Commit Graph

1696 Commits

Author SHA1 Message Date
ae16e9868a Corrected project name reference mistake in contribution guide. 2023-03-17 17:48:07 -04:00
a2e5c7d5bc Corrected an input type mistake in the bug report and feature request templates.
Corrected URL mistake in the issue template config.yml file.

Updated project README policy reference URLs to use master branch.
2023-03-17 17:29:45 -04:00
fc6d8505b7 Corrected an input type mistake in the bug report and feature request templates.
Corrected URL mistake in the issue template config.yml file.

Updated project README policy reference URLs to use master branch.
2023-03-17 17:29:05 -04:00
31c8577409 Updated project README to include reference to new security policy. 2023-03-17 17:22:08 -04:00
6681d0f5b0 Relocated new security policy to the project root to meet GitHub feature expectations. 2023-03-17 17:22:08 -04:00
0f7c2da814 Updated project README to include references to the new security policy.
Moved the project's code of conduct out of the contributions guide and into the appropriate policy file.

Updated the contribution guide to follow the NetBox project format.

Added various issue templates based on the NetBox project formats but updated for PDA.

Added additional GitHub workflows to handle stale and closed issue and PR management.

Removed legacy stale issue workflow that was not in use.
2023-03-17 17:22:08 -04:00
23d6dd1fde Updated project README to include reference to new security policy. 2023-03-17 16:48:11 -04:00
4b3759d140 Relocated new security policy to the project root to meet GitHub feature expectations. 2023-03-17 16:46:34 -04:00
5c6cf77996 Updated project README to include references to the new security policy.
Moved the project's code of conduct out of the contributions guide and into the appropriate policy file.

Updated the contribution guide to follow the NetBox project format.

Added various issue templates based on the NetBox project formats but updated for PDA.

Added additional GitHub workflows to handle stale and closed issue and PR management.

Removed legacy stale issue workflow that was not in use.
2023-03-17 16:42:05 -04:00
a25dda8ac1 Made some formatting tweaks to the authentication settings view to unify section header styling.
Corrected improper markup introduced by recent PR for password complexity requirements.
2023-03-17 15:50:08 -04:00
4a6d31cfa4 Merge pull request #1457 from nkukard/nkupdates-password-policy
Implement password strength & complexity checking
2023-03-17 15:35:10 -04:00
78f0332a2d Merge branch 'dev' into nkupdates-password-policy 2023-03-17 15:31:10 -04:00
4fa8bf2556 Merge pull request #1454 from nkukard/nkupdates-fix-basic-auth-exception2
fix(auth:basic): Basic auth exception handling improvement
2023-03-17 15:28:20 -04:00
b23523db4b Merge pull request #1441 from subbink/1412-rename-domain-to-zone
Finish Updating Zone Nomenclature From Domain
2023-03-17 15:24:26 -04:00
92be9567de Merge pull request #1434 from subbink/improve-psql-docs
PostgreSQL Support Improvement
2023-03-17 15:17:41 -04:00
64017195da feat(authentication): check password policy during user profile password change 2023-03-17 03:45:37 +00:00
fc14e9189d feat(authentication): check password policy during registration of new users 2023-03-17 03:45:09 +00:00
1cea4b7ce3 feat(authentication): added password policy checker function 2023-03-17 03:44:08 +00:00
bb6d2d0497 feat(authentication): added admin settings for password policies 2023-03-17 03:42:45 +00:00
7489e2c9a2 Merge branch '1412-rename-domain-to-zone' of subbink/PowerDNS-Admin into 1412-rename-domain-to-zone 2023-03-16 18:41:19 +01:00
a9e18ec594 Make sure old history items will also be shown 2023-03-16 18:36:47 +01:00
a2d1179fd2 Change domain(s) to zone(s) in the python code and docs 2023-03-16 17:02:23 +01:00
34902f6cf9 Change domain(s) to zone(s) in the templates 2023-03-16 17:02:23 +01:00
17e3a8f942 fix(auth:basic): Basic auth exception handling improvement
Currently passing an invalid Basic auth header (random string base64 encoded) would result in an exception being raised due to a username, password = auth_header.split().

Similary passing a `Digest` authentication type would result in an exception as there is no :.

Thirdly passing invalid base64 encoded UTF-8 code sequences would result in exceptions as this issue (#1424).

I added code to check explicitly that we are doing basic authentication then by checking the number of entries returned by the split.

I also added exception handling for invalid UTF-8 code sequence exceptions.

Tested with a fuzzer.

Tested with valid and invalid credentials.

This fixes #1424.
2023-03-15 01:09:46 +00:00
73447d396a Merge pull request #1453 from nkukard/nkupdates-fix-basic-auth-exception
Basic Auth Exception Handling Improvement
2023-03-14 19:37:37 -04:00
24f94abc32 fix(auth:basic): improved API basic auth handling to avoid exceptions
Currently passing an invalid Basic auth header (random string base64 encoded) would result in an
exception being raised due to a `username, password = auth_header.split()`.

I refactored the code in this decorator by checking explicitly that we are doing basic authentication
then by checking the number of entries returned by the split.

I also added exception handling for invalid UTF-8 code sequences.

Tested with a fuzzer.

Tested with valid and invalid credentials.

This fixes #1447.
2023-03-14 23:19:40 +00:00
57b4457add Merge pull request #1452 from nkukard/nkupdates-migrations-fix
Fix user confirmed column migration issue
2023-03-14 17:22:34 -04:00
61e607fb3f fix(db:migrate): fix migration user 'confirmed' column migration
This change fixes the migration on the `user` table, `confirmed` column to be compatible with PostgreSQL and MySQL databases.

Fixes #635 which introduced a breaking change for MySQL databases and resolves #1446.

```
Tested on:
- PostgreSQL:14 - WORKING
- PostgreSQL:15 - WORKING
- MariaDB:10.11 - WORKING
- MariaDB:10.10 - WORKING
- MariaDB:10.9  - WORKING
- MariaDB:10.8  - WORKING
- MariaDB:10.7  - WORKING
- MariaDB:10.6  - WORKING
- MariaDB:10.5  - WORKING
- MariaDB:10.3  - WORKING
```
2023-03-14 21:16:50 +00:00
4751ebed3e Merge pull request #1451 from nkukard/nkupdates-lxml-fix
Upgrade lxml & python3-saml dependencies with workaround
2023-03-14 17:16:30 -04:00
7e2fa1bfaa fix: fixes Python 3.11 incompatibility using ancient lxml binary PyPI
Fixes Python 3.11 incompatibility using ancient lxml binary PyPI built against old libxml2.

This fixes #1442 and closes #1433.

The issue with python3-saml not working is because the binary lxml wheel is built against a different version of libxml2.

``--no-binary lxml`` can be used to fix this and python3-saml will work.

for references check these:
- https://github.com/onelogin/python3-saml/issues/292
- https://bugs.launchpad.net/lxml/+bug/1960668
- https://github.com/open-formulieren/open-forms/pull/2247

```
Tested on:
 - ubuntu:23.04 - WORKING
 - ubuntu:22.10 - WORKING
 - ubuntu:22.04 - WORKING
 - ubuntu:20.04 - WORKING
 - ubuntu:18.04 - NOT WORKING - pip usage error with -r requirements.txt
 - debian:10    - WORKING
 - debian:11    - WORKING
 - alpine:edge  - WORKING
 - alpine:3.17  - WORKING
 - alpine:3.16  - WORKING
 - alpine:3.15  - WORKING
 - alpine:3.14  - WORKING
 - rockylinux:9 - WORKING
 - rockylinux:8 - NOT WORKING - pip usage error with -r requirements.txt
 - almalinux:9  - WORKING
 - almalinux:8  - NOT WORKING - pip usage error with -r requirements.txt
 - fedora:36    - WORKING
 - fedora:37    - WORKING
 - fedora:38    - WORKING
 - fedora:39    - WORKING
```
2023-03-14 21:12:06 +00:00
4420621cfe Merge pull request #1444 from subbink/1237-otp-with-site-name
Make the OTP label the same as the site_name #1237
2023-03-13 19:19:28 -04:00
6eef5eb59c Make the OTP label the same as the site_name #1237 2023-03-13 18:54:49 +01:00
a2ef456ad7 Change domain(s) to zone(s) in the python code and docs 2023-03-12 20:44:56 +01:00
3e9e73fb3a Change domain(s) to zone(s) in the templates 2023-03-12 20:44:56 +01:00
6a5bc8adeb Merge pull request #1440 from benshalev849/custom_current_user
Added custom header to be used in the created_by column.
2023-03-12 11:39:33 -04:00
6a402969ec Merge branch 'custom_current_user' of https://github.com/benshalev849/PowerDNS-Admin into custom_current_user 2023-03-12 15:33:15 +00:00
695d746295 Changed basic_settings.md path 2023-03-12 15:32:32 +00:00
bd30c73ca4 Merge branch 'dev' into custom_current_user 2023-03-12 17:23:44 +02:00
0ac7a5a453 Added some explanation about some of the 'basic' settings in the admin 2023-03-12 15:00:32 +00:00
84cfd165b4 Re-arranged side navigation to include the "Global Search" feature regardless of user role as the global search feature is now accessible to all users.
Also moved the "Activity" feature link higher in the menu to remove duplicate code from the navigation code base.
2023-03-12 10:27:04 -04:00
ee68b18e27 Added custom header in created_by segment option 2023-03-12 13:36:30 +00:00
f09d37ae42 Merge pull request #1436 from PowerDNS-Admin/1435-feature-add-oauth-setting-for-server-metadata-url
Feature: Add OAuth Setting for Server Metadata URL
2023-03-12 09:20:47 -04:00
1afe9b4908 Finished adding new OAuth Server Metadata URL setting to Google, GitHub, and Microsoft OAuth service configuration features. 2023-03-12 09:13:54 -04:00
c61489adfc Improve things for using PostgreSQL 2023-03-12 13:11:20 +01:00
7ce1f09522 Merge pull request #1432 from PowerDNS-Admin/1431-feature-add-oauth-setting-for-jwks-url
Feature: Added new JWKS URL setting for each OAuth provider
2023-03-11 14:50:23 -05:00
369188e80e Disabled MegaLinter workflow for all branches currently. 2023-03-11 14:50:02 -05:00
fd30e3ff49 Added new JWKS URL setting for each OAuth provider and updated the associated authorization service to use the setting during the initialization of the authlib. 2023-03-11 14:46:58 -05:00
b8ab0d3478 Updated the project README with a refreshed screenshot of the dashboard. 2023-03-11 10:21:36 -05:00
16de70008c Updated project README.md file to include contributing guidelines reference. 2023-03-11 09:32:55 -05:00
22370d0a57 Added a CONTRIBUTING.md documentation file to the project's documentation. 2023-03-11 09:30:51 -05:00