Commit Graph

655 Commits (531e920b422a2907ba8d3e831b59a8e7957a4f9f)

Author SHA1 Message Date
mokaddem afe9d26e8a
chg: bumped queryversion 2021-01-25 13:43:36 +01:00
mokaddem d72b626839
chg: bumped queryversion 2021-01-22 14:49:04 +01:00
iglocska a8688501c3
fix: [diagnostics] complain about PHP >= 8.0 2021-01-22 11:55:35 +01:00
Raphaël Vinot 0d9e95679c chg: Bump PyMISP version 2021-01-20 12:58:56 +01:00
iglocska 3d5c9fb9a6
Merge branch 'develop' of github.com:MISP/MISP into develop 2021-01-05 08:42:47 +01:00
iglocska 44e792617c
fix: [search] don't append the same quicksearch value more than once in the URL 2021-01-05 08:40:37 +01:00
Jakub Onderka ef3d77a4fe chg: [optimisation] Decode JSON input from request just once 2021-01-01 22:17:57 +01:00
Jakub Onderka 1a184ebbb5 new: [internal] Allow to output directly TmpFileTool 2020-12-21 21:02:37 +01:00
Jakub Onderka c7f00b319f fix: [UI] Move debug mode variable before setting database connection 2020-12-17 13:50:26 +01:00
Jakub Onderka 324cdbafce chg: [REST] Close session early for `authkey_keep_session` connections 2020-12-17 13:50:26 +01:00
Jakub Onderka ae5ad7cc36 fix: [monitoring] Do not encode payload, it is string 2020-12-17 13:50:25 +01:00
Jakub Onderka 197b1a341a chg: [internal] Code cleanup 2020-12-17 13:50:25 +01:00
Jakub Onderka c0f6463d57 new: [security] Cancel API session right after auth key is deleted 2020-12-17 13:50:25 +01:00
Jakub Onderka 640e9492d7 new: [security] Put information about key expiration into response header 2020-12-17 13:50:25 +01:00
Jakub Onderka 8df77748b0 chg: [internal] Small optimisations 2020-12-17 13:50:25 +01:00
Jakub Onderka d92123c915 fix: [security] Do not allow to use API key authenticated session to do non API calls 2020-12-17 13:50:25 +01:00
Jakub Onderka 9896f67358 new: [security] New setting Security.username_in_response_header 2020-12-17 13:50:25 +01:00
Jakub Onderka feab5f553b chg: [interna] AppController code cleanup 2020-12-17 13:50:23 +01:00
Jakub Onderka 4c6ffc6985 chg: [internal] Rename MISP.log_user_ips_auth -> MISP.log_user_ips_authkeys 2020-12-17 13:49:32 +01:00
Jakub Onderka 8662a7efaf chg: [internal] Move access monitoring to own method 2020-12-17 13:49:32 +01:00
Jakub Onderka ee8a495d89 new: [internal] Show auth key usage in key view page 2020-12-17 13:49:32 +01:00
Jakub Onderka c6bf9de3ca fix: [internal] Remove unused variables 2020-12-17 13:49:32 +01:00
Jakub Onderka 6821556000 chg: [internal] Allow to reuse session for API requests 2020-12-17 13:49:32 +01:00
Jakub Onderka e5e855b3c2 new: [internal] Allow to log authkey usage in Redis 2020-12-17 13:49:32 +01:00
Jakub Onderka 6ce13b8168 chg: [internal] Do not log full authkeys 2020-12-17 13:49:32 +01:00
Jakub Onderka a0fb186a3c chg: [internal] Simplify User::describeAuthFields 2020-12-17 13:49:32 +01:00
Jakub Onderka d0ec184796 fix: [internal] Remove unused $user siteadmin variable 2020-12-17 13:49:32 +01:00
Jakub Onderka 49b85ed33c chg: [internal] Load just necessary info when loading homepage info 2020-12-17 13:49:32 +01:00
Jakub Onderka 18402c0489 chg: [internal] Load user role info from session data 2020-12-17 13:49:32 +01:00
Jakub Onderka 7f0d06ae4d chg: [internal] Move user checks to one place 2020-12-17 13:49:32 +01:00
Jakub Onderka becbf95c37 new: [UI] Download GPG public key from GPG homedir 2020-12-17 13:19:55 +01:00
iglocska a332e1379c
Merge branch '2.4' into cerebrate 2020-11-30 23:49:40 +01:00
iglocska 320191bbd8
chg: [querystring] bump 2020-11-30 23:46:37 +01:00
Jakub Onderka 2c7d6e4466 new: [auth] Allow to enforce auth plugin authentication 2020-11-30 14:46:36 +01:00
Jakub Onderka 165da72fdf fix: [internal] Remove unused method from AppController 2020-11-27 09:01:35 +01:00
Jakub Onderka e15ca97f33
Merge pull request #6081 from JakubOnderka/security_disable_browser_cache
new: [security] HTTP headers hardening
2020-11-24 21:00:02 +01:00
Raphaël Vinot 7dab02b1e5 chg: [PyMISP] Bump version 2020-11-23 10:07:11 +01:00
mokaddem e45174f83c
fix: [appController] Prevent notice for `perm_galaxy_editor` if update is still running 2020-11-19 17:35:30 +01:00
mokaddem 89f307bd07 Merge branch '2.4' of github.com:MISP/MISP into galaxy-cluster2.0 2020-11-18 09:22:40 +01:00
Jakub Onderka 12f84b0d69
Merge pull request #6587 from JakubOnderka/authkey-view
Authkey view permission fix
2020-11-17 21:25:38 +01:00
mokaddem 9db29821b4
Merge remote-tracking branch 'origin/2.4' into galaxy-cluster2.0 2020-11-16 16:11:17 +01:00
Jakub Onderka c51cd36ac3 fix: [internal] Destroy session just when session is started 2020-11-16 14:58:12 +01:00
Jakub Onderka 000706251b fix: [security] Proper check who can view new authkeys 2020-11-15 18:04:34 +01:00
mokaddem dc65c79130
Merge branch '2.4' of github.com:MISP/MISP into galaxy-cluster2.0 2020-11-13 16:26:35 +01:00
mokaddem 1879bc05b7
Merge branch '2.4' of github.com:MISP/MISP into galaxy-cluster2.0 2020-11-12 09:05:12 +01:00
iglocska dbffebe503
Merge branch '2.4' into CRUD 2020-11-11 11:19:23 +01:00
mokaddem 17c793d10f
chg: Bumped queryversion 2020-11-10 13:31:43 +01:00
mokaddem 150b4cb7d1
Merge remote-tracking branch 'origin/2.4' into galaxy-cluster2.0 2020-11-09 10:07:43 +01:00
mokaddem 37072e309f
chg: Bumped queryversion 2020-11-09 09:03:55 +01:00
Jakub Onderka 5d6c1abe3c
Merge pull request #6519 from JakubOnderka/update-login-times
fix: [internal] Properly set login time for custom auth
2020-11-07 09:58:54 +01:00