Éloi Rivard
|
13a98fda2c
|
doc: ACL permissions wording
|
2024-12-08 12:22:41 +01:00 |
|
Stéphane
|
9172a4adab
|
doc: fix: spellcheck some words
|
2024-12-07 15:56:17 +01:00 |
|
Éloi Rivard
|
aa57daf7ce
|
chore: bump to zxcvbn-py-rs 0.2.0
|
2024-12-06 15:22:40 +01:00 |
|
Éloi Rivard
|
21464e952a
|
fix: do not automatically load .env files
|
2024-12-05 15:14:12 +01:00 |
|
Éloi Rivard
|
6d8799d052
|
refactor: use the Features class to know if a feature is available
instead of simply looking at the configuration
|
2024-12-05 12:20:30 +01:00 |
|
Éloi Rivard
|
eb955ad5dc
|
chore: make converters work with model ids
|
2024-12-02 17:45:28 +01:00 |
|
Éloi Rivard
|
91c82dad4d
|
fix: do not attempt to configure email_validator if absent
|
2024-11-22 15:21:18 +01:00 |
|
Éloi Rivard
|
3ecda0ceab
|
doc: password compromission details
|
2024-11-21 10:43:31 +01:00 |
|
Éloi Rivard
|
77667c6f52
|
refactor: all domains used in the unit test suite are now .test
this ensures they will never be valid, and will never generate real
world requests
|
2024-11-20 23:30:48 +01:00 |
|
Éloi Rivard
|
6fa86cb5b2
|
refactor: PEP20 flat is better than nested
|
2024-11-20 14:27:18 +01:00 |
|
Éloi Rivard
|
b0e38b6f71
|
refactor: PEP20 flat is better than nested
|
2024-11-20 14:26:05 +01:00 |
|
sebastien
|
0fc5afb0bd
|
changes flash message category to info because, informing the admin is not a success but an information for the user
|
2024-11-19 16:11:23 +01:00 |
|
sebastien
|
aaa17c2545
|
hotfix update previous commit
|
2024-11-19 14:48:56 +01:00 |
|
sebastien
|
bfff1bcdc1
|
refacto form test: separating htmx request and form submit
|
2024-11-19 14:46:38 +01:00 |
|
sebastien
|
b49f1df395
|
Adds configuration variable for hibp api url
|
2024-11-19 11:20:25 +01:00 |
|
sebastien
|
d18b555204
|
adds new log when HIBP API call fails
|
2024-11-19 09:11:02 +01:00 |
|
sebastien
|
9b8f8e9cd4
|
updates configuration and config.sample and demo config files toinclude new parameters. adds new tests for configuration condition.
|
2024-11-15 16:28:21 +01:00 |
|
sebastien
|
d6dfd439f3
|
adds tests for ENABLE_PASSWORD_COMPROMISSION_CHECK config
|
2024-11-14 16:10:43 +01:00 |
|
sebastien
|
ec43d9157f
|
avoids api call from tests
|
2024-11-14 15:32:31 +01:00 |
|
sebastien
|
2787252d81
|
the only receiver of mail when the request on HIBP api have failed is current_app.config[CANAILLE][ADMIN_EMAIL] defined in config.
|
2024-11-13 16:24:35 +01:00 |
|
sebastien
|
4c146cc970
|
changes flash message when the password is compromised.
|
2024-11-13 16:21:52 +01:00 |
|
sebastien
|
2a57a05155
|
adds configuration option set by default False to check password compromise
|
2024-11-13 16:12:50 +01:00 |
|
sebastien
|
62ceadb64f
|
refacto : isolate function to avoid import loops and clarify the role of the function (not in core because 'utils', not in mail to ovaid loop, not in form because not form)
|
2024-11-12 16:48:15 +01:00 |
|
sebastien yaal
|
7b7ec74b9f
|
Merge branch 'main' into '179-check-passwords-on-compromised-password-databases'
# Conflicts:
# CHANGES.rst
|
2024-11-12 08:34:10 +00:00 |
|
sebastien
|
8284a41234
|
refacto for tests
|
2024-11-12 09:17:22 +01:00 |
|
sebastien
|
8104bbf03e
|
adds new condition to help with tests and inform correctly the user with sending mail to admins if compromise password check failed
|
2024-11-08 15:19:11 +01:00 |
|
sebastien
|
f173a66793
|
adds new tests for compromised_password_check_failure situation.
|
2024-11-07 15:51:21 +01:00 |
|
Éloi Rivard
|
a012814eca
|
chore: enable flake8-bugbear ruff rules
|
2024-11-07 11:44:29 +01:00 |
|
sebastien
|
9844818280
|
Merge branch '179-check-passwords-on-compromised-password-databases' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases
|
2024-11-07 10:34:12 +01:00 |
|
sebastien
|
e6a9f2dcc6
|
Merge branch 'main' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases
|
2024-11-07 09:15:29 +01:00 |
|
sebastien
|
56f0c9b51b
|
hotfix api url following manual failed request tests
|
2024-11-06 13:51:50 +01:00 |
|
sebastien
|
025da08fd3
|
adds flash message for user when password compromise investigation failed.
|
2024-11-06 13:05:32 +01:00 |
|
sebastien
|
fa3a5f6616
|
gets the emails of each admin to send them the compromised_password_check_failure_mail
|
2024-11-06 12:56:35 +01:00 |
|
Éloi Rivard
|
fe8e1160ab
|
refactor: move session related methods in a dedicated file
|
2024-11-06 09:10:43 +01:00 |
|
sebastien
|
9708809714
|
updates file names, variable names to be clearer.
|
2024-11-05 16:18:45 +01:00 |
|
sebastien
|
ca7f718353
|
adds mail sending to admin if failure of api HIBP request to check if password is compromised
|
2024-11-05 15:43:15 +01:00 |
|
sebastien
|
093397256b
|
fix url typo
|
2024-11-04 11:15:32 +01:00 |
|
sebastien
|
0acbb40ecd
|
consumes haveibeenpwned API directly
|
2024-11-04 08:55:55 +01:00 |
|
sebastien yaal
|
a4bd03f71c
|
feat: password strength indicator
|
2024-10-28 21:17:47 +00:00 |
|
Éloi Rivard
|
0b51b01031
|
refactor: apply ruff migrations for python 3.10+
|
2024-10-28 09:13:00 +01:00 |
|
Éloi Rivard
|
3a3cd304b8
|
tests: refactor logging tests
add restaure 100% coverage
|
2024-10-27 21:46:47 +01:00 |
|
Éloi Rivard
|
52031dd2c4
|
refactor: move logging machinery in its own dedicated file
|
2024-10-27 13:54:14 +01:00 |
|
Éloi Rivard
|
c28a1e9351
|
fix: display a 500 error when SMTP configuration is defined but null
this improves tests coverage
|
2024-09-15 17:58:03 +02:00 |
|
Éloi Rivard
|
cfabcc485c
|
chore: automitaclly fix typos
|
2024-09-11 09:33:42 +02:00 |
|
Éloi Rivard
|
18a711ef7d
|
doc: features and use cases documentation
|
2024-05-21 11:07:07 +02:00 |
|
Éloi Rivard
|
3fb5d0149d
|
fix: SMTP feature can be disabled again
|
2024-05-14 23:04:32 +02:00 |
|
Éloi Rivard
|
43f9f328a5
|
refactor: factorize features definition
|
2024-05-14 22:53:47 +02:00 |
|
Éloi Rivard
|
4791d27569
|
doc: CLI documentation improvements
|
2024-05-12 11:33:22 +02:00 |
|
Éloi Rivard
|
b16630063b
|
fix: check command when SMTP configuration is not defined
|
2024-05-12 10:42:41 +02:00 |
|
Éloi Rivard
|
16c3021a8f
|
refactor: Rename BaseBackend in Backend
|
2024-05-03 22:25:20 +02:00 |
|