5e0ab5cc38
new: [users] username validation added
...
- >5 && <50 in length required
- trim username to test to avoid whitespace names
- as reported by SK-CERT
2022-09-19 01:22:53 +02:00
9a50a5693e
fix: [users] added uniqueness to usernames
...
- added upgrade script with removal of duplicate usernames
- added unique index to username field
- massaging the usernames before insertion (trim + lowercasing)
- As reported by SK-CERT
2022-09-19 01:12:14 +02:00
a9eccb3097
fix: [security] X-FRAME-OPTIONS: DENY added to all responses
...
- as reported by SK-CERT
2022-09-19 01:11:18 +02:00
af1e2fd632
new: [security] Bruteforce protection added
...
- logins allow for 5 attempts every 5 minutes
- Code ported and updated from MISP
- As reported by SK-CERT
2022-09-19 00:25:15 +02:00
07a8d1dfcb
chg: [dead variable] removed
2022-09-19 00:24:29 +02:00
254fdc3b84
chg: [security] keycloak enabled - disallow multiple users from being created for the same individual
...
- as reported by SK-CERT
2022-09-18 19:26:24 +02:00
10ea126a93
fix: [security] KeyCloak login getUser fixes
...
- removed dead code
- tightened check on the user profile, if the KC user's email address and that of the Cerebrate user disagree, block the authentication
- as reported by SK-CERT
2022-09-18 18:51:05 +02:00
85e8a35091
fix: [api rearrange] shouldn't trigger when dealing with arrays
2022-09-18 18:27:00 +02:00
370995ab50
fix: [audit log] error due to compressible fields not being streams when compression not enabled
2022-09-18 18:16:34 +02:00
3857de8499
fix: [notice] errors when not logged in removed
2022-08-24 14:47:40 +02:00
fac19e0a3c
fix: [exception] speculative fix to a check causing a 500
2022-08-24 11:43:36 +02:00
4c1ce31d50
fix: [unauthed] users internal error fixed
2022-08-24 11:42:38 +02:00
d35a674505
chg: [navigation] added keycloak self management
...
- also some changes to the navigation system
2022-08-24 11:39:56 +02:00
94bfafb743
fix: [meta template] fixes
2022-08-23 16:02:52 +02:00
8bc3088e12
fix: [revert] meta fields unindexing
...
- required for the saving of vchanges
2022-08-23 14:50:13 +02:00
095dd4513c
chg: [rearrange] moved to Entity
2022-08-23 11:42:30 +02:00
1077251f8b
fix: [keycloak] fixed encoding issue with urlencoded usernames created in keycloak
2022-08-23 11:05:07 +02:00
d96353ee4f
chg: [APIRearrange] component tied into rest response
2022-08-19 13:02:25 +02:00
3e0d015f69
fix: [meta] template loading reworked
...
- no more crappy string numeric keys among others
2022-08-19 13:01:47 +02:00
b9e5b76766
new: [component] APIRearrange component added
...
- alter the data's format before passing it back via the RestResponseComponent
- to be used to clean up UI specific artifacts / junk
- also to maintain compability between versions/tools
2022-08-19 13:00:19 +02:00
cbb737e18e
fix: [deprecation] pagination component's use removed to comply with 4.4 requirements
2022-08-17 14:00:38 +02:00
a5c9f68316
fix: [deprecation] futher toList() call updated
2022-08-17 13:49:52 +02:00
60d8a8f655
fix: [deprecation] toList() queries updated
2022-08-17 13:49:11 +02:00
a8c42969ab
chg: [VERSION] bump
2022-06-09 14:14:19 +02:00
fa68d62890
fix: [component:CRUD] Removed deprecation notice when trying to extract without requesting the collection
2022-06-08 11:56:09 +02:00
8c4c75d83a
fix: [localTools:action] Catch error if local tool's action returned unexpected data
2022-06-08 11:51:52 +02:00
d55c1fd5d1
fix: [helper:bootstrap] Allow HTML param to have value equal to 0
2022-06-08 11:05:55 +02:00
f513f8ec99
chg: [kc] disabled user capturing
...
- Cerebrate is now authoritative
2022-05-17 11:00:30 +02:00
be064bb0c9
new: [KC] profile link added
2022-05-17 10:42:44 +02:00
398307e414
fix: [user enrollment] fixed via KC
2022-05-17 10:16:47 +02:00
a88318c5df
fix: [auditlogs] more monkey fixing the logging errors via CLI
2022-05-17 09:26:23 +02:00
11c9900580
chg: revert
2022-05-17 09:24:37 +02:00
23c41008d4
chg: [audit logs] fix test
2022-05-17 09:23:08 +02:00
8cf325d263
fix: [audit logs] monkey fix for the missing fields when coming from a CLI query
2022-05-17 09:06:16 +02:00
4575406b33
fix: [users] edit
...
- various issues fixed with the edit function
- re-added the chance to change organisations of a user as a site admin
- tighter checks on the options for the drop downs
2022-05-17 04:02:06 +02:00
32a559cc3b
new: [keycloak] command line tool
...
- automateable sync
- fixed various issues
- added logging of issues
2022-05-17 04:01:10 +02:00
5a965c5ffd
new: [keycloak] sync added
...
- created/updates users
- creates/updates/removes roles
- creates/updates/removes orgs
2022-05-17 02:42:14 +02:00
2289e91aca
fix: [component:CRUD] Avoid patching entity if it wasn't modified
2022-03-09 12:01:15 +01:00
3e4d0a4544
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-03-09 11:44:26 +01:00
938354119b
fix: [metaFields] Added timestamp behavior
2022-03-09 11:15:41 +01:00
c0a76d3f99
fix: error when entity has no meta_fields
2022-03-09 09:27:53 +01:00
61736531b1
chg: [indexTable:context_filters] Support of default context filter
...
This filter is used by default if none is provided
2022-03-09 08:55:59 +01:00
39d89efb53
chg: [meta-template:update] Default update strategy to be `create_new`
2022-03-09 08:21:27 +01:00
7a16c2c792
fix: [metaTemplate:view] Repair `Field` child
2022-03-08 17:49:18 +01:00
033792396c
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-03-08 17:13:19 +01:00
503b9e53b7
chg: [instance:getStatistics] Usage of cake's FrozenTime instead of DateTime
2022-03-08 16:51:10 +01:00
f6900b0843
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2022-03-08 16:04:14 +01:00
e5d0ffa041
fix: remove filter
2022-03-08 15:55:23 +01:00
1a5ee2767f
fix: remove commented line
2022-03-08 15:54:38 +01:00
9a2c6a4c4b
new: add api tests for MetaTemplates and openapi spec, fix minor issues.
2022-03-08 15:51:07 +01:00
iglocska