NGPixel
0fa5b9750d
fix: handle missing extra field during page render
2020-10-03 16:50:51 -04:00
NGPixel
9762bdc2ce
fix: set enableArithAbort explicit value for tedious driver
2020-10-03 16:46:30 -04:00
Mirko Iannella
31a18c8a67
fix: check for email array during processProfile ( #2515 )
...
In our setup (based on yunohost) the profile.email field could be either a string (and that was properly handled) or an array.
This code adds support for the case where it is an array.
2020-10-03 16:23:58 -04:00
Aaron
23e3403054
fix: update Matomo integration client code ( #2526 )
...
Signed-off-by: Aaron <admin@datahoarder.dev>
2020-10-03 16:22:02 -04:00
NGPixel
084dcd69d1
fix: strip directory traversal sequences from asset paths
2020-10-03 01:44:57 -04:00
NGPixel
b0f61d6605
feat: rocket.chat auth module
2020-09-20 20:15:51 -04:00
Иван
79c5b8fac2
fix: security html module removes allow attribute from iframes ( #2354 )
...
* fix: secure html module removes allowfullscreen, allow and frameborder attributes from iframes
* Apply suggestions from code review
fix: remove deprecated attributes for iframe in secure html module
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2020-09-13 13:55:32 -04:00
Riccardo Re
660b78d9e2
fix: support permissions by tags for basic db search engine ( #2416 )
...
This code will allow the "search" component to correctly filter pages by usergroup permissions based on tags instead of paths
Co-authored-by: Riccardo Re <riccardo.re@clevermind.cloud>
2020-09-13 13:53:31 -04:00
NGPixel
1404d6343e
fix: API key incorrectly forces token revalidation
2020-09-12 14:33:45 -04:00
NGPixel
8f6cba262f
fix: draw.io svgs are no longer removed with linebreaks ( #2415 )
2020-09-12 14:05:24 -04:00
NGPixel
02c3c66084
fix: checkExclusiveAccess incorrectly includes root admin
2020-09-11 17:37:50 -04:00
NGPixel
7c0d6e2883
fix: prevent write:groups from self-promoting
2020-09-09 22:37:49 -04:00
NGPixel
f988c5f811
fix: logout URL endpoint option for oauth2 module
2020-09-09 20:20:55 -04:00
NGPixel
9009816290
fix: 2fa qr code - handle special chars in site title
2020-09-09 20:10:51 -04:00
NGPixel
aa96e97028
fix: force lowercase for email on local auth
2020-09-09 19:59:46 -04:00
NGPixel
5295e413be
fix: bypass page rule check for global permission check + handle missing page extra field
2020-09-09 19:35:43 -04:00
Rus
68d31af7af
fix: discord auth module new URL. ( #2390 )
...
Change "discordapp.com" to "discord.com"
2020-09-07 20:04:19 -04:00
NGPixel
78417524b3
feat: ldap avatar support
2020-09-07 20:02:33 -04:00
NGPixel
794ecc6ef6
fix: new install local auth not enabled ( #2375 )
2020-09-07 14:49:02 -04:00
NGPixel
9f1ba0a32f
fix: elastic apm rum client script
2020-09-06 16:57:45 -04:00
NGPixel
af054257bd
fix: 2.5.108 migration (2)
2020-09-06 15:36:51 -04:00
NGPixel
0ce63c8ef7
fix: 2.5.108 migration
2020-09-06 15:21:06 -04:00
NGPixel
60f2a2a8d9
fix: migration error for new installs
2020-09-05 23:47:41 -04:00
NGPixel
ef739de970
feat: purge history utility
2020-09-05 23:32:00 -04:00
NGPixel
8490fc1267
feat: handle disabled auth strategies
2020-09-05 18:33:15 -04:00
NGPixel
17f8071abe
fix: LDAP missing reqToCallback
2020-09-05 15:19:18 -04:00
NGPixel
062a0b7979
feat: logout by auth strategy + keycloak implementation
2020-09-01 20:01:39 -04:00
jaljo
cda1f1e805
feat: export creation date in dumped content ( #2345 )
...
* Export creation date in dumped content
* date_creation -> dateCreated
Co-authored-by: Joris Langlois <joris.langlois@knplabs.com>
2020-08-31 11:28:55 -04:00
NGPixel
ae733392f3
feat: password reset
2020-08-30 21:46:55 -04:00
NGPixel
4dcf664040
fix: handle removed auth strategies
2020-08-30 16:33:52 -04:00
NGPixel
e319355017
feat: enable/disable TFA per user
2020-08-30 14:18:22 -04:00
NGPixel
32d67adee1
feat: social login providers with dynamic instances
2020-08-30 01:36:37 -04:00
moonkey124
a7ddafd4aa
fix: incorrect error name for 1017 ( #2331 )
...
Fixed a copy and paste mistake
***NO_CI***
2020-08-29 21:25:22 -04:00
NGPixel
8c205b6950
fix: site title check + UI fixes + 2FA setup on account verify
2020-08-23 12:58:56 -04:00
NGPixel
f72530bf84
refactor: deps update + 2FA setup + verify
2020-08-22 19:37:49 -04:00
Dan Nicholson
d5d368cd33
feat: fix + enable OIDC auth method ( #2282 )
...
* fix: pass userinfo URL in oidc strategy
The userinfo URL from the definition was not being provided to the
passport strategy, which resulted in a type error trying to resolve the
user's profile. Furthermore, the name of the defined URL was
inconsistent with all other authentication method URLs.
* fix: pass all necessary scopes to oidc auth method
When no scopes are provided, passport-openidconnect uses only `openid`,
which does not contain the username or email address. Include `profile`
and `email` to ensure the necessary claims are included.
* fix: update oidc method to call processProfile correctly
Now the profile object and providerKey are passed to processProfile. The
usernameClaim no longer has any use as the email address is the
username.
* fix: mark oidc authentication method as available
2020-08-15 13:32:58 -04:00
Marks Polakovs
95b6a7ad82
fix: resolve tags on pages in GraphQL ( #2247 )
2020-08-09 20:04:44 -04:00
Seyed Sajad Kahani
15bca54bdf
fix: change language in edit, history and source pages ( #2194 )
...
* change language in edit, history and source pages
* fix: remove unnecessary i18n locale switch for download page
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2020-07-29 19:54:31 -04:00
Higor Tavares
06c372d53f
fix: foreign key constraint when page have comments ( #2199 )
...
* Solving foreing key contraint when page have comments
* Update pages.js
remove indentation changes
Co-authored-by: Higor Tavares <paulo.freire@dellead.com>
2020-07-29 19:39:47 -04:00
NGPixel
26af63a80b
fix: login input hints
2020-07-20 00:22:29 -04:00
NGPixel
4cd6fe8a56
fix: unauthorized admin should receive 403 code
2020-07-19 15:30:29 -04:00
NGPixel
4f16dd0c81
fix: admin permissions + restrict nav settings
2020-07-19 15:26:51 -04:00
NGPixel
10f17c5712
feat: redirect on login based on group
2020-07-19 15:13:35 -04:00
NGPixel
be499e5795
fix: auth strategy dependent username label
2020-07-19 13:20:43 -04:00
NGPixel
52d0af19b4
feat: diagram rendering + post-processor (wip)
2020-07-12 15:58:45 -04:00
Regev Brody
b2ff064d34
fix: stream assets from storage local locations ( #2087 )
2020-07-12 12:19:01 -04:00
NGPixel
57f5cbd5b6
misc: knex update for mssql constraint bug
2020-07-11 16:53:18 -04:00
NGPixel
1ced9649c7
feat: enforce 2fa admin setting + hide local on login screen
2020-07-05 23:55:11 -04:00
NGPixel
b2f292cc39
fix: MSSQL migration 2.5.1
2020-07-05 15:59:02 -04:00
NGPixel
31661b2cb3
fix: token renewal date
2020-07-05 14:16:16 -04:00