Jian Qiu
63ef1dad78
fix: unhandled errors ( #25383 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2026-08-20 17:30:29 +08:00
Jian Qiu
bfc17bc3c7
feature: assume user login support ( #23964 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-12-23 13:54:04 +08:00
Jian Qiu
f748fa2899
feature: user expired_at attribute support ( #23723 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2025-11-14 10:52:58 +08:00
屈轩
eb82b9d9ca
fix: upgrade go 1.24 ( #23241 )
2025-09-05 18:26:33 +08:00
Jian Qiu
e7d15aca80
fix: update vendor 3.11 20240917, upgrade go to 1.21 ( #21256 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-09-18 20:48:31 +08:00
Jian Qiu
09e9ffb004
fix: prevent access from anonymous user ( #21242 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-09-14 19:36:40 +08:00
Jian Qiu
81a12d1f16
feature: allow manager to preapre query context ( #19451 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-02-05 20:06:40 +08:00
Qiu Jian
37a25c3945
fix: validate policy violation when assign users for oidc IDP
2024-01-27 18:16:56 +08:00
屈轩
de0b2ae67c
fix(common): distinguish system and user log by is_system_account ( #18316 )
2023-10-15 20:57:56 -05:00
Jian Qiu
12451b1313
fix: handle old style auth token ( #18232 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-10-09 12:30:08 +08:00
Jian Qiu
48df02efdc
fix: unauthorized error should return 401 ( #18229 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-10-08 21:54:05 +08:00
Jian Qiu
8c115ed012
fix: missing invalid token response ( #18226 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-10-08 18:27:45 +08:00
Jian Qiu
8530152079
fix: shorten keystone token ( #18222 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-10-08 11:20:28 +08:00
Qiu Jian
400977c27f
feature: invalidate auth token
2023-10-05 03:31:24 +08:00
屈轩
1f8e0d2330
fix(logger): add system account field ( #18000 )
2023-09-13 16:18:06 +08:00
Jian Qiu
23a907319a
fix: policy tag filters not effect for shared resources ( #17004 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-05-11 11:00:07 +08:00
Qiu Jian
6187f10c07
fix: better prompt info for user failed auth due to invalid idp status
2023-03-01 01:30:18 +08:00
Jian Qiu
21716cefb5
fix: remove mutual dependency of cloudmux on onecloud ( #15621 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-12-27 01:21:26 +08:00
Zexi Li
0e2c520ecd
feat(misc): use cloudmux package ( #15254 )
2022-10-28 19:53:03 +08:00
Qiu Jian
be2c26ad99
feature: verify user with sms code
2022-08-28 12:28:24 +08:00
Jian Qiu
f6c4bb7f21
fix: keystoen cronman use uninitialized admin token ( #14439 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-06-13 00:00:24 +08:00
Jian Qiu
f44168407e
fix: log auth fail event ( #14043 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-04-16 18:35:08 +08:00
Jian Qiu
2ff9be6e1d
feature: add webconsole enabled user the default webconsole policy ( #13837 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-03-31 13:50:33 +08:00
Jian Qiu
ce836b3f77
feature: qemu encryption support ( #13733 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-03-26 14:52:42 +08:00
屈轩
2aa0d9fa03
fix(keystone): auth token error ( #13061 )
2022-03-12 16:52:55 +08:00
Qiu Jian
5f322b440e
feature: policy limited by time range
2022-02-20 01:18:22 +08:00
Qiu Jian
84a9ae95f6
feature: policy support tags
2021-12-02 07:43:10 +08:00
Qiu Jian
9e5529d584
fix: verify token with expired_at field instead of
...
options.TokenExpirationSeconds
2021-09-22 11:20:53 +08:00
rainzm
1c325f747d
feat(keystone): more specific error return during authentication
...
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
2021-01-28 10:07:36 +08:00
rainzm
c5223f9131
feat(keystone,apigateway): return a readable message when the user is locked or disabled
2021-01-19 17:32:21 +08:00
rainzm
2a0e36a437
feat(keystone): support projectDomainId in SAssignmentManager.FetchAll
2021-01-13 19:55:17 +08:00
Qiu Jian
2d39cb4cb0
feature: policy group support
2020-10-24 22:46:46 +08:00
Qiu Jian
b2add97a0d
fix: filter role assignments by project domains id or name
2020-10-15 13:01:00 +08:00
Qiu Jian
13fa3c2999
fix: ldap sync not update user's phone and email
2020-10-11 05:42:51 +08:00
Qiu Jian
332ba04bd1
fix: recode project-role rpc handle to support group role assignment
...
results by user or project
2020-09-09 18:17:53 +08:00
Qiu Jian
9e1ff88195
fix: prevent users in disabled idp from login
2020-09-07 18:23:21 +08:00
Yousong Zhou
c2bca8ab39
Feature/yousong text ( #7487 )
...
* notify: log with context info
* region: guests: log with context info
* region: hosts: log with context info
* region: misc: remove redundant log
* region: skus: use NewInternalServerError instead of NewGeneralError
* appsrv: dispatcher: preserve text id
* appsrv: dispatcher: remove commented-out code
* cloudcommon: db_dispatcher: note errors that won't be translated
* cloudcommon: db: rbac: preserve text id
* cloudcommon: caller: preserve text id
* treewide: fix fmt string
* region: guest_actions: preserve text id
* region: guest_actions: fix fmt string
* region: usages: fix fmt string
* mcclient: hosts: remove redundant return value
* cloudcommon: fetch: preserve text id
* region: guest_template: preserve text id
* cloudcommon: db: db_dispatcher: preserve text id
* region: guest_actions: preserve text id
* httperrors: add funcs for wrap lang tag into context
* vendor: golang.org/x/text
* httperrors: error with context
* httperrors: HTTPError
* treewide: fix typo
* treewide: use en in source code
* locales: initial version
2020-08-25 15:26:31 +08:00
Jian Qiu
320d7cabcd
fix: user with sso idp fail to login with password ( #7552 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2020-08-13 11:24:46 +08:00
Jian Qiu
b0505ba5fd
Hotfix/qj password login wrong idp ( #7511 )
...
* fix: role assignment code to include group info for group users
* fix: password authentication may choose wrong idp backend
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2020-08-07 14:19:34 +08:00
Qiu Jian
0967843896
feature: unified sso login framework
2020-07-21 16:13:18 +08:00
Qiu Jian
2183490a53
feature: keystone add support for OpenID Connection idp
2020-07-03 16:15:23 +08:00
Qiu Jian
889a35bc7a
feature: 1. idp as domain resource 2. keystone support SAML IDP
2020-06-24 17:41:33 +08:00
Qiu Jian
c35758dd08
fix: avoid using background context
2020-05-14 16:15:54 +08:00
Qiu Jian
ecb483b9be
fix: prevent policy violation
2020-04-28 23:28:29 +08:00
Qiu Jian
2eb748fb02
fix: keystone username duplicate error should return 409
2020-04-10 15:51:24 +08:00
Qiu Jian
1a9c0efc2d
fix: service-config-show shows service's own config
2020-04-08 20:39:25 +08:00
Qiu Jian
faa507b3ad
feature: keystone lock user returns ErrTooManyAttempts
2020-04-01 19:50:25 +08:00
Qiu Jian
91711a1321
feature: fix customized API documents for authenticate and quota
2020-02-06 01:45:15 +08:00
Zexi Li
d149d84ccc
support generate
2019-11-27 10:20:28 +08:00
Qiu Jian
54ada6b887
feature: keystone add service config API and allow config services by
...
API
2019-11-10 03:31:50 +08:00