Commit Graph

816 Commits (cb74ad507f0aa2709cf7e9ad1bdb9053e932be58)

Author SHA1 Message Date
Christophe Vandeplas cb74ad507f chg: [security] OTP support for HOTP 2023-05-25 23:28:14 +02:00
Christophe Vandeplas 6311f7d3e6 Merge branch 'develop' into feature/totp 2023-05-25 20:53:06 +02:00
Christophe Vandeplas a5f5a4e113 chg: [user] log last_api_access hourly if MISP.store_api_access_time is not set 2023-05-21 20:12:44 +02:00
Christophe Vandeplas c5483cf4b5 fix: [cleanup] removes some TODO messages #103 2023-05-21 10:09:05 +02:00
Christophe Vandeplas 81db5958d9 chg: [security] Allow enforcement of TOTP 2023-05-20 08:56:40 +02:00
Christophe Vandeplas 6caccac94d new: [security] TOTP authentication 2023-05-19 06:57:16 +02:00
iglocska 9f5e49995a
Merge branch 'new_widgets' into develop 2023-05-16 14:12:59 +02:00
iglocska a60202d9d1
fix: [junk removed] removed accidentally inserted characters
- fell asleep on the keyboard?
2023-05-16 13:41:44 +02:00
iglocska 9e763ba0e5
new: [auth] log api key usage in redis
- lightweight per day slice of api key use
- built as a ranked set in redis for the dashboards
2023-05-16 13:39:31 +02:00
Raphaël Vinot 1d53868c99 chg: [PyMISP] Bump version 2023-05-12 00:10:36 +02:00
Sami Mokaddem a2719e3c82
chg: [appController] Bumped queryVersion 2023-05-04 09:13:01 +02:00
Luciano Righetti 1f4e2af37a fix: admin logs pagination 2023-04-18 16:58:35 +02:00
Sami Mokaddem 06d5fa5c5d
fix: [event:discussion] Fixed potential CSRF issue while adding a comment
Fix #8916
2023-04-13 15:45:47 +02:00
Raphaël Vinot bc82b38db0 chg: [PyMISP] Bump 2023-04-12 15:59:34 +02:00
Sami Mokaddem 362156daca
fix: [event:viewAttribute] Reset pagination state when using a filter on the attribute table
- This will certainly make @rommelfs happy :)
2023-04-06 15:24:15 +02:00
iglocska 13d99cfaca
chg: [pymisp] bump 2023-03-27 11:01:42 +02:00
iglocska e498158208
chg: [pymisp] version string bump 2023-03-27 10:51:41 +02:00
Raphaël Vinot 68c130a099 chg: Bump PyMISP 2023-03-10 15:14:22 +02:00
Anders Einar Hilden ec495da477 [new]: [ApacheSecureAuth] Add endpoint /users/logout401 for logging out from HTTP Basic Auth
This can be used by i.e. ApacheSecureAuth to make a browser forget cached HTTP Basic Auth credentials, which would otherwise result in a logut->login loop.
2023-03-10 10:34:05 +01:00
iglocska a7905b40ce
Merge branch 'develop' into 2.4 2023-02-01 14:37:06 +01:00
Christophe Vandeplas 827bf50f3c chg: [auth] group authentication code 2023-01-27 02:42:40 +01:00
Raphaël Vinot 5edcd9083f chg: [PyMISP] Bump 2023-01-23 10:09:01 +01:00
Andras Iklody faa1fc5300
fix: [querystring] bumped 2023-01-03 12:20:35 +01:00
Raphaël Vinot 68571e8534 chg: [PyMISP] Bump version 2022-12-22 11:37:28 +01:00
Christophe Vandeplas f18f0514f7 fix: [auth][log] log correct org/userid with failed login fixes #8807 2022-12-07 00:55:20 +01:00
Jakub Onderka 1fc62ef41e fix: [log] Condition for old access log 2022-12-02 09:50:18 +01:00
Jakub Onderka b7d8b39903 fix: [log] Undefined index 2022-12-02 09:50:18 +01:00
Jakub Onderka 00fa78e6ea chg: [internal] Move rest response SQL output 2022-12-02 09:38:14 +01:00
iglocska b6a2c854a4
new: [session killswitch] added endpoint to kill existing sessions for a user
- required for integration in MeliCERTes II
2022-12-01 14:07:48 +01:00
Christophe Vandeplas 192ed311b9 fix: [remote_ip] respect MISP.log_client_ip_header everywhere fixes #8781 2022-11-28 14:08:11 +01:00
iglocska dbc18f2ca7
fix: [logs] reverted the removal of api logs from the /logs/ logging system unless confirmed
- breaks logging with existing configurations
2022-11-28 13:27:40 +01:00
Raphaël Vinot 500fe31615 chg: [PyMISP] Bump version 2022-11-28 10:28:22 +01:00
Jakub Onderka 4aabc2d097 new: [logging] Access log 2022-11-12 13:45:21 +01:00
Raphaël Vinot c20678f212 chg: [PyMISP] Bump 2022-11-09 13:49:12 +01:00
Jakub Onderka eb2396c5cc fix: [view] Remove unused variable 2022-11-02 13:24:34 +01:00
Jakub Onderka ed2bfa236d new: [acl] User AlcHelper more often 2022-11-02 13:24:34 +01:00
Jakub Onderka 645b11e1b1 new: [redis] Store some data in Redis compressed to save memory 2022-10-30 16:19:58 +01:00
Jakub Onderka 9f0c7456bb fix: [internal] AppController cleanup 2022-10-30 15:13:23 +01:00
Jakub Onderka be60ad19e9 chg: [internal] Put most used controller component to defined variables 2022-10-24 09:32:23 +02:00
Jakub Onderka b1371b4906 new: [acl] Move checks from controller to ACL component 2022-10-24 09:32:23 +02:00
Jakub Onderka 74a2982e1a fix: [internal] Cleanup controller code 2022-10-22 17:17:55 +02:00
Jakub Onderka b4bcbfe103 chg: [internal] Use JsonTool more often 2022-10-19 10:11:37 +02:00
Jakub Onderka aacd19a318 fix: [UI] Submit form on CTRL+ENTER on select 2022-10-14 13:00:38 +02:00
Jakub Onderka 6853a03cfb fix: [internal] Check if user is logged after checking if it is ajax request 2022-10-08 18:29:58 +02:00
Jakub Onderka f53063f8af chg: [internal] More clear method name 2022-10-08 13:43:18 +02:00
Jakub Onderka 3e970ad6a6 chg: [internal] Use short isset 2022-10-08 13:41:33 +02:00
Jakub Onderka 0cb3e58881 chg: [internal] Cleanup for RateLimitComponent 2022-10-08 13:26:02 +02:00
Jakub Onderka cb41c4ad92 chg: [internal] Move AUTOMATION_ARRAY definition to IndexFilterComponent 2022-09-22 14:48:50 +02:00
Sami Mokaddem 43db6f02ff
chg: [periodic_notification] Small UI improvements 2022-09-12 14:19:50 +02:00
Raphaël Vinot 25e9684297 chgL [PyMISP] Bump 2022-09-09 14:01:20 +02:00