79 commits

Author	SHA1	Message	Date
Éloi Rivard	78a129d494	Forms validate URIs	2023-03-29 21:33:47 +02:00
Éloi Rivard	40c36cdf64	Use the form_render macro when possible	2023-03-28 23:31:35 +02:00
Éloi Rivard	f97dc3b2c6	CSRF protection everywhere	2023-03-28 20:30:29 +02:00
Éloi Rivard	61940844e6	Properly handle LDAP date timezones	2023-03-18 00:39:32 +01:00
Éloi Rivard	0f93029d2a	Split the consent page in two	2023-03-16 18:45:35 +01:00
Éloi Rivard	94af1744ba	pre-commit update	2023-03-14 12:08:37 +01:00
Éloi Rivard	822988536d	LDAPObject can have several objectClass	2023-03-11 19:46:12 +01:00
Éloi Rivard	3406428f13	Renamed group attributes to match SCIM naming convention	2023-03-11 12:54:27 +01:00
Éloi Rivard	971cf317c9	Used 'id' instead of 'dn'	2023-03-10 18:14:15 +01:00
Éloi Rivard	e802e3d5e2	Consent cn alias	2023-03-10 00:38:16 +01:00
Éloi Rivard	cf9b5c11a3	Dynamic tables with htmx ... - Search is triggered with user inputs - Page changes are triggered with clicks	2023-03-09 19:31:59 +01:00
Éloi Rivard	e5d968d4f5	Every list of items is paginated server-side.	2023-03-09 19:31:59 +01:00
Éloi Rivard	53581404ab	LDAPObject dn attributes are automatically initialized	2023-03-08 23:53:53 +01:00
Éloi Rivard	7e42467bfc	Renamed LDAPObject.rdn in LDAPObject.rdn_attribute	2023-03-08 18:50:33 +01:00
Éloi Rivard	c5b11d2fb3	Merge LDAPObject.all and LDAPObject.filter in LDAPObject.query	2023-03-07 17:58:27 +01:00
Éloi Rivard	8b4d5eb247	This is too soon for the walrus operator	2023-02-14 22:06:03 +01:00
Éloi Rivard	7458868f77	Pre-consented clients are displayed in the user consent list, and their consents can be revoked.	2023-02-14 21:56:47 +01:00
Éloi Rivard	d551b1ab35	Revoked consents can be restored	2023-02-14 19:05:43 +01:00
Éloi Rivard	3359b51d9b	Implements admin token deletion	2023-02-04 18:41:49 +01:00
Éloi Rivard	3ac7a8013f	Punctuation uniformization	2023-02-03 18:49:44 +01:00
Éloi Rivard	75bca52050	Merge branch 'kingu-main-patch-85823' into 'main' ... Shortened profile strings See merge request yaal/canaille!99	2023-01-31 08:25:23 +00:00
Allan Nordhøy	21d8c1b2bf	Shortened profile strings	2023-01-31 01:06:06 +00:00
Éloi Rivard	b059e6e719	Client deletion also delete related objects	2023-01-30 19:58:25 +01:00
Éloi Rivard	3be937c286	Fix coverage	2023-01-28 18:35:39 +01:00
Éloi Rivard	63f927830a	Fixed dynamic client registration scope management	2023-01-28 14:04:04 +01:00
Éloi Rivard	e145a7acc8	Renamed LDAPObject 'id' attribute in 'rdn'	2023-01-24 18:32:44 +01:00
Éloi Rivard	c470e7f134	Explicitely set Consent cn	2023-01-23 18:55:27 +01:00
Éloi Rivard	d8bcb0bdf0	Ensures the token expires_in claim and the access_token exp claim have the same value.	2023-01-14 14:59:13 +01:00
Éloi Rivard	7cb2da3ca3	refactoring: start to split the canaille installation between submodules	2022-12-29 02:11:56 +01:00
Éloi Rivard	ab517f4fc0	refactoring: use Group.name when possible	2022-12-29 01:27:22 +01:00
Éloi Rivard	cae49fcec9	avoid ldap related session variable names	2022-12-29 01:10:07 +01:00
Éloi Rivard	cd1d0a30d5	added 'autoflake' to the precommit tool list	2022-12-29 00:41:32 +01:00
Éloi Rivard	7274f9cc02	fixed the consent list and authorization pages translations	2022-12-28 01:46:05 +01:00
Éloi Rivard	64ac2af981	Merge branch 'endsession-bugfix' into 'main' ... OIDC end_session was not returning the `state` parameter in the `post_logout_redirect_uri` See merge request yaal/canaille!82	2022-12-27 21:16:52 +00:00
Éloi Rivard	70f0941278	refactoring: removed a guard to increase coverage	2022-12-27 22:02:06 +01:00
Éloi Rivard	5793a73801	OIDC end_session was not returning the state parameter in the post_logout_redirect_uri	2022-12-27 21:48:44 +01:00
Éloi Rivard	6ec2f183fd	removed unused import	2022-12-24 02:03:37 +01:00
Éloi Rivard	19793fe8aa	unit tests: userinfo	2022-12-24 01:44:16 +01:00
Éloi Rivard	41642f68c6	prevent lazy_gettext execution in unwanted contexts	2022-12-16 19:28:13 +01:00
Camille Daniel	7e71789fad	fix post requests in oidc clients views ... flash and lazygettext were causing an unexpected bug on post (not get) requests	2022-12-16 19:15:50 +01:00
Éloi Rivard	f086bcd7da	Stop caching server metadata	2022-12-15 23:00:58 +01:00
Éloi Rivard	7c6fd25524	Add nonce to the claims_supported server metadata list	2022-12-15 11:59:00 +01:00
Éloi Rivard	e478034b81	unit tests: client admin deletion	2022-12-13 19:14:25 +01:00
Éloi Rivard	9a3363a17f	unit tests: improved flaskutils coverage	2022-12-11 22:49:32 +01:00
Éloi Rivard	118af82409	Fixes an authlib jwk warning	2022-12-11 22:27:54 +01:00
Éloi Rivard	c02ea791be	removed unused method in the oauth authorization class	2022-12-10 21:18:17 +01:00
Éloi Rivard	449231abbe	unit tests: improved token introspection coverage	2022-12-10 21:10:18 +01:00
Éloi Rivard	812d04a571	unit tests: improved token revokation coverage	2022-12-10 21:02:51 +01:00
Éloi Rivard	8932b390ba	test consent removal with arleady revoked tokens	2022-12-10 11:24:53 +01:00
Éloi Rivard	fa3d51e32b	removed unused method in the client model	2022-12-10 11:00:16 +01:00