39 commits

Author	SHA1	Message	Date
sebastien	2f1b44d4d9	creates a new function for all password form verifications	2024-12-23 10:42:49 +01:00
sebastien	4bdd2de8f2	restores comparison between 'password' and 'confirmation' in registration form	2024-12-23 10:42:49 +01:00
Éloi Rivard	a20ba92064	refactor: rename 'themes' module in 'templating'	2024-12-22 15:59:09 +01:00
sebastien	6f219b54e8	updates with new path for templates	2024-12-19 12:25:38 +01:00
sebastien	0fb3d588b9	adds password expiry policy with a new method on User class	2024-12-19 11:20:26 +01:00
Éloi Rivard	ad875455b8	doc: document templates	2024-12-19 10:08:09 +01:00
Éloi Rivard	fe8929d992	refactor: move templates in a common directory ... without this, theming was broken because it needs one single directory for templates.	2024-12-19 00:17:03 +01:00
Félix Rohrlich	6d48ce9043	feat: Added email OTP authentication	2024-12-10 11:27:18 +01:00
Félix Rohrlich	b01e8323d8	feat : Added HOTP authentication and CLI Multi-factor authentication reset	2024-12-10 11:27:18 +01:00
Félix Rohrlich	74e0c8d635	feat : Added time one-time password (TOTP) authentication	2024-12-10 11:27:18 +01:00
Éloi Rivard	6d8799d052	refactor: use the Features class to know if a feature is available ... instead of simply looking at the configuration	2024-12-05 12:20:30 +01:00
sebastien	e6a9f2dcc6	Merge branch 'main' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases	2024-11-07 09:15:29 +01:00
Éloi Rivard	fe8e1160ab	refactor: move session related methods in a dedicated file	2024-11-06 09:10:43 +01:00
sebastien	ca7f718353	adds mail sending to admin if failure of api HIBP request to check if password is compromised	2024-11-05 15:43:15 +01:00
sebastien	0acbb40ecd	consumes haveibeenpwned API directly	2024-11-04 08:55:55 +01:00
sebastien yaal	a4bd03f71c	feat: password strength indicator	2024-10-28 21:17:47 +00:00
Éloi Rivard	0b51b01031	refactor: apply ruff migrations for python 3.10+	2024-10-28 09:13:00 +01:00
Félix Rohrlich	603eab0b3c	refactor : added proper security logging level and refactored change email logging	2024-10-21 11:17:55 +02:00
Félix Rohrlich	038e6c094e	feat: Added security logs for email update, forgotten password mail, token emission/refresh/revokation, new consent, consent revokation #177	2024-10-14 14:04:39 +02:00
Félix Rohrlich	545fb2d342	feat: change password events are logged in #177	2024-10-09 15:55:01 +02:00
Éloi Rivard	cfabcc485c	chore: automitaclly fix typos	2024-09-11 09:33:42 +02:00
Éloi Rivard	3fb5d0149d	fix: SMTP feature can be disabled again	2024-05-14 23:04:32 +02:00
Éloi Rivard	43f9f328a5	refactor: factorize features definition	2024-05-14 22:53:47 +02:00
Éloi Rivard	16c3021a8f	refactor: Rename BaseBackend in Backend	2024-05-03 22:25:20 +02:00
Éloi Rivard	473a262ea2	refactor: move BackendModel.reload to Backend.reload	2024-05-03 22:25:20 +02:00
Éloi Rivard	2ccdaeadf6	refactor: move BackendModel.delete to Backend.delete	2024-05-03 22:22:08 +02:00
Éloi Rivard	09588e0f48	refactor: move BackendModel.save to Backend.save	2024-05-03 22:22:06 +02:00
Éloi Rivard	44573713ed	refactor: move BackendModel.get to Backend.get	2024-05-03 21:54:03 +02:00
Éloi Rivard	ccde88b1bf	refactor: BackendModel.get() is now Backend.instance	2024-05-03 21:46:28 +02:00
Éloi Rivard	8425b2a3b8	refactor: move BackendModel.query to Backend.query	2024-05-03 21:42:54 +02:00
Éloi Rivard	f9989a960b	feat: locked users cannot be impersonated	2024-04-12 12:12:08 +02:00
Éloi Rivard	fe2665ae32	fix: LDAP user group removal	2024-04-08 14:15:28 +02:00
Éloi Rivard	88832b5b3b	refactor: move User.check_password and User.set_password methods to Backend	2024-04-07 20:17:15 +02:00
Éloi Rivard	2cab4bfa66	refactor: use User.get instead of User.get_from_login when this is pertinent	2024-04-07 18:46:08 +02:00
Éloi Rivard	1fbb074cc5	refactor: user permissions lazy loading	2024-04-07 15:21:32 +02:00
Éloi Rivard	fbd0d3029e	refactor: rename User read/write/permissions attributes	2024-04-01 14:59:56 +02:00
Éloi Rivard	8625318341	feat: use pydantic to validate the configuration	2024-03-28 17:44:26 +01:00
Éloi Rivard	4edffcaa9f	chore: use isort instead of reoder-python-imports	2024-03-15 19:58:37 +01:00
Éloi Rivard	a4a381d088	refactor: gather endpoints in a 'endpoints' directory	2023-12-26 00:30:19 +01:00

Renamed from canaille/core/account.py (Browse further)