722464daf4
example_configs: Add pgAdmin
2025-01-22 22:12:54 +01:00
0799b6bc26
server: include preserved case in user attribute value search
...
Extends the generated UserRequestFilter with an OR'ed clause for
the attribute value in both it's original case and lowercased.
2025-01-22 10:37:04 +01:00
f5fbb31e6e
server, app: Add validation for attribute names ( #1075 )
...
This commit adds support for basic validation of attribute
names at creation, and also in the schema overview. Both
user and group attributes are validated with the same rules.
For now, attribute names will be considered valid, if they
only contain alphanumeric characters and dashes.
Validation has been added the following places:
- In graphql API, for creation of both user and group attributes.
Request will be rejected, if attribute name is invalid.
- In frontend, before submitting a request to create a new user
or group attribute. Rejection here will show an error message
including a list of the invalid characters used.
As this change adds stricter validation to attributes, and, since
the rationale for this is partly compatibility with other LDAP
systems, this change also adds a warning in the schema overviews
to any attribute using invalid characters.
2025-01-22 09:57:47 +01:00
31a0cf5a4f
app: Change default alias for User & Group schema attributes ( #1082 )
...
A number of the hardcoded attributes displayed in the User
and Group schema overviews were using aliases which contain
underscores, which is not always completely supported by
clients. Therefore, this commit changes the primary alias
for each attribute to be one without underscores.
To reduce confusion with this change, and also improve the
visibility of available aliases, this commit also includes
a list of each alias, for each hardcoded attribute. This
list will also include the old primary aliases.
2025-01-21 13:46:55 +01:00
33fb59f2f7
server: Add support for querying GroupId with LDAP filters
2025-01-20 17:07:53 +01:00
fb43af1299
example_configs: update Authelia with LLDAP default settings
2025-01-19 07:02:05 +01:00
f417427635
Prevent starting up if the JWT secret is not given
...
Similarly, don't create the admin if the password is not given
2024-12-24 19:40:26 +01:00
1f26262e13
example_configs: add Hashicorp
2024-12-10 07:34:50 +01:00
42fccf4713
readme: Updated Arch Linux install-from-repository section
...
Cleaned up the Arch Linux section. Added a link to the discussions support thread.
2024-12-07 18:49:58 +01:00
928faa4bcc
example_configs: add search filter in onedev configuration
2024-12-07 07:17:52 +01:00
3895a5050d
example_configs: Update OneDev example for latest release
2024-12-06 00:21:35 +01:00
f92035b6fd
example_configs: Add Kimai
2024-11-25 22:20:09 +01:00
37a10c871f
github: Fix release bot clearing the release body
2024-11-22 23:12:36 +01:00
8397d536d9
chore: bump version to 0.6.2-alpha
2024-11-22 22:55:53 +01:00
acd39d20b1
release: 0.6.1
2024-11-22 22:47:49 +01:00
0ddeab8caa
server: Fix schema migration from v8 for sqlite and postgres
...
Neither supports limits, but we can delete all the duplicate memberships and re-insert a single one
2024-11-21 23:34:37 +01:00
64514ddfc6
example_configs: expand url for OneDev config
...
fix capitalization and expound URL example
2024-11-21 10:01:24 +01:00
c47be779a3
docs: update architecture.md
2024-11-19 22:07:02 +01:00
fea2ed5b79
example_configs: Add onedev
2024-11-19 22:01:30 +01:00
e982908768
cargo,auth,server: update opaque-ke => 0.7
2024-11-17 13:34:01 +01:00
713dbde4cb
server: Fix the instructions to silence the key_seed warning
2024-11-14 22:27:32 +01:00
579dd5e1b6
readme: add reference to terraform provider ( #1035 )
2024-11-13 16:04:41 +01:00
3828ec7624
example_configs: Update pam example for release 0.6..0
2024-11-13 12:38:45 +01:00
b8c06ebd75
chore: bump version to 0.6.1-alpha
2024-11-09 22:25:13 +01:00
130d2552ac
github: Remove release PR comment bot
...
It only runs for PRs that are mentioned in the release notes, but I only mention issues
2024-11-09 22:20:31 +01:00
098745ebc9
release: 0.6.0
2024-11-09 21:46:49 +01:00
95337e2cd8
server: Remove session-wide logging, add session_uuid to message logs
2024-11-04 21:47:26 +01:00
143eb70bee
server: Only use a single connection with SQlite
...
Several writer connections can lock the DB and cause other inserts to fail.
A single connection should be enough given the usual workloads
2024-10-30 15:35:47 +01:00
35fe521cbe
server: Correctly handle removal of the display_name attribute
2024-10-29 15:33:46 +01:00
c8601b9169
server: Correctly handle attempts to probe for password resets
2024-10-28 20:09:46 +01:00
8f6c324de7
example_configs: add ldap_ssl to vaultwarden_ldap_sync:2.0.2 ( #1011 )
2024-10-28 16:43:49 +01:00
f0fcc88f1d
server: Fix env warning for nested keys
2024-10-28 16:23:25 +01:00
c08ddecd32
server: Fix missing lowercasing when changing passwords through LDAP
2024-10-28 16:06:25 +01:00
4ebfd0525b
app: Allow custom attributes in group creation
2024-10-28 15:59:08 +01:00
a190fe7ddf
server: return custom attributes when asked for all attributes
2024-10-26 19:07:08 +02:00
df188ee83f
build(deps): bump actions/checkout from 4.2.1 to 4.2.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.2.1...v4.2.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-24 07:46:46 +02:00
52c917d967
server: improve key_seed warning
2024-10-22 00:48:40 +02:00
f01daae6a8
server: Fix env variable warning
2024-10-22 00:48:29 +02:00
62b2afa283
app: fix password reset probing
...
It was still using get, but should have used post
2024-10-22 00:38:09 +02:00
305b272cdf
app: Add support for group attributes
2024-10-22 00:37:38 +02:00
a95ac38083
example_configs: keycloak typo for first name attribute ( #1004 )
...
It should be `givenName` instead of `givenname`. Using the later one, will result in Keycloak bugging out during the sync process, and henceforth displaying an empty user list.
2024-10-18 12:52:42 +02:00
abfe2f3a17
cargo,app,auth: Update dependencies, fix breaks
2024-10-17 00:17:41 +02:00
11d766b2ba
Dockerfile: add jq/jo/curl, required by bootstrap.sh
2024-10-14 21:34:04 +02:00
56eee6908e
server: Add a way to print raw logs
...
If the variable LLDAP_RAW_LOG is set, the logs will be both formatted with tracing_forest and printed raw
2024-10-10 21:27:36 +02:00
dcb45d4f6b
Add support for bootstrapping schemas ( #991 )
...
* Moved default bootstrap dirs into single /bootstrap parent dir in order to have single docker volume bind (with fallback to previous folder hierarchy)
* Added default values for LDAP user and credentials
* Added support for bootstrapping schema
Place schema files under /bootstrap/(user|group)-schemas/*.json
Sample content:
[
{
"name" : "test_attrib",
"attributeType" : "STRING",
"isEditable" : true,
"isList" : false,
"isVisible" : true
}
]
2024-10-10 21:05:01 +02:00
a6eac55fc7
build(deps): bump actions/checkout from 4.1.7 to 4.2.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.7 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.7...v4.2.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-08 00:03:48 +02:00
1c6646d8c5
build(deps): bump docker/build-push-action from 5 to 6
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-07 23:36:28 +02:00
362e968e00
example_configs: Update base DN in grafana_ldap_config.toml
...
Use `dc=com` as the same as the default DN.
2024-10-07 18:24:33 +02:00
17bcd7645b
app: Clean up code, don't error on admin empty email
2024-10-05 23:10:40 +02:00
dcba3d17dc
app: Add support for user-created attributes
...
Note: This PR doesn't handle errors around Jpeg files very well.
Co-authored-by: Bojidar Marinov <bojidar.marinov.bg@gmail.com >
Co-authored-by: Austin Alvarado <pixelrazor@gmail.com >
2024-09-30 23:53:14 +02:00
Mathieu Bélanger