82 Commits

Author SHA1 Message Date
Steve0x2a
051752340d
feat: add userinfo endpoint (#447)
* feat: add userinfo endpoint

Signed-off-by: 0x2a <stevesough@gmail.com>

* feat: add scope support

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: modify the endpoint of discovery

Signed-off-by: 0x2a <stevesough@gmail.com>
2022-01-26 11:56:01 +08:00
Gucheng Wang
c22ab44894 Update import path. 2022-01-20 14:11:46 +08:00
Yang Luo
9b6131890c Add permission page. 2022-01-01 16:28:33 +08:00
Steve0x2a
ffc0a0e0d5
fix: refresh_token endpoint does not work (#410)
Signed-off-by: 0x2a <stevesough@gmail.com>
2022-01-01 15:20:49 +08:00
Yang Luo
ff22bf507f Add role page. 2022-01-01 15:11:16 +08:00
Yang Luo
4b65320a96 Support user uploading via xlsx. 2021-12-31 13:00:35 +08:00
Yang Luo
5e8897e41b Make cert work. 2021-12-31 10:02:06 +08:00
Yang Luo
ba1646a0c3 Add cert pages. 2021-12-31 00:36:36 +08:00
Yixiang Zhao
755d912f61
feat: add refresh token mechanism for server side (#336)
* feat: add refresh token mechanism for server side

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* feat: add refresh token expire configuration UI

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-18 18:49:38 +08:00
Gucheng Wang
c2110ef59d Add sync pages. 2021-12-17 16:35:45 +08:00
Gucheng Wang
0adb9b0047 Improve parseBearerToken(). 2021-12-13 00:37:13 +08:00
Steve0x2a
00ab156453
fix: support using bearer token to access protected resources (#364)
* fix: require signed in by bearer token.

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: utilize existing code refactoring functions

Signed-off-by: 0x2a <stevesough@gmail.com>

* fix: improve the bearer parese function

Signed-off-by: 0x2a <stevesough@gmail.com>
2021-12-13 00:25:44 +08:00
Yixiang Zhao
113398c36b
feat: support SAML and test with aliyun IDaaS (#346)
* feat: support SAML and test with aliyun IDaaS

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* refactor: refactor saml.go and router

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* fix: add param to getSamlLogin()

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>

* feat: add inputs to parse metadata automatically and show sp-acs-url, sp-entity-id

Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com>
2021-12-06 21:46:50 +08:00
Товарищ программист
07fa438348
feat: update swagger api json with tags (#347)
Signed-off-by: Товарищ программист <2962928213@qq.com>
2021-12-03 20:42:36 +08:00
Товарищ программист
bddd57cda8
feat: implement jwks_uri handler in oidc discovery (#334)
Signed-off-by: Товарищ <2962928213@qq.com>
2021-11-22 17:47:44 +08:00
Gucheng Wang
0b3742b0b1 Add GetSortedUsers() and GetUserCount() APIs. 2021-11-19 10:51:06 +08:00
Gucheng Wang
54ef2ec09f Expose GetOAuthCode() as API. 2021-11-08 23:28:41 +08:00
Gucheng Wang
30a2fdef37 Make webhook work. 2021-11-07 23:53:17 +08:00
Gucheng Wang
5ec678fa28 Improve record's User field. 2021-11-07 17:20:15 +08:00
Gucheng Wang
77fffcacac Refactor the record code. 2021-11-07 16:51:16 +08:00
Gucheng Wang
0e71e603ac Add webhook pages. 2021-11-07 16:24:13 +08:00
Yang Luo
a1b5282da9 Add /.well-known/openid-configuration route. 2021-09-25 14:54:13 +08:00
Yang Luo
964b60da29 Support silent login from HTTP basic authentication. 2021-09-21 22:57:37 +08:00
Yang Luo
bd41425039 Improve format. 2021-09-05 22:09:54 +08:00
sh1luo
9d9a1da07f
fix: remove routers/util (#287)
Signed-off-by: sh1luo <690898835@qq.com>
2021-09-05 22:02:32 +08:00
Yang Luo
465d25a272 Improve router base.go 2021-09-05 14:44:27 +08:00
Yang Luo
14d09cad2c Support server-side upload-resource call. 2021-09-05 01:03:29 +08:00
Yang Luo
06006c87b8 Improve filter code. 2021-09-05 00:22:08 +08:00
Yang Luo
398ba19fa5 Add CheckUserPassword() API. 2021-08-15 21:57:36 +08:00
Yang Luo
495b64995f Add resource list page. 2021-08-15 00:25:46 +08:00
Yang Luo
b7e0a4fe4e Return 200 for denied request. 2021-08-14 14:26:42 +08:00
Yang Luo
5c2f96bda0 Add UploadFile() API. 2021-08-14 14:22:01 +08:00
sh1luo
8c66ef6860 fix: improve code specification (#231) 2021-08-14 14:18:08 +08:00
Yang Luo
d79544f34a Use User in Claims. 2021-08-14 14:15:52 +08:00
Yang Luo
ea692c4e73 Rename to AutoSigninFilter 2021-08-14 14:15:49 +08:00
Kininaru
7a2230f63e
feat: expose email and sms APIs as services to SDK (#202)
Signed-off-by: Kininaru <shiftregister233@outlook.com>

invalid receivers
2021-07-30 14:15:10 +08:00
sh1luo
c632c3c307
fix: replace casdoor with casbin (#194)
Signed-off-by: sh1luo <690898835@qq.com>
2021-07-25 09:34:25 +08:00
WindSpiritSR
705d2ede6b feat: support LDAP (#160)
Signed-off-by: WindSpiritSR <simon343riley@gmail.com>
2021-07-19 10:13:23 +08:00
Yang Luo
dc0712c8a5 Replace getDefaultApplication() with getUserApplication(). 2021-07-19 10:12:04 +08:00
killer
21b36bbb47 feat: add UI to view logs
Signed-off-by: killer <1533063601@qq.com>
2021-07-19 10:11:01 +08:00
Yang Luo
30bed3cb47 Override session when signed in by link. 2021-06-10 13:27:03 +08:00
Kininaru
b65ae4eec1 fix: wrong usement in getUsername
Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-06-06 18:56:00 +08:00
Kininaru
56be5f9a51 feat: authorize via clientId and clientSecret
Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-06-06 17:27:03 +08:00
Weihao Chen
1cb5ae54c5
feat: add "forget password" [front & backend] (#75)
* feat: add "forget password" [front & backend]

Signed-off-by: Weihao <1340908470@qq.com>

* fix: verification code can be sent even if no mobile phone or email is selected
refactor: forgetPassword -> forget; GetEmailAndPhoneByUsername -> GetEmailAndPhone; remove useless note

Signed-off-by: Weihao <1340908470@qq.com>
2021-06-02 13:39:01 +08:00
Kininaru
f39378562f feat: turing test before send code
Signed-off-by: Kininaru <shiftregister233@outlook.com>

i18n

i18n

Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-05-22 21:03:49 +08:00
Yang Luo
18806f07a8 Support cred auto-login. 2021-05-16 18:18:55 +08:00
Yang Luo
df7ac93feb Show error "Invalid JWT token". 2021-05-15 23:34:06 +08:00
Yang Luo
db5ecddd3f Remove /get-default-providers API. 2021-05-14 16:07:39 +08:00
Kininaru
400e335e68 feat: add reset email by verification code
Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-05-12 21:38:31 +08:00
Kininaru
33e61cc5cf feat: set password for users
Signed-off-by: Kininaru <shiftregister233@outlook.com>

removed useless blank

Signed-off-by: Kininaru <shiftregister233@outlook.com>

add license header

Signed-off-by: Kininaru <shiftregister233@outlook.com>

i18n

Signed-off-by: Kininaru <shiftregister233@outlook.com>

database logic

Signed-off-by: Kininaru <shiftregister233@outlook.com>

i18n

Signed-off-by: Kininaru <shiftregister233@outlook.com>

i18n

Signed-off-by: Kininaru <shiftregister233@outlook.com>
2021-05-09 20:56:52 +08:00