Christophe Vandeplas
cb74ad507f
chg: [security] OTP support for HOTP
2023-05-25 23:28:14 +02:00
Christophe Vandeplas
6311f7d3e6
Merge branch 'develop' into feature/totp
2023-05-25 20:53:06 +02:00
Christophe Vandeplas
a5f5a4e113
chg: [user] log last_api_access hourly if MISP.store_api_access_time is not set
2023-05-21 20:12:44 +02:00
Christophe Vandeplas
c5483cf4b5
fix: [cleanup] removes some TODO messages #103
2023-05-21 10:09:05 +02:00
Christophe Vandeplas
81db5958d9
chg: [security] Allow enforcement of TOTP
2023-05-20 08:56:40 +02:00
Christophe Vandeplas
6caccac94d
new: [security] TOTP authentication
2023-05-19 06:57:16 +02:00
iglocska
9f5e49995a
Merge branch 'new_widgets' into develop
2023-05-16 14:12:59 +02:00
iglocska
a60202d9d1
fix: [junk removed] removed accidentally inserted characters
...
- fell asleep on the keyboard?
2023-05-16 13:41:44 +02:00
iglocska
9e763ba0e5
new: [auth] log api key usage in redis
...
- lightweight per day slice of api key use
- built as a ranked set in redis for the dashboards
2023-05-16 13:39:31 +02:00
Raphaël Vinot
1d53868c99
chg: [PyMISP] Bump version
2023-05-12 00:10:36 +02:00
Sami Mokaddem
a2719e3c82
chg: [appController] Bumped queryVersion
2023-05-04 09:13:01 +02:00
Luciano Righetti
1f4e2af37a
fix: admin logs pagination
2023-04-18 16:58:35 +02:00
Sami Mokaddem
06d5fa5c5d
fix: [event:discussion] Fixed potential CSRF issue while adding a comment
...
Fix #8916
2023-04-13 15:45:47 +02:00
Raphaël Vinot
bc82b38db0
chg: [PyMISP] Bump
2023-04-12 15:59:34 +02:00
Sami Mokaddem
362156daca
fix: [event:viewAttribute] Reset pagination state when using a filter on the attribute table
...
- This will certainly make @rommelfs happy :)
2023-04-06 15:24:15 +02:00
iglocska
13d99cfaca
chg: [pymisp] bump
2023-03-27 11:01:42 +02:00
iglocska
e498158208
chg: [pymisp] version string bump
2023-03-27 10:51:41 +02:00
Raphaël Vinot
68c130a099
chg: Bump PyMISP
2023-03-10 15:14:22 +02:00
Anders Einar Hilden
ec495da477
[new]: [ApacheSecureAuth] Add endpoint /users/logout401 for logging out from HTTP Basic Auth
...
This can be used by i.e. ApacheSecureAuth to make a browser forget cached HTTP Basic Auth credentials, which would otherwise result in a logut->login loop.
2023-03-10 10:34:05 +01:00
iglocska
a7905b40ce
Merge branch 'develop' into 2.4
2023-02-01 14:37:06 +01:00
Christophe Vandeplas
827bf50f3c
chg: [auth] group authentication code
2023-01-27 02:42:40 +01:00
Raphaël Vinot
5edcd9083f
chg: [PyMISP] Bump
2023-01-23 10:09:01 +01:00
Andras Iklody
faa1fc5300
fix: [querystring] bumped
2023-01-03 12:20:35 +01:00
Raphaël Vinot
68571e8534
chg: [PyMISP] Bump version
2022-12-22 11:37:28 +01:00
Christophe Vandeplas
f18f0514f7
fix: [auth][log] log correct org/userid with failed login fixes #8807
2022-12-07 00:55:20 +01:00
Jakub Onderka
1fc62ef41e
fix: [log] Condition for old access log
2022-12-02 09:50:18 +01:00
Jakub Onderka
b7d8b39903
fix: [log] Undefined index
2022-12-02 09:50:18 +01:00
Jakub Onderka
00fa78e6ea
chg: [internal] Move rest response SQL output
2022-12-02 09:38:14 +01:00
iglocska
b6a2c854a4
new: [session killswitch] added endpoint to kill existing sessions for a user
...
- required for integration in MeliCERTes II
2022-12-01 14:07:48 +01:00
Christophe Vandeplas
192ed311b9
fix: [remote_ip] respect MISP.log_client_ip_header everywhere fixes #8781
2022-11-28 14:08:11 +01:00
iglocska
dbc18f2ca7
fix: [logs] reverted the removal of api logs from the /logs/ logging system unless confirmed
...
- breaks logging with existing configurations
2022-11-28 13:27:40 +01:00
Raphaël Vinot
500fe31615
chg: [PyMISP] Bump version
2022-11-28 10:28:22 +01:00
Jakub Onderka
4aabc2d097
new: [logging] Access log
2022-11-12 13:45:21 +01:00
Raphaël Vinot
c20678f212
chg: [PyMISP] Bump
2022-11-09 13:49:12 +01:00
Jakub Onderka
eb2396c5cc
fix: [view] Remove unused variable
2022-11-02 13:24:34 +01:00
Jakub Onderka
ed2bfa236d
new: [acl] User AlcHelper more often
2022-11-02 13:24:34 +01:00
Jakub Onderka
645b11e1b1
new: [redis] Store some data in Redis compressed to save memory
2022-10-30 16:19:58 +01:00
Jakub Onderka
9f0c7456bb
fix: [internal] AppController cleanup
2022-10-30 15:13:23 +01:00
Jakub Onderka
be60ad19e9
chg: [internal] Put most used controller component to defined variables
2022-10-24 09:32:23 +02:00
Jakub Onderka
b1371b4906
new: [acl] Move checks from controller to ACL component
2022-10-24 09:32:23 +02:00
Jakub Onderka
74a2982e1a
fix: [internal] Cleanup controller code
2022-10-22 17:17:55 +02:00
Jakub Onderka
b4bcbfe103
chg: [internal] Use JsonTool more often
2022-10-19 10:11:37 +02:00
Jakub Onderka
aacd19a318
fix: [UI] Submit form on CTRL+ENTER on select
2022-10-14 13:00:38 +02:00
Jakub Onderka
6853a03cfb
fix: [internal] Check if user is logged after checking if it is ajax request
2022-10-08 18:29:58 +02:00
Jakub Onderka
f53063f8af
chg: [internal] More clear method name
2022-10-08 13:43:18 +02:00
Jakub Onderka
3e970ad6a6
chg: [internal] Use short isset
2022-10-08 13:41:33 +02:00
Jakub Onderka
0cb3e58881
chg: [internal] Cleanup for RateLimitComponent
2022-10-08 13:26:02 +02:00
Jakub Onderka
cb41c4ad92
chg: [internal] Move AUTOMATION_ARRAY definition to IndexFilterComponent
2022-09-22 14:48:50 +02:00
Sami Mokaddem
43db6f02ff
chg: [periodic_notification] Small UI improvements
2022-09-12 14:19:50 +02:00
Raphaël Vinot
25e9684297
chgL [PyMISP] Bump
2022-09-09 14:01:20 +02:00