eb39e9e044
feat: add multi-factor authentication (MFA) feature ( #1800 )
...
* feat: add two-factor authentication interface and api
* merge
* feat: add Two-factor authentication accountItem and two-factor api in frontend
* feat: add basic 2fa setup UI
* rebase
* feat: finish the two-factor authentication
* rebase
* feat: support recover code
* chore: fix eslint error
* feat: support multiple sms account
* fix: client application login
* fix: lint
* Update authz.go
* Update mfa.go
* fix: support phone
* fix: i18n
* fix: i18n
* fix: support preferred mfa methods
---------
Co-authored-by: hsluoyz <hsluoyz@qq.com >
2023-05-05 21:23:59 +08:00
3a6ab4cfc6
Support mobile in DingTalk userinfo
2023-04-29 01:24:45 +08:00
95f4f4cb6d
feat: refactor out form package and optimize verification code module ( #1787 )
...
* refactor: add forms package and optimize verification code module
* chore: add license
* chore: fix lint
* chore: fix lint
* chore: fix lint
* chore: swagger
2023-04-25 23:05:53 +08:00
6d6cbc7e6f
feat: add dynamic mode for provider to enable verification code when the login password is wrong ( #1753 )
...
* fix: update webAuthnBufferDecode to support Base64URL for WebAuthn updates
* feat: enable verification code when the login password is wrong
* fix: only enable captcha when login in password
* fix: disable login error limits when captcha on
* fix: pass "enableCaptcha" as an optional param
* fix: change enbleCapctah to optional bool param
2023-04-22 16:16:25 +08:00
47dc3715f9
feat: handle error when parsing samlResponse ( #1744 )
...
* fix: handle err from parse samlResponse
* fix: lint
2023-04-16 00:36:25 +08:00
b99a0c3ca2
feat: optimize the "forget password" page ( #1709 )
2023-04-06 23:06:18 +08:00
c6146a9149
feat: fix bug that login by saml provider can not find application ( #1676 )
2023-03-23 21:38:33 +08:00
c7b9a77b4a
Remove Go i18n duplicates
2023-03-19 22:09:19 +08:00
a8a8f39963
feat: use GetUserCount to optimize login performance ( #1653 )
2023-03-14 14:38:39 +08:00
eb72c9f273
feat: support multiple country codes for sending SMS ( #1557 )
...
* feat: support multiple country code
* feat: improve UI
* feat: migrate accountItem
* fix: Aliyun compatible
* fix: phone validate
* fix: typo
2023-02-16 22:53:28 +08:00
9256791420
feat: app session control and db migrate ( #1539 )
...
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process (#1533 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
---------
Co-authored-by: Zayn Xie <84443886+xiaoniuren99@users.noreply.github.com >
* fix: migrate err
* fix: migrate err
* feat: app session control and db migrate
* feat: app session control and db migrate
* feat: app session control and db migrate
---------
Co-authored-by: Zayn Xie <84443886+xiaoniuren99@users.noreply.github.com >
2023-02-12 09:33:24 +08:00
8698f4111a
feat: add all remaining Goth providers to Casdoor OAuth login ( #1484 )
...
* feat: add Amazon support as OAuth 3rd-party login
* refactor: comebine the same URLs
* refactor: use hyper component to create login button
* feat: add all remaining Goth providers to Casdoor OAuth login
* refactor: remove redundant props
* fix: check provider auth url and params
2023-02-04 12:20:18 +08:00
7d25b9cdd8
feat: auto link accounts with the same email ( #1464 )
2023-01-11 23:19:16 +08:00
fcb80b800f
feat: add refresh token to token login response ( #1458 )
...
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com >
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com >
2023-01-09 23:33:03 +08:00
57028c2059
Remove duplicated i18n words
2023-01-06 20:24:14 +08:00
a6e9084973
Remove duplicated i18n words
2023-01-06 20:12:32 +08:00
1d8b0a264e
feat(login): add code login limit ( #1442 )
2023-01-06 18:51:43 +08:00
b525210835
feat: destroy session after delete user ( #1441 )
...
* fix: destroy session after delete user
* feat: visual session
* fix: go lint
* feat: add translation
* feat: auto flush after offline
* fix: delete one session
* fix: move 403 page to baseListPage
2023-01-06 15:04:13 +08:00
eae3b0d367
feat: fix saml login failed by using oauth ( #1443 )
2023-01-03 19:42:12 +08:00
c952c2f2f4
feat: fix login with password bug when feature is disabled ( #1428 )
2022-12-27 14:46:57 +08:00
ae130788ec
feat: add Line support as OAuth 3rd-party login ( #1413 )
2022-12-21 02:25:58 +08:00
a51f0d7c08
feat: init score in organization ( #1388 )
...
* feat: init score in organization
* Update OrganizationEditPage.js
Co-authored-by: hsluoyz <hsluoyz@qq.com >
2022-12-10 22:27:12 +08:00
1bb3d2dea9
feat: refactor backend i18n ( #1373 )
...
* fix: handle the dataSourceName when DB changes
* reduce duplication of code
* feat: refactor translation error message
* feat: use json intsead of ini file
* remove useless translation
* fix translate problems
* remove useless addition
* fix pr problems
* fix pr problems
* fix split problem
* use gofumpt to fmt code
* use crowdin to execute backend translation
* fix pr problems
* refactor: change translation file structure same as frontend
* delete useless output
* update go.mod
2022-12-07 13:13:23 +08:00
b337b908ea
feat: fix the bug that admin cannot upload avatar for other users ( #1323 )
2022-11-25 09:36:47 +08:00
7e756b8ee2
feat: manager applications in organization scope ( #1290 )
...
* feat: manager applications in organization scope(front end)
* fix: application can use own organization and admin provider
* fix: improve methed to get provider
* fix: modify provider methods by convention
2022-11-21 01:17:55 +08:00
aa6a4dc74f
feat: support login by following wechat official account ( #1284 )
...
* show QRcode when click WeChat Icon
* update how to show qrcode
* handle wechat scan qrcode
* fix api problems
* fix url problems
* fix problems
* modify get frequency
* remove useless print
* fix:fix PR problems
* fix: fix PR problems
* fix:fix PR problem
* fix IMG load delay problems
* fix:fix provider problems
* fix test problems
* use gofumpt to fmt code
* fix:delete useless variables
* feat:add button for follow official account
* fix:fix review problems
* use gofumpt to fmt code
* fix:fix scantype problems
* fix Response problem
* use gofumpt to format code
2022-11-13 15:05:15 +08:00
25d56ee8d5
feat: allow captcha to be enabled when logging in ( #1211 )
...
* Fix bug in GetAcceptLanguage()
* feat: allow captcha to be enabled when logging in
* feat: when the login password is wrong, enable captcha
* feat: Restrict captcha from frontend
* fix: modify CaptchaModal component
* fix: modify the words of i18n
* Update data.json
Co-authored-by: Gucheng Wang <nomeguy@qq.com >
Co-authored-by: hsluoyz <hsluoyz@qq.com >
2022-10-28 13:38:14 +08:00
d86f3c88c7
feat: support i18n in backend err messages ( #1232 )
...
* feat: support i18n in backend err messages
* use gofumpt to fmt code
* fix review problems
* support auto generate err message
* delete beego/i18n moudle
* fix Github action test problems
* fix review problems
* use gofumpt to format code
* use gofumpt to fmt code
2022-10-23 15:16:24 +08:00
146aec9ee8
feat: skip username restriction for new users coming from OAuth providers. ( #1225 )
2022-10-17 18:01:01 +08:00
4c7f6fda37
fix: Add restriction to username when signing up ( #1203 )
2022-10-10 19:58:02 +08:00
67a5adf585
feat: replace panic with details json error payload. ( #1039 )
...
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com >
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com >
2022-08-20 21:09:32 +08:00
79119760f2
style: golint ( #988 )
2022-08-09 16:50:49 +08:00
2ea58cd639
chore(style): use gofumpt to fmt go code ( #967 )
2022-08-07 12:26:14 +08:00
6e70f0fc58
Refactor CheckAccessPermission().
2022-07-13 00:50:32 +08:00
2bca424370
feat: implement access control using casbin ( #806 )
...
* feat: implement access control using casbin
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
* chore: sort imports
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
* fix: remove
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
* Update auth.go
Co-authored-by: Gucheng <85475922+nomeguy@users.noreply.github.com >
2022-07-13 00:34:35 +08:00
376bac15dc
fix: improve swagger Api docunment ( #812 )
2022-06-21 23:11:29 +08:00
37b6b50751
fix: remove redundant query for OAuth user ( #788 )
2022-06-10 15:58:22 +08:00
efe5431f54
fix: OAuth user id confusion caused by username ( #785 )
2022-06-10 00:08:26 +08:00
3d0cf8788b
fix: trigger missing webhook ( #770 )
...
* fix: trigger missing webhook
* Update auth.go
Co-authored-by: Gucheng <85475922+nomeguy@users.noreply.github.com >
2022-06-01 09:34:56 +08:00
f7705931f7
fix: handle WeChat username conflicts ( #771 )
...
* handle username conflicts
* Update auth.go
Co-authored-by: roobtyan <roobtyan@qq.com >
Co-authored-by: Yang Luo <hsluoyz@qq.com >
2022-05-31 21:51:41 +08:00
42c2210178
fix: set phone prefix when disable verification code ( #769 )
...
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
2022-05-30 18:26:42 +08:00
b747f5e27c
fix: mistake GetApplicationLogin swagger router (casdoor#739) ( #740 )
...
Signed-off-by: xiexianbin <me@xiexianbin.cn >
2022-05-04 19:15:13 +08:00
0bc8c2d15f
fix: recover when goroutine panic that will kill main program ( #692 )
...
* fix #684
recover when goroutine panic that will kill main program
* Update util.go
Co-authored-by: Yang Luo <hsluoyz@qq.com >
2022-04-22 21:59:06 +08:00
287f60353c
feat: try to support custom OAuth provider ( #667 )
...
* feat: try to support private provider
* fix: modify code according to code review
* feat: set example values for custom params
2022-04-16 17:17:45 +08:00
15daf5dbfe
feat: add casdoor as saml idp support ( #571 )
...
* feat: add casdoor as saml idp support
Signed-off-by: 0x2a <stevesough@gmail.com >
* fix: merge code
Signed-off-by: 0x2a <stevesough@gmail.com >
* fix: modify response value
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: modify samlResponse generation method
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: generating a response using etree
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: change metadata url
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: modify front-end adaptation
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: recovering an incorrect override
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: change the samlResponse location
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: add relayState support
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-04-08 23:06:48 +08:00
3cf1b990be
feat: support CAS with organizations and applications ( #621 )
2022-04-04 00:09:04 +08:00
5f8924ed4e
feat: support overriding configuration with env ( #590 )
2022-03-20 23:21:09 +08:00
9f7924a6e0
fix: mask email and phone number on the backend ( #563 )
...
* fix: mask email and phone number on the backend
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
* fix: login with masked email or phone
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
* fix: improve regex
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
2022-03-15 12:54:57 +08:00
3602d9b9a7
fix: improve error messages
2022-03-07 15:16:09 +08:00
0e40a1d922
Check application existence in login().
2022-03-06 00:09:57 +08:00
