898 commits

Author	SHA1	Message	Date
Éloi Rivard	521ed75f18	fix: correctly set up Client audience during OIDC dynamic registration	2023-12-23 19:37:14 +01:00
Éloi Rivard	9ff0411e9e	tests: extracted the prompt tests in a dedicated file	2023-12-22 21:18:02 +01:00
Éloi Rivard	445d854af1	feat: THEME can be a relative path	2023-12-22 18:00:07 +01:00
Éloi Rivard	97394823bf	fix: return a 403 error when users are missing permissions for OIDC authentication	2023-12-22 16:39:20 +01:00
Éloi Rivard	52fc93a481	refactor: avoid to directly use the 'configuration' fixture in tests	2023-12-19 18:28:04 +01:00
Éloi Rivard	7fed235437	fix: redirection after password reset	2023-12-15 16:12:33 +01:00
Éloi Rivard	67733699aa	fix: OIDC Userinfo endpoint is also available in POST	2023-12-15 12:03:21 +01:00
Éloi Rivard	7c06d8d51e	refactor: custom error pages are only loaded when themer is loaded	2023-12-15 11:58:25 +01:00
Éloi Rivard	214b16db37	fix: another mimetype guard	2023-12-15 11:02:31 +01:00
Éloi Rivard	3255eaa31c	fix: a crash when no ACL was defined	2023-12-15 10:50:53 +01:00
Éloi Rivard	11f969a71f	fix: don't crash when mimetype detection fails	2023-12-15 10:25:08 +01:00
Éloi Rivard	8f4a402c84	doc: client attribute description based on oauth/oidc specs	2023-12-14 23:22:33 +01:00
Éloi Rivard	c0f0114496	doc: user and group attribute description based on scim specs	2023-12-14 23:08:17 +01:00
Éloi Rivard	88aa9e27fb	fix: get_mail_domain ignores the server port	2023-12-14 19:24:09 +01:00
Éloi Rivard	02a7e84833	feat: raise an exception when toml is not installed and a configuration file is passed in the environment	2023-12-14 16:04:46 +01:00
Éloi Rivard	066aed7735	feat: convert the png in webp	2023-12-01 22:09:54 +01:00
Éloi Rivard	e09a3071d4	fix: handle 4xx and 5xx error codes with htmx	2023-12-01 11:49:09 +01:00
Éloi Rivard	a7e574f754	feat: use sqlalchemy-utils PasswordType to store and hash user passwords	2023-12-01 09:29:59 +01:00
Éloi Rivard	410d464242	refactor: force objects to be string for hashing	2023-11-28 18:51:28 +01:00
Éloi Rivard	969f3e980c	fix: password comparision was too permissive on login	2023-11-28 18:10:47 +01:00
Éloi Rivard	aa07059357	fix: password and initalization emails were only sent to the preferred user email address	2023-11-28 17:59:50 +01:00
Éloi Rivard	15124f29bb	fix: incorrect user photo and group description cardinality	2023-11-28 15:54:41 +01:00
Éloi Rivard	98e8aa9b39	fix: only the first password letter was used	2023-11-28 15:51:14 +01:00
Éloi Rivard	c2250ec77e	fix: password reset and initialization mail sending ... Password reset and initialization mails were not sent at all the user addresses if one email address could not be reached.	2023-11-28 15:27:08 +01:00
Éloi Rivard	d9dbd8ad0e	fix: crash when LDAP groups are refering to unexisting users	2023-11-28 09:37:37 +01:00
Éloi Rivard	e1f54fffbc	fix: demo client issue date	2023-11-24 15:24:46 +01:00
Éloi Rivard	4e380436d3	fix: disable HTMX boosting during the OIDC dance	2023-11-24 14:45:59 +01:00
Éloi Rivard	d55489f24c	chore: bump to htmx 1.9.9	2023-11-24 14:10:42 +01:00
Éloi Rivard	27639081f0	feat: implement sqlalchemy backend ... Co-authored-by: Loan Robert <loan@yaal.coop>	2023-11-24 13:57:46 +01:00
Éloi Rivard	ff2ff68023	refactor: additional guards on user profile edition	2023-11-24 12:47:09 +01:00
Éloi Rivard	9cf17953ee	refactor: remove an useless OIDC guard	2023-11-24 12:45:41 +01:00
Éloi Rivard	8c2814c852	refactor: Backend.session can take parameters	2023-11-24 12:43:40 +01:00
Éloi Rivard	ac149a2120	fix: group name displaying	2023-11-24 11:47:09 +01:00
Éloi Rivard	02c8f0b177	refactor: Backend.install calls uniformization	2023-11-24 11:13:17 +01:00
Éloi Rivard	8a5dd04c87	refactor: OIDC client management factorization, again	2023-11-24 09:30:52 +01:00
Éloi Rivard	a308a40b11	refactor: OIDC client management factorization	2023-11-24 09:26:15 +01:00
Éloi Rivard	7494800e57	fix: OIDC client 'client_secret_expires_at' claim must be 0, not None	2023-11-23 09:15:40 +01:00
Éloi Rivard	79e547fc10	refactor: OIDC token scopes are stored as lists	2023-11-22 16:36:42 +01:00
Éloi Rivard	fd77bd5637	refactor: OIDC authorization codes scopes are stored as lists	2023-11-22 16:30:38 +01:00
Éloi Rivard	e504c73b38	chore: remove useless var	2023-11-22 12:30:17 +01:00
Éloi Rivard	1e9c77ad6d	refactor: compare models in memory backend user.load_permissions	2023-11-22 12:20:53 +01:00
Éloi Rivard	62a9c320c3	fix: user formatted_name cardinality on user creation form	2023-11-22 11:44:44 +01:00
Éloi Rivard	b6cfa1517c	refactor: form model attributes coercion	2023-11-22 11:30:30 +01:00
Éloi Rivard	3752693480	refactor: use wtforms readonly validator	2023-11-21 18:34:59 +01:00
Éloi Rivard	bc56105b28	fix: remove useless print	2023-11-21 17:59:11 +01:00
Éloi Rivard	f2e5eb36ee	fix: fake user generate attribute cardinality	2023-11-21 16:36:31 +01:00
Éloi Rivard	4616725651	refactor: fix group edition attribute cardinality	2023-11-21 16:30:12 +01:00
Éloi Rivard	ce022ec8fe	refactor: simplify user profile form data initialization	2023-11-21 16:07:11 +01:00
Éloi Rivard	3a39fc191a	refactor: remove models __delattr__ methods	2023-11-21 14:57:28 +01:00
Éloi Rivard	771d3952a3	feat: OIDC password grant supports other client authentication methods	2023-11-18 19:20:14 +01:00