Commit Graph

64 Commits

Author SHA1 Message Date
Clark Boylan f878d60979 Retire this repository as it has moved
This project is no longer developed on opendev and has moved to github.
Perform project retirement to clean up the opendev content. In
particular we want to remove zuul configs that have errors, but also
give people hints to the current code repository.

Depends-On: https://review.opendev.org/c/openstack/project-config/+/818170
Change-Id: Icd4d25d60d96d57eb99f1bcb4055a7bb4ae10b30
2021-11-16 14:36:31 -08:00
smarcet ee47df943e Removed files by security scan
Change-Id: I242c3562ee188f19793c2383e191525ac68eed66
Signed-off-by: smarcet <smarcet@gmail.com>
2021-05-12 11:01:09 -03:00
smarcet c47546816c Change fields input format from HTML to MD
* bio
* statement_of_interest

Change-Id: Ib2d897ff4c58083ad244075547419c644c2c77da
Signed-off-by: smarcet <smarcet@gmail.com>
2021-04-14 11:33:59 -03:00
smarcet e3b8987704 PUT api/v1/users/me
added following field to payload

current_password
password
password_confirmation

Change-Id: Iab8cbab6e552e91c38ce2432e8fdd0b83d0255bc
Signed-off-by: smarcet <smarcet@gmail.com>
2021-02-05 11:47:46 -03:00
smarcet ebc53053ed Check Session fix
3rd party cookies not enabled or cookies not enabled
should return "error" and not "changed" error code

Change-Id: I9d75dbfa6906fea2ada543e1288311aa6db43e8a
Signed-off-by: smarcet <smarcet@gmail.com>
2021-01-18 11:43:57 -03:00
smarcet c47515a07b Fix on info text css color
Change-Id: I72bb490a450af653cf49e81faea326e2cd76c8b4
Signed-off-by: smarcet <smarcet@gmail.com>
2020-12-02 15:30:50 -03:00
smarcet ee8333b3f9 Added loging help text
Change-Id: Iffe85c46fb6fd157157c43b62ebe9d3ade151115
Signed-off-by: smarcet <smarcet@gmail.com>
2020-11-18 12:18:22 -03:00
smarcet 26ba433bd5 Add table field sorting for user and groups
Change-Id: If413a861559e7baad0ba5b511beb587ae03fa828
Signed-off-by: smarcet <smarcet@gmail.com>
2020-11-16 17:11:11 -03:00
smarcet 0705f655eb Fixed groups autocomplete
Change-Id: I80b9eaaf5ac5918f02557beaffeed42b0011c591
Signed-off-by: smarcet <smarcet@gmail.com>
2020-11-16 15:28:59 -03:00
smarcet 57295af06e Added code of conduct
Change-Id: I69c3218e14a8f65caa482df204625cb254ba2a74
Signed-off-by: smarcet <smarcet@gmail.com>
2020-10-12 12:37:29 -03:00
smarcet 6284c47598 Fixed set password logic
if user does not provides a redirect uri
redirect by default to profile page

Change-Id: I9f3522771135677f5689d9fdbeb3cae053e1e6d3
Signed-off-by: smarcet <smarcet@gmail.com>
2020-08-06 12:07:08 -03:00
smarcet d74b708d78 Fixed validation error
Change-Id: Idcee2ad4fdaae3ece1d1d8438528ca318d173292
Signed-off-by: smarcet <smarcet@gmail.com>
2020-08-03 19:48:11 -03:00
smarcet 48dfbb1664 Added Profile PIC edition
( default gravatar )

Change-Id: Ib15b9c64ebfb8b21b52175d68e179de38146b765
Signed-off-by: smarcet <smarcet@gmail.com>
2020-08-03 18:49:17 -03:00
smarcet b81654bb0e Added new user profile fields
* company
* phone_number

Change-Id: I19c195bd238cef441d7de09eccfc886f4078aa0c
Signed-off-by: smarcet <smarcet@gmail.com>
2020-07-15 12:50:52 -03:00
smarcet 0f1397f4ab Fix on User Search (ADMIN)
Change-Id: I0418b60a52b4b1f4263512a30399642ae927693e
Signed-off-by: smarcet <smarcet@gmail.com>
2020-07-07 18:20:56 -03:00
smarcet 3ca8ea84a6 User registration Memory issue
Fixed ORM query that was causing out of memory
exception for PHP-FPM process

Change-Id: Iff4aa7fee3ca4151d728758821ef88548fef8804
Signed-off-by: smarcet <smarcet@gmail.com>
2020-06-11 11:28:22 -03:00
smarcet ee06811e57 Fixed validation rules on registration
Change-Id: I1eed7b81d68b0d5b9783135c12bc0881807a8cb8
Signed-off-by: smarcet <smarcet@gmail.com>
2020-06-10 21:43:50 -03:00
smarcet f4418928e3 Fixed validation rules for registatration
Change-Id: I55df3062f61d4527b0f675134454ccb024bb738e
Signed-off-by: smarcet <smarcet@gmail.com>
2020-06-10 20:37:52 -03:00
smarcet e5898c4fab Removed set user identifier on User CRUD
Change-Id: I10aafd400109126c4ce6ff8ea6ec36c824bd8ed9
Signed-off-by: smarcet <smarcet@gmail.com>
2020-04-15 23:47:08 -03:00
smarcet d1b6174e4a Fix on User CRUD
fixed UX on user update on admin

Change-Id: Ic20bc5054b94cae58d4b90a9bb19d1a7e7505f56
Signed-off-by: smarcet <smarcet@gmail.com>
2020-03-31 11:10:08 -03:00
smarcet 163238e6aa User Spammer process
Moved from www spam user process
Upgraded to python 3.x

Change-Id: I38231566b30f293dd0214ee7782be213b9a11eee
Signed-off-by: smarcet <smarcet@gmail.com>
2020-03-11 13:44:58 -03:00
Zuul 8493cee023 Merge "Added copy 2 clipboard feature on OAUTH2 Client Data" 2020-02-29 05:03:53 +00:00
smarcet 48e7b56d9a Added copy 2 clipboard feature on OAUTH2 Client Data
Change-Id: Ie6ec98a491ff543c71e2f2c396b5653a2917faea
Signed-off-by: smarcet <smarcet@gmail.com>
2020-02-29 01:06:03 -03:00
smarcet 83f0a8e2dd Security fixes
* clear all password reset request once user get login.
* clear all password reset request once user change his/her email.
* added redirection on password forgot page ( only oauth2 clients ).

Change-Id: I5a9f57a87ff54e0509ff2dc23a25ac96fad34fb9
Signed-off-by: smarcet <smarcet@gmail.com>
2020-02-29 00:07:05 -03:00
smarcet b52c932636 IDP - User Management
* Added user registration process
* Added user password reset process
* Added user email verification proccess
* update token id to return custom claims
* update access token instrospection to return user custom claims
* Migrated to Doctrine ORM ( from eloquent)
* Added User CRUD
* Added User Groups CRUD
* Refactoring
* Bug Fixing
* added user registration oauth2 endpoint
  POST /api/v1/user-registration-requests

payload

* first_name ( required )
* last_name ( required)
* email ( required )
* country ( optional )

scope

user-registration ( private scope)

Change-Id: I36e8cd4473ccad734565051442e2c6033b204f27
2020-01-23 03:06:05 -03:00
smarcet e001fb47a3 Fixed opbs stale value
Change-Id: I18c17202fe9162ddd69d8c86627e903ea556ab60
2019-11-15 13:02:35 -03:00
smarcet 94d09e33c1 Fixed opbs stale value
Change-Id: Icf0feea9ec598a5fc85a93acaef743d94574bf5e
2019-11-15 10:15:03 -03:00
smarcet cb3fee441f Migration to PHP 7.x
* updated dependencies
* updated LV version to 5.6

Depends-On: https://review.openstack.org/629495

Depends-On: https://review.openstack.org/629896

Change-Id: Iacf81dd65d71102ad0660c5c2bdd6633bf727ec0
2019-01-10 13:51:06 -03:00
Sebastian Marcet 51702c2d7b Updated user profile UI
allow users to change their automatically assigned
openid identifier

Change-Id: Ia6d03967fe3174a73e4a7b3cffae5f19c3ab1399
2018-09-20 14:38:36 -03:00
Sebastian Marcet fccca4cb19 Fixed decryption error on RP cookies
* added a exception handler for decryption error
* updates opbs cookie name to op_bs
* refactoring
* added OP browser state lifetime to configuration

Change-Id: Ib0f713e2670b4bec94dde19a15dafd93c4b536b6
2018-08-08 07:06:30 -03:00
Sebastian Marcet a5ada7d3a6 Fix on OIDC session status check
added more logging info
fixed toString missing call method

Change-Id: Ife6d4105db5294d132d7c2d350cc88ffce9e1fc6
2018-08-07 11:32:30 -03:00
Sebastian Marcet 6334083ee2 Added cookie disabled warning
If user has cookie disabled let them know
using a visual alert.
Also disallow login

Change-Id: I8f1ea3641beefbcef7d6c03fc36400fba73a29d4
2018-05-08 12:06:20 -03:00
Sebastian Marcet 3b1f9de37f Migrated bower dependencies
to NPM

Change-Id: I478de5ff7c260bf9164f9e6a0d0e33dfeb561355
2018-04-10 11:47:09 -03:00
Sebastian Marcet 34ffcd1d5a Fixed bug on grants pagination
when user starts to paginate, application
type field disapperead and was populated with
created_at field instead.

Change-Id: I59bc728dd7e4161d1ef2f60821f038df2c161fc6
2017-08-22 13:13:10 -03:00
Sebastian Marcet f2e6196714 Added Favorite icon to main template
Change-Id: Icb24537e73f2ed4b6f25135d8a6f7fa77a1b6786
2017-06-02 16:05:36 -03:00
Sebastian Marcet 7ed7adcc0f Updated OS logo
Change-Id: Ida014f51942678dcba141be5081d1640a181214d
2017-02-14 16:28:38 -03:00
Sebastian Marcet 8efd84a502 Fix on revoke refresh token admin UI
revoking refresh token from edit oauth2
client was erroring bc a wrong api call.

Change-Id: Ifb21ba3036d6083bcae75bc48b4e6e86e3a905df
2017-02-14 15:56:06 -03:00
Sebastian Marcet 3979961668 Fixed error on adding endpoint (Admin UI)
adding endpoint feature was erroring
bc the controller was expecting that service layer
were returning a entity, intead void was returned
now its fixed.

Change-Id: Icdb3e12a9e644555d006c00cb3db1a3593f628f2
2017-01-18 17:57:53 -03:00
Sebastian Marcet 6b0d6c36af IDP Upgrade from Laravel 4.X to 5.X
In order to migrate IDP from LV 4.x to
latest LV version, following task were performed:

* Updated namespace to be complain with PSR-4
* General Refactoring: moved all DB access code
  from services to repositories.
* Migration to LV 5.X: these migration guides
  were applied
  - https://laravel.com/docs/5.3/upgrade#upgrade-5.0
  - https://laravel.com/docs/5.3/upgrade#upgrade-5.1.0
  - https://laravel.com/docs/5.3/upgrade#upgrade-5.2.0
* Improved caching: added repositories decorators
  in order to add REDIS cache to queries, entities

Change-Id: I8edf9f5fce6585129701c88bb88332f242307534
2016-11-17 18:37:40 -03:00
Sebastian Marcet ab8b9870fe Fix CSS/Layout on consent OAUTH2 UI
added css to be mobile friendly

Change-Id: If4c7bceeba7de080a58afea5dd9fd355e0e5a044
2016-04-05 16:46:03 -03:00
Sebastian Marcet c76f333c23 Fix on login error messages (OAUTH2/OIDC)
* fixed error on showing error message on login for OIDC flow
* improved error location
* added required validation for both fields ( user name, password)

Change-Id: Idefa98fa8739ad590e6811fcec8f1b146a5205f0
2016-04-03 16:59:20 -03:00
Sebastian Marcet 4378864929 OAuth2.0 app name edition
* added posibility to edit oauth2.0 app name after its created
* fixed some issues at admin ui ( admin api)
* refactored and added comments

Change-Id: I29b125820a48c0067d203756066d6212af170b4a
2016-03-30 12:25:41 -03:00
Sebastian Marcet 1df67dc90a Fixed doble form submision issue
* updated code to handle double form submision
* fixed some typos

Change-Id: I3384b573ad56fd96e0a1ce3adefdd9106d645c03
2016-03-16 00:49:59 -03:00
Sebastian Marcet c69f433db2 Refactoring
* Added more logs
* added stack trace to stored exceptions
* breakdown replayatack ex on 2 new ones:
** AuthCode replay attack
** Refresh Token replay attack
* improved unit tests
* updated namespaces
* refactoring add oauth2.0 client dialog

Change-Id: I4c51b6edf3091b1555fa6864f471740a55192109
2016-03-15 17:55:34 -03:00
Sebastian Marcet d2bb5d1be2 Added OAUTH2.0 Admin Groups
now users are able to set admin users on theirs apps
so multiple user could edit/review theirs apps

Change-Id: Ic44bd9363a20d388f81acf2f4ed5c36deb4d4e85
2016-02-25 17:11:31 -03:00
Sebastian Marcet b7eb03974e Resource server ban error
Fix to allow to config several ips per resource server (IPV4/V6)

Change-Id: I73cc684009774e7dcc187ad5de425c9a1547ea76
2016-02-23 16:02:07 -03:00
Sebastian Marcet 37e236a2bb Fix on Resource server banning:
Added some logic to prevent Resource server Banning.
Also refactored a little and added more config params
to Server Admin console.

Change-Id: I6b2961e25bbb67f682188f1a38eedf81ce1ebcf4
2016-01-07 11:44:00 -03:00
Sebastian Marcet ea98eff8cf OIDC - OpenId Connect Implementation
DB refactoring
Client Admin Rectoring
upgraded layout to use latest bootstrap
Added bower support
Added Behat support
OIDC Discovery suuport added
OIDC JWKS endpoint added
Refactored OpenId workflows
Refactored OAuth2 workflows
Server Keys Admin Added
Authorization Code Flow refactored to support OIDC
Allow native apps to use auth code grant
Allow native apps to use "TokenEndpoint_AuthMethod_PrivateKeyJwt"
Filter on UI public/private keys algs based on the key usage
Set as default auth protocol for private clients "client_secret_basic"
Added feature client_secret_expired
Filtered content of Token Endpoint Authorization Signed Algorithm based on Token Endpoint Authorization Method
Implemented OAuth 2.0 Multiple Response Type Encoding Practices
Implemented OAuth 2.0 Form Post Response Mode
Implicit Flow refactored to support OIDC
UserInfo Endpoint (OIDC/Claims)
Hybrid Flow
OIDC Session Management

Change-Id: If3d38666f3f7f56bd8c94b9df2e6340554512612
2015-12-16 11:03:01 -03:00
Sebastian Marcet 2a65750477 Migration of resource server
* removed resource server code
* removed marketplace api
* removed marketplace api test
* made tests agnostic of realm
* added missing http headers
* fix on db schemes ( added default values on some tables).
Change-Id: I857bc2c795107bb63c03652397c406b97ba8c86a
2015-06-17 13:21:55 -03:00
Sebastian Marcet cf9a093ed2 Fix misspellings in openstackid
Fix misspellings detected by:
* pip install misspellings
* git ls-files | grep -v locale | misspellings -f -

Change-Id: I6b28d1b81655bd7dfa5592f494972b0c30657460
Closes-Bug: #1257295
2015-03-23 15:20:20 -03:00