Commit Graph

61 Commits

Author SHA1 Message Date
si458
d7341ab153 display flash errors for external auths like saml or oidc on the login screen #6154
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-06-11 20:06:19 +01:00
Ylian Saint-Hilaire
bab35e7bca Removed Reddit auth strategy since it never worked well. 2024-03-03 16:34:01 -08:00
mstrhakr
4be5b7273e
Migrate to openid client (#5856)
* Create forksync.yml

* update oidc to use openid-client

* update oidc module requirements

* working oidc+

includes all oauth2 clients automatically migrated. azure will need some kind of fix for the uid

* update openid-client install checks

* created overarching schema for OIDC

* bug fixs for azure login

* update schema

prepare schema for unified oidc module

* update 'oidc' to strategy variable

* working azure+ groups

groups from azure are in,
you can use memberOf or transitiveMemberOf in config (Graphs API)

* clean up old config import + working google oidc

previous config map was recursive nonsense, changed to multiple IFs

* added convertStrArray

* de-expanded scope

put all other auth strategies back to normal and fixed oidc strategy

* swap back to using authlog debugger

* Update meshcentral-config-schema.json

* working google oidc + groups

* working azure+groups (again)

* init oidc docs

very incomplete but basic config is present

* add oidc

* more work on docs

* add scope and claim options

plus fixed a few bugs and faults in my logic
used logs correctly

* further cleanup debug

* more debug cleanup

* continue documentation push

fixed minor debug bugs also

* more work on docs

missing links, need to get azure preset docs, probably more.

* done with docs

its good enough for now

* minor fix + presets get correct icon

* fix google oidc not visible at login

* fix bug with emailVerified property

* fix logout bug + debug cleanup

* fix strategy logout bug +cleanup

* fixed preset login icon

* fix alert + fix schema

* terminate lines

* Dutch language update 1.0.85

line up polish translation

* Fixed guest web relay session revocation (#4667)

* Updated French translation.

* Add hook to allow adding custom api endpoints to Express routing

* Updated German translation.

* Update meshcentral-config-schema.json (change formatting)

This way it is easier to edit and maintain

* Fixed schema.

* fix meshcentral-config-schema.json

* add language selector to login (#5648)

* add language selector to login

* add showLanguageSelect to pick top or bottom boxe

* remove additionalProperties: false in schema to allow comments #5697

Signed-off-by: si458 <simonsmith5521@gmail.com>

* fix notes in docs

* Fix web relay session handling and redirection due to bad merge

* Added option to check HTTP origin.

* add links and fix typo

* move groups after strategy

* Update version split in docs

* Fix preset issuer URL in OIDC strategy

* Update clientid and clientsecret to client_id and client_secret

* Update meshcentral-config-schema.json and fix bad rebase

* Update meshcentral-config-schema.json

* fix bad rebase

* fix bad rebase

* Add 'connect-flash' to passport dependencies

* Remove unnecessary passport dependencies - fix bad rebase

* Fix auth strategy bug and remove console.log statement

* Set groupType to the preset name if it exists, otherwise use the strategy name

* remove finally block from

* Refactor authentication logging in handleStrategyLogin to include strategy name

---------

Signed-off-by: si458 <simonsmith5521@gmail.com>
Co-authored-by: petervanv <58996467+petervanv@users.noreply.github.com>
Co-authored-by: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Co-authored-by: Martin Mädler <martin.maedler@gmail.com>
Co-authored-by: Fausto Gutierrez <28719096+faustogut@users.noreply.github.com>
Co-authored-by: Simon Smith <simonsmith5521@gmail.com>
2024-03-03 16:03:27 -08:00
Ylian Saint-Hilaire
ab804807da Version 1.0.51 2022-07-11 15:27:07 -07:00
Ylian Saint-Hilaire
ea7e98b3b4 Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
mstrhakr
f9e92a9e04 added oidc lines to views 2022-04-06 12:39:13 -04:00
Ylian Saint-Hilaire
15ddd3cd00 Added autofido2fa option in PasswordRequirements, #2952 2021-07-28 10:35:33 -07:00
Ylian Saint-Hilaire
21aabc676d Added 2FA timeout on login screen, default is 5 minutes. 2021-07-24 15:14:21 -07:00
Ylian Saint-Hilaire
dd63851403 Fixed server crash in AMT manager. 2020-10-28 14:46:40 -07:00
Ylian Saint-Hilaire
9b2b48e229 Added Apple touch icon. 2020-08-18 18:29:13 -07:00
Ylian Saint-Hilaire
984ce8b201 More code clean up and input validation. 2020-07-06 15:04:22 -07:00
Ylian Saint-Hilaire
d6daf8e2b1 Added html lang tag to all translated web pages. 2020-06-12 14:16:24 -07:00
Ylian Saint-Hilaire
b80fe16325 Improved web app, SSO fixes. 2020-05-26 16:36:17 -07:00
Ylian Saint-Hilaire
1922e6c958 Added support for Azure Active Directory. 2020-05-24 00:04:49 -07:00
Ylian Saint-Hilaire
5a06c46d3e Added SAML, JumpCloud support. 2020-05-20 00:39:17 -07:00
Ylian Saint-Hilaire
7ca1e1e907 More OAuth work. 2020-05-14 01:41:03 -07:00
Ylian Saint-Hilaire
d5ae0e10eb More minification improvements. 2020-05-01 23:11:43 -07:00
Ylian Saint-Hilaire
d54dcdc6b8 Improved 2FA trusted cookie. 2020-04-29 15:45:31 -07:00
Ylian Saint-Hilaire
ed3a0c2eac SMS support in mobile web app + UI fixes. 2020-04-22 18:49:17 -07:00
Ylian Saint-Hilaire
bf86a4b90e Email validation login screen on mobile web app. 2020-04-21 01:59:08 -07:00
Ylian Saint-Hilaire
70e93f0c0f Email based 2FA almost completed. 2020-03-13 20:39:21 -07:00
Ylian Saint-Hilaire
deb70eb8cd Updated MeshAgents on all platforms. 2020-02-27 15:10:34 -08:00
Ylian Saint-Hilaire
df79a44e95 Fixed TouchID on mobile, 404 page when using loginkey. 2020-02-27 12:55:14 -08:00
Ylian Saint-Hilaire
8149a73510 Lots of small fixed. 2020-01-29 14:38:41 -08:00
Ylian Saint-Hilaire
8fa296b4a0 Fixed Yubikey OTP login. 2020-01-12 13:57:13 -08:00
Ylian Saint-Hilaire
6607b04a9e Many small fixes. 2020-01-12 13:50:06 -08:00
Ylian Saint-Hilaire
da1a8951df Added titlehtml domain option. 2019-12-16 11:21:07 -08:00
Ylian Saint-Hilaire
3670f229b9 Added remember for 30 days 2nd factor option. 2019-11-28 22:29:22 -08:00
Ylian Saint-Hilaire
8573d45753 Added bad login IP address limitation. 2019-11-18 17:31:42 -08:00
Ylian Saint-Hilaire
bcef76863e Fixed internalization of server messages on the login screen. 2019-11-17 14:33:29 -08:00
Ylian Saint-Hilaire
cdadf8595b Fixed minification bug in login page. 2019-10-24 23:58:39 -07:00
Ylian Saint-Hilaire
3f02c8251a Partial web page multi-language support done. 2019-10-17 17:13:55 -07:00
Ylian Saint-Hilaire
c8839b5986 Added support for browsers that don't support cookies. 2019-08-26 12:20:24 -07:00
Ylian Saint-Hilaire
797705e7c5 Improved keyboard support, new email as username mode. 2019-07-08 15:59:44 -07:00
Ylian Saint-Hilaire
feb3542e8b Added invitation link email, server fixes and improvements. 2019-06-12 10:23:26 -07:00
Ylian Saint-Hilaire
b0e2914f92 Can now batch add users to a device group. 2019-05-30 12:40:10 -07:00
Ylian Saint-Hilaire
5ec5144329 Fixed relative URL links when using a non-DNS subdomain. 2019-05-22 14:48:41 -07:00
Ylian Saint-Hilaire
bbd7a96c7b Many bug fixes: Login screen, hw keys, relay domain and more. 2019-05-21 14:19:32 -07:00
Ylian Saint-Hilaire
becdf3bc0b more WebAuthn cleanup. 2019-05-16 15:05:44 -07:00
Ylian Saint-Hilaire
62314f4f6b Added MeshCentral Router as part of the server. 2019-04-23 14:15:48 -07:00
Ylian Saint-Hilaire
d11210a8c8 Fixed site minification. 2019-03-26 00:14:45 -07:00
Ylian Saint-Hilaire
b8a0512f83 More FIDO2 fixes. 2019-03-25 14:43:58 -07:00
Ylian Saint-Hilaire
ac6c39dabe Module dependency cleanup. 2019-03-25 11:32:16 -07:00
Ylian Saint-Hilaire
54fb8040ec Updated clickonce, password hint is configurable. 2019-02-28 16:17:22 -08:00
Ylian Saint-Hilaire
65e6c1925c Added server password timeout and reset on next login. 2019-02-27 18:48:50 -08:00
Ylian Saint-Hilaire
5e1fd2e967 Improved login screen, Mesh server directory handling 2019-02-19 15:38:27 -08:00
Ylian Saint-Hilaire
91282677cd Added user account, user session and agent session per-domain limits. 2019-02-11 14:41:15 -08:00
Ylian Saint-Hilaire
7272ecb089 Improved U2F authentication, added multiple U2F key support. 2019-02-10 16:04:36 -08:00
Ylian Saint-Hilaire
9beaa45f9f Added support for both U2F and OTP hardware login keys. 2019-02-08 09:24:00 -08:00
Ylian Saint-Hilaire
e9381b506a Completed support for hardware key 2-factor auth. 2019-02-07 22:30:33 -08:00