Sami Mokaddem
7d6696e079
new: [metaFields] Adding support of sane_default + improving form & crud - WiP
2022-11-14 09:04:35 +01:00
iglocska
5c02f1c6a4
chg: [cleanup] of the default role setting for keycloak
...
- not used in any sensible way anymore
2022-11-13 11:18:54 +01:00
iglocska
260e1d30a1
new: [individuals] rework
...
- allow modifications for org admins of individuals associated to their users
- unless they're site admins
- add user information to the individual index to bring clarity to the individual vs users confusion
- rework of the user form field object
2022-11-13 11:09:34 +01:00
iglocska
6d41622129
new: [user deletion] tied into KeyCloak
...
- remove user from KC when possible
- proceed for local users
2022-11-11 15:10:04 +01:00
iglocska
99febe19db
fix: [keycloak] re-enabled the getUser function, removed the placeholder forced user fetch
2022-11-09 14:10:54 +01:00
iglocska
b1f09dc97e
new: [permission limitations] subsystem added
...
- add limitations for users with given meta fields
- x number / org and y number / globally
- add comments to the limitations
- enforced on user creation/modification
2022-11-09 14:09:27 +01:00
iglocska
16a3826cef
chg: [encryption keys] rearranged for the API
2022-11-09 13:59:39 +01:00
iglocska
7675e27e90
chg: [user index] API refactored
2022-11-04 09:59:48 +01:00
iglocska
003053f13d
new: [API rearrange] added a simplifier for commonly used objects
...
- let's only return the subset of the data required to identify and retrieve the related data
2022-11-04 09:58:55 +01:00
iglocska
540fd63423
fix: [API] cleaned up the individual API
2022-11-04 09:33:39 +01:00
iglocska
11510ea28f
new: [individual] editing enabled for org admins
...
- requires that a user exist for the given individual
2022-10-31 14:42:58 +01:00
iglocska
8dbbb21dff
chg: [users] add metafields behaviour
2022-10-31 13:38:31 +01:00
iglocska
5ec0471cce
chg: [keycloak mapper] also pushes default mappings if they don't exist
2022-10-31 13:36:53 +01:00
iglocska
ce6575cfb6
chg: [User] Entity - added rearrangeForAPI() to rearrange meta fields
2022-10-31 13:26:44 +01:00
iglocska
2a31e39762
new: [keycloak] automatically set mappings
2022-10-31 13:26:12 +01:00
iglocska
2f4b6ed2ff
chg: [keycloak] integration rework
...
- switch to the use of attributes
- several minor fixes
2022-10-31 11:31:38 +01:00
Sami Mokaddem
dde7bbe75f
chg: [behavior:notifyAdmin] Small refactor to better handle deletions
2022-10-27 11:07:21 +02:00
Sami Mokaddem
225913f9c6
new: [organisation] Added `notifyAdmin` behavior.
...
Might be removed later on if needed
2022-10-27 10:14:57 +02:00
Sami Mokaddem
d0119b2dba
new: [user] Added `notifyAdmin` behavior
2022-10-27 10:14:09 +02:00
Sami Mokaddem
ee5adaf971
chg: [behavior:adminNotification] Added support of watched fields and improved metafield integration
2022-10-27 10:12:06 +02:00
Sami Mokaddem
c8ff7bb4b2
new: [adminNotificationBehavior] Added first version of new behavior and associated inboxProcessor
...
This behavior allows to specify on which fields modification site-admins should be notified by receiving a message in their inbox
2022-10-26 17:10:04 +02:00
iglocska
9c41fd548f
fix: [auth] added keycloak logout
2022-10-25 15:08:41 +02:00
Sami Mokaddem
00c1ae616f
new: [inboxes] Added `severity` level and `message` and removed `description` column
2022-10-25 14:38:16 +02:00
iglocska
9a8372be12
fix: [return type] validation removed
2022-10-25 11:01:23 +02:00
iglocska
84537c52f9
new: [user enrollment] send keycloak welcome email to users when enrolled
2022-10-25 10:57:18 +02:00
Sami Mokaddem
6d40968f24
chg: [appTable] Set string format of FrozenTime to ISO 8601-like by default
2022-10-25 10:27:58 +02:00
Sami Mokaddem
b555aed178
chg: [auditLog:entity] unset useless noise from user-settings
2022-10-21 16:06:09 +02:00
iglocska
41a241cada
new: [pgp] library ported from MISP
...
- added proper view elements for encryption keys
- added key information extraction
2022-10-21 15:25:52 +02:00
Sami Mokaddem
a091edbf22
fix: [user:beforeSave] Only call the user-update callback if the user is not new
2022-10-21 09:00:49 +02:00
Sami Mokaddem
c65978f8f2
fix: [behavior:authKeycloak] Correctly check if the user was saved
2022-10-21 08:59:36 +02:00
Sami Mokaddem
21403995e3
new: [user:edit] Added keycloak updates when a user gets modified
2022-09-21 10:11:09 +02:00
Sami Mokaddem
37094e0abb
fix: [user:validation] Allow user edition when `username` is not set
2022-09-21 10:10:02 +02:00
Sami Mokaddem
2c87b1e500
fix: [authKeycloakBehavior] Added missing association preventing user to log via keycloak
2022-09-21 10:07:51 +02:00
Sami Mokaddem
69fee02498
fix: [authKeycloakBehavior] Re-indexing array preventing roles to be parsed by keycloak
2022-09-21 10:06:33 +02:00
Sami Mokaddem
efe917c824
fix: [authKeycloakBehavior] Typo preventing roles to be saved
2022-09-21 10:05:55 +02:00
iglocska
5e0ab5cc38
new: [users] username validation added
...
- >5 && <50 in length required
- trim username to test to avoid whitespace names
- as reported by SK-CERT
2022-09-19 01:22:53 +02:00
iglocska
9a50a5693e
fix: [users] added uniqueness to usernames
...
- added upgrade script with removal of duplicate usernames
- added unique index to username field
- massaging the usernames before insertion (trim + lowercasing)
- As reported by SK-CERT
2022-09-19 01:12:14 +02:00
iglocska
af1e2fd632
new: [security] Bruteforce protection added
...
- logins allow for 5 attempts every 5 minutes
- Code ported and updated from MISP
- As reported by SK-CERT
2022-09-19 00:25:15 +02:00
iglocska
07a8d1dfcb
chg: [dead variable] removed
2022-09-19 00:24:29 +02:00
iglocska
10ea126a93
fix: [security] KeyCloak login getUser fixes
...
- removed dead code
- tightened check on the user profile, if the KC user's email address and that of the Cerebrate user disagree, block the authentication
- as reported by SK-CERT
2022-09-18 18:51:05 +02:00
iglocska
94bfafb743
fix: [meta template] fixes
2022-08-23 16:02:52 +02:00
iglocska
095dd4513c
chg: [rearrange] moved to Entity
2022-08-23 11:42:30 +02:00
iglocska
1077251f8b
fix: [keycloak] fixed encoding issue with urlencoded usernames created in keycloak
2022-08-23 11:05:07 +02:00
iglocska
d96353ee4f
chg: [APIRearrange] component tied into rest response
2022-08-19 13:02:25 +02:00
iglocska
a5c9f68316
fix: [deprecation] futher toList() call updated
2022-08-17 13:49:52 +02:00
iglocska
60d8a8f655
fix: [deprecation] toList() queries updated
2022-08-17 13:49:11 +02:00
iglocska
f513f8ec99
chg: [kc] disabled user capturing
...
- Cerebrate is now authoritative
2022-05-17 11:00:30 +02:00
iglocska
398307e414
fix: [user enrollment] fixed via KC
2022-05-17 10:16:47 +02:00
iglocska
a88318c5df
fix: [auditlogs] more monkey fixing the logging errors via CLI
2022-05-17 09:26:23 +02:00
iglocska
11c9900580
chg: revert
2022-05-17 09:24:37 +02:00
iglocska
23c41008d4
chg: [audit logs] fix test
2022-05-17 09:23:08 +02:00
iglocska
8cf325d263
fix: [audit logs] monkey fix for the missing fields when coming from a CLI query
2022-05-17 09:06:16 +02:00
iglocska
32a559cc3b
new: [keycloak] command line tool
...
- automateable sync
- fixed various issues
- added logging of issues
2022-05-17 04:01:10 +02:00
iglocska
5a965c5ffd
new: [keycloak] sync added
...
- created/updates users
- creates/updates/removes roles
- creates/updates/removes orgs
2022-05-17 02:42:14 +02:00
Sami Mokaddem
3e4d0a4544
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-03-09 11:44:26 +01:00
Sami Mokaddem
938354119b
fix: [metaFields] Added timestamp behavior
2022-03-09 11:15:41 +01:00
Sami Mokaddem
39d89efb53
chg: [meta-template:update] Default update strategy to be `create_new`
2022-03-09 08:21:27 +01:00
Sami Mokaddem
7a16c2c792
fix: [metaTemplate:view] Repair `Field` child
2022-03-08 17:49:18 +01:00
Sami Mokaddem
033792396c
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-03-08 17:13:19 +01:00
Sami Mokaddem
503b9e53b7
chg: [instance:getStatistics] Usage of cake's FrozenTime instead of DateTime
2022-03-08 16:51:10 +01:00
Luciano Righetti
9a2c6a4c4b
new: add api tests for MetaTemplates and openapi spec, fix minor issues.
2022-03-08 15:51:07 +01:00
Sami Mokaddem
b91f4b5d01
chg: [settingProvider:cerebrate] Typo in `password_auth.enabled`'s name
2022-03-01 13:56:54 +01:00
Sami Mokaddem
a78864912e
chg: [metaTemplates:computeConflicts] Usage of subqueries instead of array of IDs
2022-03-01 11:32:30 +01:00
Sami Mokaddem
134b7bfc3e
chg: [metafields] Passed argument can either be an object or array
2022-03-01 11:30:22 +01:00
Sami Mokaddem
bb94765243
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-03-01 09:52:57 +01:00
Sami Mokaddem
505e9a0973
chg: [metaFields] Added metafield type validation
2022-03-01 09:52:27 +01:00
Sami Mokaddem
4b5b2bc7e2
chg: [behaviors:metafields] Moved type handlers to the meta-template-fields table
2022-03-01 09:49:33 +01:00
Sami Mokaddem
ad6362eed4
chg: [instance:searchAll] Sharinggroup filter on org membership in addition to owner
2022-02-28 14:35:06 +01:00
Sami Mokaddem
bc04fd0336
fix: [instance:searchAll] Get the correct count if after filter is applied
2022-02-28 14:34:14 +01:00
Sami Mokaddem
8293312f90
fix: [instance:search_all] Support of conditions and afterFind when using global search
2022-02-28 14:16:12 +01:00
Sami Mokaddem
4b95b49854
fix: [behavior:metafields] Switch to text filtering if meta-template-field is not provided
2022-02-28 10:49:34 +01:00
iglocska
61cda0af33
fix: [minor fixes] with the keycloak integration
2022-02-28 10:27:17 +01:00
iglocska
8a6f0ed751
fix: [settings] invalid setting name fixed
2022-02-28 10:23:23 +01:00
Sami Mokaddem
3ef64911f9
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-02-28 09:51:51 +01:00
Sami Mokaddem
9fe7f06265
new: [metafields-types:ipv6] Support of ipv6
2022-02-28 09:45:43 +01:00
iglocska
5734d74a17
Merge branch 'develop' into main
2022-02-28 08:27:54 +01:00
iglocska
1e6b6a5abc
fix: [settings] added test for keycloak enabled
...
- always require one auth method to be enabled
2022-02-28 08:27:22 +01:00
iglocska
498efcf671
Merge branch 'develop' into main
2022-02-28 08:21:11 +01:00
Sami Mokaddem
04b82d356e
chg: [indexTable:filtering] Initial work on supporting custom operators
2022-02-25 15:36:55 +01:00
Sami Mokaddem
6cb9887f03
new: [metaFields] Support of meta-fields types
2022-02-25 15:22:57 +01:00
iglocska
4902a3f8a6
new: [password auth] added setting to disable password auth
...
- not needed in some cases for keycloak enabled instances
2022-02-25 00:33:00 +01:00
iglocska
3790244ce4
new: [individuals] new finder method to find by alignment
2022-02-24 13:47:08 +01:00
iglocska
8fdb8668c8
fix: [alignments] saving of the alignment was omitted before
2022-02-24 13:46:35 +01:00
Sami Mokaddem
64cb0f920a
chg: [mailinglist] Added ACL conditions on mailing list operations
...
- Site admins have all authorizations
- Org admins can manipulate the list their user own (can be later replaced by organisation_id instead of user_id)
- Other users can see the all lists they are included in
2022-02-23 10:03:12 +01:00
Sami Mokaddem
4e4cb34b22
chg: [metaTemplates] Removed comment
2022-02-21 15:42:23 +01:00
Sami Mokaddem
7ea5acb167
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-02-21 11:17:05 +01:00
iglocska
3745739158
chg: [flood protection] Changed the description of the setting based on the used IP source
...
- added a warning about the IP source setting affecting the efficacy of the flood protection in regards to an attacker being potentially able to spoof their IP
- Warn the admin to make sure that the reverse proxy used (the main reason to use the alternate headers in the first place) needs to be configured to correctly overwrite the header
- as reported by Dawid Czarnecki of Zigrin Security
2022-02-19 01:42:24 +01:00
iglocska
283299bf36
fix: [security] flood protection control enabled by default
...
- as reported by Dawid Czarnecki from Zigrin Security
2022-02-19 01:34:07 +01:00
iglocska
2da9d8f7d2
new: [keycloak] log enrollment outcome in the audit log
2022-02-18 11:47:33 +01:00
Sami Mokaddem
20907a45da
chg: [organisation] Removed useless class variable
2022-02-09 15:41:58 +01:00
Sami Mokaddem
d8807cce92
chg: [behavior:meta-fields] Renamed finder function
2022-02-09 15:18:24 +01:00
Sami Mokaddem
a77e29fa38
new: [layout:sidebar] Notifications in the sidebar
2022-02-08 17:58:30 +01:00
Sami Mokaddem
62ca877f0b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-02-08 08:42:25 +01:00
Sami Mokaddem
ad3e89199b
chg: [settingTable] Added value validation before saving the setting
2022-02-07 12:01:07 +01:00
Sami Mokaddem
336dfb091c
chg: [settingTable] Gracefully handle if file not writeable
2022-02-07 11:11:25 +01:00
Sami Mokaddem
14ec995c2b
fix: [userSettings] Perform URI validation for bookmarks
...
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 10:48:55 +01:00
iglocska
d45a4dc499
new: [registration] added optional registration flood protection
...
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 02:03:41 +01:00
iglocska
e6643365d2
new: [flood protection] behaviour added
...
simple expiration system to allow flood protections to be added to any functionality
2022-02-07 02:01:59 +01:00
iglocska
5fbd53883f
fix: [sync] created field rules added
...
- should stop issues of SG/Individual downloads from remote brood
2022-01-31 09:35:33 +01:00
iglocska
c983c6f130
fix: [Keycloak baseurl] remove trailing slashes
2022-01-27 20:59:58 +01:00