649 commits

Author	SHA1	Message	Date
Éloi Rivard	af2f71c978	tests: fix style	2025-01-10 14:50:17 +01:00
Éloi Rivard	733625e2bc	feat: SQL migrations with flask-alembic	2025-01-10 12:32:18 +01:00
Éloi Rivard	9bbad786e3	tests: fix coverage	2025-01-10 11:56:24 +01:00
Éloi Rivard	a25bfe0b3a	tests: fix missing / in sqlite paths	2025-01-10 10:53:15 +01:00
Éloi Rivard	7e01008ac0	tests: avoid producing test artifacts in the repository	2025-01-10 10:44:15 +01:00
sebastien yaal	4400accc76	Merge branch 'test_success_edition_profile_setting' into 'main' ... adds a success in profile setting test edition See merge request yaal/canaille!213	2025-01-10 07:52:57 +00:00
Éloi Rivard	c96b4b47e3	refactor: use 'dump' command instead of 'get --all'	2025-01-09 15:15:52 +01:00
sebastien	7682c2be2d	adds a success in profile setting test edition	2025-01-09 14:56:03 +01:00
Éloi Rivard	2049d4e929	feat: CLI commands can dump hashed passwords	2025-01-09 09:36:42 +01:00
Éloi Rivard	b830e110b7	feat: implement '--all' option of 'get' command ... this allows administrators to perform full database dumps	2025-01-08 16:54:30 +01:00
Éloi Rivard	e1ca7dfe1e	feat: --version CLI option	2025-01-02 23:31:24 +01:00
sebastien	ae9c3da9fb	adds new tests for validators and progress bar for password strength in registration form and reset form	2024-12-23 10:42:49 +01:00
Éloi Rivard	c6eec2b399	tests: test HTMX rendering	2024-12-22 17:03:57 +01:00
Éloi Rivard	b7bb14cfe7	feat: JSON HTTP errors on the OAuth endpoints	2024-12-22 11:50:37 +01:00
Éloi Rivard	527869b6dd	refactor: use 'mfa' term instead of '2fa'	2024-12-21 23:02:04 +01:00
Félix Rohrlich	fbeaf951c4	fix: Fixed intruder lockout test sometimes failing with LDAP	2024-12-20 09:18:01 +01:00
Félix Rohrlich	d677f09b7d	fix: Fixed intruder lockout test sometimes failing with LDAP	2024-12-20 09:18:01 +01:00
Félix Rohrlich	7dd2e11f73	fix: Fixed intruder lockout test sometimes failing with LDAP	2024-12-20 09:18:01 +01:00
sebastien	0fb3d588b9	adds password expiry policy with a new method on User class	2024-12-19 11:20:26 +01:00
Éloi Rivard	fe8929d992	refactor: move templates in a common directory ... without this, theming was broken because it needs one single directory for templates.	2024-12-19 00:17:03 +01:00
Félix Rohrlich	36c73dd3ef	Merge branch '173-intruder-lockout-2' into 'main' ... Implement intruder lockout Closes #173 See merge request yaal/canaille!194	2024-12-16 15:32:21 +00:00
Éloi Rivard	44c5669d97	doc: prefer 'multi-factor' over 'two-factor' term	2024-12-12 12:04:40 +01:00
Éloi Rivard	92214d932d	wip	2024-12-11 17:46:14 +01:00
Éloi Rivard	10abb2013a	feat: scim endpoint authentication	2024-12-11 17:35:16 +01:00
Éloi Rivard	a299bb92ba	feat: basic SCIM server implementation	2024-12-11 17:35:16 +01:00
Félix Rohrlich	80ef1741a7	feat : Added intruder lockout login delay	2024-12-10 14:23:11 +01:00
Félix Rohrlich	e1d70ef8cd	feat : Added sms OTP authentication and multi-factor authentication methods chaining	2024-12-10 11:27:18 +01:00
Félix Rohrlich	6d48ce9043	feat: Added email OTP authentication	2024-12-10 11:27:18 +01:00
Félix Rohrlich	c8e774ab46	refactor: moved reset-mfa cli function and added documentation and test cases for it	2024-12-10 11:27:18 +01:00
Félix Rohrlich	b01e8323d8	feat : Added HOTP authentication and CLI Multi-factor authentication reset	2024-12-10 11:27:18 +01:00
Félix Rohrlich	74e0c8d635	feat : Added time one-time password (TOTP) authentication	2024-12-10 11:27:18 +01:00
Éloi Rivard	bbacb1703c	tests: attempt to fix the token creation audience assertion	2024-12-10 08:12:13 +01:00
Éloi Rivard	bab6fc6504	feat: button to create a new client token	2024-12-06 20:21:14 +01:00
Éloi Rivard	5bc438d21d	feat: implement OIDC client_credentials flow	2024-12-06 15:09:25 +01:00
Éloi Rivard	a4985184fa	tests: fix dotenv unit test after 21464e952a	2024-12-06 15:06:20 +01:00
Éloi Rivard	21464e952a	fix: do not automatically load .env files	2024-12-05 15:14:12 +01:00
Éloi Rivard	57bb0e01bc	tests: put 'TESTING=True' in the common conf	2024-12-05 14:56:18 +01:00
Éloi Rivard	3ecda0ceab	doc: password compromission details	2024-11-21 10:43:31 +01:00
Éloi Rivard	ac8dc19ff2	tests: fix LDAP email placeholder test	2024-11-20 23:49:12 +01:00
Éloi Rivard	77667c6f52	refactor: all domains used in the unit test suite are now .test ... this ensures they will never be valid, and will never generate real world requests	2024-11-20 23:30:48 +01:00
Éloi Rivard	0af36824cb	tests: fix assertions on the compromission password tests	2024-11-20 14:32:25 +01:00
sebastien	010bb4ea06	updates tests without API call	2024-11-19 14:49:36 +01:00
sebastien	bfff1bcdc1	refacto form test: separating htmx request and form submit	2024-11-19 14:46:38 +01:00
sebastien	b49f1df395	Adds configuration variable for hibp api url	2024-11-19 11:20:25 +01:00
sebastien	ce8dba03fe	remove admin_group from conftest because, we use a mock to avoid api cal in tests. So we don't need an admin group anymore.	2024-11-19 09:13:31 +01:00
sebastien	d18b555204	adds new log when HIBP API call fails	2024-11-19 09:11:02 +01:00
sebastien	9b8f8e9cd4	updates configuration and config.sample and demo config files toinclude new parameters. adds new tests for configuration condition.	2024-11-15 16:28:21 +01:00
sebastien	a7a93a7d1c	adds comment to explain API response content in test	2024-11-15 12:22:10 +01:00
sebastien	dc2824da2b	adds tests for admin mails display	2024-11-15 12:21:28 +01:00
sebastien	d6dfd439f3	adds tests for ENABLE_PASSWORD_COMPROMISSION_CHECK config	2024-11-14 16:10:43 +01:00