Sertonix
8c8df11250
cargo: Update wasm-bindgen and lettre
2026-02-24 14:17:17 +01:00
lyzstrik
6f94134fdc
refactor(server): migrate to rustls 0.23 and centralize TLS logic ( #1389 )
...
This commit upgrades the TLS stack to Rustls 0.23
Key changes:
- Dependencies: Updated 'rustls' (v0.23), 'tokio-rustls' (v0.26), and 'actix-web' (v4.12.1).
- Build Fix: Configured 'rustls' to use the 'ring' provider (disabling default 'aws-lc-rs') to ensure ARMv7 compatibility.
- Refactor: Created 'server/src/tls.rs' to handle certificate loading (DRY).
- LDAP: Updated 'ldap_server.rs' to use the new TLS module and Rustls APIs.
- Healthcheck: Updated 'healthcheck.rs' to use Rustls 0.23 types.
2026-01-31 09:47:11 +01:00
Valentin Tolmer
469f35c12c
cargo: Update dependencies
2025-12-24 15:33:30 +01:00
Shawn Wilsher
a959a50e07
server: allow specifying the healthcheck addresses
...
This change adds two new optional configuration options:
- `ldap_healthcheck_host` to pair with `ldap_host`
- `http_healthcheck_host` to pair with `http_host`
These both default to `localhost` to preserve the existing behavior.
Fixes #700
2025-11-16 15:03:40 +01:00
Copilot
bf5b76269f
server: Refactor config_overrides to use Option::inspect
...
To reduce cyclomatic complexity.
2025-10-12 20:14:20 +02:00
Valentin Tolmer
1382c67de9
server: Extract configuration utilities
2025-10-10 23:28:35 +02:00
Valentin Tolmer
8a803bfb11
ldap: normalize base DN in LdapInfo, reduce memory usage
...
By making it a &'static, we can have a single allocation for all the threads/async contexts.
This also normalizes the whitespace from the user input; a trailing \n can cause weird issues with clients
2025-09-17 01:03:19 +02:00
Kumpelinus
176c49c78d
chore: upgrade Rust toolchain to 1.89 and modernize code with let-chains
2025-09-16 00:48:16 +02:00
psentee
4590463cdf
auth: serialize exp and iat claims as NumericDate to comply with RFC7519 ( #1289 )
...
Add `jti` claim to the JWT to avoid hashing collisions
2025-09-15 17:24:59 +02:00
Valentin Tolmer
f64f8625f1
Add username to password recovey emails
2025-09-14 15:44:37 +02:00
Copilot
775c5c716d
server: gracefully shut down database connection pool
2025-09-04 09:19:03 +02:00
Valentin Tolmer
5e83ed8eb0
release: v0.6.2
2025-08-18 00:06:44 +02:00
selfhoster1312
87e9311a44
meta: Fix cargo clippy failures (format strings)
2025-07-16 23:23:08 +02:00
Valentin Tolmer
74dbba0bdc
server: dependency cleanup
2025-04-09 09:30:39 +09:00
Valentin Tolmer
3556e41612
server: flatten remaining files
2025-04-09 09:30:39 +09:00
Valentin Tolmer
d38a2cd08b
server: extract graphql crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
db77a0f023
server: rename sql_backend_server -> sql_tcp_backend_server
2025-04-09 09:30:39 +09:00
Valentin Tolmer
3d61c209d2
server: small dependency cleanup
2025-04-09 09:30:39 +09:00
Valentin Tolmer
55de3ac329
server: extract the sql backend handler to a separate crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
ee21d83056
server: extract ldap operations to a crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
a49ddeaa02
server: extract opaque_handler to a separate crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
dbba4c4e26
server: extract access_control to a separate crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
0eef966c3e
server: Move PublicSchema to the domain crate
2025-04-09 09:30:39 +09:00
Valentin Tolmer
cdf43f2a69
server: cleanup extra mut in ldap handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
7450ff1028
server: Add support for deleting users and groups via LDAP
2025-04-09 09:30:39 +09:00
Valentin Tolmer
c3ae149ae3
server: add tests for ldap modify
2025-04-09 09:30:39 +09:00
Valentin Tolmer
0a05a091d8
server: split off modify requests from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
6a2a5fe7f5
server: split off create_* from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
52f22c00c3
server: split off compare from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
37a85b4c2e
server: split off password handling from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
63f8b51c88
server: split off do_bind from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
c4aca0dad7
server: split off ldap/search from ldap_handler
2025-04-09 09:30:39 +09:00
Valentin Tolmer
b8f114bd43
ldap: add support for creating groups
2025-04-08 19:15:47 -05:00
Valentin Tolmer
ba9bcb3894
chore: Migrate all the crates to edition 2024
2025-03-30 21:32:46 -05:00
Valentin Tolmer
e18f2af54f
cargo: Migrate metadata to workspace
2025-03-30 20:56:16 -05:00
Valentin Tolmer
5afcdbda65
app, server: Add an endpoint to fetch the frontend settings
2025-03-30 20:52:39 -05:00
Valentin Tolmer
e4044b7415
dependencies: Upgrade sea-orm to 1.1.8
2025-03-30 23:00:50 +02:00
Simon Broeng Jensen
2a226963ee
auth: move Permission and ValidationResults to auth crate
2025-02-22 23:18:06 +01:00
Simon Broeng Jensen
ca1c6ff645
domain-handlers: move backend handler traits to separate crate
2025-02-21 20:41:20 +01:00
Simon Broeng Jensen
f34fa1d701
cargo,server: update ldap3_proto to version 0.6.0
2025-02-21 11:27:13 +01:00
Simon Broeng Jensen
d854ace89f
domain-model: move domain::model module to separate crate
2025-02-21 10:25:07 +01:00
Simon Broeng Jensen
5d2f168554
domain + server: introduce new AttributeValue enum
2025-02-19 15:48:27 +01:00
Simon Broeng Jensen
8285e21ebb
domain: rename AttributeValue to Attribute
...
Preparation for storing the actual types for each value, which
will repurpose the AttributeValue name.
2025-02-05 16:07:05 +01:00
Simon Broeng Jensen
4c6cfeee9e
server: remove deprecated fields from CreateUserRequest
...
The fields first_name, last_name, and avatar have all been moved
to regular attributes in the database, and are available through
the GraphQL API as such as well. This commit removes the legacy
fields for each on the internal CreateUserRequest type, leaving
these to only be updateable through attributes.
The fields are still available in the GraphQL CreateUserInput
type, preserving backwards compatiblity, and if set, they will
be used for the corresponding attribute values. If both fields
and attributes are set, the values given through attributes will
superceed the fields, and be used. This change also fixes a bug,
where creation of a user would fail if either of these attributes
were set as both attribute and field, as it would attempt to
insert the attribute twice, violating a unique constraint in the
database.
2025-02-05 15:42:06 +01:00
Simon Broeng Jensen
37a683dcb2
validation: move validation crate to crates folder
2025-02-03 23:32:42 +01:00
Simon Broeng Jensen
b5e87c7226
auth: move auth crate to crates folder
2025-02-03 23:32:42 +01:00
nitnelave
dd0ba5975e
server: Adds support for whoamiOID
...
Co-authored-by: eyjhb <eyjhbb@gmail.com >
2025-02-03 23:21:44 +01:00
Simon Broeng Jensen
1b26859141
server: move domain::types to separate domain crate ( #1086 )
...
Preparation for using basic type definitions in other upcoming
modules, in particular for plugins.
2025-02-03 23:00:27 +01:00
Fabian May
417abc54e4
server: Cleanup log messages for ignored attribute warnings
...
Reduce log messages by remove line break and remove visible \n\ sequence
2025-02-03 22:52:15 +01:00
Simon Broeng Jensen
c01c7744c7
server: fix a couple of clippy warnings
2025-01-29 13:32:05 +01:00