851 Commits

Author SHA1 Message Date
Fabi
2ab47c3c8d
fix: Lastspooltime (#1102)
* feat: last spool time convert

* feat: last spool time convert
2020-12-14 11:49:20 +01:00
Livio Amstutz
b71a444e86
fix: primary domain claim (#1082)
* fix: primary domain scope (overwrite by roles and rogue `:`)

* disable wrong users

* fix test

* show requested org name

* only show domain when selected
2020-12-14 10:54:29 +01:00
Max Peintner
c6fed8ae86
feat(console): u2f (#1080)
* fix user table count

* grpc ge

* move grpc

* u2f

* add u2f funcs

* rm local grpc, u2f dialog

* dialog u2f

* 2fa button

* mfa u2f credentialoptions

* decode base64 to bytearray, id, challenge

* u2f verify

* spinner, remove, attribute col

* delete mfa

* add forcemfa to policy

* add id to remove

* fix: add missing remove u2f in management

* user mgmt u2f delete, login policy

* rm log

* show attr in mgmt user mfa

* add missing id of mfa

* mfa table

* multifaktor for admin, org

* add secondfactor to gen component

* remove circular dependency

* lint

* revert identity prov

* add divider

* login policy lint

* Update console/src/app/modules/policies/login-policy/login-policy.component.html

* Update console/src/app/modules/policies/login-policy/login-policy.component.html

Co-authored-by: Maximilian Peintner <csaq7175@uibk.ac.at>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-14 10:04:15 +01:00
Fabi
5b433dcaa3
New eventstore policies (#1084)
* feat: login policy

* feat: password complexity policy

* feat: org iam policy

* feat: label policy

* feat: add and change policies

* feat: second factors

* feat: second and multi factors

* feat: better naming

* feat: better naming
2020-12-11 15:49:19 +01:00
Fabi
31ea9d1acd
feat: user events (#1062)
* feat: user new eventstore

* feat: rename query builder

* feat: human events

* feat: human events

* feat: events

* feat: phone events

* feat: phone events

* feat: profile, address events

* feat: mfa, otp

* feat: webauthn events

* feat: webauthn events

* feat: webauthn events

* feat: enums

* feat: new events

* feat: user events

* feat: domain events

* feat: all v2 events

* feat: all v1 events

* feat: pkg structure

* feat: change events

* feat: better naming

* feat: better naming
2020-12-10 16:18:52 +01:00
Fabiennne
5dd60f01e0 Merge branch 'master' into new-eventstore 2020-12-09 13:13:47 +01:00
Livio Amstutz
38478efefb
fix: handle multiple webauthn origins (#1078)
* fix(grpc): return CredentialCreationData in webauthn public key

* return id of u2f tokens

* handle separate origins in webauthn

* param
2020-12-08 15:39:58 +01:00
Livio Amstutz
12f8c7202c
fix(grpc): return CredentialCreationData in webauthn public key (#1075) 2020-12-07 15:22:11 +01:00
Livio Amstutz
077a9a628e
fix: improvements for login flow (incl. webauthn) (#1026)
* fix: typo ZITADEL uppercase for OTP Issuer

* fix: password validation after change in current user agent

* fix: otp validation after setup in current user agent

* add waiting

* add waiting

* show u2f state

* regenerate css

* add useragentID to webauthn verify

* return mfa attribute in mgmt

* switch between providers

* use preferredLoginName for webauthn display

* some fixes

* correct translations for login

* add some missing event translations

* fix usersession test

* remove unnecessary cancel button on password change done
2020-12-07 12:09:10 +01:00
Livio Amstutz
6d210c3f00
fix: add permissions-policy header (#1059) 2020-12-07 09:00:31 +01:00
Fabiennne
9e7032db73 feat: merge master 2020-12-03 10:21:00 +01:00
Fabiennne
2a25c0b617 Merge branch 'master' into new-eventstore
# Conflicts:
#	go.sum
2020-12-03 10:11:18 +01:00
Livio Amstutz
300ade66a7
feat: add WebAuthN support for passwordless login and 2fa (#966)
* at least registration prompt works

* in memory test for login

* buttons to start webauthn process

* begin eventstore impl

* begin eventstore impl

* serialize into bytes

* fix: u2f, passwordless types

* fix for localhost

* fix script

* fix: u2f, passwordless types

* fix: add u2f

* fix: verify u2f

* fix: session data in event store

* fix: u2f credentials in eventstore

* fix: webauthn pkg handles business models

* feat: tests

* feat: append events

* fix: test

* fix: check only ready webauthn creds

* fix: move u2f methods to authrepo

* frontend improvements

* fix return

* feat: add passwordless

* feat: add passwordless

* improve ui / error handling

* separate call for login

* fix login

* js

* feat: u2f login methods

* feat: remove unused session id

* feat: error handling

* feat: error handling

* feat: refactor user eventstore

* feat: finish webauthn

* feat: u2f and passwordlss in auth.proto

* u2f step

* passwordless step

* cleanup js

* EndpointPasswordLessLogin

* migration

* update mfaChecked test

* next step test

* token name

* cleanup

* attribute

* passwordless as tokens

* remove sms as otp type

* add "user" to amr for webauthn

* error handling

* fixes

* fix tests

* naming

* naming

* fixes

* session handler

* i18n

* error handling in login

* Update internal/ui/login/static/i18n/de.yaml

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>

* Update internal/ui/login/static/i18n/en.yaml

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>

* improvements

* merge fixes

* fixes

* fixes

Co-authored-by: Fabiennne <fabienne.gerschwiler@gmail.com>
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2020-12-02 17:00:04 +01:00
Fabi
6b3f5b984c
feat: metrics (#1024)
* refactor: switch from opencensus to opentelemetry

* tempo works as designed nooooot

* fix: log traceids

* with grafana agent

* fix: http tracing

* fix: cleanup files

* chore: remove todo

* fix: bad test

* fix: ignore methods in grpc interceptors

* fix: remove test log

* clean up

* typo

* fix(config): configure tracing endpoint

* fix(span): add error id to span

* feat: metrics package

* feat: metrics package

* fix: counter

* fix: metric

* try metrics

* fix: coutner metrics

* fix: active sessin counter

* fix: active sessin counter

* fix: change current Sequence table

* fix: change current Sequence table

* fix: current sequences

* fix: spooler div metrics

* fix: console view

* fix: merge master

* fix: Last spool run on search result instead of eventtimestamp

* fix: go mod

* Update console/src/assets/i18n/de.json

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* fix: pr review

* fix: map

* update oidc pkg

* fix: handlers

* fix: value observer

* fix: remove fmt

* fix: handlers

* fix: tests

* fix: handler minimum cycle duration 1s

* fix(spooler): handler channel buffer

* fix interceptors

Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-12-02 08:50:59 +01:00
adlerhurst
9a870b7830 facotry to fileter 2020-12-01 14:44:19 +01:00
adlerhurst
cf1df99a10 fix idp mappers 2020-11-30 10:41:10 +01:00
adlerhurst
d494da67be repo event mappers 2020-11-30 08:53:08 +01:00
adlerhurst
968f766a8f cleanup code 2020-11-30 08:35:40 +01:00
adlerhurst
0780c23f76 member 2020-11-30 07:56:38 +01:00
adlerhurst
c2400e1da5 Merge remote-tracking branch 'origin/master' into new-eventstore 2020-11-30 07:41:14 +01:00
adlerhurst
ebeedd1346 policy, idp, member.
member not working atm
2020-11-30 06:40:56 +01:00
Silvan
d6c9707ad0
fix(spooler): fast start (#1023) 2020-11-27 15:32:26 +01:00
Livio Amstutz
2331b8a4c0
feat(oidc): add clock skew and userinfo claims in ID Token (#1022)
* feat: add clock skew

* add IDTokenUserinfoAssertion

* migration

* fix missing converter

* update oidc version

* fix interface impl
2020-11-27 14:10:52 +01:00
adlerhurst
fc861ea544 remove unused fiel 2020-11-27 13:30:08 +01:00
adlerhurst
e48621c1f3 idp command side done 2020-11-27 13:29:35 +01:00
adlerhurst
9487e8bdeb idp 2020-11-27 11:30:56 +01:00
adlerhurst
3bd4d3a8e3 Merge remote-tracking branch 'origin/master' into new-eventstore 2020-11-26 13:14:12 +01:00
adlerhurst
1b3f821ad0 idp config 2020-11-26 13:14:07 +01:00
adlerhurst
246d4294cf fix(eventstore): tests 2020-11-26 09:19:14 +01:00
adlerhurst
4bb9650f27 idp 2020-11-25 20:04:32 +01:00
adlerhurst
f6cdcee77a append events without return value 2020-11-25 14:12:44 +01:00
Silvan
42f50de790
fix(machine): set creationdate (#1018)
* fix(machine): set creationdate

* fix(translations): translate `user.human.phone.removed`
2020-11-25 07:42:06 +01:00
Silvan
78a1b8f019
fix: org member change and remove (#1014)
* fix: member

* fix: test

* fix: test

* fix: tests
2020-11-24 15:55:38 +01:00
Fabi
75bf0409c4
fix: management api remove otp (#1010)
* fix: management api remove otp

* add postinstall

* remove mgmt otp

Co-authored-by: Max Peintner <max@caos.ch>
2020-11-24 12:06:46 +01:00
adlerhurst
f8028f07d0 event data search query 2020-11-23 19:31:12 +01:00
adlerhurst
6431fd2ec5 Merge remote-tracking branch 'origin/master' into new-eventstore 2020-11-23 11:40:50 +01:00
adlerhurst
4aadd290f4 write model 2020-11-23 11:36:58 +01:00
Silvan
855725c3c0
fix: project add validation (#997)
* fix: add project validation

* fix: removed loop
2020-11-21 17:20:01 +01:00
Silvan
5d2c053f87
fix: add project validation (#996) 2020-11-21 13:38:32 +01:00
adlerhurst
20f4fa56c5 try writemodel 2020-11-20 17:03:17 +01:00
Livio Amstutz
7e3ace7a96
fix: TestAuthRequestRepo_nextSteps (#995) 2020-11-20 13:05:35 +01:00
Fabi
a891fb571a
fix: fill selected idp config id on step (#994) 2020-11-20 11:20:17 +01:00
Fabi
666e43a7e2
feat: probes (#964)
* feat: probes

* feat: validate

* fix: protos

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-11-20 10:09:17 +01:00
Fabi
7c6fd2b51e
fix: Externallogin on existing session (#990)
* fix: existing session with external login

* fix: existing session with external login

* fix: return in login
2020-11-20 09:00:49 +01:00
Livio Amstutz
85d2be2e8c
fix: handle short cache for console correctly (#993) 2020-11-20 08:47:28 +01:00
Silvan
168242e725
fix(tracing): from opencensus to opentelemetry (#937)
* refactor: switch from opencensus to opentelemetry

* tempo works as designed nooooot

* fix: log traceids

* with grafana agent

* fix: http tracing

* fix: cleanup files

* chore: remove todo

* fix: bad test

* fix: ignore methods in grpc interceptors

* fix: remove test log

* clean up

* typo

* fix(config): configure tracing endpoint

* fix(span): add error id to span
2020-11-20 07:57:39 +01:00
adlerhurst
609c4d4f24 Merge branch 'master' into new-eventstore 2020-11-19 17:20:09 +01:00
Silvan
fcf81bed5f
fix: dont overwrite resource owner in objectroot (#992)
* fix(management): search user grants with granted

* fix(auth): handle user grant project owner

* fix: grantowner to resourceowner

* fix: generate mock

* fix: mig

* fix: query correct columns

* fix: remove new line

* fix: dont overwrite resourceowner on appendevent
2020-11-19 16:23:48 +01:00
Silvan
9c603d9b38
fix: query correct column (#991)
* fix(management): search user grants with granted

* fix(auth): handle user grant project owner

* fix: grantowner to resourceowner

* fix: generate mock

* fix: mig

* fix: query correct columns

* fix: remove new line
2020-11-19 15:21:22 +01:00
Silvan
93e941a475
fix: Improve search user grants (#988)
* fix(management): search user grants with granted

* fix(auth): handle user grant project owner

* fix: migration
2020-11-19 14:13:07 +01:00