e2e3c1fbb8
feat: support Product.SuccessUrl ( #3908 )
2025-06-26 22:52:07 +08:00
b36fb50239
feat: fix check bug to allow logged-in users to buy product ( #3897 )
2025-06-25 10:49:20 +08:00
ca224fdd4c
feat: add group xlsx upload button ( #3885 )
2025-06-17 23:43:38 +08:00
6dc7b4d533
feat: get-user API respects org's account item's view rules now ( #3882 )
2025-06-16 20:09:21 +08:00
8cc22dec91
feat: upgrade Alibaba cloud captcha provider from v1 to v2 ( #3879 )
2025-06-12 23:02:36 +08:00
0c08ae5365
feat: Add support for email verification logic ( #3875 )
2025-06-11 19:17:16 +08:00
c3485268d3
feat: fix "Display name cannot be empty" in /update-user API
2025-06-11 00:32:05 +08:00
4cb0cd7c5a
feat: add Organization.HasPrivilegeConsent to block add-user API for the "built-in" org ( #3864 )
2025-06-06 23:05:01 +08:00
c6a50349cc
feat: add missing backend i18n texts ( #3863 )
2025-06-06 00:03:04 +08:00
4e17dae2c2
feat: fix unable to remove user from group bug ( #3847 )
2025-05-28 22:29:40 +08:00
0ad4d82d9c
feat: fix GetGroups() API bug when parentGroup is in next page ( #3843 )
2025-05-28 18:31:52 +08:00
9190db1099
feat: fix bug that token endpoint doesn't return 400/401 when type is object.TokenError ( #3808 )
2025-05-20 10:39:55 +08:00
1173f75794
feat: return HTTP status 400 instead of 200 in GetOAuthToken() ( #3807 )
2025-05-20 01:05:43 +08:00
521f90a603
feat: fix access_token endpoint cannot read clientId in form when using device code flow ( #3800 )
2025-05-17 18:53:38 +08:00
f8f864c5b9
feat: add logged-in IDP provider info to access token ( #3776 )
2025-05-11 09:51:51 +08:00
383bf44391
feat: support OIDC device flow: "/api/device-auth" ( #3757 )
2025-04-30 23:42:26 +08:00
fc618b9bd5
feat: add validation for optional fields in IntrospectionToken for custom token types ( #3717 )
2025-04-09 22:27:19 +08:00
77ef5828dd
feat(introspection): return correct active status for expired or revoked tokens ( #3716 )
2025-04-09 02:00:30 +08:00
c11f013e04
feat: return "Active: false" for expired token in IntrospectToken() ( #3714 )
2025-04-08 23:20:44 +08:00
952538916d
feat: check application existence in object.AddUser() ( #3686 )
2025-04-05 16:38:20 +08:00
18bb445e71
feat: update github.com/golang-jwt/jwt dependency to v5 ( #3708 )
2025-04-05 02:05:41 +08:00
cca88e2cb0
feat: fix bug that when email/sms mfa is not preferred, message will send to masked address ( #3705 )
2025-04-04 01:08:29 +08:00
b6f943e326
feat: support WebAuthn login without username and upgrade Go to 1.21 ( #3695 )
2025-04-01 16:35:59 +08:00
e55cd94298
feat: fix issue that user email is still unverified after signup ( #3685 )
2025-03-29 21:24:01 +08:00
08f7a05e61
feat: fix MFA + LDAP bug in /check-user-password API ( #3681 )
2025-03-26 22:11:58 +08:00
141372cb86
feat: support face ID provider ( #3666 )
2025-03-19 22:57:35 +08:00
3e7938e5f6
feat: don't panic when provider not found in Login() API ( #3659 )
2025-03-13 21:35:51 +08:00
85ca318e2f
feat: can assign default group during signup ( #3633 )
2025-03-02 22:55:51 +08:00
5692522ee0
feat: update user language when the language changed on login page ( #3628 )
2025-03-01 22:28:20 +08:00
cb1882e589
feat: fix MFA bug, revert PR: "feat: don't send verification code if failed signin limit is reached" ( #3627 )
2025-03-01 12:58:28 +08:00
f2e3037bc5
feat: don't send verification code if failed signin limit is reached ( #3616 )
2025-02-26 22:34:14 +08:00
f8d44e2dca
feat: set default CountryCode for user
2025-02-14 16:54:25 +08:00
9c39179849
feat: fix bug that user forbidden check will be skipped in OAuth login ( #3580 )
2025-02-13 13:14:44 +08:00
5661942175
feat: add CLI version cache and proxy support ( #3565 )
...
* feat: add CLI version cache mechanism
* feat: add /api/refresh-engines to allowed endpoints in demo mode
* feat: add proxy support for cli downloader
* feat: add SafeGoroutine for CLIDownloader initialization
* refactor: optimize code structure
2025-02-08 19:34:19 +08:00
7f9f7c6468
feat: add CLI tools auto-downloader and updater ( #3559 )
...
* feat: add CLI downloader feature
* feat: add CLI refresh endpoint and scheduler
* feat: improve binary names mapping for different platforms and architectures
* fix: format binary names in getBinaryNames function
* fix: change file permission notation to octal in cli_downloader.go
* feat: add isDemoMode check for CLI downloader features
2025-02-07 19:22:56 +08:00
b3526de675
feat: add checkOrgMasterVerificationCode()
2025-02-06 23:46:22 +08:00
df295717f0
feat: can define what Casdoor pages an org admin can see via Organization.NavItems ( #3539 )
...
* feat: support define what Casdoor pages an org admin can see
* feat: remove useless code
* fix: fix NavItemNodes i18next invalid
* fix: only global admin can edit navItems
* fix: move navItem tree to extra file
2025-02-03 00:40:21 +08:00
92b5ce3722
feat: add identifier validation for security in RunCasbinCommand ( #3535 )
...
* feat: add identifier validation for security in RunCasbinCommand
* refactor: update identifier validation to use SHA-256 hash and timestamp
2025-01-29 18:30:06 +08:00
558b168477
feat: can verify OTP during OAuth login ( #3531 )
...
* feat: support verify OTP during OAuth login
* fix: fail to login if mfa not enable
* fix: fail to login if mfa not enable
* fix: fix mfaRequired not valid in saml/auth
2025-01-27 19:37:26 +08:00
a5a627f92e
feat: optimize get-groups API and GroupListPage ( #3518 )
...
* fix: optimize get-groups api and GroupListPage
* fix: fix linter issue
2025-01-23 09:47:39 +08:00
3d12ac8dc2
feat: improve HandleScim()
2025-01-22 16:15:19 +08:00
e1b3b0ac6a
feat: allow user use other mfaType in mfa step and skip redundant MFA verification ( #3499 )
...
* feat: allow user use other mfaType in mfa step and skip redundant MFA verification
* feat: improve format
2025-01-21 20:16:18 +08:00
db551eb24a
feat: LDAP user can reset password with old password and new password ( #3516 )
...
* feat: support user reset password with old password and new password
* feat: merge similar code
2025-01-20 21:42:05 +08:00
17653888a3
feat: refactor the TestSmtpServer code
2025-01-20 03:17:09 +08:00
b96fa2a995
feat: skip GetUserCount() if there is no quota limit ( #3491 )
2025-01-10 22:28:25 +08:00
888a6f2feb
feat: add regex to restrict Email addresses in OAuth provider ( #3465 )
...
* feat: support use regex expression to limit email receiver address
* feat: limit in correct pos
* feat: promote code format
* feat: promote code format
* fix: fix linter issue
2025-01-02 00:00:57 +08:00
b927c6d7b4
feat: support LDAP's SetPassword ( #3395 )
...
* fix: Resolve the issue mentioned in #3392
* fix: Change checkLdapUserPassword to CheckLdapUserPassword.
* fix: the issue mentioned by hsluoyz.
* fix: Check if the user parameter is nil
* fix: use existing i18n message
2024-12-09 16:06:24 +08:00
1d21c3fa90
feat: fix issue that introspectionResponse uses Bearer instead of raw tokenType ( #3399 )
2024-12-05 20:59:30 +08:00
6175fd6764
feat: make token_type_hint optional ( #3397 )
2024-12-04 20:10:15 +08:00
d522247552
feat: fix countryCode param bug in MFA login ( #3384 )
2024-11-29 21:46:06 +08:00
