~maxiberta/canonical-identity-provider/prevent-forgot-password-user-enumeration : changes

~maxiberta/canonical-identity-provider/prevent-forgot-password-user-enumeration » Changes from revision 1597.1.7

From Revision 1597.1.7 to 1585

Rev	Summary	Authors	Date
1597.1.7	Restructure README to remove references to unavailable profi... Restructure README to remove references to unavailable profiles	Tom Wardill	6 years ago
1597.1.6	Reverse priority of getting data to prefer POST Reverse priority of getting data to prefer POST	Tom Wardill	6 years ago
1597.1.5	Move import live to comply with style Move import live to comply with style	Tom Wardill	6 years ago
1597.1.4	Restore original branch location for saml2idp Restore original branch location for saml2idp	Tom Wardill	6 years ago
1597.1.3	Fix deprecation warnings, update preflight Fix deprecation warnings, update preflight	Tom Wardill	6 years ago
1597.1.2	Upgrade django-statsd-mozilla Upgrade django-statsd-mozilla	Tom Wardill	6 years ago
1597.1.1	Upgrade to django 1.8.18, fix tests for ALLOWED_HOSTS change... Upgrade to django 1.8.18, fix tests for ALLOWED_HOSTS changes	Tom Wardill	6 years ago
1597	Convert identityprovider.readonly to requests, which is easi... Convert identityprovider.readonly to requests, which is easier to test. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/readonly-requests/+merge/336739	Colin Watson	6 years ago
1596	Handle range/xrange changes in Python 3. Handle range/xrange changes in Python 3. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/no-xrange/+merge/336733	Colin Watson	6 years ago
1595	Convert command parsing to argparse. Convert command parsing to argparse. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/commands-argparse/+merge/336750	Colin Watson	6 years ago
1594	Consistently use find_cert_path's auto-append-filename capab... Consistently use find_cert_path's auto-append-filename capabilities Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/find-cert-path-with-filename-everywhere/+merge/335190	Daniel Manrique	6 years ago
1593	Use Python 3-style print functions. Use Python 3-style print functions. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/py3-print/+merge/336641	Colin Watson	6 years ago
1592	Make admin AuthenticationDeviceInlineForm.device_type readon... Make admin AuthenticationDeviceInlineForm.device_type readonly instead of a choice field (LP: #1745156). Merged from https://code.launchpad.net/~maxiberta/canonical-identity-provider/fix-authn-device-inline-form-type/+merge/336566	Maximiliano Bertacch...	6 years ago
1591	Add an /api/v2/accounts-bulk endpoint. Add an /api/v2/accounts-bulk endpoint. This fetches information about a set of accounts in bulk by OpenID identifier, useful for other services that need to render pages related to multiple accounts. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/api-accounts-bulk/+merge/335393	Colin Watson	6 years ago
1590	Add SP-specific metadata view. Add SP-specific metadata view. This allows URLs such as /+saml/metadata/4. If the SP with id 4 has a custom certificate, it will be used in the metadata. If not, valid metadata with the default global cert is shown. If no SP with the given primary key exists, a 404 is raised. This avoids having to tell SPs "use this metadata URL but this certificate because the one in the metadata is bad". The intended flow would be: 1- create the SPConfig, even if with partial config. 2- Add a custom cert 3- We can now give the SP's support people a metadata link with nice certificate. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/metadata-with-custom-cert/+merge/334994	Daniel Manrique	6 years ago
1589	Use the SAML remote's configured certificate, if present. Use the SAML remote's configured certificate, if present. This allows setting a custom certificate per RP. RPs for which this field is empty fall back to the global certificate configured in settings. All certificates must be generated from the global private key in settings, which is a single setting for all RPs. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/pass-custom-cert-to-django-saml2-idp/+merge/334984	Daniel Manrique	6 years ago
1588	Add "certificate" field to SAMLConfig model. Add "certificate" field to SAMLConfig model. This allows setting a custom certificate per RP. RPs for which this field is empty fall back to the global certificate configured in settings. All certificates must be generated from the global private key in settings, which is a single setting for all RPs. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/samlconfig-certificate-field/+merge/334784	Daniel Manrique	6 years ago
1587	Revert r1586 because it broke non-Canonical logins to suppor... Revert r1586 because it broke non-Canonical logins to support.canonical.com Mechanical revert by bzr merge -r 1586..1585 ./ Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/revert-r1586/+merge/334679	Daniel Manrique	6 years ago
1586	Properly apply a SAML remote's email_pattern even if the use... Properly apply a SAML remote's email_pattern even if the user's email address is not @canonical.com. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/fix-no-email-pattern-non-canonical-addresses/+merge/333482	Daniel Manrique	6 years ago
1585	- Validate SAML responses - Validate SAML responses - Update django-saml2-idp so it spits out valid SAML This was spotted by a couple of newly-very-strict SPs which were actually running our assertions against the SAML XSD and rejecting us. These remotes used the onelogin SAML library https://github.com/onelogin/python-saml. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/validate-saml-xml/+merge/333276	Daniel Manrique	6 years ago

Older »