ezidam

phil/ezidam

Fork 0

Commit graph

03eb2c9da9 added avatar logo, based off name/username Philippe Loctaux 2023-04-14 09:21:46 +02:00
6b911f0f69 settings/personal: timezone field, use tom-select to get search field Philippe Loctaux 2023-04-13 22:04:02 +02:00
f6707af58d footer: display time with timezone, use UTC when user is not logged in Philippe Loctaux 2023-04-13 22:02:35 +02:00
e49c146dfd users: store timezone, default is "UTC" Philippe Loctaux 2023-04-13 22:01:27 +02:00
1168e1494c added settings/visual: moved theme toggle here Philippe Loctaux 2023-04-12 09:30:59 +02:00
b05361510a settings/security: change password Philippe Loctaux 2023-04-10 18:58:57 +02:00
a67c7559b9 settings/security: generate paper key Philippe Loctaux 2023-04-10 15:17:08 +02:00
c1daa34f2c settings/security: logout everywhere: revoke all refresh tokens, new refresh + jwt Philippe Loctaux 2023-04-07 18:30:27 +02:00
4d9305f3d2 settings/security: display page Philippe Loctaux 2023-04-07 17:48:50 +02:00
11e2894621 admin/security: show flash, confirm action with modal Philippe Loctaux 2023-04-07 17:46:39 +02:00
19840b31e6 logo: full color with a white overlay Philippe Loctaux 2023-04-06 11:14:24 +02:00
a47e4c204a personal settings: update username, name, email Philippe Loctaux 2023-04-05 23:41:25 +02:00
1346b57b30 tests: fixed logo route Philippe Loctaux 2023-04-05 20:18:13 +02:00
29fbcb6428 ezidam: user settings: show personal info Philippe Loctaux 2023-04-05 19:59:04 +02:00
71643f6e37 ezidam: header: dont put settings Philippe Loctaux 2023-04-05 19:58:04 +02:00
cdcdba2b9a ezidam: split home routes Philippe Loctaux 2023-04-05 18:09:32 +02:00
92a08db8fe ezidam: added access_token guard, oauth/userinfo endpoint Philippe Loctaux 2023-04-04 23:16:34 +02:00
d14c3da06a ezidam: well-known: wrap jwks in "keys" object Philippe Loctaux 2023-04-04 00:24:43 +02:00
9af447d110 allow clippy enum_variant_names Philippe Loctaux 2023-04-04 00:06:16 +02:00
fe24825c3b ezidam: oauth: added token endpoint, handling "authorization_code" and "refresh_token" grants Philippe Loctaux 2023-04-04 00:03:41 +02:00
dd69fc99ea ezidam: added cors, http basic auth request guard Philippe Loctaux 2023-04-03 17:59:02 +02:00
3ce6154dfa ezidam: oauth: auth request: optional response mode, default is query Philippe Loctaux 2023-04-03 17:57:49 +02:00
ba9ecb9f5c tokens: return result as string, moved cookie handling outside Philippe Loctaux 2023-04-03 17:56:57 +02:00
088a1f0076 footer: display time in utc Philippe Loctaux 2023-04-03 11:39:10 +02:00
00c8d90355 ezidam: jwt: forward if can't find refresh token Philippe Loctaux 2023-04-03 11:13:42 +02:00
317dc23735 ezidam: apps: handle when application is archived Philippe Loctaux 2023-04-02 02:12:22 +02:00
4b8b82e577 ezidam: list apps: show confidentiality Philippe Loctaux 2023-04-02 02:05:51 +02:00
e06bd31b4c ezidam: apps: archive, and revoke refresh tokens associated with app Philippe Loctaux 2023-04-02 01:59:40 +02:00
956f28f7e5 refresh_tokens: add app inside each refresh token Philippe Loctaux 2023-04-02 01:10:27 +02:00
2caf584cb7 ezidam: apps: view, update, new secret Philippe Loctaux 2023-04-02 00:52:16 +02:00
4b99905ee0 ezidam: nicer view for flash Philippe Loctaux 2023-04-02 00:50:05 +02:00
f911fc665c ezidam: apps: form, create new app Philippe Loctaux 2023-03-31 23:57:58 +02:00
d2e1792f3c ezidam: ability to clone page Philippe Loctaux 2023-03-31 23:56:23 +02:00
b64766cd4b updated logo, added favicon (thanks Remi!) Philippe Loctaux 2023-03-31 17:08:40 +02:00
c8700cfdc8 ezidam: settings: branding: show updated_at Philippe Loctaux 2023-03-31 00:46:09 +02:00
14bff68cbf ezidam: apps: don't include ezidam Philippe Loctaux 2023-03-30 23:57:06 +02:00
23f69e8377 ezidam: icons: moved rest of icons to the new system Philippe Loctaux 2023-03-30 23:48:15 +02:00
f5fee63a15 ezidam: icons: moved to own module, macro to generate struct constants, ability to use as tera templates Philippe Loctaux 2023-03-30 23:40:34 +02:00
0c04322189 ezidam: using fonts from https://systemfontstack.com Philippe Loctaux 2023-03-30 20:10:48 +02:00
f6295f72d7 ezidam: removed inter font Philippe Loctaux 2023-03-30 19:20:58 +02:00
574ee62092 ezidam: added admin/apps listing Philippe Loctaux 2023-03-30 00:55:45 +02:00
e2a7d7625e ezidam: shell: optional blocks to load js libs + additional javascript Philippe Loctaux 2023-03-30 00:54:27 +02:00
42d88cc2dd apps: get all with filter, serde Philippe Loctaux 2023-03-30 00:53:57 +02:00
842be36a1b ezidam: admin settings: moved template in folder Philippe Loctaux 2023-03-29 18:17:47 +02:00
8ab88ae4e1 ezidam: admin settings: added security page: logout everyone Philippe Loctaux 2023-03-26 23:36:36 +02:00
d3e88b1f7b ezidam: guards: jwt: when user token is invalid, dont outcome a failure, forward to next route Philippe Loctaux 2023-03-26 23:35:44 +02:00
9687116063 ezidam: refactor jwt and refresh token generate in "tokens" mod Philippe Loctaux 2023-03-26 19:25:50 +02:00
23b1e3ea4f dockerfile: set workdir Philippe Loctaux 2023-03-26 00:34:26 +01:00
e7fe6ef20f dockerfile: use alpine for /tmp, move everything in /ezidam Philippe Loctaux 2023-03-26 00:14:26 +01:00
3532f80882 ezidam: branding page: logo update/delete, update business name Philippe Loctaux 2023-03-25 23:32:46 +01:00
d8fe336b06 ci: update job name, speed up sqlx compile time queries Philippe Loctaux 2023-03-25 12:28:41 +01:00
540e2d8aed database: fixed sqlx compile error Philippe Loctaux 2023-03-25 12:14:11 +01:00
5b35c3b339 jwt: updated dependencies Philippe Loctaux 2023-03-24 23:26:02 +01:00
51ceee9295 update dependencies Philippe Loctaux 2023-03-24 23:21:54 +01:00
784365d6f9 cargo update Philippe Loctaux 2023-03-24 23:06:47 +01:00
7f4862ff30 upgraded to rocket v0.5-rc3 Philippe Loctaux 2023-03-24 22:56:01 +01:00
eab918d643 ezidam: admin: empty settings page Philippe Loctaux 2023-03-24 22:18:52 +01:00
efebe2fa80 ezidam: new menu system, with main and submenus Philippe Loctaux 2023-03-24 22:15:07 +01:00
ddf6f25dd2 ezidam: empty admin dashboard, link for admins to access it Philippe Loctaux 2023-03-23 21:31:37 +01:00
3f0b09008c logo: alt text Philippe Loctaux 2023-03-23 21:12:23 +01:00
75f9b9dca3 menu: 2 kind of menus: user and admin Philippe Loctaux 2023-03-23 21:11:42 +01:00
1facd2ffbf added robots.txt Philippe Loctaux 2023-03-22 22:16:16 +01:00
228b86f5a3 openid: same sub for all clients Philippe Loctaux 2023-03-22 19:11:38 +01:00
2f32818a72 deploy with caprover cli Philippe Loctaux 2023-03-21 22:06:38 +01:00
5e1eac4d78 ezidam: add templates to dockerfile Philippe Loctaux 2023-03-21 00:12:25 +01:00
8365bc5dff ezidam: dont put relative path for static files, bundle them in docker image Philippe Loctaux 2023-03-20 23:16:43 +01:00
7aa5c96f7a ci: docker pipeline depends on rust Philippe Loctaux 2023-03-20 00:04:28 +01:00
2c3dfcdeb3 ci: use of woodpecker mutli-pipelines Philippe Loctaux 2023-03-20 00:03:03 +01:00
4a7723a9a8 ci: docker depends on test, put LABEL at bottom of dockerfile Philippe Loctaux 2023-03-19 23:55:52 +01:00
971d2f46f4 ci: build and push docker image on master Philippe Loctaux 2023-03-19 23:50:26 +01:00
bad54cece3 ezidam: redirect: dont generate jwt + refresh token if already signed in Philippe Loctaux 2023-03-19 22:52:53 +01:00
1dec56ed14 ezidam: authorize: don't prompt login if already authenticated Philippe Loctaux 2023-03-19 22:52:22 +01:00
8db0bbb874 if access token expired, use refresh token, and get new access + refresh tokens Philippe Loctaux 2023-03-19 20:03:30 +01:00
9172155893 ezidam: header: display name, username, email Philippe Loctaux 2023-03-19 00:48:41 +01:00
c9ef821d2b ezidam: request guards: jwt admin, jwt user, verify jwt Philippe Loctaux 2023-03-19 00:25:35 +01:00
009b8664fd revoke all refresh tokens and use all authorization codes for user Philippe Loctaux 2023-03-18 22:03:03 +01:00
5100aa1b4e ezidam: added logout page, added RefreshToken guard Philippe Loctaux 2023-03-18 21:49:08 +01:00
49b3a3d1fe openid: configuration: added jwt claims Philippe Loctaux 2023-03-18 21:47:25 +01:00
72c67a7a82 ezidam: store access token in cookie Philippe Loctaux 2023-03-18 16:48:40 +01:00
1b2a9d1af7 ezidam: store refresh token in cookie Philippe Loctaux 2023-03-18 16:43:33 +01:00
e99115e174 ezidam + jwt: get key, import private key, create jwt claims and sign them Philippe Loctaux 2023-03-18 16:14:26 +01:00
ef8d75ecee ezidam + refresh tokens: create and insert refresh token Philippe Loctaux 2023-03-18 15:16:15 +01:00
609933d98f ezidam: oauth: redirect: check if user is archived Philippe Loctaux 2023-03-18 13:44:17 +01:00
e9200f8682 ezidam: oauth: redirect: redirect automatically to home page Philippe Loctaux 2023-03-18 00:49:29 +01:00
827bba041a ezidam: oauth: redirect: get and check code, get user info, mark code as used, display html template Philippe Loctaux 2023-03-18 00:40:11 +01:00
719048e268 ezidam: oauth: redirect page Philippe Loctaux 2023-03-17 23:30:33 +01:00
fd16e78fb1 ezidam: oauth: split in multiple mods Philippe Loctaux 2023-03-17 23:30:12 +01:00
8c8caa905d ezidam: oauth: redirect to redirect uri with code and state Philippe Loctaux 2023-03-17 22:17:56 +01:00
ae71a6a512 ezidam: oauth: removed FormPost from ResponseModes Philippe Loctaux 2023-03-17 22:17:35 +01:00
bb4ff8a9f8 ezidam: oauth: authorize: generate and save authorization code Philippe Loctaux 2023-03-16 23:20:27 +01:00
471e2fc740 authorization_codes: crate, database, insert one Philippe Loctaux 2023-03-16 23:15:56 +01:00
0b4aeb89cb ezidam: setup: dont sign in directly, force user to go through authorize flow Philippe Loctaux 2023-03-16 22:30:19 +01:00
0866de94b6 hash: secret: defaults at 64, can generate custom length Philippe Loctaux 2023-03-16 22:29:51 +01:00
64f3db3864 openid: response types: remove support of implicit flow for the moment Philippe Loctaux 2023-03-16 22:29:32 +01:00
eb93cbd7ec ezidam, openid: refactor check app in method, verifying and send POST as well Philippe Loctaux 2023-03-16 21:38:32 +01:00
8ae0c59a25 ezidam, openid: check scopes, check response types before getting app Philippe Loctaux 2023-03-16 00:05:54 +01:00
396856eee5 ezidam: oauth: authorize for ezidam: fill ezidam app info from database, show app label on template Philippe Loctaux 2023-03-15 22:01:53 +01:00
95173b1a09 ezidam: setup: create "ezidam" app in database Philippe Loctaux 2023-03-15 22:01:01 +01:00
71b083895d apps: sql + get valid one, get by id, insert, generate app id, generate secret Philippe Loctaux 2023-03-15 22:00:04 +01:00
b5c2be6c9f ezidam: renamed page auth/sign_in to oauth/authorize, started work on handling oauth requests, big WIP Philippe Loctaux 2023-03-13 23:42:21 +01:00