~roadmr/canonical-identity-provider/u2f-db-fields

From Revision 1584.1.1 to 1566

expand all

collapse all

Rev		Summary	Authors	Date	Diff	Files
1584.1.1		Validate produced SAML responses against the SAML XSD. Validate produced SAML responses against the SAML XSD. With this commit, the tests actually fail because we *are* producing invalid SAML. This will be fixed in a subsequent commit (though the fix may involve a newer version of django-saml2-idp)	Daniel Manrique	6 years ago
1584		Fix the "'AnonymousUser' object has no attribute 'person_in_... Fix the "'AnonymousUser' object has no attribute 'person_in_any_team'" oops when a non-logged-in user tries to access a SAML remote with group restrictions. This was fixed at Ricardo's suggestion by moving the group membership test to a _validate_user method (which is actually what django_saml2idp recommends, had I bothered to read the documentation), and it's my understanding in this method one should *never* get a non-logged-in user. But I left the check that protects against a User not having person_in_any_team anyway. The test I wrote with the user checks in _validate_request reproduced the oops perfectly, even if moving it to _validate_user later changed the behavior (sending the user to the login page). Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/fix-saml-team-snafu/+merge/332868	Daniel Manrique	6 years ago
1583		Restrict access to SAML services to people in teams listed i... Restrict access to SAML services to people in teams listed in a SAML SP's allowed_teams. This is a comma-separated list of (Launchpad) teams. If blank, it allows access to everyone (old behavior). Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/saml-teams/+merge/332675	Daniel Manrique	6 years ago
1582		Add allowed_teams field to SAMLConfig. Add allowed_teams field to SAMLConfig. The default is '' which is a special "allow all teams" behavior. It's expected to contain a comma-separated list of (Launchpad) team names, only members of which will be allowed access to the SAML service provider. Note that none of those behaviors are implemented in this code, this only adds the field itself, so it can be deployed without affecting running code and the code implementing this can be deployed once the DB has been migrated. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/add-saml-teams-field/+merge/332674	Daniel Manrique	6 years ago
1581		Bump isd-configs/sso revno to 310 (GTM update) Bump isd-configs/sso revno to 310 (GTM update) Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/update-isd-configs/+merge/331952	Daniel Manrique	6 years ago
1580		fixed failing tests due to non-met preconditions fixed failing tests due to non-met preconditions Tests didn't set the value of the TWOFACTOR switch but expected it to be enabled. Merged from https://code.launchpad.net/~ricardokirkner/canonical-identity-provider/fix-failing-tests-due-to-ordering/+merge/331816	Ricardo Kirkner	6 years ago
1579		support custom expiration time conditions for saml support custom expiration time conditions for saml Merged from https://code.launchpad.net/~ricardokirkner/canonical-identity-provider/saml-custom-time-conditions/+merge/331703	Ricardo Kirkner	6 years ago
1578		Fix trivial typo (recaptcha -> reCaptcha) Fix trivial typo (recaptcha -> reCaptcha) Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/trivial-1/+merge/329631	Daniel Manrique	6 years ago
1577		- Ensure username in macaroon is truly the person_name. - Ensure username in macaroon is truly the person_name. Merged from https://code.launchpad.net/~nataliabidart/canonical-identity-provider/macaroon-only-send-person-name-as-username/+merge/329205	Natalia B. Bidart	6 years ago
1576		revert macaroon lifetime change revert macaroon lifetime change Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/revert-macaroon-expiry-425/+merge/329007	Daniel Manrique	6 years ago
1575		Increase macaroon TTL by 2 months (to about 14 months total) Increase macaroon TTL by 2 months (to about 14 months total) Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/macaroon-expiry-425/+merge/328998	Daniel Manrique	6 years ago
1574		- Ensure sync-2fa gets the user from the request and not fro... - Ensure sync-2fa gets the user from the request and not from the DB using a buggy query (the username property can be the LP username and not necessarily the openid). Merged from https://code.launchpad.net/~nataliabidart/canonical-identity-provider/sync-2fa-oops/+merge/328389	Natalia	6 years ago
1573		Handle "unknown" and other weird "ip" strings in x-forwarded... Handle "unknown" and other weird "ip" strings in x-forwarded-for when using that to set remote_ip. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/unknown-ip/+merge/327793	Daniel Manrique	6 years ago
1572		- Prioritize person_name as account username. - Prioritize person_name as account username. Merged from https://code.launchpad.net/~nataliabidart/canonical-identity-provider/account-username-is-person-name/+merge/327796	Natalia B. Bidart	6 years ago
1571		Handle requests to /api/1.0/ or /api/1.1/ without an Accept ... Handle requests to /api/1.0/ or /api/1.1/ without an Accept header. Merged from https://code.launchpad.net/~cjwatson/canonical-identity-provider/no-accept-header-oops/+merge/325505	Colin Watson	6 years ago
1570		Raise DoesNotExist instead of UnicodeEncodeError when an inc... Raise DoesNotExist instead of UnicodeEncodeError when an incoming auth token contains non-ascii characters. DoesNotExist is proper model behavior when the value we're trying to query for does not exist. This is a given in this case since we never issue authtokens with non-ascii characters. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/non-ascii-authtokens/+merge/325339	Daniel Manrique	6 years ago
1569		Remove links to deprecated one.ubuntu.com site. Remove links to deprecated one.ubuntu.com site. This required adding some content for a FAQ which wasn't in the login.ubuntu.com/+faq page. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/remove-one-links/+merge/324547	Daniel Manrique	7 years ago
1568		Replace google analytics with google tag manager. Replace google analytics with google tag manager. Merged from https://code.launchpad.net/~blr/canonical-identity-provider/ga-tag-manager/+merge/317165	Kit Randel	7 years ago
1567		Update the TERMS_OF_SERVICE_URL setting to a URL that's acti... Update the TERMS_OF_SERVICE_URL setting to a URL that's active. Merged from https://code.launchpad.net/~roadmr/canonical-identity-provider/fix-tos-url/+merge/324325	Daniel Manrique	7 years ago
1566		extract deeplink urls from SAMLConfig entries in database extract deeplink urls from SAMLConfig entries in database Merged from https://code.launchpad.net/~ricardokirkner/canonical-identity-provider/saml-links-support/+merge/323934	Ricardo Kirkner	7 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1