43 commits

Author	SHA1	Message	Date
Éloi Rivard	6d8799d052	refactor: use the Features class to know if a feature is available ... instead of simply looking at the configuration	2024-12-05 12:20:30 +01:00
Éloi Rivard	19159c5a80	refactor: use @example.com for email placeholders	2024-11-20 23:42:58 +01:00
sebastien	ae9c1309b9	adds pre-visualization mail buttons when api request on HIBP have failed in canaille/core/templates/mails/admin.html	2024-11-13 16:20:30 +01:00
sebastien	e6a9f2dcc6	Merge branch 'main' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases	2024-11-07 09:15:29 +01:00
Éloi Rivard	fe8e1160ab	refactor: move session related methods in a dedicated file	2024-11-06 09:10:43 +01:00
sebastien	ca7f718353	adds mail sending to admin if failure of api HIBP request to check if password is compromised	2024-11-05 15:43:15 +01:00
sebastien	0acbb40ecd	consumes haveibeenpwned API directly	2024-11-04 08:55:55 +01:00
sebastien yaal	a4bd03f71c	feat: password strength indicator	2024-10-28 21:17:47 +00:00
Éloi Rivard	0b51b01031	refactor: apply ruff migrations for python 3.10+	2024-10-28 09:13:00 +01:00
Félix Rohrlich	603eab0b3c	refactor : added proper security logging level and refactored change email logging	2024-10-21 11:17:55 +02:00
Félix Rohrlich	038e6c094e	feat: Added security logs for email update, forgotten password mail, token emission/refresh/revokation, new consent, consent revokation #177	2024-10-14 14:04:39 +02:00
Félix Rohrlich	545fb2d342	feat: change password events are logged in #177	2024-10-09 15:55:01 +02:00
Éloi Rivard	cfabcc485c	chore: automitaclly fix typos	2024-09-11 09:33:42 +02:00
Éloi Rivard	b46102bb75	fix: crash for passwordless users at login when no SMTP server was configured	2024-05-14 23:15:41 +02:00
Éloi Rivard	3fb5d0149d	fix: SMTP feature can be disabled again	2024-05-14 23:04:32 +02:00
Éloi Rivard	43f9f328a5	refactor: factorize features definition	2024-05-14 22:53:47 +02:00
Éloi Rivard	e44b2bf469	tests: fix CI	2024-05-03 22:35:57 +02:00
Éloi Rivard	16c3021a8f	refactor: Rename BaseBackend in Backend	2024-05-03 22:25:20 +02:00
Éloi Rivard	473a262ea2	refactor: move BackendModel.reload to Backend.reload	2024-05-03 22:25:20 +02:00
Éloi Rivard	2ccdaeadf6	refactor: move BackendModel.delete to Backend.delete	2024-05-03 22:22:08 +02:00
Éloi Rivard	09588e0f48	refactor: move BackendModel.save to Backend.save	2024-05-03 22:22:06 +02:00
Éloi Rivard	44573713ed	refactor: move BackendModel.get to Backend.get	2024-05-03 21:54:03 +02:00
Éloi Rivard	ccde88b1bf	refactor: BackendModel.get() is now Backend.instance	2024-05-03 21:46:28 +02:00
Éloi Rivard	8425b2a3b8	refactor: move BackendModel.query to Backend.query	2024-05-03 21:42:54 +02:00
Éloi Rivard	98b26ee6f3	fix: translatable f-string	2024-05-01 18:39:59 +02:00
Éloi Rivard	69019763d4	feat: group member removal can be achieved from the group edition page	2024-04-28 19:47:57 +02:00
Éloi Rivard	ebcaaeaded	tests: fix GHA ... For some reasons, webp mimetypes failed to be guessed on GHA.	2024-04-27 14:06:20 +02:00
Éloi Rivard	382dbcaf1a	feat: add 'autocomplete' tag on the password form	2024-04-17 12:36:39 +02:00
Éloi Rivard	f9989a960b	feat: locked users cannot be impersonated	2024-04-12 12:12:08 +02:00
Éloi Rivard	42dc023288	fix: display the menu bar on error pages	2024-04-09 22:06:08 +02:00
Éloi Rivard	920395c27f	feat: sign in/out events are logged in #177	2024-04-09 10:04:26 +02:00
Éloi Rivard	053156ec18	feat: additional messages on password endpoint errors ... when attempt_login is not found on the session, add a warning to be displayed on the login page after redirection	2024-04-09 09:20:38 +02:00
Éloi Rivard	5aaccca4cf	fix: display an error message when trying to remove the last user from a group	2024-04-08 14:44:15 +02:00
Éloi Rivard	fe2665ae32	fix: LDAP user group removal	2024-04-08 14:15:28 +02:00
Éloi Rivard	88832b5b3b	refactor: move User.check_password and User.set_password methods to Backend	2024-04-07 20:17:15 +02:00
Éloi Rivard	5a6ce24074	refactor: move User.get_from_login method to Backend	2024-04-07 20:17:15 +02:00
Éloi Rivard	e9c4f4c1c9	refactor: differenciate between login and username in forms	2024-04-07 19:50:26 +02:00
Éloi Rivard	2cab4bfa66	refactor: use User.get instead of User.get_from_login when this is pertinent	2024-04-07 18:46:08 +02:00
Éloi Rivard	1fbb074cc5	refactor: user permissions lazy loading	2024-04-07 15:21:32 +02:00
Éloi Rivard	fbd0d3029e	refactor: rename User read/write/permissions attributes	2024-04-01 14:59:56 +02:00
Éloi Rivard	8625318341	feat: use pydantic to validate the configuration	2024-03-28 17:44:26 +01:00
Éloi Rivard	4edffcaa9f	chore: use isort instead of reoder-python-imports	2024-03-15 19:58:37 +01:00
Éloi Rivard	a4a381d088	refactor: gather endpoints in a 'endpoints' directory	2023-12-26 00:30:19 +01:00