Commit Graph

12805 Commits

Author SHA1 Message Date
wrd
b3e9352b2f Update copyright year in README.md 2026-01-04 15:19:31 +08:00
wangruidong
1ab5aa42a7 feat: Implement rate limiting with custom throttling classes for different user types 2025-12-30 11:08:06 +08:00
wangruidong
b9e38f340b perf: Simplify login and MFA limit key templates by removing IP address 2025-12-30 11:05:36 +08:00
feng
95aa50ed4f perf: Top session asset user cache 2025-12-23 18:02:32 +08:00
wangruidong
6ac3896b1d fix: Account list: add template accounts. When the policy is update, it is actually skipped 2025-12-23 15:52:22 +08:00
feng
f4941088f0 perf: Support ipv6 2025-12-23 15:30:44 +08:00
wangruidong
55346cace9 fix: The asset perms of tickets application are missing information in the comment 2025-12-22 15:08:51 +08:00
Bai
6d92ddf2d3 perf: redirect confirm page only support back to index page 2025-12-18 16:16:06 +08:00
feng
296112bed8 perf: check_api 2025-12-17 17:58:39 +08:00
Bai
50a857e182 perf: click confirm, add interval 30s auto close tab 2025-12-17 17:24:59 +08:00
Bai
cfca2cdf5c perf: set redirect-confirm page, add close button, user refresh redirect to indexPage 2025-12-17 16:54:55 +08:00
Bai
599797299f perf: add oauth2_provider.log to logger 2025-12-17 15:19:03 +08:00
fit2bot
eee7333745 fix: Integrations services failed to call api (#16441)
Co-authored-by: wangruidong <940853815@qq.com>
2025-12-16 11:34:07 +08:00
wangruidong
e7ed098503 fix: Remove Ansible Receptor configuration and related code 2025-12-16 11:33:29 +08:00
ibuler
29fb518156 perf: change word spell 2025-12-16 11:33:07 +08:00
wangruidong
e16e2cb964 perf: Update translations for Diff and Export filtered in Chinese 2025-12-16 11:32:44 +08:00
fit2bot
a41b6b41e0 perf: Add custom chat model (#16439)
Co-authored-by: feng <1304903146@qq.com>
2025-12-16 09:18:56 +08:00
feng
933e6e4c15 perf: Vault save maximum recursion depth exceeded 2025-12-15 15:56:54 +08:00
feng
46384e19b5 perf: client version 2025-12-12 15:36:37 +08:00
fit2bot
e388a7efa0 perf: chat ai custom model (#16428) 2025-12-12 15:28:20 +08:00
Chenyang Shen
4bc345542c Merge pull request #16424 from jumpserver/pr@dev@feat_redis_lock_on_piico
feat: add redis lock on piico card init
2025-12-12 15:00:57 +08:00
Aaron3S
829e9b1497 feat: add redis lock on picco card init 2025-12-11 18:38:21 +08:00
fit2bot
8e703d306c feat: Add permission check for reading account secrets based on system settings (#16337) 2025-12-11 16:42:10 +08:00
wangruidong
af908480f4 fix: Add '/media/' to the list of whitelisted URLs for MFA login 2025-12-11 16:39:10 +08:00
wangruidong
fc2d4ae751 fix: Add user validity check to authentication process 2025-12-11 16:38:32 +08:00
wangruidong
cde5fb7a3e perf: Include 'id' in search and filter fields for AutomationExecution 2025-12-11 16:36:51 +08:00
Eric
19da95c6fb perf: update vnc protocol 2025-12-10 15:53:48 +08:00
Eric
bc4f29a6f6 perf: support virtual_app vnc client 2025-12-10 15:26:06 +08:00
Chenyang Shen
2b1fdb937b Merge pull request #16404 from jumpserver/pr@dev@feat_reset_key_store
feat: reset piico device after open device
2025-12-09 15:16:41 +08:00
Aaron3S
1e754546f1 feat: reset piico device after open device 2025-12-09 14:47:37 +08:00
Bai
2ec71feafc perf: rbac oauth2_provider perms i18n 2025-12-09 10:17:34 +08:00
Bai
02e8905330 perf: redirect/confirm page and i18n 2025-12-08 18:43:04 +08:00
Bai
8d68f5589b perf: redirect/confirm page and i18n 2025-12-08 18:43:04 +08:00
Bai
4df13fc384 perf: redirect/confirm page and i18n 2025-12-08 18:40:12 +08:00
Bai
78c1162028 perf: when DEBUG_DEV=True, allow OAUTH2_PROVIDER redirect_url localhost listen 2025-12-08 16:42:07 +08:00
Bai
14c2512b45 fix: accesskey authentication user is None error 2025-12-08 15:06:47 +08:00
Bai
d6d7072da5 perf: request.GET.copy() to dict(), because copy() returned values is list [] 2025-12-08 12:50:49 +08:00
fit2bot
993bc36c5e perf: handling the next parameter propagation issue in third-party authentication flows (#16395)
* perf: remove call client old- method via ?next=client

* feat: add 2 decorators for login-get and login-callback-get to set next_page and get next_page from session

* perf: code style

* perf: handling the next parameter propagation issue in third-party authentication flows

* perf: request.GET.dict() to copy()

* perf: style import

---------

Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-08 12:34:32 +08:00
fit2bot
ecff2ea07e perf: move oauth2_provider api auth_backend to the end, and while accesstoken_backend not user do not raise execption, go on next bakcned auth (#16393)
* perf: move oauth2_provider api auth_backend to the end, and while accesstoken_backend not user do not raise execption, go on next bakcned auth

* perf: re-sorted DEFAULT_AUTHENTICATION_CLASSES

---------

Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-08 09:57:17 +08:00
fit2bot
ba70edf221 perf: when oauth2 application delete expired well-known page cache via post_delete signal (#16392)
Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-08 09:54:18 +08:00
Bai
50050dff57 fix: cas only allow exist user login 2025-12-04 18:37:54 +08:00
jiangweidong
944226866c perf: Add a diff field to operate-log export 2025-12-04 18:01:01 +08:00
fit2bot
fe13221d88 fix: Improve server URI validation and connection testing in LDAP module (#16377)
Co-authored-by: wangruidong <940853815@qq.com>
2025-12-04 17:59:01 +08:00
fit2bot
ba17863892 perf: Remove unused CAS user exception handling and simplify login view error response (#16380)
* perf: Remove unused CAS user exception handling and simplify login view error response

* perf: position code

---------

Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-04 17:49:58 +08:00
fit2bot
065bfeda52 fix: only exists user login maybe invalid (#16379)
* fix: only exists user login maybe invalid

* fix: only exists user login maybe invalid

* fix: only exists user login maybe invalid

---------

Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-04 16:18:47 +08:00
wangruidong
04af26500a fix: Allow login with username or email for existing users 2025-12-04 10:04:32 +08:00
fit2bot
e0388364c3 fix: use third part authentication service rediect to client failed (#16370)
* perf: .well-known cached 1h and support saml2 redirect_to client

* fix: support wecom redirect_to client (reslove wecom waf 501 error)

* fix: support oauth2 auth rediect to client

* fix: safe next url

---------

Co-authored-by: Bai <baijiangjie@gmail.com>
2025-12-03 19:07:00 +08:00
Bai
3c96480b0c perf: add manage.py command: init_oauth2_provider, resolve init jumpserver client failed issue 2025-12-03 14:37:20 +08:00
Bai
95331a0c4b perf: redirect to client show tips 2025-12-02 18:39:48 +08:00
Bai
b8ecb703cf perf: url revoke_token/ to revoke/ 2025-12-02 18:21:13 +08:00