Matt Scott
78f0332a2d
Merge branch 'dev' into nkupdates-password-policy
2023-03-17 15:31:10 -04:00
Matt Scott
4fa8bf2556
Merge pull request #1454 from nkukard/nkupdates-fix-basic-auth-exception2
...
fix(auth:basic): Basic auth exception handling improvement
2023-03-17 15:28:20 -04:00
Nigel Kukard
64017195da
feat(authentication): check password policy during user profile password change
2023-03-17 03:45:37 +00:00
Nigel Kukard
fc14e9189d
feat(authentication): check password policy during registration of new users
2023-03-17 03:45:09 +00:00
Nigel Kukard
1cea4b7ce3
feat(authentication): added password policy checker function
2023-03-17 03:44:08 +00:00
Nigel Kukard
bb6d2d0497
feat(authentication): added admin settings for password policies
2023-03-17 03:42:45 +00:00
Stefan Ubbink
a9e18ec594
Make sure old history items will also be shown
2023-03-16 18:36:47 +01:00
Stefan Ubbink
a2d1179fd2
Change domain(s) to zone(s) in the python code and docs
2023-03-16 17:02:23 +01:00
Nigel Kukard
17e3a8f942
fix(auth:basic): Basic auth exception handling improvement
...
Currently passing an invalid Basic auth header (random string base64 encoded) would result in an exception being raised due to a username, password = auth_header.split().
Similary passing a `Digest` authentication type would result in an exception as there is no :.
Thirdly passing invalid base64 encoded UTF-8 code sequences would result in exceptions as this issue (#1424 ).
I added code to check explicitly that we are doing basic authentication then by checking the number of entries returned by the split.
I also added exception handling for invalid UTF-8 code sequence exceptions.
Tested with a fuzzer.
Tested with valid and invalid credentials.
This fixes #1424 .
2023-03-15 01:09:46 +00:00
benshalev849
bd30c73ca4
Merge branch 'dev' into custom_current_user
2023-03-12 17:23:44 +02:00
Your Name
ee68b18e27
Added custom header in created_by segment option
2023-03-12 13:36:30 +00:00
Matt Scott
1afe9b4908
Finished adding new OAuth Server Metadata URL setting to Google, GitHub, and Microsoft OAuth service configuration features.
2023-03-12 09:13:54 -04:00
Matt Scott
fd30e3ff49
Added new JWKS URL setting for each OAuth provider and updated the associated authorization service to use the setting during the initialization of the authlib.
2023-03-11 14:46:58 -05:00
Matt Scott
26f3f79388
Corrected unauthorized side navigation change regarding the placement of the "Global Search" feature.
...
Removed the statistics and recent activity / history data display from the dashboard view.
2023-03-10 16:23:33 -05:00
Matt Scott
4933351ac1
Revert "Revert "Clean up dashboard zone tabs""
...
This reverts commit 5f2fc514df
.
2023-03-06 08:30:00 -05:00
Matt Scott
5f2fc514df
Revert "Clean up dashboard zone tabs"
...
This reverts commit fc39cc40ee
.
2023-03-04 11:27:44 -05:00
Matt Scott
9003b3f6c8
Merge pull request #1422 from corubba/feature/dashboard-tab-cleanup
...
Clean up dashboard zone tabs
2023-03-04 11:03:57 -05:00
Matt Scott
840076dae3
Merge pull request #1423 from corubba/feature/history-diff
...
Diff-ify changelog view for zone changes
2023-03-04 10:59:44 -05:00
Matt Scott
f4f1f31575
Merge pull request #1378 from raunz/global_search_for_all_users
...
Global Search available for all users
2023-03-04 10:54:49 -05:00
Matt Scott
062cb032c5
Merge pull request #1379 from raunz/dashboard_improvements
...
Fix dashboard MySQL performance with large history for standard users
2023-03-04 10:54:12 -05:00
corubba
fc39cc40ee
Clean up dashboard zone tabs
...
* Rename `customBoxes` to be more descriptive and follow CamelCase name convention for classes
* Change the tab info from a tuple to a named tuple
* Change all access to the tab info tuple from index to (new) property name
* Rename/Relabel the tabs
* Add docstrings
* Simplify the domain filter logic
* Simplify/Unify the tab html template
2023-03-03 14:34:13 +01:00
corubba
8a40d21ea4
Diff-ify changelog view for zone changes
...
Improve and document the diff-computation and presentation, so you can
easier see what changed.
2023-03-03 13:22:29 +01:00
Rauno Tuul
68fe7c0e56
Standard user domain records list performance loop improvement
2023-03-01 18:43:47 +02:00
Rauno Tuul
ec687b13a5
Dashboard history query performance related change to nested subquery (allowed domains for user).
2023-03-01 11:42:21 +02:00
Rauno Tuul
dc69f00094
Fix dashboard MySQL performance with large history table and standard user privileges.
2023-03-01 11:29:17 +02:00
Rauno Tuul
3688add76a
Global Search available for all users. Apply allowed domain filter for standard users search result.
2023-03-01 11:12:42 +02:00
Ymage
63db17ec21
Add missing OIDC env vars
...
Set SAML_ENABLED default to false
2023-02-23 22:13:19 +01:00
AdvanticGmbH
5ad384bfe9
Add support for oidc_oauth_metadata_url configuration option
...
This commit adds support for the `oidc_oauth_metadata_url` configuration
option. This option specifies the URL of the OIDC server's
metadata endpoint, which contains information about the OIDC server's
endpoints, supported scopes, and other configuration details. By using this
option, we can ensure compatibility with different OIDC servers and reduce
the risk of errors due to manual endpoint configuration.
2023-02-23 09:21:01 +01:00
Matt Scott
bd94c97486
Merge branch 'master' of github.com:PowerDNS-Admin/PowerDNS-Admin into 1391-feature-mobile-first-responsive-ui-design
2023-02-20 10:45:20 -05:00
Rauno
7635686c43
Merge branch 'master' into historyfix
2023-02-20 10:32:52 +02:00
Matt Scott
14e534468a
Working on first-round changes for the global search feature.
2023-02-19 15:54:11 -05:00
Matt Scott
65bfc53acb
Split the server statistics and configuration feature into separate pages.
2023-02-19 15:04:30 -05:00
Matt Scott
516bc52c2f
Revert "Revert "Merge pull request #1371 from AgentTNT/AdminLTE-Upgrade""
...
This reverts commit e2ad3e2001
.
2023-02-18 11:04:14 -05:00
Matt Scott
e2ad3e2001
Revert "Merge pull request #1371 from AgentTNT/AdminLTE-Upgrade"
...
This reverts commit 929cb6302d
, reversing
changes made to 0418edddd9
.
2023-02-18 09:04:37 -05:00
Matt Scott
2ff01fbfe9
Merge branch 'master' into AdminLTE-Upgrade
2023-02-17 18:17:32 -05:00
Tyler Todd
d0961ca5e7
Fix user auth history modal and provide more info
2023-02-17 22:47:23 +00:00
Matt Scott
145358113d
Merge pull request #1380 from raunz/preserve_history
...
Preserve domain records history after domain deletion
2023-02-17 13:30:02 -05:00
Matt Scott
c27bf53445
Merge pull request #1381 from raunz/perf_tuning
...
Domain records list performance improvement - removing Setting.get query from loop
2023-02-17 13:28:35 -05:00
Matt Scott
2a3ffe8481
Merge pull request #1339 from ymage/bugfix_tests
...
Improve bugfix tests
2023-02-17 12:19:35 -05:00
Matt Scott
f1b6bef1ab
Merge pull request #1248 from unilogicbv/routes_index_otp_force_oauth
...
routes/index.py: otp_force shouldn't apply to OAuth
2023-02-17 12:14:15 -05:00
Matt Scott
ba14d52c8d
Merge pull request #1231 from AdvanticGmbH/assoc_domain_list
...
Allow to manage associated domains under account edit
2023-02-17 12:04:16 -05:00
Tyler Todd
48f80b37ed
potential regex code fix for email validation
2023-02-13 15:38:33 +00:00
Rauno Tuul
642fb1605d
Move pretty_ipv6_ptr setting retrieval out of record list loop
2023-02-13 14:43:22 +02:00
Rauno Tuul
7221271a7b
Preserve domain records history after domain deletion.
2023-02-13 12:08:03 +02:00
Rauno Tuul
187b55e23a
Patch API record update/delete logging to match current logging format
2023-02-13 10:25:17 +02:00
Tyler Todd
c00ddea2fc
More page formatting
...
Added server-side logic for register.html validation
Keep form firelds on register.html in the event of wrong input fields to save users from retyping info
More button rounding
2023-02-13 03:57:21 +00:00
Tyler Todd
e411bc9f19
Enable CAPTCHA
2023-01-30 22:46:59 +00:00
Matt Scott
d50d57bc70
Merge pull request #1357 from pneb/patch-6
...
fix: Potential fix for a regex bug
2023-01-25 16:19:27 -05:00
Matt Scott
51249aecd3
Merge pull request #1212 from corubba/feature/privacy-first
...
Privacy first
2023-01-24 05:34:30 -05:00
Bernward Sanchez
18bc336d7a
Potential fix
2023-01-11 18:21:40 +08:00