Daniel García
|
6027b969f5
|
Delete old devices when deauthorizing user sessions
|
2019-02-16 23:06:26 +01:00 |
|
Daniel García
|
9636f33fdb
|
Implement constant time equal check for admin, 2fa recover and 2fa remember tokens
|
2019-02-11 23:45:55 +01:00 |
|
Daniel García
|
28d1588e73
|
Show version in admin panel
|
2019-02-10 16:02:46 +01:00 |
|
Daniel García
|
f3b1a5ff3e
|
Error when admin panel is disabled
|
2019-02-10 15:26:19 +01:00 |
|
Daniel García
|
ef63342e20
|
Add reset user config button
|
2019-02-06 17:34:32 +01:00 |
|
Daniel García
|
3db815b969
|
Implemented config form and fixed config priority
|
2019-02-06 17:34:30 +01:00 |
|
Daniel García
|
ade293cf52
|
Save config
|
2019-02-06 17:34:29 +01:00 |
|
Daniel García
|
877408b808
|
Implement basic config loading and updating. No save to file yet.
|
2019-02-06 17:34:29 +01:00 |
|
Daniel García
|
86ed75bf7c
|
Config can now be serialized / deserialized
|
2019-02-06 17:34:29 +01:00 |
|
Daniel García
|
c0e350b734
|
Disable icon downloads, accept optional query after icon href, format and clippy fixes
|
2019-01-28 23:58:32 +01:00 |
|
Daniel García
|
69036cc6a4
|
Add disabled user badge (no password) and deauthorize button to admin page.
|
2019-01-26 19:28:54 +01:00 |
|
Daniel García
|
a1dc47b826
|
Change config to thread-safe system, needed for a future config panel.
Improved some two factor methods.
|
2019-01-25 18:24:57 +01:00 |
|
Daniel García
|
bfd93e5b13
|
Show organizations in admin panel, implement reload templates option
|
2019-01-20 17:43:56 +01:00 |
|
Daniel García
|
a797459560
|
Implement HIBP check [WIP].
Add extra security attributes to admin cookie.
Error handling.
|
2019-01-20 15:36:33 +01:00 |
|
Daniel García
|
6cbb683f99
|
Rename admin templates to match email
|
2019-01-19 22:59:32 +01:00 |
|
Daniel García
|
92bbb98d48
|
Created base template
|
2019-01-19 22:12:52 +01:00 |
|
Daniel García
|
834c847746
|
Implement admin JWT cookie, separate JWT issuers for each type of token and migrate admin page to handlebars template
|
2019-01-19 21:41:49 +01:00 |
|
Daniel García
|
a0a08c4c5a
|
Include IP in invalid admin token error
|
2019-01-08 16:17:18 +01:00 |
|
Daniel García
|
4309df8334
|
Only create invitations when SMTP is disabled, and ignore invitations if we have a token.
Disallow users from accepting invitation twice
|
2019-01-08 15:42:26 +01:00 |
|
Nick Fox
|
0a74e79cea
|
Refactor generate_invite_claims, make org_name and org_id optional
|
2019-01-05 23:03:49 -05:00 |
|
Nick Fox
|
cec28a85ac
|
Update admin page to work with new invitation flow
|
2019-01-04 10:32:51 -05:00 |
|
Daniel García
|
b2fc0499f6
|
Finish invite functionality, and remove virtual organization
|
2018-12-30 21:40:26 +01:00 |
|
Daniel García
|
6a99849a1e
|
Implemented proper error handling, now we can do user.save($conn)?; and it works.
In the future, maybe we can do the same with the `find_by_id` methods that return an Option.
|
2018-12-30 21:31:12 +01:00 |
|
Daniel García
|
1b5134dfe2
|
Fixed delete user when 2FA is enabled, implemented delete user for admin panel, and the front-end part for invite user. Secured admin panel behind a configurable token.
|
2018-12-30 21:31:11 +01:00 |
|
Daniel García
|
5fecf09631
|
Initial version of admin panel, list users and reload user list works. No serious auth method yet, password is 'token123'
|
2018-12-30 21:31:11 +01:00 |
|