wangruidong
fc2d4ae751
fix: Add user validity check to authentication process
2025-12-11 16:38:32 +08:00
Bai
14c2512b45
fix: accesskey authentication user is None error
2025-12-08 15:06:47 +08:00
Bai
d6d7072da5
perf: request.GET.copy() to dict(), because copy() returned values is list []
2025-12-08 12:50:49 +08:00
fit2bot
993bc36c5e
perf: handling the next parameter propagation issue in third-party authentication flows ( #16395 )
...
* perf: remove call client old- method via ?next=client
* feat: add 2 decorators for login-get and login-callback-get to set next_page and get next_page from session
* perf: code style
* perf: handling the next parameter propagation issue in third-party authentication flows
* perf: request.GET.dict() to copy()
* perf: style import
---------
Co-authored-by: Bai <baijiangjie@gmail.com >
2025-12-08 12:34:32 +08:00
fit2bot
ecff2ea07e
perf: move oauth2_provider api auth_backend to the end, and while accesstoken_backend not user do not raise execption, go on next bakcned auth ( #16393 )
...
* perf: move oauth2_provider api auth_backend to the end, and while accesstoken_backend not user do not raise execption, go on next bakcned auth
* perf: re-sorted DEFAULT_AUTHENTICATION_CLASSES
---------
Co-authored-by: Bai <baijiangjie@gmail.com >
2025-12-08 09:57:17 +08:00
fit2bot
ba70edf221
perf: when oauth2 application delete expired well-known page cache via post_delete signal ( #16392 )
...
Co-authored-by: Bai <baijiangjie@gmail.com >
2025-12-08 09:54:18 +08:00
Bai
50050dff57
fix: cas only allow exist user login
2025-12-04 18:37:54 +08:00
fit2bot
ba17863892
perf: Remove unused CAS user exception handling and simplify login view error response ( #16380 )
...
* perf: Remove unused CAS user exception handling and simplify login view error response
* perf: position code
---------
Co-authored-by: wangruidong <940853815@qq.com >
Co-authored-by: Bai <baijiangjie@gmail.com >
2025-12-04 17:49:58 +08:00
fit2bot
e0388364c3
fix: use third part authentication service rediect to client failed ( #16370 )
...
* perf: .well-known cached 1h and support saml2 redirect_to client
* fix: support wecom redirect_to client (reslove wecom waf 501 error)
* fix: support oauth2 auth rediect to client
* fix: safe next url
---------
Co-authored-by: Bai <baijiangjie@gmail.com >
2025-12-03 19:07:00 +08:00
Bai
3c96480b0c
perf: add manage.py command: init_oauth2_provider, resolve init jumpserver client failed issue
2025-12-03 14:37:20 +08:00
Bai
b8ecb703cf
perf: url revoke_token/ to revoke/
2025-12-02 18:21:13 +08:00
Bai
427fd3f72c
perf: organize oauth2_provider urls, add .well-known API
2025-12-02 14:55:09 +08:00
wangruidong
d4d4cadbcd
fix: OAuth2 Only allow existing users to log in operate log error
2025-11-13 18:42:28 +08:00
wangruidong
ad8c0f6664
fix: SAML2 Only allow existing users to log in operate log error
2025-11-13 16:36:58 +08:00
fit2bot
8d7267400d
fix: OpenID Only allow existing users to log in operate log error ( #16013 )
...
Co-authored-by: wangruidong <940853815@qq.com >
2025-10-22 14:53:12 +08:00
feng
92e250e03b
perf: user_can_authenticate add logger
2025-10-14 15:48:47 +08:00
Bai
b15f663c87
fix: AK/SK remained valid after the user expired.
2025-09-16 13:32:25 +08:00
Bai
7a6187b95f
fix: temp token backend
2025-09-03 18:10:10 +08:00
fit2bot
24f7946b7b
perf: change some field to encrypt field ( #15842 )
...
* perf: conn token add remote addr
* perf: change some field to encrypt field
---------
Co-authored-by: ibuler <ibuler@qq.com >
2025-08-14 15:05:18 +08:00
wangruidong
a822905ae7
fix: When the cas user doesn't exist, you will be prompted with an error when logging in.
2025-07-31 17:15:18 +08:00
ibuler
be24f28d9b
perf: in safe mode passkey cannot be as mfa
2025-07-25 10:50:46 +08:00
feng
38b268b104
fix: Circular import
2025-07-22 14:36:22 +08:00
feng
75575af56f
perf: Callback client
2025-07-22 13:51:08 +08:00
wangruidong
cc4be36752
perf: Log IntegrityError details during user authentication
2025-07-15 18:58:16 +08:00
ibuler
7da74dc6e8
fix: integrate with azure oidc
2025-07-10 11:33:41 +08:00
ibuler
cb42df542d
fix: bitwardne request data encode
2025-06-23 14:13:15 +08:00
老广
e2830ecdd6
perf: passkey auth auto mfa
2025-05-07 16:24:39 +08:00
Bai
e8e0ea920b
perf: change jumpserver.org to jumpserver.com
2025-04-08 14:23:28 +08:00
ibuler
b55000663e
perf: 提升服务注册安全性
2025-03-27 16:25:28 +08:00
fit2bot
763e67bd1d
perf: Integrate authentication to update user attribute logic ( #14979 )
2025-03-07 16:25:28 +08:00
fit2bot
3f4141ca0b
merge: with pam ( #14911 )
...
* perf: change i18n
* perf: pam
* perf: change translate
* perf: add check account
* perf: add date field
* perf: add account filter
* perf: remove some js
* perf: add account status action
* perf: update pam
* perf: 修改 discover account
* perf: update filter
* perf: update gathered account
* perf: 修改账号同步
* perf: squash migrations
* perf: update pam
* perf: change i18n
* perf: update account risk
* perf: 更新风险发现
* perf: remove css
* perf: Admin connection token
* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks
* perf: Modify account migration files
* perf: update pam
* perf: remove to check account dir
* perf: Admin connection token
* perf: update check account
* perf: 优化发送结果
* perf: update pam
* perf: update bulk update create
* perf: prepaire using thread timer for bulk_create_decorator
* perf: update bulk create decorator
* perf: 优化 playbook manager
* perf: 优化收集账号的报表
* perf: Update poetry
* perf: Update Dockerfile with new base image tag
* fix: Account migrate 0012 file
* perf: 修改备份
* perf: update pam
* fix: Expand resource_type filter to include raw type
* feat: PAM Service (#14552 )
* feat: PAM Service
* perf: import package name
---------
Co-authored-by: jiangweidong <1053570670@qq.com >
* perf: Change secret dashboard (#14551 )
Co-authored-by: feng <1304903146@qq.com >
* perf: update migrations
* perf: 修改支持 pam
* perf: Change secret record table dashboard
* perf: update status
* fix: Automation send report
* perf: Change secret report
* feat: windows accounts gather
* perf: update change status
* perf: Account backup
* perf: Account backup report
* perf: Account migrate
* perf: update service to application
* perf: update migrations
* perf: update logo
* feat: oracle accounts gather (#14571 )
* feat: oracle accounts gather
* feat: sqlserver accounts gather
* feat: postgresql accounts gather
* feat: mysql accounts gather
---------
Co-authored-by: wangruidong <940853815@qq.com >
* feat: mongodb accounts gather
* perf: Change secret
* perf: Migrate
* perf: Merge conflicting migration files
* perf: Change secret
* perf: Automation filter org
* perf: Account push
* perf: Random secret string
* perf: Enhance SQL query and update risk handling in accounts
* perf: Ticket filter assignee_id
* perf: 修改 account remote
* perf: 修改一些 adhoc 任务
* perf: Change secret
* perf: Remove push account extra api
* perf: update status
* perf: The entire organization can view activity log
* fix: risk field check
* perf: add account details api
* perf: add demo mode
* perf: Delete gather_account
* perf: Perfect solution to account version problem
* perf: Update status action to handle multiple accounts
* perf: Add GatherAccountDetailField and update serializers
* perf: Display account history in combination with password change records
* perf: Lina translate
* fix: Update mysql_filter to handle nested user info
* perf: Admin connection token validate_permission account
* perf: copy move account
* perf: account filter risk
* perf: account risk filter
* perf: Copy move account failed message
* fix: gather account sync account to asset
* perf: Pam dashboard
* perf: Account dashboard total accounts
* perf: Pam dashboard
* perf: Change secret filter account secret_reset
* perf: 修改 risk filter
* perf: pam translate
* feat: Check for leaked duplicate passwords. (#14711 )
* feat: Check for leaked duplicate passwords.
* perf: Use SQLite instead of txt as leak password database
---------
Co-authored-by: jiangweidong <1053570670@qq.com >
Co-authored-by: 老广 <ibuler@qq.com >
* perf: merge with remote
* perf: Add risk change_password_add handle
* perf: Pam dashboard
* perf: check account manager import
* perf: 重构扫描
* perf: 修改 db
* perf: Gather account manager
* perf: update change db lib
* perf: dashboard
* perf: Account gather
* perf: 修改 asset get queryset
* perf: automation report
* perf: Pam account
* perf: Pam dashboard api
* perf: risk add account
* perf: 修改 risk check
* perf: Risk account
* perf: update risk add reopen action
* perf: add pylintrc
* Revert "perf: automation report"
This reverts commit 22aee54207ibuler@qq.com >
Co-authored-by: feng <1304903146@qq.com >
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com >
Co-authored-by: jiangweidong <1053570670@qq.com >
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com >
Co-authored-by: zhaojisen <1301338853@qq.com >
2025-02-21 16:39:57 +08:00
feng
7a9a71197a
perf: Client login
2024-12-18 18:01:38 +08:00
Bai
54726f0a2d
perf: Passkey Model field token max_length 1024
2024-12-12 14:29:23 +08:00
Bai
08de04fdbc
fix: fixed an issue when third-part user auth
2024-12-10 16:41:38 +08:00
Bai
9ed7c41514
fix: fixed an issue when third-part user auth
2024-12-10 16:41:38 +08:00
Bai
817957dbac
fix: fixed an issue where auth backend could pass inspect
2024-12-09 15:38:20 +08:00
Bai
398758baa6
fix: when oidc enabled and use_state user login raise 400
2024-12-06 16:26:28 +08:00
jiangweidong
35a1655905
perf: Oauth2.0 support two methods for passing authentication credentials.
2024-11-26 14:12:56 +08:00
wangruidong
f03263eedf
fix: Radius login failed
2024-11-15 15:44:05 +08:00
wangruidong
647736f4e3
fix: SAML2 500 error caused by duplicate email or username
2024-09-19 17:49:53 +08:00
wangruidong
c2784c44ad
feat: LDAP HA
2024-09-11 18:26:11 +08:00
wangruidong
c8b7008d42
perf: Translate
2024-09-06 10:54:12 +08:00
wangruidong
55e8e34226
fix: 500 error caused by duplicate email or username
2024-09-06 10:22:37 +08:00
feng
c545e2a3aa
perf: Support SAML2, OIDC user authentication services, mapping user group field information
2024-09-04 18:42:47 +08:00
feng
bd3909ad27
perf: Third-party user login settings default organization
2024-08-02 15:52:05 +08:00
feng
920cfdac5c
perf: Saml2 callback url miss port
2024-07-26 18:17:40 +08:00
Bai
dfde50c768
Merge v4 to dev
2024-06-24 15:43:40 +08:00
ibuler
11b125655d
perf: passkey help msg
2024-06-24 11:05:41 +08:00
jiangweidong
cdfb11549e
fix: 解决OAuth2可以跳过不存在用户不允许登录的规则
2024-05-31 10:43:01 +08:00
Bai
564ad40b99
perf: i18n System Settings End
2024-05-24 14:41:28 +08:00
