56 Commits
Author SHA1 Message Date
rainzm c4c3b925b8 fix(keystone): avoid repeated abnormal login notifications 2021-01-29 20:12:07 +08:00
rainzm 46a1312336 feat(keystone): more specific error return during authentication
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
2021-01-27 19:58:42 +08:00
rainzm c5fd651604 fix(keystone): don't send the administrator’s message to the party 2021-01-18 14:58:26 +08:00
rainzm 988c90e8f6 fix(keystone): correctly pass domain id to role-assignments 2021-01-17 20:52:18 +08:00
rainzm 1b96a290d0 feat(keystone): add options to set admin and domain admin role to notify 2021-01-17 20:52:18 +08:00
rainzm 6976851993 fix(keystone): send to the admin and the party separately when Abnormal login occurs 2021-01-14 18:25:51 +08:00
rainzm f41c840d85 feat(keystone): support alertNotify when abnormal login occur 2021-01-13 20:01:13 +08:00
Qiu Jian 57a0e8d63e fix(keystone): oidc driver turn on debug mode if log-level is debug
oidc driver turn on debug mode if log-level is debug
2020-12-08 02:49:09 +08:00
Qiu Jian 95db19f104 fix(keystone): oidc data may be encapuslated in data field
兼容一些oidc实现,返回数据包裹在data字段里
2020-11-22 11:51:01 +08:00
Qiu Jian 178e1ab8fc feature: auto create domain for sso idp 2020-11-02 13:59:50 +08:00
yunion-ci-robot 749dabc7ca Merge pull request #8237 from swordqiu/hotfix/qj-pass-make-test-20201011
fix: format errors that block make test
2020-10-12 16:09:23 +08:00
Qiu Jian 13fa3c2999 fix: ldap sync not update user's phone and email 2020-10-11 05:42:51 +08:00
Qiu Jian 5e5b0613f8 fix: format errors that block make test 2020-10-11 05:12:34 +08:00
Jian QiuandQiu Jian 585ba0ff58 fix: add keystone sync user debug info (#7633)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-26 18:41:34 +08:00
Qiu Jian ccf55963ac fix: add keystone sync user debug info 2020-08-26 00:35:35 +08:00
Jian QiuandQiu Jian fea4a6b07b fix: oauth2 not support default_project_id and default_role_id (#7622)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-25 09:57:31 +08:00
Jian QiuandQiu Jian 852a3bb13e fix: idp deletel logic cleanup (#7616)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-24 22:19:31 +08:00
Jian QiuandQiu Jian 7bab39daf9 fix: 1. remove Azure OIDC extra user scope 2. yunionauth cookie missing (#7599)
sometimes

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-21 10:53:17 +08:00
Jian QiuandQiu Jian 2b7586140a feature: do uniqueness check when create/update idp configs (#7584)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-17 10:58:57 +08:00
Zexi Li d988b41a39 Merge pull request #7491 from swordqiu/hotfix/qj-oidc-support-azure-ad-china
fix: support AzureAD oidc in china area
2020-08-06 11:53:04 +08:00
Jian QiuandQiu Jian 19b69de1dd fix: idp validate config not complete (#7488)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-06 11:49:16 +08:00
Qiu Jian 12bbbc541a fix: support AzureAD oidc in china area 2020-08-05 15:35:20 +08:00
Jian QiuandQiu Jian 0e775e68ec feature: OpenID Connect provider support (#7446)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-04 13:09:05 +08:00
Jian QiuandQiu Jian ba292dfedc fix: use json to store task error message (#7351)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-07-30 10:34:32 +08:00
Qiu Jian 0967843896 feature: unified sso login framework 2020-07-21 16:13:18 +08:00
Qiu Jian 7ba3945d86 feature: apigateway store auth state in cookie instead of sqlite 2020-07-03 16:15:23 +08:00
Qiu Jian 2183490a53 feature: keystone add support for OpenID Connection idp 2020-07-03 16:15:23 +08:00
Qiu Jian 889a35bc7a feature: 1. idp as domain resource 2. keystone support SAML IDP 2020-06-24 17:41:33 +08:00
Qiu Jian 2cf49c37dc feature: 1. allow enable/disable idp-synced-users 2. turn off user's MFA by default 2020-06-18 20:22:47 +08:00
Qiu Jian eef113b927 fix: allow any character in project/domain name, giveup displayname 2020-04-18 15:33:53 +08:00
Qiu Jian d5b3ae9f98 fix: cas auto create project fetch failure 2020-04-16 22:19:10 +08:00
Qiu Jian 57898da085 fixes: idp driver validate config support 2020-04-14 14:51:28 +08:00
Qiu Jian 9c498b2924 feature: cas user auto join designated project 2020-04-14 11:04:47 +08:00
Qiu Jian 8300ac3c08 feature: cas user auto join designated project 2020-04-14 08:27:00 +08:00
Qiu Jian faa507b3ad feature: keystone lock user returns ErrTooManyAttempts 2020-04-01 19:50:25 +08:00
Qiu Jian a96b35e364 fix: always lock login-failed user when PasswordErrorLockCount not initialized 2019-11-18 08:48:51 +08:00
Qiu Jian 54ada6b887 feature: keystone add service config API and allow config services by
API
2019-11-10 03:31:50 +08:00
Qiu Jian 6ed124713b fix: user details add password expiration info 2019-11-01 20:07:52 +08:00
Qiu Jian 93adf05547 feature: support password polices: minimal length, repeat check,
password expiration, multi auth failures locks user
2019-10-30 20:21:13 +08:00
Qiu Jian 7ae29dd497 update doc and copyright 2019-09-19 09:34:49 +08:00
Yousong Zhou f6cda7fbc1 treewide: fix "make check" 2019-09-09 07:39:27 +00:00
Qiu Jian d82b457ea5 fix: remove casfe.go 2019-09-07 22:43:00 +08:00
Qiu Jian 3591afee2e feature: keystone support CAS SSO authentication 2019-09-07 18:44:35 +08:00
Qiu Jian fea61697e9 fix: allow turn off non-default domain projects 2019-07-27 15:52:02 +08:00
Qiu Jian 2165560e0a fix: validate info when importing ldap user/group/domain 2019-07-24 15:58:19 +08:00
Qiu Jian ffae2ad7db fix: ldap sync domain may remove local usrs 2019-07-15 08:28:02 +08:00
Qiu Jian d45e2e7976 fix: generate unique name should exclude existing name 2019-07-01 18:13:46 +08:00
Qiu Jian acae166062 fix: 1. ldap sync remove domain/user errors 2. esxi compatibility issues 2019-06-29 14:20:38 +08:00
Qiu Jian aabdb3fa97 fix: misc bugfixes. 2019-06-27 16:36:22 +08:00
Qiu Jian 84eb86a757 fix: 1. auto create project after import domains 2. add actionlogs for
identity resources
2019-06-27 02:55:31 +08:00