120 commits

Author	SHA1	Message	Date
sebastien	b49f1df395	Adds configuration variable for hibp api url	2024-11-19 11:20:25 +01:00
sebastien	d18b555204	adds new log when HIBP API call fails	2024-11-19 09:11:02 +01:00
sebastien	9b8f8e9cd4	updates configuration and config.sample and demo config files toinclude new parameters. adds new tests for configuration condition.	2024-11-15 16:28:21 +01:00
sebastien	d6dfd439f3	adds tests for ENABLE_PASSWORD_COMPROMISSION_CHECK config	2024-11-14 16:10:43 +01:00
sebastien	ec43d9157f	avoids api call from tests	2024-11-14 15:32:31 +01:00
sebastien	2787252d81	the only receiver of mail when the request on HIBP api have failed is current_app.config[CANAILLE][ADMIN_EMAIL] defined in config.	2024-11-13 16:24:35 +01:00
sebastien	4c146cc970	changes flash message when the password is compromised.	2024-11-13 16:21:52 +01:00
sebastien	2a57a05155	adds configuration option set by default False to check password compromise	2024-11-13 16:12:50 +01:00
sebastien	62ceadb64f	refacto : isolate function to avoid import loops and clarify the role of the function (not in core because 'utils', not in mail to ovaid loop, not in form because not form)	2024-11-12 16:48:15 +01:00
sebastien yaal	7b7ec74b9f	Merge branch 'main' into '179-check-passwords-on-compromised-password-databases' ... # Conflicts: # CHANGES.rst	2024-11-12 08:34:10 +00:00
sebastien	8284a41234	refacto for tests	2024-11-12 09:17:22 +01:00
sebastien	8104bbf03e	adds new condition to help with tests and inform correctly the user with sending mail to admins if compromise password check failed	2024-11-08 15:19:11 +01:00
sebastien	f173a66793	adds new tests for compromised_password_check_failure situation.	2024-11-07 15:51:21 +01:00
Éloi Rivard	a012814eca	chore: enable flake8-bugbear ruff rules	2024-11-07 11:44:29 +01:00
sebastien	9844818280	Merge branch '179-check-passwords-on-compromised-password-databases' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases	2024-11-07 10:34:12 +01:00
sebastien	e6a9f2dcc6	Merge branch 'main' of gitlab.com:yaal/canaille into 179-check-passwords-on-compromised-password-databases	2024-11-07 09:15:29 +01:00
sebastien	56f0c9b51b	hotfix api url following manual failed request tests	2024-11-06 13:51:50 +01:00
sebastien	025da08fd3	adds flash message for user when password compromise investigation failed.	2024-11-06 13:05:32 +01:00
sebastien	fa3a5f6616	gets the emails of each admin to send them the compromised_password_check_failure_mail	2024-11-06 12:56:35 +01:00
Éloi Rivard	fe8e1160ab	refactor: move session related methods in a dedicated file	2024-11-06 09:10:43 +01:00
sebastien	9708809714	updates file names, variable names to be clearer.	2024-11-05 16:18:45 +01:00
sebastien	ca7f718353	adds mail sending to admin if failure of api HIBP request to check if password is compromised	2024-11-05 15:43:15 +01:00
sebastien	093397256b	fix url typo	2024-11-04 11:15:32 +01:00
sebastien	0acbb40ecd	consumes haveibeenpwned API directly	2024-11-04 08:55:55 +01:00
sebastien yaal	a4bd03f71c	feat: password strength indicator	2024-10-28 21:17:47 +00:00
Éloi Rivard	0b51b01031	refactor: apply ruff migrations for python 3.10+	2024-10-28 09:13:00 +01:00
Éloi Rivard	3a3cd304b8	tests: refactor logging tests ... add restaure 100% coverage	2024-10-27 21:46:47 +01:00
Éloi Rivard	52031dd2c4	refactor: move logging machinery in its own dedicated file	2024-10-27 13:54:14 +01:00
Éloi Rivard	c28a1e9351	fix: display a 500 error when SMTP configuration is defined but null ... this improves tests coverage	2024-09-15 17:58:03 +02:00
Éloi Rivard	cfabcc485c	chore: automitaclly fix typos	2024-09-11 09:33:42 +02:00
Éloi Rivard	18a711ef7d	doc: features and use cases documentation	2024-05-21 11:07:07 +02:00
Éloi Rivard	3fb5d0149d	fix: SMTP feature can be disabled again	2024-05-14 23:04:32 +02:00
Éloi Rivard	43f9f328a5	refactor: factorize features definition	2024-05-14 22:53:47 +02:00
Éloi Rivard	4791d27569	doc: CLI documentation improvements	2024-05-12 11:33:22 +02:00
Éloi Rivard	b16630063b	fix: check command when SMTP configuration is not defined	2024-05-12 10:42:41 +02:00
Éloi Rivard	16c3021a8f	refactor: Rename BaseBackend in Backend	2024-05-03 22:25:20 +02:00
Éloi Rivard	44573713ed	refactor: move BackendModel.get to Backend.get	2024-05-03 21:54:03 +02:00
Éloi Rivard	ccde88b1bf	refactor: BackendModel.get() is now Backend.instance	2024-05-03 21:46:28 +02:00
Éloi Rivard	fa6488bcd1	refactor: move BackendModel.fuzzy to Backend.fuzzy	2024-05-03 21:42:55 +02:00
Éloi Rivard	8425b2a3b8	refactor: move BackendModel.query to Backend.query	2024-05-03 21:42:54 +02:00
Éloi Rivard	69019763d4	feat: group member removal can be achieved from the group edition page	2024-04-28 19:47:57 +02:00
Éloi Rivard	288ad161d3	tests: test mail attachments mimetypes	2024-04-27 14:36:34 +02:00
Éloi Rivard	ebcaaeaded	tests: fix GHA ... For some reasons, webp mimetypes failed to be guessed on GHA.	2024-04-27 14:06:20 +02:00
Éloi Rivard	dc89a20b11	chore: configure ruff	2024-04-23 22:12:04 +02:00
Éloi Rivard	afa0a6ff1e	feat: env_prefix create_app variable can select the environment var prefix	2024-04-22 18:10:49 +02:00
Éloi Rivard	7fc887a492	feat: ENV_FILE configuration variable can customize the .env file	2024-04-22 16:37:31 +02:00
Éloi Rivard	7ad592c4de	fix: compatibility with old session IDs	2024-04-09 15:45:47 +02:00
Éloi Rivard	f3bcdafb23	fix: clean the session cookie after logout	2024-04-09 11:56:51 +02:00
Éloi Rivard	5aaccca4cf	fix: display an error message when trying to remove the last user from a group	2024-04-08 14:44:15 +02:00
Éloi Rivard	1fbb074cc5	refactor: user permissions lazy loading	2024-04-07 15:21:32 +02:00