Commit Graph

56 Commits

Author SHA1 Message Date
e266696b32 feat: add default permission to built-in group (#1087)
* fix: add default permission

* fix: add default permission

* fix: add default permission
2022-09-02 12:03:13 +08:00
08a1e7ae32 fix: keep phone/email unique. (#1038)
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com>

Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com>
2022-08-20 12:14:08 +08:00
aedef1eea1 feat(login): add login limit (#1023)
* feat(login): add login limit

* chore: rename vars

* chore: use `string`

* fix: clear the signin error times after succeessfull login

* chore: modify code position
2022-08-17 01:39:53 +08:00
2dcdfbe6d3 fix: error login logic of mobile phone login (#1017)
* fix: #1016

1. Limit username cannot be digital.
2. Check avoid repeat register with same phone or email.

Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com>

* Update check.go

Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com>
Co-authored-by: Yang Luo <hsluoyz@qq.com>
2022-08-16 00:14:26 +08:00
2ea58cd639 chore(style): use gofumpt to fmt go code (#967) 2022-08-07 12:26:14 +08:00
2bb8491499 fix: unable to get user if profile is private (#936) 2022-07-31 10:54:41 +08:00
4e3eedf246 feat: fix bug that the default permission prevents admin to login in (#907)
* fix:The certs page is displayed incorrectly

* Translations for each language are added

* Replace the variables certificat with Certificat with certificate and Certificate

* Replace the variables certificat with Certificat with certificate and Certificate

* Variable names are more accurate

* Variable names are more accurate

* Modify the variable name

* fix: Default action prevents admin to login in
2022-07-24 23:36:55 +08:00
6e70f0fc58 Refactor CheckAccessPermission(). 2022-07-13 00:50:32 +08:00
2bca424370 feat: implement access control using casbin (#806)
* feat: implement access control using casbin

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* chore: sort imports

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: remove

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* Update auth.go

Co-authored-by: Gucheng <85475922+nomeguy@users.noreply.github.com>
2022-07-13 00:34:35 +08:00
530330bd66 feat: add isProfilePublic setting for accessing user info (#656)
* feat: add isProfilePublic setting for accessing user info

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: requested changes

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-04-16 15:10:03 +08:00
e3f5bf93b2 fix: adjust the password check logic for ldap user (#597)
* fix: the password check logic for ldap user.
LDAP user should only use the ldap connection to check the password.

* fix: code format
2022-03-28 17:19:58 +08:00
d43d7d1ae9 feat: support master password for ldap user (#561)
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-03-12 21:06:38 +08:00
c14bf9fdab Fix bug in first name, last name checking 2022-02-28 13:17:05 +08:00
21392dcc14 Support user's first name and last name. 2022-02-27 14:02:52 +08:00
953d3d5bc5 Change personal to real name. 2022-02-27 13:44:44 +08:00
db37f53d6c Update license headers. 2022-02-13 23:39:27 +08:00
5ec0c7a890 fix: fix the SQL injection vulnerability in field filter (#442)
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2022-01-26 19:36:36 +08:00
c22ab44894 Update import path. 2022-01-20 14:11:46 +08:00
b95f107a60 Support cred manager for organization.MasterPassword 2021-12-22 20:56:22 +08:00
d6c2d0f3e8 feat: Add bcrypt encrypted password type (#386)
* Add loading and countdown status to the verification code sending button

* Add bcrypt encrypted password type

* Revert "Add loading and countdown status to the verification code sending button"

This reverts commit 782b9e229a.

* Update bcrypt.go

* Update go.sum
2021-12-22 20:26:19 +08:00
6947ebd152 feat: support checking password through ldap server (#354)
Signed-off-by: Товарищ программист <2962928213@qq.com>
2021-12-10 22:45:01 +08:00
63f33d0ad9 Improve email and phone checking in Signup(). 2021-11-09 20:29:38 +08:00
467d709b8e Add MasterPassword to organization. 2021-11-06 21:14:53 +08:00
9e920181d2 Add user soft deletion. 2021-11-06 15:52:03 +08:00
5fd681e971 Fix CheckPassword(). 2021-11-06 14:31:41 +08:00
7792f4589d Add CredManager. 2021-11-04 21:30:48 +08:00
a4edf47dc4 fix: improvde code logic (#285)
Signed-off-by: sh1luo <690898835@qq.com>
2021-09-04 22:20:47 +08:00
398ba19fa5 Add CheckUserPassword() API. 2021-08-15 21:57:36 +08:00
8c66ef6860 fix: improve code specification (#231) 2021-08-14 14:18:08 +08:00
c632c3c307 fix: replace casdoor with casbin (#194)
Signed-off-by: sh1luo <690898835@qq.com>
2021-07-25 09:34:25 +08:00
586da5caac Add isValidPersonalName(). 2021-06-17 11:55:06 +08:00
b11b3b6021 Use signup table in Signup API. 2021-06-17 00:49:02 +08:00
6508d96162 Remove GetOrganizationByName(). 2021-05-16 22:58:30 +08:00
e6862713bb Improve password length check. 2021-05-16 22:01:22 +08:00
45bd3b316b Fix hash update. 2021-05-16 21:22:20 +08:00
4b9ce5f401 Fix add/update salted password. 2021-05-16 21:04:26 +08:00
18806f07a8 Support cred auto-login. 2021-05-16 18:18:55 +08:00
2ea5e7ec78 Remove user's PhonePrefix. 2021-05-15 13:54:23 +08:00
a1851c2b78 Add github.com/dchest/captcha imports. 2021-05-09 11:29:25 +08:00
8a4311c85c Add PasswordSalt to org. 2021-05-06 19:13:03 +08:00
f442f11568 Move passwordType to org. 2021-05-05 23:32:21 +08:00
6095af0512 Add checkPassword(). 2021-05-03 10:13:32 +08:00
82f4f542ed Add User's IsForbidden. 2021-05-02 12:18:28 +08:00
0f7cd56441 Support Email and phone login. 2021-05-01 20:23:20 +08:00
5b1b8662ac Improve CheckUserLogin(). 2021-05-01 19:45:40 +08:00
7b32207443 Check more in CheckUserSignup(). 2021-05-01 18:39:40 +08:00
904faae6eb Improve CheckUserSignup(). 2021-05-01 17:45:01 +08:00
a093f3af5a Add username check. 2021-05-01 16:54:06 +08:00
7a0ed4ebaf Replace "register" with "sign up". 2021-04-27 22:47:44 +08:00
64c9548019 Update license header. 2021-03-13 23:09:14 +08:00