acbf49018f
[web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo ( #7563 )
...
* 2FA using userVerificationToken
* Fix 2FA Yubikeys
* TwoFactor.find_by_user_and_type take enum parameter not i32
* log_user_event take enum parameter not i32
* Fix 2fa webauthn
* Prevent 2FA claims reuse
* 2fa webauthn return keys when deleting
* 2fa reset twofactor_remember
* Reject 2FA verification tokens issued for another provider
The Email and Duo claims only have optional fields, so a userVerificationToken minted for another
provider deserialized into them and was accepted. Each provider's claims now reject unknown fields,
with a test that every token only parses as its own provider.
Also fix the email 2FA login in the Playwright user setup, which used an undefined `mailBuffer`.
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com >
2026-10-06 23:45:55 +02:00
1c89e1772b
2fa email fallback need a verified email ( #7770 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
Co-authored-by: Mathijs van Veluw <black.dex@gmail.com >
2026-10-03 14:01:26 +02:00
Timshel and Timshel
9c8aa2359f
User key id ( #7693 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-09-18 16:53:06 +02:00
Timshel and Timshel
25dfedafd7
Use insert_into when possible ( #6437 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-09-09 16:43:47 +02:00
Timshel and Timshel
57fbed1bed
Support admin reset 2fa ( #7435 )
...
* Support admin reset 2fa
* Fix recovery email
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-09-08 12:14:01 +02:00
Timshel and Timshel
fdc156b247
log_event take enum parameter not i32 ( #7656 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-08-29 17:02:26 +02:00
Timshel and Timshel
2073c03092
Add SSO_SIGNUPS_ALLOWED ( #7272 )
...
* Add SSO_SIGNUPS_ALLOWED
* Fix regression with domain_allowed in SSO onboarding
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-08-29 17:02:22 +02:00
Timshel and Timshel
923f5d0b5e
Fix migration for MariaDB 12.2.2 ( #7265 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-08-29 17:02:01 +02:00
Timshel and Timshel
55f883a566
Fix playwright test ( #7548 )
...
* Config server setting suppressOnboardingInterstitials
* Backport fix playwright tests
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-08-05 21:29:41 +02:00
Timshel and Timshel
5040bcb7c0
Remove unused fields ( #7458 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-24 16:40:34 +02:00
Timshel and Timshel
4a9bcb0694
Remove old compatibility code ( #7434 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-21 19:59:40 +02:00
Timshel and Timshel
5447ee6af2
SSO use ClientSecretPost if ClientSecretBasic is not available ( #7357 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:59:48 +02:00
Timshel and Timshel
5c5e8e1a6f
2026.6.0 send support ( #7346 )
...
* 2026.6.0 send support
* Prevent creating and editing a Send with email verification
* Review fixes
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:59:36 +02:00
Timshel and Timshel
7320a1db4b
PutPolicy now using vnext format ( #7296 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:59:26 +02:00
Timshel and Timshel
a058a35ccd
[v2026.5.0] Registration request update ( #7295 )
...
* Registration request update
* Review fix
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:59:17 +02:00
Timshel and Timshel
a16b5afaaa
Org membership delete remove Invitation ( #7284 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:59:06 +02:00
Timshel and Timshel
ec7fa137b7
Admin password recovery endpoint change ( #7270 )
...
* Admin password recovery endpoint change
* Use default to keep compatibility
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:58:41 +02:00
Timshel and Timshel
b25f715364
Fix enforce blocked ( #7246 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-07-07 15:58:34 +02:00
Timshel and Timshel
a057c7deae
sso_auth improvements ( #7197 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-05-16 21:18:46 +02:00
Timshel and Timshel
62748100f0
Fix hardcoded sso identifier ( #7157 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-04-28 19:09:47 +02:00
Timshel and Timshel
cc57e60886
Dummy identifier need to pass for a guid ( #7154 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-04-28 18:33:49 +02:00
Timshel and Timshel
e5681258f0
SSO fallback to UserInfo preferred_username ( #7128 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-04-28 18:33:45 +02:00
Timshel and Timshel
bfe420a018
Dummy org Master password policy auth fix ( #7097 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-04-15 20:44:55 +02:00
Timshel and Timshel
ecdb18fcde
Add 30s cache to SSO exchange_refresh_token ( #6866 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-03-09 18:10:06 +01:00
Timshel and Timshel
347279a12c
Empty AccountKeys when no private key ( #6761 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2026-02-01 22:35:22 +01:00
Timshel and Timshel
8f689d8795
Improve sso auth flow ( #6205 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2025-12-06 22:20:04 +01:00
Timshel and Timshel
2d91a9460b
Fix admin invite with SSO ( #6498 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2025-12-06 22:14:20 +01:00
Timshel and Timshel
e81e6a5060
Android want response property in camelCase ( #6513 )
...
Co-authored-by: Timshel <timshel@480s>
2025-12-06 22:13:51 +01:00
Timshel and Timshel
76d0856bbe
Org.put_policy type not in body anymore ( #6514 )
...
Co-authored-by: Timshel <timshel@480s>
2025-12-06 22:12:46 +01:00
Timshel and Timshel
f0e79fd391
Iterate over tags on release ( #6518 )
...
Co-authored-by: Timshel <timshel@480s>
2025-12-06 22:12:25 +01:00
Timshel and Timshel
35e1a306f3
Fix around singleorg policy ( #6247 )
...
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2025-11-23 21:54:37 +01:00
Timshel and Timshel
0182567a62
Playwright against abitrary web-vault ( #6380 )
...
* Playwright improvements
* Playwright fix for the extension setup
---------
Co-authored-by: Timshel <timshel@users.noreply.github.com >
2025-11-11 19:23:35 +01:00
