 15:28:54 +02:00
25db119d02 Add Account creation/permission handling based on Azure oAuth group membership 2020-07-03 08:55:31 +02:00
0f9a5f8652 Fix gravatar offline mode 2020-06-24 11:17:45 +03:00
f3f91d56e2 Adjust html code 2020-06-20 11:08:14 +07:00
84ae753db2 Changed default TTL 2020-06-14 09:13:01 +03:00
73c267848c Merge branch 'master' into url_for_static_assets 2020-05-24 21:16:00 +07:00
a598c52729 Fix base template
current_user is Anonymous when we are not authenticated. Need to check if
email attribute is defined before using it
2020-05-22 17:37:39 +07:00
99f12df748 Add url_for() for static assets 2020-05-20 00:03:36 +02:00
ab7e1eb71b Fix email confirmation template 2020-05-17 16:11:52 +07:00
edb2a354d1 Merge pull request #725 from Monogramm/ui/favicon
fix: Add favicon to fix #724
2020-05-17 13:47:18 +07:00
9f562714f2 fix: Add favicon to fix #724
Signed-off-by: mathieu.brunot <mathieu.brunot@monogramm.io>
2020-05-09 23:56:19 +02:00