Livio Amstutz
61d16e4621
fix: refactor setup ( #1152 )
...
* add setup steps
* refactoring
* omitempty
* cleanup
* fixes
2021-01-06 10:47:55 +01:00
Fabi
dc56e298ae
fix: use domain models for v2 eventstore ( #1151 )
...
* fix: use domain models for v2 eventstore
* fix: user domain model
* Update internal/api/grpc/admin/login_policy_converter.go
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* fix: converter
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-01-05 09:33:45 +01:00
Livio Amstutz
5b84c9b619
Merge branch 'master' into new-eventstore
...
# Conflicts:
# go.mod
# internal/admin/repository/eventsourcing/eventstore/iam.go
# internal/authz/repository/eventsourcing/repository.go
# internal/eventstore/eventstore.go
# internal/setup/config.go
# pkg/grpc/management/mock/management.proto.mock.go
2021-01-05 09:27:42 +01:00
Livio Amstutz
21ffe1b0cb
new pkg structure ( #1150 )
...
* fix: split command query side
* fix: split command query side
* fix: members in correct pkg structure
* fix: label policy in correct pkg structure
* fix: structure
* fix: structure of login policy
* fix: identityprovider structure
* fix: org iam policy structure
* fix: password age policy structure
* fix: password complexity policy structure
* fix: password lockout policy structure
* fix: idp structure
* fix: user events structure
* fix: user write model
* fix: profile email changed command
* fix: address changed command
* fix: user states
* fix: user
* fix: org structure and add human
* begin iam setup command side
* setup
* step2
* step2
* fix: add user
* step2
* isvalid
* fix: folder structure v2 business
Co-authored-by: Fabiennne <fabienne.gerschwiler@gmail.com>
2021-01-04 14:52:13 +01:00
Silvan
28c8274eab
fix(auth): spooler locks correct database ( #1134 )
2020-12-24 13:01:23 +01:00
Silvan
a6c4702b8e
fix: lock again ( #1132 )
...
* start sub
* start implement subsciptions
* start subscription
* implementation for member done
* admin done
* fix: tests
* extend handlers
* prepary notification
* no errors in adminapi
* changed current sequence in all packages
* ignore mocks
* works
* subscriptions as singleton
* tests
* refactor: rename function scope var
* fix: process ALL previous sequences
* fix: spooler and pubsub
* handler check
* fix: process events until all done
* fix break on query err
* fix: handler
* fix: process sequence or return error
* check aggregate id
* fix: log only in error case
* fix tests
* fix: handlers
* fix: spooler
* fix: spooler
* fix: tests
* fix: continue
* fix: locker duration
* fix: variable lock duration
* fix: test
* fix: test
* fix: test min max time
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-22 12:27:55 +01:00
Livio Amstutz
f96838cf62
fix: org name overwrite ( #1133 )
...
* fix: org name overwrite
* import
2020-12-22 12:12:05 +01:00
Livio Amstutz
273b7487b3
fix: don't fail if OIDCClientSecretCheckSucceeded event can not be pushed ( #1131 )
2020-12-22 10:41:22 +01:00
Silvan
3118a99c1e
fix: pubsub ( #1122 )
...
* start sub
* start implement subsciptions
* start subscription
* implementation for member done
* admin done
* fix: tests
* extend handlers
* prepary notification
* no errors in adminapi
* changed current sequence in all packages
* ignore mocks
* works
* subscriptions as singleton
* tests
* refactor: rename function scope var
* fix: process ALL previous sequences
* fix: spooler and pubsub
* handler check
* fix: process events until all done
* fix break on query err
* fix: handler
* fix: process sequence or return error
* check aggregate id
* fix: log only in error case
* fix tests
* fix: handlers
* fix: spooler
* fix: spooler
* fix: tests
* fix: continue
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-21 18:42:34 +01:00
Silvan
dd5e4acd24
fix(event handling): use internal pubsub for view update ( #1118 )
...
* start sub
* start implement subsciptions
* start subscription
* implementation for member done
* admin done
* fix: tests
* extend handlers
* prepary notification
* no errors in adminapi
* changed current sequence in all packages
* ignore mocks
* works
* subscriptions as singleton
* tests
* refactor: rename function scope var
2020-12-18 16:47:45 +01:00
Livio Amstutz
e15fc0b92b
fix: remove u2f with pin from 2fa check ( #1121 )
...
* fix: remove u2f with pin from 2fa check
* show error message on mfa init verify
2020-12-18 16:30:57 +01:00
Livio Amstutz
410a53f15b
fix: enable login with password when passwordless set up ( #1120 )
...
* fix: enable login with password when passwordless set up
* enable only it allowed
2020-12-18 13:42:21 +01:00
Livio Amstutz
b183d49761
fix: passwordless ( #1116 )
...
* fix passwordless session handling
* only check passwordless when enabled in policy
* set preferred user name in webauthn
* fix tests
* add passwordless in setup
* fix(console): exclude credentials for passwordless (#1115 )
* fix: exclude creds
* fix i18n type loginpolicy
* fix enter on dialog input
* remove arg
Co-authored-by: Max Peintner <max@caos.ch>
2020-12-17 16:22:27 +01:00
Livio Amstutz
c5287364a4
fix: missing webauthn converter for login ( #1113 )
2020-12-17 09:34:42 +01:00
Silvan
584bcda108
fix: language.Tag marshalling ( #1110 )
...
* fix(searchlimit): increase to 1000
* rafactor: remove unused return
* fix(user): marshalling of language tag
* fix(spooler): shuffle handlers on start
* fix(sql): reduce max open conns from 200 to 25 per pod
* chore(deps): google.golang.org/grpc and github.com/lib/pq
* chore(deps): update github.com/cockroachdb/cockroach-go/v2
2020-12-17 08:55:11 +01:00
Livio Amstutz
055cdf98ed
fix: passwordless ( #1112 )
...
* fix token list
* fix token name
* i18n
2020-12-17 08:17:02 +01:00
Max Peintner
6aa0588fe0
fix(console): u2f, mfa, loginpolicy, auth and mgmt passwordless, clockskew, userinfo within idtoken ( #1108 )
...
* fix 2fa,mfa config, self management
* u2f enable when otp
* passwordless grpc auth
* clockskew, passwordless container, util class
* passwordless, i18n
* passwordless auth and mgmt
* lint ts
* chore(deps-dev): bump ts-node from 9.1.0 to 9.1.1 in /console (#1089 )
Bumps [ts-node](https://github.com/TypeStrong/ts-node ) from 9.1.0 to 9.1.1.
- [Release notes](https://github.com/TypeStrong/ts-node/releases )
- [Commits](https://github.com/TypeStrong/ts-node/compare/v9.1.0...v9.1.1 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps-dev): bump @angular/cli from 11.0.3 to 11.0.4 in /console (#1094 )
Bumps [@angular/cli](https://github.com/angular/angular-cli ) from 11.0.3 to 11.0.4.
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Commits](https://github.com/angular/angular-cli/compare/v11.0.3...v11.0.4 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <max@caos.ch>
* chore(deps): bump uuid from 8.3.1 to 8.3.2 in /console (#1098 )
Bumps [uuid](https://github.com/uuidjs/uuid ) from 8.3.1 to 8.3.2.
- [Release notes](https://github.com/uuidjs/uuid/releases )
- [Changelog](https://github.com/uuidjs/uuid/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uuidjs/uuid/compare/v8.3.1...v8.3.2 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <max@caos.ch>
* chore(deps-dev): bump @angular/language-service in /console (#1099 )
Bumps [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service ) from 11.0.3 to 11.0.4.
- [Release notes](https://github.com/angular/angular/releases )
- [Changelog](https://github.com/angular/angular/blob/master/CHANGELOG.md )
- [Commits](https://github.com/angular/angular/commits/11.0.4/packages/language-service )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps-dev): bump @types/node from 14.14.10 to 14.14.13 in /console (#1100 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 14.14.10 to 14.14.13.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps-dev): bump @angular-devkit/build-angular in /console (#1088 )
Bumps [@angular-devkit/build-angular](https://github.com/angular/angular-cli ) from 0.1100.3 to 0.1100.4.
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Commits](https://github.com/angular/angular-cli/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Peintner <max@caos.ch>
* fix: replace regex check for projectid (#1064 )
* update lock
* fix app detail
* logs
* fix login policy update
* fix error message
* decode excluded cred id
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-16 16:34:12 +01:00
Livio Amstutz
71df1bcd0e
fix: improvements for WebAuthN ( #1105 )
...
* add missing translations
* add missing passwordless funcs in api
* remove u2f with verification from setup in login
2020-12-15 16:44:16 +01:00
Fabiennne
762941f0ea
fix: idp provider
2020-12-15 12:00:53 +01:00
Fabiennne
6532072288
fix: wrong Attributes
2020-12-15 11:43:09 +01:00
Fabi
7f26f1815b
fix: Previous sequence ( #1086 )
...
* feat: remove previous sequence check
* feat: object creation date
* feat: simplify member write model
* feat: simplify write model
* feat: simplify write model
2020-12-14 17:24:01 +01:00
Silvan
5c3b575b13
fix(tracing): business logic has grpc server span as parent ( #1017 )
...
* start fix
* fix(tracing): business logic has grpc server span as parent
* fix: response name
* fix: tests
* fix: simplify ctxData
2020-12-14 13:34:05 +01:00
Fabi
2ab47c3c8d
fix: Lastspooltime ( #1102 )
...
* feat: last spool time convert
* feat: last spool time convert
2020-12-14 11:49:20 +01:00
Livio Amstutz
b71a444e86
fix: primary domain claim ( #1082 )
...
* fix: primary domain scope (overwrite by roles and rogue `:`)
* disable wrong users
* fix test
* show requested org name
* only show domain when selected
2020-12-14 10:54:29 +01:00
Max Peintner
c6fed8ae86
feat(console): u2f ( #1080 )
...
* fix user table count
* grpc ge
* move grpc
* u2f
* add u2f funcs
* rm local grpc, u2f dialog
* dialog u2f
* 2fa button
* mfa u2f credentialoptions
* decode base64 to bytearray, id, challenge
* u2f verify
* spinner, remove, attribute col
* delete mfa
* add forcemfa to policy
* add id to remove
* fix: add missing remove u2f in management
* user mgmt u2f delete, login policy
* rm log
* show attr in mgmt user mfa
* add missing id of mfa
* mfa table
* multifaktor for admin, org
* add secondfactor to gen component
* remove circular dependency
* lint
* revert identity prov
* add divider
* login policy lint
* Update console/src/app/modules/policies/login-policy/login-policy.component.html
* Update console/src/app/modules/policies/login-policy/login-policy.component.html
Co-authored-by: Maximilian Peintner <csaq7175@uibk.ac.at>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-14 10:04:15 +01:00
Fabi
5b433dcaa3
New eventstore policies ( #1084 )
...
* feat: login policy
* feat: password complexity policy
* feat: org iam policy
* feat: label policy
* feat: add and change policies
* feat: second factors
* feat: second and multi factors
* feat: better naming
* feat: better naming
2020-12-11 15:49:19 +01:00
Fabi
31ea9d1acd
feat: user events ( #1062 )
...
* feat: user new eventstore
* feat: rename query builder
* feat: human events
* feat: human events
* feat: events
* feat: phone events
* feat: phone events
* feat: profile, address events
* feat: mfa, otp
* feat: webauthn events
* feat: webauthn events
* feat: webauthn events
* feat: enums
* feat: new events
* feat: user events
* feat: domain events
* feat: all v2 events
* feat: all v1 events
* feat: pkg structure
* feat: change events
* feat: better naming
* feat: better naming
2020-12-10 16:18:52 +01:00
Fabiennne
5dd60f01e0
Merge branch 'master' into new-eventstore
2020-12-09 13:13:47 +01:00
Livio Amstutz
38478efefb
fix: handle multiple webauthn origins ( #1078 )
...
* fix(grpc): return CredentialCreationData in webauthn public key
* return id of u2f tokens
* handle separate origins in webauthn
* param
2020-12-08 15:39:58 +01:00
Livio Amstutz
12f8c7202c
fix(grpc): return CredentialCreationData in webauthn public key ( #1075 )
2020-12-07 15:22:11 +01:00
Livio Amstutz
077a9a628e
fix: improvements for login flow (incl. webauthn) ( #1026 )
...
* fix: typo ZITADEL uppercase for OTP Issuer
* fix: password validation after change in current user agent
* fix: otp validation after setup in current user agent
* add waiting
* add waiting
* show u2f state
* regenerate css
* add useragentID to webauthn verify
* return mfa attribute in mgmt
* switch between providers
* use preferredLoginName for webauthn display
* some fixes
* correct translations for login
* add some missing event translations
* fix usersession test
* remove unnecessary cancel button on password change done
2020-12-07 12:09:10 +01:00
Livio Amstutz
6d210c3f00
fix: add permissions-policy header ( #1059 )
2020-12-07 09:00:31 +01:00
Fabiennne
9e7032db73
feat: merge master
2020-12-03 10:21:00 +01:00
Fabiennne
2a25c0b617
Merge branch 'master' into new-eventstore
...
# Conflicts:
# go.sum
2020-12-03 10:11:18 +01:00
Livio Amstutz
300ade66a7
feat: add WebAuthN support for passwordless login and 2fa ( #966 )
...
* at least registration prompt works
* in memory test for login
* buttons to start webauthn process
* begin eventstore impl
* begin eventstore impl
* serialize into bytes
* fix: u2f, passwordless types
* fix for localhost
* fix script
* fix: u2f, passwordless types
* fix: add u2f
* fix: verify u2f
* fix: session data in event store
* fix: u2f credentials in eventstore
* fix: webauthn pkg handles business models
* feat: tests
* feat: append events
* fix: test
* fix: check only ready webauthn creds
* fix: move u2f methods to authrepo
* frontend improvements
* fix return
* feat: add passwordless
* feat: add passwordless
* improve ui / error handling
* separate call for login
* fix login
* js
* feat: u2f login methods
* feat: remove unused session id
* feat: error handling
* feat: error handling
* feat: refactor user eventstore
* feat: finish webauthn
* feat: u2f and passwordlss in auth.proto
* u2f step
* passwordless step
* cleanup js
* EndpointPasswordLessLogin
* migration
* update mfaChecked test
* next step test
* token name
* cleanup
* attribute
* passwordless as tokens
* remove sms as otp type
* add "user" to amr for webauthn
* error handling
* fixes
* fix tests
* naming
* naming
* fixes
* session handler
* i18n
* error handling in login
* Update internal/ui/login/static/i18n/de.yaml
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
* Update internal/ui/login/static/i18n/en.yaml
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
* improvements
* merge fixes
* fixes
* fixes
Co-authored-by: Fabiennne <fabienne.gerschwiler@gmail.com>
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2020-12-02 17:00:04 +01:00
Fabi
6b3f5b984c
feat: metrics ( #1024 )
...
* refactor: switch from opencensus to opentelemetry
* tempo works as designed nooooot
* fix: log traceids
* with grafana agent
* fix: http tracing
* fix: cleanup files
* chore: remove todo
* fix: bad test
* fix: ignore methods in grpc interceptors
* fix: remove test log
* clean up
* typo
* fix(config): configure tracing endpoint
* fix(span): add error id to span
* feat: metrics package
* feat: metrics package
* fix: counter
* fix: metric
* try metrics
* fix: coutner metrics
* fix: active sessin counter
* fix: active sessin counter
* fix: change current Sequence table
* fix: change current Sequence table
* fix: current sequences
* fix: spooler div metrics
* fix: console view
* fix: merge master
* fix: Last spool run on search result instead of eventtimestamp
* fix: go mod
* Update console/src/assets/i18n/de.json
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* fix: pr review
* fix: map
* update oidc pkg
* fix: handlers
* fix: value observer
* fix: remove fmt
* fix: handlers
* fix: tests
* fix: handler minimum cycle duration 1s
* fix(spooler): handler channel buffer
* fix interceptors
Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-02 08:50:59 +01:00
adlerhurst
9a870b7830
facotry to fileter
2020-12-01 14:44:19 +01:00
adlerhurst
cf1df99a10
fix idp mappers
2020-11-30 10:41:10 +01:00
adlerhurst
d494da67be
repo event mappers
2020-11-30 08:53:08 +01:00
adlerhurst
968f766a8f
cleanup code
2020-11-30 08:35:40 +01:00
adlerhurst
0780c23f76
member
2020-11-30 07:56:38 +01:00
adlerhurst
c2400e1da5
Merge remote-tracking branch 'origin/master' into new-eventstore
2020-11-30 07:41:14 +01:00
adlerhurst
ebeedd1346
policy, idp, member.
...
member not working atm
2020-11-30 06:40:56 +01:00
Silvan
d6c9707ad0
fix(spooler): fast start ( #1023 )
2020-11-27 15:32:26 +01:00
Livio Amstutz
2331b8a4c0
feat(oidc): add clock skew and userinfo claims in ID Token ( #1022 )
...
* feat: add clock skew
* add IDTokenUserinfoAssertion
* migration
* fix missing converter
* update oidc version
* fix interface impl
2020-11-27 14:10:52 +01:00
adlerhurst
fc861ea544
remove unused fiel
2020-11-27 13:30:08 +01:00
adlerhurst
e48621c1f3
idp command side done
2020-11-27 13:29:35 +01:00
adlerhurst
9487e8bdeb
idp
2020-11-27 11:30:56 +01:00
adlerhurst
3bd4d3a8e3
Merge remote-tracking branch 'origin/master' into new-eventstore
2020-11-26 13:14:12 +01:00
adlerhurst
1b3f821ad0
idp config
2020-11-26 13:14:07 +01:00
