Commit Graph

549 Commits

Author SHA1 Message Date
yflory
b93b5eae4e SSO: OIDC login and register 2023-06-27 16:04:32 +02:00
yflory
0c94c1a602 Merge branch 'totp-ui' into authsso 2023-06-23 19:07:11 +02:00
yflory
18d6ccdfd3 SSO: OIDC auth 2023-06-23 19:06:29 +02:00
yflory
da5626cbae TOTP: Use session token instead of JWT to prepare for SSO 2023-06-23 18:35:18 +02:00
yflory
9aac9d1c2f TOTP: Use HTTP challenges to write and remove blocks 2023-06-09 15:06:17 +02:00
yflory
b3a620edc0 lint compliance 2023-06-06 16:09:17 +02:00
yflory
36a1c604d8 Auth: Disable TOTP/MFA from the admin panel 2023-05-16 15:11:43 +02:00
yflory
e893613b43 TOTP: recovery by secret key 2023-05-15 17:33:58 +02:00
yflory
d789627920 TOTP setup and revocation in settings 2023-05-12 18:21:19 +02:00
ansuz
bd19288869 notes on pending improvements to add before merge/release 2023-05-11 16:42:47 +05:30
ansuz
f82c877cbe serialize possible errors 2023-05-07 12:17:28 +05:30
ansuz
921c46956d fix a type error by ensuring Env.Log is defined 2023-05-06 20:42:11 +05:30
ansuz
493bf1346c Merge tag '5.3.0' into 5.3-auth 2023-05-06 15:26:21 +05:30
ansuz
31dc7b523a XXXs and TODOs for handling blocks now that 2FA is in play 2023-05-05 18:20:51 +05:30
ansuz
06232ab6d7 overwriting basic storage should fail with an error 2023-05-05 18:18:46 +05:30
ansuz
41e870d3db serverside protocol work for authentication enforcement and configuration 2023-05-05 18:17:58 +05:30
ansuz
b753a067ac avoid logging for common 404s 2023-05-03 16:32:09 +05:30
ansuz
e895990426 generate a secret at launch time
used for issuing and validating JWTs
2023-05-03 16:19:01 +05:30
ansuz
3c6a35b713 new types of storage for challenges, MFA settings, and sessions 2023-05-02 23:42:09 +05:30
yflory
7b03df37f7 Merge remote-tracking branch 'origin/deprecatedcache' into staging 2023-04-24 14:52:56 +02:00
yflory
6b743a787c Fix mailbox message deletion 2023-03-28 12:19:16 +02:00
ansuz
cbaff2f3c0 Merge branch 'soon' into staging 2023-03-07 15:34:00 +05:30
ansuz
b5a01231b7 Merge branch '5.3-storage' into merge-storage 2023-03-07 14:49:28 +05:30
ansuz
d231451b49 Merge branch 'http-workers' into merge-storage 2023-03-07 14:49:22 +05:30
ansuz
d8ef2c8371 print login block size when it exceeds the maximum 2023-03-07 13:30:30 +05:30
ansuz
64d24f8b20 clean up http-worker code and add comments 2023-03-07 11:17:46 +05:30
ansuz
8fce5bcaf6 use configured http ports 2023-03-02 12:45:38 +05:30
ansuz
b003d4d825 Merge branch 'staging' into http-workers 2023-03-02 11:59:58 +05:30
ansuz
6bb336034b Merge branch 'staging' into 5.3-storage 2023-03-02 10:53:05 +05:30
ansuz
47afa26fc5 Merge branch 'soon' into 5.3-storage 2023-02-09 16:16:26 +05:30
yflory
f4b477ee37 Clean XXX 2023-02-01 18:02:03 +01:00
ansuz
7b65d3e8c8 judge blob activity based on mtime instead of atime
and output a basic overview when eviction completes
2023-01-23 08:29:36 +05:30
ansuz
c7dedf4054 more logging for potentially long-running eviction processes 2023-01-19 10:14:22 +05:30
ansuz
0bf26588e5 Merge branch 'soon' into 5.3-storage 2023-01-19 09:57:16 +05:30
ansuz
15272a6604 relocate blobs that have been archived to the wrong location 2023-01-19 08:57:39 +05:30
ansuz
911c15df25 fix incorrectly constructed archival path for blobs 2023-01-19 08:56:32 +05:30
yflory
a0714b9cc8 Prevent type error with the new admin script 2023-01-12 15:54:16 +01:00
ansuz
b0d10c3777 oops - fix inverted not 2023-01-11 15:08:16 +05:30
ansuz
3f18a38714 report http-worker RPC errors to the main process for logging 2023-01-11 15:02:02 +05:30
ansuz
4968bbf961 WIP limit on block size 2023-01-11 14:50:16 +05:30
ansuz
96de4dffe9 fix an inverted not in a non-functional telemetry attribute 2023-01-11 13:03:10 +05:30
yflory
1971553e1f Flush cache when adding new admin 2022-12-20 17:25:54 +01:00
yflory
70e602d9c9 Prototype install app 2022-12-20 16:57:51 +01:00
ansuz
953c817c5b clean up more prototype code:
* remove commented code
* serialize errors sent from http workers to the main process
* drop support for custom http headers set via config.js#httpHeaders
* websockets: only listen on localhost, respect websocketPort config in workers' proxy config
2022-12-20 18:03:52 +05:30
ansuz
24274e6c9b remove some prototyping code that was overwriting values in responses to http-workers 2022-12-20 17:10:10 +05:30
ansuz
7e4518b43d More server cleanup:
* make the websocket port configurable
* reorder some tasks at launch time to use more consistent logging
* relaunch http workers if they crash
* refuse to launch if httpUnsafeOrigin cannot be parsed as a URL
* fix a path issue reintroduced by a git merge
2022-12-20 16:29:38 +05:30
ansuz
d58096636a Merge tag '5.2.0' into test-merge 2022-12-20 14:49:47 +05:30
ansuz
6f19101f42 big server changes:
* use the nodejs cluster module to handle http traffic with multiple threads
* listen for websocket traffic on a new port because all such logic needs to share state
* proxy websocket URLs from the cluster to the new port so everything is backwards compatible
* implement logic for http workers to make requests and stay in sync with the main process
* unrelated: define the expected nodejs version in a constant
2022-12-20 14:20:59 +05:30
yflory
d39d64626d Fix deprecated cache issue 2022-12-16 15:12:19 +01:00
yflory
9a6455759f Merge branch 'staging' into deprecatedcache 2022-12-16 15:04:14 +01:00