595 commits

Author	SHA1	Message	Date
sebastien	c13b590cd9	final tests for password compromise investigation failure	2024-11-12 09:18:55 +01:00
sebastien	834eaaa2c4	refacto test	2024-11-08 15:16:38 +01:00
sebastien	d951c2e18d	new tests on failure of api request with htmx and without SMTP	2024-11-08 15:15:12 +01:00
sebastien	f173a66793	adds new tests for compromised_password_check_failure situation.	2024-11-07 15:51:21 +01:00
sebastien	289176a086	replaces 'pwned' by 'compromised'	2024-11-06 15:57:51 +01:00
sebastien	b47c949239	adds tests for check if password is compromised or not	2024-11-05 16:59:03 +01:00
sebastien	ff871f1340	updates tests with compromised password check with api HIBP	2024-11-05 15:44:25 +01:00
sebastien yaal	a4bd03f71c	feat: password strength indicator	2024-10-28 21:17:47 +00:00
Éloi Rivard	3a3cd304b8	tests: refactor logging tests ... add restaure 100% coverage	2024-10-27 21:46:47 +01:00
Félix Rohrlich	603eab0b3c	refactor : added proper security logging level and refactored change email logging	2024-10-21 11:17:55 +02:00
Félix Rohrlich	038e6c094e	feat: Added security logs for email update, forgotten password mail, token emission/refresh/revokation, new consent, consent revokation #177	2024-10-14 14:04:39 +02:00
Félix Rohrlich	545fb2d342	feat: change password events are logged in #177	2024-10-09 15:55:01 +02:00
Éloi Rivard	b14cc2b5ad	refactor: separate the loading of User permissions	2024-09-18 10:00:58 +02:00
Éloi Rivard	b55b42787f	tests: add assertions on account permissions tests	2024-09-17 20:23:30 +02:00
Éloi Rivard	001d635295	tests: missing client_id on OIDC authorization page	2024-09-13 15:08:23 +02:00
Éloi Rivard	cfabcc485c	chore: automitaclly fix typos	2024-09-11 09:33:42 +02:00
Éloi Rivard	e5328837fd	chore: pre-commit upgrade	2024-07-25 16:47:45 +02:00
Éloi Rivard	127d56f713	chore: dependencies update	2024-07-25 16:44:43 +02:00
Éloi Rivard	b46102bb75	fix: crash for passwordless users at login when no SMTP server was configured	2024-05-14 23:15:41 +02:00
Éloi Rivard	3fb5d0149d	fix: SMTP feature can be disabled again	2024-05-14 23:04:32 +02:00
Éloi Rivard	25f2b6dedd	feat: model management commands	2024-05-13 14:16:14 +02:00
Éloi Rivard	5beee67a61	fix: User group deletion without reading User.groups with LDAP backend	2024-05-12 22:28:32 +02:00
Éloi Rivard	b16630063b	fix: check command when SMTP configuration is not defined	2024-05-12 10:42:41 +02:00
Éloi Rivard	0e6e4d0cb9	tests: fix CI	2024-05-07 17:36:32 +02:00
Éloi Rivard	4e99eaecea	tests: remove SQLAlchemy warnings on double deletions	2024-05-07 16:19:50 +02:00
Éloi Rivard	e44b2bf469	tests: fix CI	2024-05-03 22:35:57 +02:00
Éloi Rivard	16c3021a8f	refactor: Rename BaseBackend in Backend	2024-05-03 22:25:20 +02:00
Éloi Rivard	473a262ea2	refactor: move BackendModel.reload to Backend.reload	2024-05-03 22:25:20 +02:00
Éloi Rivard	2ccdaeadf6	refactor: move BackendModel.delete to Backend.delete	2024-05-03 22:22:08 +02:00
Éloi Rivard	09588e0f48	refactor: move BackendModel.save to Backend.save	2024-05-03 22:22:06 +02:00
Éloi Rivard	44573713ed	refactor: move BackendModel.get to Backend.get	2024-05-03 21:54:03 +02:00
Éloi Rivard	fa6488bcd1	refactor: move BackendModel.fuzzy to Backend.fuzzy	2024-05-03 21:42:55 +02:00
Éloi Rivard	8425b2a3b8	refactor: move BackendModel.query to Backend.query	2024-05-03 21:42:54 +02:00
Éloi Rivard	4ce9f77a14	tests: use time-travel instead of freezegun	2024-05-02 10:26:32 +02:00
Éloi Rivard	69019763d4	feat: group member removal can be achieved from the group edition page	2024-04-28 19:47:57 +02:00
Éloi Rivard	69b565e1ad	refactor: LDAP backend tolerates double deletions	2024-04-28 16:18:36 +02:00
Éloi Rivard	c10a33da6d	tests: fix unit tests with pytest-xdist	2024-04-28 09:22:59 +02:00
Éloi Rivard	288ad161d3	tests: test mail attachments mimetypes	2024-04-27 14:36:34 +02:00
Éloi Rivard	ebcaaeaded	tests: fix GHA ... For some reasons, webp mimetypes failed to be guessed on GHA.	2024-04-27 14:06:20 +02:00
Éloi Rivard	dc89a20b11	chore: configure ruff	2024-04-23 22:12:04 +02:00
Éloi Rivard	afa0a6ff1e	feat: env_prefix create_app variable can select the environment var prefix	2024-04-22 18:10:49 +02:00
Éloi Rivard	7fc887a492	feat: ENV_FILE configuration variable can customize the .env file	2024-04-22 16:37:31 +02:00
Éloi Rivard	69617c1005	tests: use only use Model.identifier when this is pertinent	2024-04-17 15:50:39 +02:00
Éloi Rivard	acf8acf29f	fix: locked users cannot use OIDC authorization codes	2024-04-17 13:05:14 +02:00
Éloi Rivard	6180e5fce2	tests: rename tests in test_authorization_code_flow.py	2024-04-17 12:58:58 +02:00
Éloi Rivard	354a406966	tests: move token expiration tests in their own file	2024-04-17 12:56:35 +02:00
Éloi Rivard	b6659f47e7	tests: refactor test_refresh_token	2024-04-17 12:42:26 +02:00
Éloi Rivard	ba394af338	tests: refactor test_cannot_refresh_token_for_locked_users	2024-04-17 12:23:54 +02:00
Éloi Rivard	fc8c0da912	fix: locked users cannot use refresh tokens	2024-04-17 12:07:11 +02:00
Éloi Rivard	31423cde1a	refactor: split oidc.authorize endpoint in several smaller functions	2024-04-17 11:56:44 +02:00