40 commits

Author	SHA1	Message	Date
sebastien	909896077d	refacto password validation by adds chanes in class PasswordResetForm instead of in functions, AND readds validators in registration function because of required caracter of the password fields	2024-12-23 10:42:49 +01:00
sebastien	2f1b44d4d9	creates a new function for all password form verifications	2024-12-23 10:42:49 +01:00
sebastien	4bdd2de8f2	restores comparison between 'password' and 'confirmation' in registration form	2024-12-23 10:42:49 +01:00
Éloi Rivard	a20ba92064	refactor: rename 'themes' module in 'templating'	2024-12-22 15:59:09 +01:00
sebastien	6f219b54e8	updates with new path for templates	2024-12-19 12:25:38 +01:00
sebastien	0fb3d588b9	adds password expiry policy with a new method on User class	2024-12-19 11:20:26 +01:00
Éloi Rivard	ad875455b8	doc: document templates	2024-12-19 10:08:09 +01:00
Éloi Rivard	fe8929d992	refactor: move templates in a common directory ... without this, theming was broken because it needs one single directory for templates.	2024-12-19 00:17:03 +01:00
Félix Rohrlich	6d48ce9043	feat: Added email OTP authentication	2024-12-10 11:27:18 +01:00
Félix Rohrlich	b01e8323d8	feat : Added HOTP authentication and CLI Multi-factor authentication reset	2024-12-10 11:27:18 +01:00
Félix Rohrlich	74e0c8d635	feat : Added time one-time password (TOTP) authentication	2024-12-10 11:27:18 +01:00
Éloi Rivard	6d8799d052	refactor: use the Features class to know if a feature is available ... instead of simply looking at the configuration	2024-12-05 12:20:30 +01:00
sebastien	e6a9f2dcc6	Merge branch 'main' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases	2024-11-07 09:15:29 +01:00
Éloi Rivard	fe8e1160ab	refactor: move session related methods in a dedicated file	2024-11-06 09:10:43 +01:00
sebastien	ca7f718353	adds mail sending to admin if failure of api HIBP request to check if password is compromised	2024-11-05 15:43:15 +01:00
sebastien	0acbb40ecd	consumes haveibeenpwned API directly	2024-11-04 08:55:55 +01:00
sebastien yaal	a4bd03f71c	feat: password strength indicator	2024-10-28 21:17:47 +00:00
Éloi Rivard	0b51b01031	refactor: apply ruff migrations for python 3.10+	2024-10-28 09:13:00 +01:00
Félix Rohrlich	603eab0b3c	refactor : added proper security logging level and refactored change email logging	2024-10-21 11:17:55 +02:00
Félix Rohrlich	038e6c094e	feat: Added security logs for email update, forgotten password mail, token emission/refresh/revokation, new consent, consent revokation #177	2024-10-14 14:04:39 +02:00
Félix Rohrlich	545fb2d342	feat: change password events are logged in #177	2024-10-09 15:55:01 +02:00
Éloi Rivard	cfabcc485c	chore: automitaclly fix typos	2024-09-11 09:33:42 +02:00
Éloi Rivard	3fb5d0149d	fix: SMTP feature can be disabled again	2024-05-14 23:04:32 +02:00
Éloi Rivard	43f9f328a5	refactor: factorize features definition	2024-05-14 22:53:47 +02:00
Éloi Rivard	16c3021a8f	refactor: Rename BaseBackend in Backend	2024-05-03 22:25:20 +02:00
Éloi Rivard	473a262ea2	refactor: move BackendModel.reload to Backend.reload	2024-05-03 22:25:20 +02:00
Éloi Rivard	2ccdaeadf6	refactor: move BackendModel.delete to Backend.delete	2024-05-03 22:22:08 +02:00
Éloi Rivard	09588e0f48	refactor: move BackendModel.save to Backend.save	2024-05-03 22:22:06 +02:00
Éloi Rivard	44573713ed	refactor: move BackendModel.get to Backend.get	2024-05-03 21:54:03 +02:00
Éloi Rivard	ccde88b1bf	refactor: BackendModel.get() is now Backend.instance	2024-05-03 21:46:28 +02:00
Éloi Rivard	8425b2a3b8	refactor: move BackendModel.query to Backend.query	2024-05-03 21:42:54 +02:00
Éloi Rivard	f9989a960b	feat: locked users cannot be impersonated	2024-04-12 12:12:08 +02:00
Éloi Rivard	fe2665ae32	fix: LDAP user group removal	2024-04-08 14:15:28 +02:00
Éloi Rivard	88832b5b3b	refactor: move User.check_password and User.set_password methods to Backend	2024-04-07 20:17:15 +02:00
Éloi Rivard	2cab4bfa66	refactor: use User.get instead of User.get_from_login when this is pertinent	2024-04-07 18:46:08 +02:00
Éloi Rivard	1fbb074cc5	refactor: user permissions lazy loading	2024-04-07 15:21:32 +02:00
Éloi Rivard	fbd0d3029e	refactor: rename User read/write/permissions attributes	2024-04-01 14:59:56 +02:00
Éloi Rivard	8625318341	feat: use pydantic to validate the configuration	2024-03-28 17:44:26 +01:00
Éloi Rivard	4edffcaa9f	chore: use isort instead of reoder-python-imports	2024-03-15 19:58:37 +01:00
Éloi Rivard	a4a381d088	refactor: gather endpoints in a 'endpoints' directory	2023-12-26 00:30:19 +01:00

Renamed from canaille/core/account.py (Browse further)