2740 Commits

Author SHA1 Message Date
Luckery
dff65eee20
feat: Force users to change their passwords after 3/6/12 months (#3352)
* feat: Force users to change their passwords after 3/6/12 months

* feat: Check if the password has expired by using the last_change_password_time field added to the user table

* feat: Use the created_time field of the user table to aid password expiration checking

* feat: Rename variable
v1.755.0
2024-11-19 21:06:52 +08:00
Eng Zer Jun
596016456c
feat: update CI's upload-artifact and download-artifact actions to v4 (#3361)
v3 of `actions/upload-artifact` and `actions/download-artifact` will be
fully deprecated by 5 December 2024. Jobs that are scheduled to run
during the brownout periods will also fail. See [1][2].

[1]: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
[2]: https://github.blog/changelog/2024-11-05-notice-of-breaking-changes-for-github-actions/

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
v1.754.0
2024-11-19 00:07:59 +08:00
DacongDA
673261c258
feat: fix placeholder bug in signin page (#3359) v1.753.0 2024-11-17 00:14:26 +08:00
DacongDA
3c5985a3c0
fix: fix several bugs in samlRequest (#3358) 2024-11-17 00:14:04 +08:00
DacongDA
4f3d62520a
feat: fix the dashboard page shows zero data in mobile phone (#3356) v1.752.0 2024-11-16 22:02:49 +08:00
DacongDA
96f8b3d937
feat: fix SAML metadata URL and XML generation issue when enablePostBinding is enabled (#3354) v1.751.0 2024-11-16 15:35:30 +08:00
Yang Luo
7ab5a5ade1 feat: add processArgsToTempFiles() to RunCasbinCommand() v1.750.0 2024-11-15 20:25:48 +08:00
Yang Luo
5cbd0a96ca Use json format for argString in RunCasbinCommand() 2024-11-15 18:27:25 +08:00
Yang Luo
7ccd8c4d4f feat: add RunCasbinCommand() API v1.749.0 2024-11-15 17:44:57 +08:00
ZhaoYP 2001
b0fa3fc484
feat: add Casbin CLI API to Casdoor (#3351) v1.748.0 2024-11-15 16:10:22 +08:00
Yang Luo
af01c4226a feat: add Organization.PasswordExpireDays field v1.747.0 2024-11-15 11:33:28 +08:00
DacongDA
7a3d85a29a
feat: update github token to fix CI cannot release issue (#3348) v1.746.0 2024-11-14 18:05:56 +08:00
IZUMI-Zu
fd5ccd8d41
feat: support copying token to clipboard for casdoor-app (#3345)
* feat: support copy token to clipboard for casdoor-app auth

* feat: abstract casdoor-app related code
v1.745.0
2024-11-13 17:06:09 +08:00
Yang Luo
a439c5195d feat: get token only by hash now, remove get-by-value backward-compatible code 2024-11-13 17:04:27 +08:00
Yang Luo
ba2e997d54 feat: fix CheckUpdateUser() logic to fix add-user error v1.744.0 2024-11-06 08:34:13 +08:00
Luckery
0818de85d1
feat: fix username checks when organization.UseEmailAsUsername is enabled (#3329)
* feat: Username support email format

* feat: Only fulfill the first requirement

* fix: Improve code robustness
v1.743.0
2024-11-05 20:38:47 +08:00
Yang Luo
457c6098a4 feat: fix MFA empty CountryCode bug and show MFA error better in frontend v1.742.0 2024-11-04 16:17:24 +08:00
Yang Luo
60f979fbb5 feat: fix MfaSetupPage empty bug when user's signup application is empty 2024-11-04 00:04:47 +08:00
Luckery
ff53e44fa6
feat: use virtual select UI in role edit page (#3322) v1.741.0 2024-11-03 20:05:34 +08:00
Yang Luo
1832de47db feat: fix bug in CheckEntryIp() 2024-11-03 20:00:52 +08:00
Yang Luo
535eb0c465 fix: fix IP Whitelist field bug in application edit page 2024-11-03 19:55:59 +08:00
ithilelda
c190634cf3
feat: show Domain field for Qiniu storage provider (#3318)
allow Qiniu Provider to edit the Domain property in the edit page.
v1.740.0
2024-10-27 14:10:58 +08:00
Cliff
f7559aa040
feat: set created time if not presented in AddUser() API (#3315) v1.739.0 2024-10-24 23:06:05 +08:00
DacongDA
1e0b709c73
feat: pass signin method to CAS login to fix bug (#3313) v1.738.0 2024-10-24 14:56:12 +08:00
DacongDA
c0800b7fb3
feat: add util.IsValidOrigin() to improve CORS filter (#3301)
* fix: CORS check issue

* fix: promote format

* fix: promote format

* fix: promote format

* fix: promote format

* Update application.go

* Update cors_filter.go

* Update validation.go

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
v1.737.0
2024-10-20 20:09:21 +08:00
eya46
6fcdad2100
feat: fix bug that fails to login when PasswordObfuscator is enabled (#3299) v1.736.0 2024-10-19 23:09:59 +08:00
Cliff
69d26d5c21
feat: add-user/update-user API should check if username/id/email/phone has duplicated with existing user (#3295) v1.735.0 2024-10-18 22:18:37 +08:00
DacongDA
94e6b5ecb8
feat: fix bug in SetPassword() API (#3296) v1.734.0 2024-10-18 20:50:43 +08:00
DacongDA
95e8bdcd36 feat: add initDataNewOnly to app.conf to skip overriding existing data in initDataFromFile() (#3294)
* feat: support control whether overwrite existing data during initDataFromFile

* feat: change conf var name

* feat: change conf var name
v1.733.0
2024-10-18 00:08:08 +08:00
liuaiolos
6f1f93725e
feat: fix GetAllActions()'s bug (#3289) v1.732.0 2024-10-16 21:55:06 +08:00
DacongDA
7ae067e369
feat: only admin can specify user in BuyProduct() (#3287)
* fix: balance can be used without login

* fix: balance can be used without login

* fix: fix bug

* fix: fix bug
v1.731.0
2024-10-16 00:02:04 +08:00
Yang Luo
dde936e935 feat: fix null application crash in CheckEntryIp() v1.730.0 2024-10-15 22:11:15 +08:00
Yang Luo
fb561a98c8 feat: fix null user crash in RefreshToken() v1.729.0 2024-10-15 21:38:33 +08:00
ZhaoYP 2001
7cd8f030ee
feat: support IP limitation for user entry pages (#3267)
* feat: support IP limitation for user entry pages

* fix: error message, ip whiteList, check_entry_ip

* fix: perform checks on the backend

* fix: change the implementation of checking IpWhitelist

* fix: add entryIpCheck in SetPassword and remove it from VerifyCode

* fix: remove additional error message pop-ups

* fix: add isRestricted and show ip error in EntryPage.js

* fix: error message

* Update auth.go

* Update check_ip.go

* Update check_ip.go

* fix: update return value of the check function from string to error

* fix: remoteAddress position

* fix: IP whitelist

* fix: clientIp

* fix:add util.GetClientIpFromRequest

* fix: remove duplicate IP and port separation codes and remove extra special characters after clientIp

* fix: gofumpt

* fix: getIpInfo and localhost

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
v1.728.0
2024-10-15 20:40:14 +08:00
Yang Luo
a3f8ded10c feat: refactor util.GetClientIpFromRequest() v1.727.0 2024-10-15 12:22:38 +08:00
DacongDA
e3d135bc6e
feat: improve MFA desc text (#3284)
* fix: fix i18n error for mfa

* fix: fix i18n error for mfa

* fix: promote translate
v1.726.0
2024-10-14 18:31:48 +08:00
千石
fc864b0de4
feat: support ".login-panel-dark" CSS for signup/login pages (#3269)
* feat: add custom dark mode CSS for login and registration forms.

* refactor: extract dark theme check to Setting.js
v1.725.0
2024-10-13 22:31:54 +08:00
ZhaoYP 2001
3211bcc777
feat: add getCaptchaRule() to fix bug (#3281)
* feat: update captcha rule when the login page component is mounted

* fix: remove enableCaptchaModel from the state of the login page to avoid inconsistency issues

* fix: use this.getApplicationObj() instead of this.props.application
v1.724.0
2024-10-12 10:02:45 +08:00
DacongDA
9f4430ed04
feat: fix MFA's i18n error (#3273) v1.723.0 2024-10-08 21:58:06 +08:00
Yang Luo
05830b9ff6 feat: update import lib: github.com/casdoor/ldapserver v1.722.0 2024-10-08 19:18:56 +08:00
千石
347b25676f
feat: dark mode now works for login/signup pages too (#3252)
* fix: trying to fix dark mode not applying on login/registration interface

* fix: trying to fix dark mode not applying on login/registration interface

* fix: trying to fix dark mode not applying on login/registration interface

* fix: Clean up unused code

* fix: loginBackgroundDark move to App.less

* fix: fix typo
v1.721.0
2024-10-05 21:26:25 +08:00
DacongDA
2417ff84e6
feat: support initial group assignment for new invited users via invitation.SignupGroup field (#3266) v1.720.0 2024-10-04 20:15:51 +08:00
DacongDA
468631e654
feat: support "All" in organization's country codes (#3264) v1.719.0 2024-10-03 22:58:09 +08:00
ZhaoYP 2001
e1dea9f697
feat: add organization's PasswordObfuscator to obfuscate login API's password (#3260)
* feat: add PasswordObfuscator to the login API

* fix: change key error message

* fix: remove unnecessary change

* fix: fix one

* fix: fix two

* fix: fix three

* fix: fix five

* fix: disable organization update when key is invalid

* fix: fix six

* fix: use Form.Item to control key

* fix: update obfuscator.js

* Update obfuscator.go

* Update obfuscator.go

* Update auth.go

* fix: remove real-time key monitoring

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
v1.718.0
2024-10-03 10:38:37 +08:00
Corey Gaspard
c0f22bae43
feat: better handling of organization.AccountItems on init_data import (#3263)
* Better handling of accountitems on init_data import.

* Removed commented code.

* Update init_data.go

* Update init_data.go

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
v1.717.0
2024-10-03 08:49:09 +08:00
DacongDA
c9635d9e2b
feat: improve i18n (#3259) v1.716.0 2024-10-01 00:10:49 +08:00
DacongDA
3bd52172ea
feat: add Hide-Password option for signin method rule field (#3258) v1.715.0 2024-09-30 23:31:41 +08:00
Yang Luo
bf730050d5 feat: increase Organization.Favicon to 200 chars v1.714.0 2024-09-29 11:45:56 +08:00
Yang Luo
5b733b7f15 feat: improve filterRecordIn24Hours() logic 2024-09-29 11:45:15 +08:00
ZhaoYP 2001
034f28def9
feat: logout if app.conf's inactiveTimeoutMinutes is reached (#3244)
* feat: logout if there's no activities for a long time

* fix: change the implementation of updating LastTime

* fix: add logoutMinites to app.conf

* fix: change the implementation of judgment statement

* fix: use sync.Map to ensure thread safety

* fix: syntax standards and Apache headers

* fix: change the implementation of obtaining logoutMinutes in app.conf

* fix: follow community code standards

* fix: <=0 or empty means no restriction

* Update logout_filter.go

* Update app.conf

* Update main.go

* Update and rename logout_filter.go to timeout_filter.go

* Update app.conf

* Update timeout_filter.go

* fix: update app.conf

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
v1.713.0
2024-09-27 01:18:02 +08:00