llvy.ltd/casdoor
1
0
Fork 0
mirror of https://github.com/casdoor/casdoor.git synced 2025-05-25 08:20:31 +08:00
Code Issues Packages Projects Releases Wiki Activity
2,574 Commits 27 Branches 1,253 Tags
Commit Graph

116 Commits

Author SHA1 Message Date
DacongDA
c0800b7fb3
feat: add util.IsValidOrigin() to improve CORS filter (#3301) 
* fix: CORS check issue

* fix: promote format

* fix: promote format

* fix: promote format

* fix: promote format

* Update application.go

* Update cors_filter.go

* Update validation.go

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
 2024-10-20 20:09:21 +08:00
ZhaoYP 2001
7cd8f030ee
feat: support IP limitation for user entry pages (#3267) 
* feat: support IP limitation for user entry pages

* fix: error message, ip whiteList, check_entry_ip

* fix: perform checks on the backend

* fix: change the implementation of checking IpWhitelist

* fix: add entryIpCheck in SetPassword and remove it from VerifyCode

* fix: remove additional error message pop-ups

* fix: add isRestricted and show ip error in EntryPage.js

* fix: error message

* Update auth.go

* Update check_ip.go

* Update check_ip.go

* fix: update return value of the check function from string to error

* fix: remoteAddress position

* fix: IP whitelist

* fix: clientIp

* fix:add util.GetClientIpFromRequest

* fix: remove duplicate IP and port separation codes and remove extra special characters after clientIp

* fix: gofumpt

* fix: getIpInfo and localhost

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
 2024-10-15 20:40:14 +08:00
Yang Luo
a3f8ded10c feat: refactor util.GetClientIpFromRequest() 2024-10-15 12:22:38 +08:00
DacongDA
468631e654
feat: support "All" in organization's country codes (#3264) 2024-10-03 22:58:09 +08:00
ZhaoYP 2001
e1dea9f697
feat: add organization's PasswordObfuscator to obfuscate login API's password (#3260) 
* feat: add PasswordObfuscator to the login API

* fix: change key error message

* fix: remove unnecessary change

* fix: fix one

* fix: fix two

* fix: fix three

* fix: fix five

* fix: disable organization update when key is invalid

* fix: fix six

* fix: use Form.Item to control key

* fix: update obfuscator.js

* Update obfuscator.go

* Update obfuscator.go

* Update auth.go

* fix: remove real-time key monitoring

---------

Co-authored-by: Yang Luo <hsluoyz@qq.com>
 2024-10-03 10:38:37 +08:00
Yang Luo
986dcbbda1 feat: handle error in ApiFilter 2024-08-23 21:50:48 +08:00
DacongDA
4c0fff66ff
feat: support shared application across organizations (#3108) 
* feat: support share application

* revert: revert i18n

* fix: improve code format

* fix: improve code format and move GetSharedOrgFromApp to string.go
 2024-08-09 15:43:25 +08:00
Giang Dinh
e65fdeb1e0
feat: ABAC support for /api/batch-enforce endpoint (#3082) 2024-07-27 09:43:58 +08:00
pfeak
97cc1f9e2b
fix: delete duplicate err check in utils/validation.go (#2831) 2024-03-21 18:17:38 +08:00
Yang Luo
9175e5b664 Fix bug in GetMaskedEmail() 2024-03-10 11:49:55 +08:00
DacongDA
d731c3c934
feat: add regex support for account item (#2714) 
* feat: add regex support for account item

* feat: use reflect to process user field

* fix: fix lint problem

* feat: improve code format and fix reflect error
 2024-02-17 15:24:36 +08:00
Andrey
498900df76
feat: allow dot in the username (like john.smith) (#2692) 2024-02-12 20:52:17 +08:00
dacongda
e593f5be5b
fix: improve code format (#2665) 
* feat: replace io/ioutils pacakage with io/os package

* fix: add missing error handling
 2024-02-01 23:06:12 +08:00
Konstantin
c4096788b2
feat: ABAC support for /api/enforce endpoint (#2660) 2024-01-31 23:14:55 +08:00
HGZ-20
d7c40459c0
feat: implement the enforcement for new invitation page (#2628) 
Added new invitation code implementation
 2024-01-22 02:25:13 +08:00
Yang Luo
44f4de1440 feat: support empty fileUrl in GetUploadFileUrl() 2023-12-30 19:06:35 +08:00
xiao-kong-long
e7c015f288
feat: fix comment and configs for successfully generating OpenAPI typescript-axios sdk (#2560) 
* fix: fix swagger.json, successfully generate java sdk

* fix:fix comment and change some content for successfully generating typescript-axios sdk
 2023-12-29 15:12:40 +08:00
Yang Luo
5c103e8cd3 Improve error handling in GenerateIdForNewUser() 2023-12-14 10:12:00 +08:00
Yang Luo
93efaa5459 Fix FileExist() error handling 2023-10-26 10:40:28 +08:00
aiden
45db4deb6b
feat: support checking permissions for group roles (#2422) 
* fix(permission): fix CheckLoginPermission() logic

* style: fix code format

* feat: support settting roles for groups

* fix: fix field name

* style: format codes

---------

Co-authored-by: aidenlu <aiden_lu@wochacha.com>
 2023-10-19 15:33:45 +08:00
Yang Luo
1055d7781b Improve error handling in AutoSigninFilter 2023-10-15 12:43:36 +08:00
haiwu
3d80ec721f
fix: use user.UpdatedTime as scim.Meta.Version instead of user.Id (#2406) 
* 111

* fix: use user.UpdatedTime as scim.Meta.Version instead of user.Id

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-10-14 11:03:58 +08:00
haiwu
440d87d70c feat: support SCIM protocol (#2393) 
* 111

* feat: support scim/Users GET and POST request

* feat: support scim/Users DELETE/PATCH/PUT request

* feat: better support scim/Users PATCH request

* feat: fix scim/Users logic

* feat: gofumpt

* feat: fix bug in scim/Users

* feat: fix typo

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-10-12 00:13:16 +08:00
UsherFall
7f298efebc feat: fix Apple OAuth issue (#2338) 
* feat: fix sign in with apple bug

* fix username
 2023-09-18 17:04:03 +08:00
Yang Luo
411a85c7ab Remove useless GetMaxLenStr() 2023-09-09 15:40:35 +08:00
Tower He
bbf2db2e00 feat: support to use a different db schema for pg (#2281) 2023-09-01 18:02:13 +08:00
Yang Luo
8073dfa88c Remove tmpFiles folder usage 2023-08-24 22:03:36 +08:00
Yaodong Yu
a41f6880a2 feat: move policy table from adapter to enforcer and improve it (#2228) 
* feat: improve policiy table

* feat: add connection test in AdapterEditPage.js

* feat: update button style
 2023-08-18 19:00:21 +08:00
Baihhh
80b0d26813 fix: synchronize update the syncers (#2201) 
Signed-off-by: baihhh <2542274498@qq.com>
 2023-08-13 22:30:57 +08:00
Yaodong Yu
558bcf95d6
feat: save policy in adapter edit page (#2190) 
* fix: save policy in adapter

* fix: disable edit for builtin adapter
 2023-08-09 00:12:53 +08:00
Yaodong Yu
3d4ca1adb1
feat: support custom user mapping (#2029) 
* feat: support custom user mapping

* fix: parse id to string

* Update data.json

* Update data.json

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-07-05 20:35:02 +08:00
haiwu
35e1f8538e
feat: fix panic when url.Parse() fails to parse URL (#2034) 2023-07-03 12:35:22 +08:00
haiwu
807aea5ec7
feat: add tags to application (#2027) 
* feat: add tags to application

* fix: fix for merge master

* feat: update i18n(backend&frontend) for application tags
 2023-06-30 00:04:12 +08:00
Yaodong Yu
1c42b6e395
fix: refactor the idp and regex code (#2030) 
* refactor: validate util and idp

* chore: clean code

* chore: clean code
 2023-06-29 21:44:14 +08:00
Alex OvsInc
6ebca6dbe7
fix: Gosec/sec fixes (#2004) 
* Customization of the initialization file

* fix: G601 (CWE-118): Implicit memory aliasing in for loop

* fix: G304 (CWE-22): Potential file inclusion via variable

* fix: G110 (CWE-409): Potential DoS vulnerability via decompression bomb
 2023-06-21 18:55:20 +08:00
Yaodong Yu
65716af89e
feat: deprecate the user group relation table (#1990) 
* fix: deprecate the user group relation table

* fix: clean code

* fix: fix trigger

* Update group.go

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-06-19 19:08:45 +08:00
June
edc6aa0d50
feat: get all role/permission of an user (#1978) 2023-06-16 22:44:21 +08:00
guangwu
54e4747dbc
refactor: code-optimization (#1885) 
* refactor: code-optimization

* fix: restoring code style

* fix: gofmt
 2023-05-23 17:54:51 +08:00
Yaodong Yu
eb39e9e044
feat: add multi-factor authentication (MFA) feature (#1800) 
* feat: add two-factor authentication interface and api

* merge

* feat: add Two-factor authentication accountItem and two-factor api in frontend

* feat: add basic 2fa setup UI

* rebase

* feat: finish the two-factor authentication

* rebase

* feat: support recover code

* chore: fix eslint error

* feat: support multiple sms account

* fix: client application login

* fix: lint

* Update authz.go

* Update mfa.go

* fix: support phone

* fix: i18n

* fix: i18n

* fix: support preferred mfa methods

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-05-05 21:23:59 +08:00
Yang Luo
2cd6f9df8e Add /api/get-message-answer API 2023-05-01 23:15:51 +08:00
Yang Luo
3a6ab4cfc6 Support mobile in DingTalk userinfo 2023-04-29 01:24:45 +08:00
imp2002
96219442f5
feat: fix Tencent Cloud OSS storage connect incorrect issue (#1752) 
* fix: fix Tencent Cloud OSS storage connect incorrect

* Update provider.go

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-04-18 21:30:46 +08:00
Yaodong Yu
1b1de1dd01
feat: add LDAP custom filter support (#1719) 
* refactor: improve ldap server code

* feat: custom filter

* fix: fix displayName mapping

* feat: add custom filter search fields

* chore: add license

* chore: i18n

* chore: i18n

* chore: update init field
 2023-04-13 14:12:31 +08:00
Yaodong Yu
b99a0c3ca2
feat: optimize the "forget password" page (#1709) 2023-04-06 23:06:18 +08:00
Yang Luo
98a99f0215 Fix bug in getMemoryUsage() 2023-04-02 10:50:41 +08:00
longxu0509
da7336a9a4
feat: support getting versionInfo in docker (#1673) 
* feat: support getting versionInfo in docker

* fix: fix build

* fix: fix build

* fix: fix system
 2023-03-21 20:46:17 +08:00
Gucheng Wang
07dc6bf7cd Refactor sysinfo page 2023-03-09 17:17:12 +08:00
longxu0509
2de3f6772d
fix: add aheadCnt in sysinfo (#1632) 
* feat: add sync module to bi-sync mysql

* feat: fix the delay problem

* feat: fix go mod

* feat: fix the varchar(100) parse error

* fix: fix go.mod space inconsistency

* fix: fix go.mod space inconsistency

* fix: use sql builder instead of concatenation

* fix: remove serverId

* fix: fix file is not `gofumpt`-ed (gofumpt) error

* feat: add mysql bi-sync

* feat: fix some data inconsistency problems

* feat: add function atuo get server uuid

* fix: encapsulate the struct to optimize the code

* fix: fix incorrect Casdoor version in system info page

* fix: fix incorrect root path

* Update sysytem_test.go

* feat: add aheadCnt means that the commit is ahead of version several times

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-03-09 16:07:13 +08:00
longxu0509
3f623570fd
feat: fix incorrect Casdoor version in system info page (#1631) 
* feat: add sync module to bi-sync mysql

* feat: fix the delay problem

* feat: fix go mod

* feat: fix the varchar(100) parse error

* fix: fix go.mod space inconsistency

* fix: fix go.mod space inconsistency

* fix: use sql builder instead of concatenation

* fix: remove serverId

* fix: fix file is not `gofumpt`-ed (gofumpt) error

* feat: add mysql bi-sync

* feat: fix some data inconsistency problems

* feat: add function atuo get server uuid

* fix: encapsulate the struct to optimize the code

* fix: fix incorrect Casdoor version in system info page

* fix: fix incorrect root path

* Update sysytem_test.go

---------

Co-authored-by: hsluoyz <hsluoyz@qq.com>
 2023-03-09 13:28:23 +08:00
Yaodong Yu
5caceb4ae2
feat: fix bug that signup country code is undefined (#1590) 
* feat: fix signup country code is undefined

* refactor: valid phone number in CN
 2023-02-27 20:10:59 +08:00