Commit Graph

Select branches

Hide Pull Requests

master

#10

#18

#21

#23

#24

#25

#26

#29

#31

#33

#36

#39

#41

#42

#46

#47

#48

#50

#56

#60

#61

#8

Mono Color

• 6ca64ce6d8 Fix missing CI dependencies ErickSkrauch 2021-02-14 19:07:04 +01:00
• 9729fc939d Upgrade backend engine ErickSkrauch 2021-02-14 19:01:49 +01:00
• 356518c5b5 Merge branch 'authorized_clients_management' ErickSkrauch 2021-02-14 19:01:19 +01:00
• c64f386365 Fix incorrect response in case when user's profile for provided UUID can't be found ErickSkrauch 2020-12-18 11:12:34 +01:00
• 0c2832f95f Fix Chrly's API response handling ErickSkrauch 2020-10-12 00:29:54 +03:00
• 7da6a952ee Fix tests ErickSkrauch 2020-10-02 18:14:43 +03:00
• 5fc97fdd7a Implemented oauth session revocation notification. Reworked webhooks notifications constructors ErickSkrauch 2020-10-01 01:40:28 +03:00
• b904d5d314 Implemented features to revoke access for previously authorized OAuth 2.0 clients ErickSkrauch 2020-09-30 20:30:04 +03:00
• 2a4f29801d Fixes ACCOUNTS-2. Catch decryption exception for OAuth2 flow ErickSkrauch 2020-08-23 00:23:36 +03:00
• 503880615a Resolves #9. Implemented host-based blacklist for users emails ErickSkrauch 2020-08-23 00:04:26 +03:00
• 89526c39bb Fixes ACCOUNTS-4 ErickSkrauch 2020-06-25 21:31:32 +03:00
• 5fbc167708 Fix the case when the redirect_uri is null ErickSkrauch 2020-06-20 19:10:13 +03:00
• b938c62867 Merge pull request #8 from elyby/3_accounts_deletion ErickSkrauch 2020-06-15 15:53:21 +03:00
• fb452901b8 Rework the webhooks table, allow to update exists webhooks ErickSkrauch 2020-06-14 01:20:31 +03:00
• 17f1794a4e Covered all cases, fixed CS, added a new TODO ErickSkrauch 2020-06-13 01:55:02 +03:00
• 4ee77636dc Fixes ACCOUNTS-3. Add extended logging for further investigation ErickSkrauch 2020-06-13 00:39:02 +03:00
• 0183e54442 Implemented account deletion. Not all cases covered with tests [skip ci] ErickSkrauch 2020-06-12 00:27:02 +03:00
• c86817a93d Add deploy to the production step ErickSkrauch 2020-06-11 14:41:18 +03:00
• 053e591c3b Implemented deploy stage, allow to manually specify the environment for the Sentry ErickSkrauch 2020-06-10 18:15:19 +03:00
• 39d7cad8b5 Fix CS ErickSkrauch 2020-06-10 17:42:02 +03:00
• c18052c323 Upgrade dependencies ErickSkrauch 2020-06-10 17:38:05 +03:00
• 295d3a6dc6 Use separate docker service to build images ErickSkrauch 2020-05-21 16:23:42 +03:00
• b52a21c5f2 Try dind image to solve https://gitlab.com/gitlab-org/gitlab-runner/-/issues/4566 ErickSkrauch 2020-05-21 16:19:28 +03:00
• a9c3d50ad9 Remove cleanup stage from CI ErickSkrauch 2020-05-21 16:00:21 +03:00
• dd588160b0 Don't use github oauth token while building docker image ErickSkrauch 2020-05-21 15:26:15 +03:00
• 1cea0bb174 Fix typos in README ErickSkrauch 2020-05-21 14:41:29 +03:00
• 6712471176 Translate readme, add license and some composer.json fields ErickSkrauch 2020-05-20 02:36:32 +03:00
• 6f30b9d352 Readme ErickSkrauch 2020-01-25 11:22:08 +03:00
• df700ba408 Merge branch 'config' into 'master' [skip ci] ErickSkrauch 2020-01-17 10:55:43 +00:00
• a77950a5da Fixed docker compose config for db valentinpahusko 2020-01-17 13:20:23 +03:00
• 09f7818113 Upgrade PHP to 7.4. Update corresponding dependencies. ErickSkrauch 2019-12-29 18:23:20 +03:00
• 3e1fb19cf3 Update smtp mail transport configuration ErickSkrauch 2019-12-29 17:59:58 +03:00
• 7607248c27 Remove usage of codeception/specify and fzaninotto/faker ErickSkrauch 2019-12-29 17:55:21 +03:00
• 43a4a58053 Remove usage of codeception/specify and fzaninotto/faker ErickSkrauch 2019-12-21 02:26:06 +03:00
• 666213afc7 Rework email_activation model, get rid of behaviors, use json column to store additional data ErickSkrauch 2019-12-21 01:23:58 +03:00
• 22e8158581 Upgrade codeception to 4 version ErickSkrauch 2019-12-20 22:18:09 +03:00
• 1c76d2386e Fixes ACCOUNTS-5Z9. Add import statement for Permissions class ErickSkrauch 2019-12-15 18:33:15 +03:00
• b9b62ead12 Fixes ACCOUNTS-5Z8. Use correct relation column for OauthSession ErickSkrauch 2019-12-15 18:27:31 +03:00
• 3b00e36816 Fixes ACCOUNTS-5Y5. Also idna escape login part of the email. ErickSkrauch 2019-12-15 18:13:47 +03:00
• 3d89e5f94d Fixes ACCOUNTS-5Z7. Search for legacy oauth session by correct column ErickSkrauch 2019-12-15 18:01:36 +03:00
• 299637cc13 Strip keys from the scopes list ErickSkrauch 2019-12-15 17:20:29 +03:00
• 8d28c7c453 Upgrade patch in the build image before install dependencies ErickSkrauch 2019-12-15 05:26:45 +03:00
• 04e399c726 Fix tests ErickSkrauch 2019-12-15 00:49:54 +03:00
• e8b71d33d0 Get rid of mockery library. Still have some troubles with functional tests for api ErickSkrauch 2019-12-14 00:16:05 +03:00
• d9ef27b745 Cleanup code, improve typings ErickSkrauch 2019-12-13 22:27:13 +03:00
• 830a17612b Get rid of ThisShouldNotHappenException ErickSkrauch 2019-12-13 20:48:13 +03:00
• 26f7d6213f Update dependencies ErickSkrauch 2019-12-13 20:02:58 +03:00
• 40eca5b8b6 Remove expires_in field when the access_token isn't expiring ErickSkrauch 2019-12-13 16:00:51 +03:00
• 22d8971dc5 Fix redirect_uri validation for the AuthCodeGrant ErickSkrauch 2019-12-13 15:16:45 +03:00
• a8e20a9775 Replace custom aud and ely-scopes JWT claims with its public analogues ErickSkrauch 2019-12-13 13:55:09 +03:00
• 274d56aa40 Set expires_in value for issue access token response ErickSkrauch 2019-12-11 19:44:55 +03:00
• 14661c2233 Fix manual-migrate command ErickSkrauch 2019-12-11 15:17:38 +03:00
• dcb7345d58 Merge branch 'oauth_jwt_tokens' into 'master' ErickSkrauch 2019-12-11 12:00:50 +00:00
• f06354638e Disallow to perform oauth2 authentication for applications that have no corresponding type ErickSkrauch 2019-12-11 14:41:37 +03:00
• 9da58beccf Add deprecation notices ErickSkrauch 2019-12-11 14:24:31 +03:00
• 2caf0558de Use paragonie's Base64UrlSafe encoding library ErickSkrauch 2019-12-11 14:16:11 +03:00
• cda4be04a1 Fix condition when to store scopes from redis ErickSkrauch 2019-12-11 13:23:56 +03:00
• 3c9050340e Add console command to migrate all oauth sessions scopes data from redis to db ErickSkrauch 2019-12-11 01:29:57 +03:00
• d27070630c Fix revokation validation. Add additional tests cases ErickSkrauch 2019-12-10 22:51:11 +03:00
• 016a193263 Introduce revokation mechanism ErickSkrauch 2019-12-10 01:38:09 +03:00
• ba7fad84a0 Remove refresh_token from OAuth2 result. Return the same access_token as a refresh_token in case when it's requested. Make access_tokens to live forever. ErickSkrauch 2019-12-09 19:31:54 +03:00
• efb97a2006 Set access tokens TTL depending on the requested scopes ErickSkrauch 2019-12-06 19:07:08 +03:00
• f0a73f2b7a Make tokens, created by client credentials grant to live forever ErickSkrauch 2019-12-06 18:31:04 +03:00
• 6fb32ec76d Use libsodium to encrypt all data, related to OAuth2 ErickSkrauch 2019-12-06 14:37:51 +03:00
• 642db2e045 Use libsodium to encrypt data, stored in jwt tokens ErickSkrauch 2019-12-05 19:37:46 +03:00
• c3ffb08c4a Cleanup session server module ErickSkrauch 2019-12-05 01:15:45 +03:00
• 25f1ca912c Fix tests ErickSkrauch 2019-12-05 00:52:27 +03:00
• a81ef5cac2 Replace separate minecraft access tokens with JWT ErickSkrauch 2019-12-04 21:10:15 +03:00
• 060a4e960a Handle legacy refresh tokens ErickSkrauch 2019-12-04 13:40:12 +03:00
• a9a56c9e1d Extract encryption key into the configuration param ErickSkrauch 2019-12-04 13:24:30 +03:00
• 72cbf16c97 Merge branch 'master' into oauth_jwt_tokens ErickSkrauch 2019-12-04 01:17:12 +03:00
• 8dad8a3eeb Fix https detection on nginx from haproxy ErickSkrauch 2019-12-03 17:22:18 +03:00
• 46b771a061 Fixes ACCOUNTS-5VE ErickSkrauch 2019-12-02 22:28:47 +03:00
• 9557064a97 Fixes ACCOUNTS-5VF ErickSkrauch 2019-12-02 22:22:51 +03:00
• 01028cf378 Fixes ACCOUNTS-5VC. Handle the case when there is missing session for access or refresh token ErickSkrauch 2019-12-02 22:15:52 +03:00
• 22ef41ac7c Fixes ACCOUNTS-5V9. Handle case when access token don't have associated account ErickSkrauch 2019-12-02 21:14:40 +03:00
• a5f6a2d437 Tune nginx conf ErickSkrauch 2019-11-27 03:41:27 +03:00
• 9f645d0934 Add CSP header ErickSkrauch 2019-11-26 22:47:22 +03:00
• 9eea03df73 Enable gzip and brotli for all response types ErickSkrauch 2019-11-26 22:32:26 +03:00
• 885729fcde Replace nginx image to enable gzpi and brotli encoding ErickSkrauch 2019-11-26 21:30:53 +03:00
• b47522e6f9 Fix CI for bitmani mariadb image ErickSkrauch 2019-11-15 20:09:19 +03:00
• 2fe3ede4ea Replace basic mariadb image with the bitnami ErickSkrauch 2019-11-15 20:03:52 +03:00
• db8e13d749 Hotfix to handle Chrly's long responses ErickSkrauch 2019-11-09 17:46:22 +03:00
• e52dbdbf19 Do not include offline_access scope into access_token ErickSkrauch 2019-11-07 01:12:18 +03:00
• da318ef2ed Merge branch 'master' into oauth_jwt_tokens ErickSkrauch 2019-11-07 00:00:26 +03:00
• 0dc8ca8c78 Define vars for cleanup step ErickSkrauch 2019-11-05 15:31:23 +03:00
• d8b68f7be0 Rename cleanup step [skip ci] ErickSkrauch 2019-11-05 15:28:18 +03:00
• 6cd50f759c Fix gitlab-ci configuration ErickSkrauch 2019-11-05 15:27:07 +03:00
• 80edf03b52 Upgrade PHP version to avoid CVE-2019-11043 ErickSkrauch 2019-11-05 15:15:55 +03:00
• 7505bc8262 Upgrade gitlab-ci ErickSkrauch 2019-11-05 15:10:37 +03:00
• 22982b319b Fix all tests ErickSkrauch 2019-09-24 01:56:32 +03:00
• 2beacd0827 Add tests for the legacy tokens, fix some tests cases [skip ci] ErickSkrauch 2019-09-23 01:03:36 +03:00
• a148da2ecf Add tests for the legacy tokens ErickSkrauch 2019-09-23 00:53:13 +03:00
• cf62c686b1 Rework identity provider for the legacy OAuth2 tokens [skip ci] ErickSkrauch 2019-09-22 18:42:21 +03:00
• c722c46ad5 Add support for the legacy refresh tokens, make the new refresh tokens non-expire [skip ci] ErickSkrauch 2019-09-22 02:42:08 +03:00
• 5536c34b9c Restore full functionality of OAuth2 server [skip ci] ErickSkrauch 2019-09-22 00:17:21 +03:00
• 45101d6453 Completely restored authorization_code grant for user side. Reworked oauth_sessions table. Added extension to use MariaDB's JSON columns. Rewritten tests for authorization_code grant for client side. Deprecate some old shit. [skip ci] ErickSkrauch 2019-09-18 02:14:05 +03:00
• 8a1d7148d0 Implemented public scopes repository. Fix some auth cases [skip ci] ErickSkrauch 2019-09-13 01:19:03 +03:00
• 4dc2a3025b Rewrite tests for OAuth2 validate and auth code complete steps [skip ci] ErickSkrauch 2019-09-06 02:32:57 +03:00
• 6c4ce8cb8d Increase cleanup timout for minecraft access tokens ErickSkrauch 2019-09-01 23:16:13 +03:00