74 Commits

Author SHA1 Message Date
Jian Qiu 63ef1dad78 fix: unhandled errors (#25383)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2026-08-20 17:30:29 +08:00
Jian Qiu bfc17bc3c7 feature: assume user login support (#23964)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-12-23 13:54:04 +08:00
Jian Qiu f748fa2899 feature: user expired_at attribute support (#23723)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2025-11-14 10:52:58 +08:00
屈轩 eb82b9d9ca fix: upgrade go 1.24 (#23241) 2025-09-05 18:26:33 +08:00
Jian Qiu e7d15aca80 fix: update vendor 3.11 20240917, upgrade go to 1.21 (#21256)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-09-18 20:48:31 +08:00
Jian Qiu 09e9ffb004 fix: prevent access from anonymous user (#21242)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-09-14 19:36:40 +08:00
Jian Qiu 81a12d1f16 feature: allow manager to preapre query context (#19451)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2024-02-05 20:06:40 +08:00
Qiu Jian 37a25c3945 fix: validate policy violation when assign users for oidc IDP 2024-01-27 18:16:56 +08:00
屈轩 de0b2ae67c fix(common): distinguish system and user log by is_system_account (#18316) 2023-10-15 20:57:56 -05:00
Jian Qiu 12451b1313 fix: handle old style auth token (#18232)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-10-09 12:30:08 +08:00
Jian Qiu 48df02efdc fix: unauthorized error should return 401 (#18229)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-10-08 21:54:05 +08:00
Jian Qiu 8c115ed012 fix: missing invalid token response (#18226)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-10-08 18:27:45 +08:00
Jian Qiu 8530152079 fix: shorten keystone token (#18222)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-10-08 11:20:28 +08:00
Qiu Jian 400977c27f feature: invalidate auth token 2023-10-05 03:31:24 +08:00
屈轩 1f8e0d2330 fix(logger): add system account field (#18000) 2023-09-13 16:18:06 +08:00
Jian Qiu 23a907319a fix: policy tag filters not effect for shared resources (#17004)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-05-11 11:00:07 +08:00
Qiu Jian 6187f10c07 fix: better prompt info for user failed auth due to invalid idp status 2023-03-01 01:30:18 +08:00
Jian Qiu 21716cefb5 fix: remove mutual dependency of cloudmux on onecloud (#15621)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-12-27 01:21:26 +08:00
Zexi Li 0e2c520ecd feat(misc): use cloudmux package (#15254) 2022-10-28 19:53:03 +08:00
Qiu Jian be2c26ad99 feature: verify user with sms code 2022-08-28 12:28:24 +08:00
Jian Qiu f6c4bb7f21 fix: keystoen cronman use uninitialized admin token (#14439)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-06-13 00:00:24 +08:00
Jian Qiu f44168407e fix: log auth fail event (#14043)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-04-16 18:35:08 +08:00
Jian Qiu 2ff9be6e1d feature: add webconsole enabled user the default webconsole policy (#13837)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-03-31 13:50:33 +08:00
Jian Qiu ce836b3f77 feature: qemu encryption support (#13733)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-03-26 14:52:42 +08:00
屈轩 2aa0d9fa03 fix(keystone): auth token error (#13061) 2022-03-12 16:52:55 +08:00
Qiu Jian 5f322b440e feature: policy limited by time range 2022-02-20 01:18:22 +08:00
Qiu Jian 84a9ae95f6 feature: policy support tags 2021-12-02 07:43:10 +08:00
Qiu Jian 9e5529d584 fix: verify token with expired_at field instead of
options.TokenExpirationSeconds
2021-09-22 11:20:53 +08:00
rainzm 1c325f747d feat(keystone): more specific error return during authentication
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
2021-01-28 10:07:36 +08:00
rainzm c5223f9131 feat(keystone,apigateway): return a readable message when the user is locked or disabled 2021-01-19 17:32:21 +08:00
rainzm 2a0e36a437 feat(keystone): support projectDomainId in SAssignmentManager.FetchAll 2021-01-13 19:55:17 +08:00
Qiu Jian 2d39cb4cb0 feature: policy group support 2020-10-24 22:46:46 +08:00
Qiu Jian b2add97a0d fix: filter role assignments by project domains id or name 2020-10-15 13:01:00 +08:00
Qiu Jian 13fa3c2999 fix: ldap sync not update user's phone and email 2020-10-11 05:42:51 +08:00
Qiu Jian 332ba04bd1 fix: recode project-role rpc handle to support group role assignment
results by user or project
2020-09-09 18:17:53 +08:00
Qiu Jian 9e1ff88195 fix: prevent users in disabled idp from login 2020-09-07 18:23:21 +08:00
Yousong Zhou c2bca8ab39 Feature/yousong text (#7487)
* notify: log with context info

* region: guests: log with context info

* region: hosts: log with context info

* region: misc: remove redundant log

* region: skus: use NewInternalServerError instead of NewGeneralError

* appsrv: dispatcher: preserve text id

* appsrv: dispatcher: remove commented-out code

* cloudcommon: db_dispatcher: note errors that won't be translated

* cloudcommon: db: rbac: preserve text id

* cloudcommon: caller: preserve text id

* treewide: fix fmt string

* region: guest_actions: preserve text id

* region: guest_actions: fix fmt string

* region: usages: fix fmt string

* mcclient: hosts: remove redundant return value

* cloudcommon: fetch: preserve text id

* region: guest_template: preserve text id

* cloudcommon: db: db_dispatcher: preserve text id

* region: guest_actions: preserve text id

* httperrors: add funcs for wrap lang tag into context

* vendor: golang.org/x/text

* httperrors: error with context

* httperrors: HTTPError

* treewide: fix typo

* treewide: use en in source code

* locales: initial version
2020-08-25 15:26:31 +08:00
Jian Qiu 320d7cabcd fix: user with sso idp fail to login with password (#7552)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-13 11:24:46 +08:00
Jian Qiu b0505ba5fd Hotfix/qj password login wrong idp (#7511)
* fix: role assignment code to include group info for group users

* fix: password authentication may choose wrong idp backend

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-07 14:19:34 +08:00
Qiu Jian 0967843896 feature: unified sso login framework 2020-07-21 16:13:18 +08:00
Qiu Jian 2183490a53 feature: keystone add support for OpenID Connection idp 2020-07-03 16:15:23 +08:00
Qiu Jian 889a35bc7a feature: 1. idp as domain resource 2. keystone support SAML IDP 2020-06-24 17:41:33 +08:00
Qiu Jian c35758dd08 fix: avoid using background context 2020-05-14 16:15:54 +08:00
Qiu Jian ecb483b9be fix: prevent policy violation 2020-04-28 23:28:29 +08:00
Qiu Jian 2eb748fb02 fix: keystone username duplicate error should return 409 2020-04-10 15:51:24 +08:00
Qiu Jian 1a9c0efc2d fix: service-config-show shows service's own config 2020-04-08 20:39:25 +08:00
Qiu Jian faa507b3ad feature: keystone lock user returns ErrTooManyAttempts 2020-04-01 19:50:25 +08:00
Qiu Jian 91711a1321 feature: fix customized API documents for authenticate and quota 2020-02-06 01:45:15 +08:00
Zexi Li d149d84ccc support generate 2019-11-27 10:20:28 +08:00
Qiu Jian 54ada6b887 feature: keystone add service config API and allow config services by
API
2019-11-10 03:31:50 +08:00