0f6987d6ba 
								
									
								
							
								 
							
						 
						
							
							
								
								avoid panics  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								5c7161d1a6 
								
									
								
							
								 
							
						 
						
							
							
								
								split sso_config into own table  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								bba76c856a 
								
									
								
							
								 
							
						 
						
							
							
								
								add sso_nonce to database, with checking  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7beebe3cdc 
								
									
								
							
								 
							
						 
						
							
							
								
								inline error responses. Cover more cases in prevalidate  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ce6a11426c 
								
									
								
							
								 
							
						 
						
							
							
								
								use String instead of &RawStr  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								92b4c7efe6 
								
									
								
							
								 
							
						 
						
							
							
								
								nullable fields  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4d39197df2 
								
									
								
							
								 
							
						 
						
							
							
								
								use migrations properly, avoid panics  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								47d5320df4 
								
									
								
							
								 
							
						 
						
							
							
								
								trivial PR feedback - missing files from web-vault patch  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								05a4a6c4a8 
								
									
								
							
								 
							
						 
						
							
							
								
								comment updates  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d0d261a346 
								
									
								
							
								 
							
						 
						
							
							
								
								safe handling of RawStrs  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								d0d476f8ef 
								
									
								
							
								 
							
						 
						
							
							
								
								cleanup  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								284d2155c0 
								
									
								
							
								 
							
						 
						
							
							
								
								policy enforcement - multiple devices  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								4674464aed 
								
									
								
							
								 
							
						 
						
							
							
								
								working sso login  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								2e907826ae 
								
									
								
							
								 
							
						 
						
							
							
								
								add required fields to schema/org form  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9254cf9d9c 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix clippy lints  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								c380d9c379 
								
									
								
							
								 
							
						 
						
							
							
								
								Support for webauthn and u2f->webauthn migrations  
							
							
								
 
							
							
						 
						4 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								3ab90259f2 
								
									
								
							
								 
							
						 
						
							
							
								
								Modify rustfmt file  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								b268c3dd1c 
								
									
								
							
								 
							
						 
						
							
							
								
								Update web vault and add unnoficialserver response  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0af3956abd 
								
									
								
							
								 
							
						 
						
							
							
								
								Run `cargo fmt` on codebase  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								043aa27aa3 
								
							
								 
							
						 
						
							
							
								
								Implement admin ability to enable/disable users  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								29c6b145ca 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove redundant user fetching from login  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								ad48e9ed0f 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix unlock on desktop clients  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								668d5c23dc 
								
									
								
							
								 
							
						 
						
							
							
								
								Removed try_trait and some formatting, particularly around imports  
							
							
								
 
							
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								a28ebcb401 
								
							
								 
							
						 
						
							
							
								
								Use local time in email notifications for new device logins  
							
							
 
							
							
							In this implementation, the `TZ` environment variable must be set
in order for the formatted output to use a more user-friendly
time zone abbreviation (e.g., `UTC`). Otherwise, the output uses
the time zone's UTC offset (e.g., `+00:00`). 
							
						 
						5 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								0807783388 
								
									
								
							
								 
							
						 
						
							
							
								
								Add ip on totp miss  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9cca64003a 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove unused dependency and simple feature, update dependencies and fix some clippy lints  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								c06162b22f 
								
							
								 
							
						 
						
							
							
								
								Handle `devicePushToken`  
							
							
 
							
							
							Mobile push isn't currently supported, but this should get rid of spurious
`Detected unexpected parameter during login: devicepushtoken` warnings. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								5cabf4d040 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix IP not shown when failed login ( Fixes   #761 )  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								912e1f93b7 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix some lints  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								bd1e8be328 
								
							
								 
							
						 
						
							
							
								
								Implement change-email, email-verification, account-recovery, and welcome notifications  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								2edecf34ff 
								
							
								 
							
						 
						
							
							
								
								Use user_uuid instead of mut twofactor  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								18bc8331f9 
								
							
								 
							
						 
						
							
							
								
								Send email when preparing 2FA JsonError  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								ebf40099f2 
								
							
								 
							
						 
						
							
							
								
								Updated authenticator TOTP  
							
							
 
							
							
							- Added security check for previouse used codes
- Allow TOTP codes with 1 step back and forward when there is a time
drift. This means in total 3 codes could be valid. But only newer codes
then the previouse used codes are excepted after that. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								ee7837d022 
								
							
								 
							
						 
						
							
							
								
								Add option to require new device emails  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								07743e490b 
								
									
								
							
								 
							
						 
						
							
							
								
								Ignore error sending device email  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								6d460b44b0 
								
							
								 
							
						 
						
							
							
								
								Use saved token for email 2fa codes  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								efd8d9f528 
								
							
								 
							
						 
						
							
							
								
								Remove some unused imports, unneeded mut variables  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								29aedd388e 
								
							
								 
							
						 
						
							
							
								
								Add email code logic and move two_factor into separate modules  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								27e0e41835 
								
							
								 
							
						 
						
							
							
								
								Add email authenticator logic  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								df71f57d86 
								
							
								 
							
						 
						
							
							
								
								Move send device email to end of password login  
							
							
 
							
							
							Send new device email after two factor authentication. 
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								60e39a9dd1 
								
							
								 
							
						 
						
							
							
								
								Move retrieve/new device from connData to separate function  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								bc6a53b847 
								
							
								 
							
						 
						
							
							
								
								Add new device email when user logs in  
							
							
								
 
							
							
						 
						6 years ago  
				
					
						
							
							
								 
						
							
							
							
								
							
								e22e290f67 
								
							
								 
							
						 
						
							
							
								
								Fix key and type variable names for mysql  
							
							
								
 
							
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								253faaf023 
								
									
								
							
								 
							
						 
						
							
							
								
								Use users duo host when required, instead of always using the global one  
							
							
								
 
							
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								8d9827c55f 
								
									
								
							
								 
							
						 
						
							
							
								
								Implement selection between global config and user settings for duo keys.  
							
							
								
 
							
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								754087b990 
								
									
								
							
								 
							
						 
						
							
							
								
								Add global duo config and document options in .env template  
							
							
								
 
							
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								cfbeb56371 
								
									
								
							
								 
							
						 
						
							
							
								
								Implement user duo, initial version  
							
							
 
							
							
							TODO:
- At the moment each user needs to configure a DUO application and input the API keys, we need to check if multiple users can register with the same keys correctly and if so we could implement a global setting.
- Sometimes the Duo frame doesn't load correctly, but canceling, reloading the page and logging in again seems to fix it for me. 
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								7d2bc9e162 
								
									
								
							
								 
							
						 
						
							
							
								
								Added option to force 2fa at logins and made some changes to two factor code.  
							
							
 
							
							
							Added newlines to config options to keep them a reasonable length. 
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								5ee04e31e5 
								
									
								
							
								 
							
						 
						
							
							
								
								Updated dependencies, removed some unnecessary clones and fixed some lints  
							
							
								
 
							
							
						 
						7 years ago  
				
					
						
							
							
								 
						
							
							
								
								
							
							
								
							
								9636f33fdb 
								
									
								
							
								 
							
						 
						
							
							
								
								Implement constant time equal check for admin, 2fa recover and 2fa remember tokens  
							
							
								
 
							
							
						 
						7 years ago