~maxiberta/canonical-identity-provider/flake8-import-order : changes

~maxiberta/canonical-identity-provider/flake8-import-order » Changes from revision 1600

From Revision 1600 to 1581

Rev	Summary	Authors	Date
1600	Add flake8 import order check to `make lint` target. Add flake8 import order check to `make lint` target.	Maximiliano Bertacch...	6 years ago
1599	Upgrade flake8 to 3.5.0 and fix code style accordingly. Upgrade flake8 to 3.5.0 and fix code style accordingly.	Maximiliano Bertacch...	6 years ago
1598	Update to django 1.8.18 and fix deprecation warnings Update to django 1.8.18 and fix deprecation warnings Merged from https://code.launchpad.net/~tom-howrandom/canonical-identity-provider/canonical-identity-provider/+merge/337071	Tom Wardill	6 years ago
1597	Convert identityprovider.readonly to requests, which is easi... Convert identityprovider.readonly to requests, which is easier to test. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/readonly-requests/+merge/336739	Colin Watson	6 years ago
1596	Handle range/xrange changes in Python 3. Handle range/xrange changes in Python 3. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/no-xrange/+merge/336733	Colin Watson	6 years ago
1595	Convert command parsing to argparse. Convert command parsing to argparse. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/commands-argparse/+merge/336750	Colin Watson	6 years ago
1594	Consistently use find_cert_path's auto-append-filename capab... Consistently use find_cert_path's auto-append-filename capabilities Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/find-cert-path-with-filename-everywhere/+merge/335190	Daniel Manrique	6 years ago
1593	Use Python 3-style print functions. Use Python 3-style print functions. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/py3-print/+merge/336641	Colin Watson	6 years ago
1592	Make admin AuthenticationDeviceInlineForm.device_type readon... Make admin AuthenticationDeviceInlineForm.device_type readonly instead of a choice field (LP: #1745156). Merged from https://code.launchpad.net/~maxiberta/canonical-identity-provider/fix-authn-device-inline-form-type/+merge/336566	Maximiliano Bertacch...	6 years ago
1591	Add an /api/v2/accounts-bulk endpoint. Add an /api/v2/accounts-bulk endpoint. This fetches information about a set of accounts in bulk by OpenID identifier, useful for other services that need to render pages related to multiple accounts. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/api-accounts-bulk/+merge/335393	Colin Watson	6 years ago
1590	Add SP-specific metadata view. Add SP-specific metadata view. This allows URLs such as /+saml/metadata/4. If the SP with id 4 has a custom certificate, it will be used in the metadata. If not, valid metadata with the default global cert is shown. If no SP with the given primary key exists, a 404 is raised. This avoids having to tell SPs "use this metadata URL but this certificate because the one in the metadata is bad". The intended flow would be: 1- create the SPConfig, even if with partial config. 2- Add a custom cert 3- We can now give the SP's support people a metadata link with nice certificate. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/metadata-with-custom-cert/+merge/334994	Daniel Manrique	6 years ago
1589	Use the SAML remote's configured certificate, if present. Use the SAML remote's configured certificate, if present. This allows setting a custom certificate per RP. RPs for which this field is empty fall back to the global certificate configured in settings. All certificates must be generated from the global private key in settings, which is a single setting for all RPs. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/pass-custom-cert-to-django-saml2-idp/+merge/334984	Daniel Manrique	6 years ago
1588	Add "certificate" field to SAMLConfig model. Add "certificate" field to SAMLConfig model. This allows setting a custom certificate per RP. RPs for which this field is empty fall back to the global certificate configured in settings. All certificates must be generated from the global private key in settings, which is a single setting for all RPs. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/samlconfig-certificate-field/+merge/334784	Daniel Manrique	6 years ago
1587	Revert r1586 because it broke non-Canonical logins to suppor... Revert r1586 because it broke non-Canonical logins to support.canonical.com Mechanical revert by bzr merge -r 1586..1585 ./ Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/revert-r1586/+merge/334679	Daniel Manrique	6 years ago
1586	Properly apply a SAML remote's email_pattern even if the use... Properly apply a SAML remote's email_pattern even if the user's email address is not @canonical.com. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/fix-no-email-pattern-non-canonical-addresses/+merge/333482	Daniel Manrique	6 years ago
1585	- Validate SAML responses - Validate SAML responses - Update django-saml2-idp so it spits out valid SAML This was spotted by a couple of newly-very-strict SPs which were actually running our assertions against the SAML XSD and rejecting us. These remotes used the onelogin SAML library https://github.com/onelogin/python-saml. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/validate-saml-xml/+merge/333276	Daniel Manrique	6 years ago
1584	Fix the "'AnonymousUser' object has no attribute 'person_in_... Fix the "'AnonymousUser' object has no attribute 'person_in_any_team'" oops when a non-logged-in user tries to access a SAML remote with group restrictions. This was fixed at Ricardo's suggestion by moving the group membership test to a _validate_user method (which is actually what django_saml2idp recommends, had I bothered to read the documentation), and it's my understanding in this method one should never get a non-logged-in user. But I left the check that protects against a User not having person_in_any_team anyway. The test I wrote with the user checks in _validate_request reproduced the oops perfectly, even if moving it to _validate_user later changed the behavior (sending the user to the login page). Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/fix-saml-team-snafu/+merge/332868	Daniel Manrique	6 years ago
1583	Restrict access to SAML services to people in teams listed i... Restrict access to SAML services to people in teams listed in a SAML SP's allowed_teams. This is a comma-separated list of (Launchpad) teams. If blank, it allows access to everyone (old behavior). Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/saml-teams/+merge/332675	Daniel Manrique	6 years ago
1582	Add allowed_teams field to SAMLConfig. Add allowed_teams field to SAMLConfig. The default is '' which is a special "allow all teams" behavior. It's expected to contain a comma-separated list of (Launchpad) team names, only members of which will be allowed access to the SAML service provider. Note that none of those behaviors are implemented in this code, this only adds the field itself, so it can be deployed without affecting running code and the code implementing this can be deployed once the DB has been migrated. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/add-saml-teams-field/+merge/332674	Daniel Manrique	6 years ago
1581	Bump isd-configs/sso revno to 310 (GTM update) Bump isd-configs/sso revno to 310 (GTM update) Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/update-isd-configs/+merge/331952	Daniel Manrique	6 years ago

Older »