Commit Graph

  • 64f402b6af chore(audit): add Dockerfile and scripts for cargo audit and deny integration kalvinparker 2025-11-09 17:57:34 +0000
  • d9db30e4b9 docs(audit): add feasibility report for webauthn-rs and webpki-roots remediation kalvinparker 2025-11-09 17:53:16 +0000
  • 6ed3d31cc0 chore(audit): add temporary license allowlist for common OSI-approved licenses; document in tracking issue kalvinparker 2025-11-09 08:38:54 +0000
  • c97fc90f40 chore(audit): ignore RUSTSEC-2023-0071 and RUSTSEC-2024-0436 in deny.toml (temporary) kalvinparker 2025-11-09 08:00:37 +0000
  • a305cf3d6d chore(audit): add advisory exceptions for RUSTSEC-2023-0071 and RUSTSEC-2024-0436 under [advisories] (timeboxed) kalvinparker 2025-11-09 07:59:10 +0000
  • a64bf18935 chore(audit): format deny.toml license exceptions as [[licenses.exceptions]] (cargo-deny compatible) kalvinparker 2025-11-09 07:57:46 +0000
  • f16723c8d8 chore(audit): add temporary deny exceptions for rsa and paste; add tracking issue and document in audit note kalvinparker 2025-11-09 07:52:27 +0000
  • 22ff36919c chore(deps): allow caret ranges for rmpv and openidconnect to permit safe published bumps kalvinparker 2025-11-09 00:30:26 +0000
  • eb077610b8 chore(deps): revert attempted openidconnect/rmpv bumps (incompatible with crates.io) kalvinparker 2025-11-09 00:25:52 +0000
  • f84d861746 chore(audit): make deny.toml parseable by cargo-deny kalvinparker 2025-11-09 00:24:15 +0000
  • 5818cbfff9 chore(audit): fix deny.toml to valid cargo-deny format kalvinparker 2025-11-09 00:23:35 +0000
  • e3d25181b5 chore(deps): attempt bump openidconnect and rmpv to avoid transitive rsa/paste kalvinparker 2025-11-09 00:22:52 +0000
  • 1f2cadc8b2 chore(audit): add cargo-deny policy, CI audit workflow and security note (2025-11-09) kalvinparker 2025-11-09 00:16:11 +0000
  • 54053f7e28 Add audit and deny command error messages to respective files kalvinparker 2025-11-08 23:20:51 +0000
  • 0951c8d220 Add supply chain audit workflow with cargo-audit and cargo-deny steps kalvinparker 2025-11-08 23:20:44 +0000
  • 951b1e3c90
    Revert Debian to Bookworm BlackDex 2025-11-05 15:29:52 +0100
  • 2be8e7e628 Fix: reorder imports and clean up whitespace in admin.rs hnolde 2025-11-04 16:54:06 +0100
  • 7e3acf26b4 Fix: update OAuth2 state storage initialization and state token encoding hnolde 2025-11-04 16:11:51 +0100
  • 96fe363ee5
    Merge branch 'main' into main Henning 2025-11-04 15:47:17 +0100
  • 9017ca265a
    Optimizations and build speedup (#6339) Mathijs van Veluw 2025-11-01 22:21:04 +0100
  • 8d30285160
    Fix issue with key-rotation and emergency-access (#6421) Mathijs van Veluw 2025-11-01 22:20:38 +0100
  • 9d68045a2e
    Fix issue with key-rotation and emergency-access BlackDex 2025-11-01 18:57:57 +0100
  • d42f073464
    Update web-vault to v2025.10.1 and xx to v1.8.0 BlackDex 2025-10-31 18:27:00 +0100
  • 65ad7f0bff
    Update to Rust v1.91 and update crates BlackDex 2025-10-31 17:55:23 +0100
  • e5c0655c74 Fix: formatting hnolde 2025-10-31 12:09:27 +0100
  • 4b584bfa00
    Fix formating and pre-commit BlackDex 2025-10-30 11:22:17 +0100
  • 9e2506eea5
    Update crates and workflows BlackDex 2025-10-30 10:51:58 +0100
  • a997ce1f80
    Misc fixes and updated typos BlackDex 2025-10-14 19:44:26 +0200
  • 41d3062001
    Update typos and remove mimalloc check from pre-commit checks BlackDex 2025-10-05 17:22:36 +0200
  • f2f882365d
    Fix release profile BlackDex 2025-10-04 16:16:49 +0200
  • 0ea5c4bbd6
    Optimizations and build speedup BlackDex 2025-09-10 23:49:25 +0200
  • 3cd3d33d00
    Improve protected actions (#6411) Daniel García 2025-10-29 21:41:34 +0100
  • 8e01bcac7c
    Don't delete token when tracking attempts Daniel García 2025-10-29 21:30:12 +0100
  • 3cdb557455
    Use saturating add Daniel García 2025-09-17 20:26:45 +0200
  • 8de1915e31
    Match usage on two factor Daniel García 2025-09-17 19:57:33 +0200
  • 0c7ab88320
    Improve protected actions Daniel García 2025-09-17 19:39:10 +0200
  • 2ee5819b56
    Use Diesels MultiConnections Derive (#6279) Mathijs van Veluw 2025-10-29 21:04:30 +0100
  • 7c597e88f9
    [Playwright] Improvements around node (#6321) Timshel 2025-10-29 20:50:54 +0100
  • d3c8d04f26
    Update crates BlackDex 2025-10-22 17:10:34 +0200
  • a63ca00984 Switch to `fromJSON` digest extraction dfunkt 2025-10-23 20:52:12 +0300
  • 4911484865
    crate updates BlackDex 2025-10-13 22:04:42 +0200
  • 9afad72f25
    Small adjustment BlackDex 2025-10-05 17:32:21 +0200
  • bf559fd6cb
    Updated some crates to keep up2date BlackDex 2025-10-05 17:12:54 +0200
  • fd03d78f15
    Implement custom connection manager BlackDex 2025-10-05 17:09:51 +0200
  • 522de62efb
    Remove macro, replaced with an function BlackDex 2025-09-21 10:34:21 +0200
  • 666d6ce968
    Adjust query_logger and some other small items BlackDex 2025-09-20 22:17:39 +0200
  • 6e8af1b8a7
    Use Diesels MultiConnections Derive BlackDex 2025-09-06 09:54:19 +0200
  • f6a5e53e43 Fix: handlebars oauth2_success, http_client, url hnolde 2025-10-22 15:23:42 +0200
  • 1269330f46 Fix: formatting issues hnolde 2025-10-22 11:50:22 +0200
  • bfbedb05d6 Fix: is_some_and and formatting issues hnolde 2025-10-22 11:15:05 +0200
  • e5934c13e9 Add XoAuth2 support to fetch the token from the SMTP Provider and refresh used by Google or Microsoft hnolde 2025-10-22 10:20:59 +0200
  • fc8e0b6c25 Upgrade Keycloak compose to trixie Timshel 2025-09-23 16:33:17 +0200
  • c3ea1114fa Playwright node improvements Timshel 2025-09-23 16:02:49 +0200
  • a85b48512c
    add seat limit for the invite dialog (#6371) Stefan Melmuk 2025-10-21 20:23:46 +0200
  • fe1a8f7738
    add missing media-src directive (#6381) Stefan Melmuk 2025-10-21 19:22:37 +0200
  • d43edb8f17
    add mail address change warning for invited accounts (#6377) Stefan Melmuk 2025-10-21 19:21:47 +0200
  • 8043f7eca7
    Fix Org identifier (#6364) Timshel 2025-10-21 19:20:18 +0200
  • e659a61581
    Add auth_request pending endpoint (#6368) Timshel 2025-10-21 19:17:52 +0200
  • 2d54cc61df
    add new billing warnings endpoint (#6369) Stefan Melmuk 2025-10-21 19:16:27 +0200
  • 37f35e680e Org invitation default to SSO when SSO_ENABLED Timshel 2025-10-21 19:05:40 +0200
  • 49958d7ec3
    add missing media-src directive Stefan Melmuk 2025-10-20 17:33:48 +0200
  • 3e389580a2
    add mail address change warning for invited accounts Stefan Melmuk 2025-10-19 23:06:35 +0200
  • 2da3635253
    add seat limit for the invite dialog Stefan Melmuk 2025-10-17 19:13:16 +0200
  • fa8f4573ab
    add new billing warnings endpoint Stefan Melmuk 2025-10-16 19:10:14 +0200
  • 212998295e Add auth_request pending endpoint Timshel 2025-10-16 18:26:50 +0200
  • ba4b290468 Fix Org identifier Timshel 2025-10-15 14:12:09 +0200
  • efa54a419b
    Update sso.rs - sso(authentik): always adopt rotated provider refresh token to prevent invalid_grant Alex Smith 2025-10-14 15:16:09 -0600
  • e16a24233c
    sso(authentik): always surface current provider refresh token from exchange Alex Smith 2025-10-14 15:09:26 -0600
  • 3f010a50af
    Change OIDC dummy identifier (#6263) Timshel 2025-10-13 21:28:37 +0200
  • e83faad8d2
    Fix `sso_user` dropped on `User::save` (#6262) Timshel 2025-10-13 21:25:53 +0200
  • 4fb6cb62fc
    Merge branch 'main' into fix/dummyIdentifier Mathijs van Veluw 2025-10-13 21:21:30 +0200
  • a79cd40ea9
    improve permission check for collections (#6278) Stefan Melmuk 2025-10-13 21:14:53 +0200
  • 3f9bc1938c improve permission check for collections Stefan Melmuk 2025-09-08 17:44:28 +0200
  • b1d84298cc
    update web vault to v2025.9.1 and allow new policy (#6340) Stefan Melmuk 2025-10-13 20:54:24 +0200
  • 53d3928709
    allow new card removal policy Stefan Melmuk 2025-10-04 20:14:49 +0200
  • 098ad447c1
    update web-vault to v2025.9.1 Stefan Melmuk 2025-10-04 20:06:33 +0200
  • 0aa7f3aedf feature: automated onboarding + confirmation cs4dev 2025-10-01 09:30:50 +0800
  • a5e8aafee0 chore: bot create empty commit for PR demo nhnghhxxl1007 2025-09-17 10:42:30 +0800
  • ba6176d36d User.save use upsert with mysql Timshel 2025-09-16 19:31:00 +0200
  • 113a5cae9f User.save use upsert with sqlite Timshel 2025-09-16 17:13:33 +0200
  • 2941f82532 Use Org uuid as identifier Timshel 2025-09-16 17:47:14 +0200
  • de632facc8 cockroachdb haras 2025-09-14 11:16:51 +0200
  • 8665d39941 flake haras 2025-09-14 11:13:37 +0200
  • 3b3316d2dd
    Update src/sso.rs Timshel 2025-09-02 15:50:05 +0000
  • 0e57f05731 Change OIDC dummy identifier Timshel 2025-09-01 20:13:02 +0200
  • 5cb8fee0ad User.save don't use replace_into Timshel 2025-09-01 19:01:53 +0200
  • e4e5a400ba Admin delete SSO association prompt Timshel 2025-09-01 18:20:17 +0200
  • a2ad1dc7c3
    update trivy-action to v0.33.0 (#6248) Stefan Melmuk 2025-08-29 13:14:39 +0200
  • 460e1daa09
    update trivy-action again with fix for setup-trivy Stefan Melmuk 2025-08-29 12:23:07 +0200
  • a311592a5f
    update trivy-action to v0.33.0 Stefan Melmuk 2025-08-29 01:43:02 +0200
  • 7cc4dfabbf
    Fix 2fa recovery endpoint (#6240) Mathijs van Veluw 2025-08-27 20:53:56 +0200
  • 35c984f2ef
    Fix 2fa recovery endpoint BlackDex 2025-08-27 20:28:00 +0200
  • 5a8736e116
    make webauthn more optional (#6160) Stefan Melmuk 2025-08-26 22:07:20 +0200
  • 1e36d8e722
    hide passkey if domain is not set Stefan Melmuk 2025-08-10 01:17:01 +0200
  • 792499b1c1
    make webauthn optional Stefan Melmuk 2025-08-10 00:41:42 +0200
  • f76362ff89
    Fix panic around sso_master_password_policy (#6233) Timshel 2025-08-26 21:18:25 +0200
  • 6db5b7115d
    Update crates, gha and web-vault (#6234) Mathijs van Veluw 2025-08-26 21:16:50 +0200
  • 3510351f4d
    Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin (#6235) Timshel 2025-08-26 21:08:43 +0200
  • ba89cf8243 Show SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION in admin Timshel 2025-08-26 18:24:22 +0200
  • 11092d022f
    Update crates, gha and web-vault BlackDex 2025-08-26 18:15:21 +0200