snipe
109a29b5fc
Fix error in tests
2019-03-20 04:39:50 -07:00
snipe
acb90c7aee
Horrible master -> dev merge that makes baby jesus cry :(
...
# Conflicts:
# app/Http/Controllers/Auth/LoginController.php
# composer.json
# composer.lock
# resources/views/auth/two_factor_enroll.blade.php
2019-03-20 02:24:23 -07:00
snipe
bca82684a1
Merge branch 'hotfixes/2fa_qr' into develop
...
# Conflicts:
# .all-contributorsrc
# Dockerfile
# README.md
# app/Console/Commands/LdapSync.php
# app/Http/Controllers/Api/ImportController.php
# app/Http/Controllers/AssetModelsController.php
# app/Http/Controllers/Assets/AssetsController.php
# app/Http/Controllers/Auth/LoginController.php
# app/Http/Controllers/CategoriesController.php
# app/Http/Controllers/CompaniesController.php
# app/Http/Controllers/DepartmentsController.php
# app/Http/Controllers/ImportsController.php
# app/Http/Controllers/LocationsController.php
# app/Http/Controllers/ManufacturersController.php
# app/Http/Controllers/SuppliersController.php
# app/Http/Requests/ItemImportRequest.php
# app/Http/Transformers/ActionlogsTransformer.php
# composer.json
# composer.lock
# config/app.php
# config/version.php
# docker/startup.sh
# public/css/build/all.css
# public/css/dist/all.css
# public/js/build/all.js
# public/js/build/vue.js
# public/js/build/vue.js.map
# public/js/dist/all.js
# public/mix-manifest.json
2019-03-20 02:17:02 -07:00
snipe
da015ec4a8
Fixed #6834 and #6402 - use inline QR code generation for 2FA ( #6840 )
...
* Fixed #6834 and #6402 - use inline QR code generation for
* Update auth controllers to use translations
* Updated composer lock
* Added comments
* Moar comments
* Typo
2019-03-20 01:24:31 -07:00
snipe
335e8ffaaa
Typo
2019-03-20 01:22:20 -07:00
snipe
8d0ee9e531
Moar comments
2019-03-20 01:21:34 -07:00
snipe
cc5c7d33e7
Added comments
2019-03-20 01:14:58 -07:00
snipe
5699e021de
Update auth controllers to use translations
2019-03-20 00:50:09 -07:00
snipe
cf92618c70
Fixed #6834 and #6402 - use inline QR code generation for
2019-03-20 00:49:44 -07:00
snipe
a874dbb0d0
Working attempt, but will try with old library for mininal footprint
2019-03-19 23:18:16 -07:00
Martin Meredith
e3e0d57f56
Minor code cleanup bits and bobs ( #6805 )
...
* Add IDE Helper files
* Cleanup imports
- Alphabetises imports
- Removes unused imports
* Add Platform requirements
* Move filling asset into block where asset exists
* Remove duplicate array keys
2019-03-13 20:12:03 -07:00
snipe
533649f24e
Merge branch 'develop' into dev-master-integration
...
# Conflicts:
# .gitignore
# .travis.yml
# app/Console/Commands/LdapSync.php
# app/Console/Commands/SendExpectedCheckinAlerts.php
# app/Console/Commands/SendExpirationAlerts.php
# app/Console/Commands/SendInventoryAlerts.php
# app/Console/Kernel.php
# app/Http/Controllers/Api/AssetsController.php
# app/Http/Controllers/Api/ManufacturersController.php
# app/Http/Controllers/Api/StatuslabelsController.php
# app/Http/Controllers/Api/UsersController.php
# app/Http/Controllers/AssetMaintenancesController.php
# app/Http/Controllers/Assets/AssetsController.php
# app/Http/Controllers/Auth/ForgotPasswordController.php
# app/Http/Controllers/Auth/LoginController.php
# app/Http/Controllers/Auth/ResetPasswordController.php
# app/Http/Controllers/ReportsController.php
# app/Http/Controllers/SettingsController.php
# app/Http/Controllers/UsersController.php
# app/Http/Transformers/AssetMaintenancesTransformer.php
# app/Importer/Importer.php
# app/Importer/ItemImporter.php
# app/Importer/UserImporter.php
# app/Importer/import_mappings.md
# app/Models/Ldap.php
# app/Models/License.php
# app/Models/Location.php
# app/Models/Recipients/AlertRecipient.php
# app/Models/User.php
# app/Providers/AppServiceProvider.php
# composer.json
# composer.lock
# config/trustedproxy.php
# config/version.php
# public/js/build/all.js
# public/js/build/vue.js
# public/js/build/vue.js.map
# public/js/dist/all.js
# public/mix-manifest.json
# resources/assets/js/components/importer/importer-file.vue
# resources/lang/ar/admin/settings/general.php
# resources/lang/bg/admin/settings/general.php
# resources/lang/en-ID/admin/settings/general.php
# resources/lang/en-ID/passwords.php
# resources/lang/en/passwords.php
# resources/lang/es-CO/passwords.php
# resources/lang/es-ES/passwords.php
# resources/lang/es-MX/passwords.php
# resources/lang/es-VE/passwords.php
# resources/lang/fi/admin/settings/general.php
# resources/lang/id/admin/settings/general.php
# resources/lang/id/passwords.php
# resources/lang/ja/passwords.php
# resources/lang/nl/passwords.php
# resources/lang/pl/admin/settings/general.php
# resources/lang/pl/passwords.php
# resources/lang/pt-BR/admin/settings/general.php
# resources/lang/pt-BR/passwords.php
# resources/lang/ru/admin/settings/general.php
# resources/lang/ru/admin/statuslabels/table.php
# resources/lang/ru/passwords.php
# resources/lang/sr-CS/general.php
# resources/lang/sr-CS/mail.php
# resources/lang/sv-SE/admin/settings/general.php
# resources/lang/tr/admin/settings/general.php
# resources/lang/tr/passwords.php
# resources/lang/vi/admin/models/message.php
# resources/lang/vi/admin/users/general.php
# resources/lang/zh-CN/admin/settings/general.php
# resources/views/importer/import.blade.php
# resources/views/partials/bootstrap-table.blade.php
# resources/views/partials/forms/edit/image-upload.blade.php
# resources/views/users/edit.blade.php
# resources/views/users/view.blade.php
# tests/unit/ImporterTest.php
2019-02-13 06:42:52 -08:00
snipe
b293d00699
Switch LDAP error to debug, to avoid crapping up the logs
2019-01-17 20:18:03 -08:00
Steffen
1de9087427
LDAP fixes ( #6533 )
...
* Add iCheck png files to webpack config (inconsistency for css <> png) and blue.png to public folder
* php 7.3 collect() fix (undefined variable)
* Fix travis ci
* Add iCheck png files to webpack config (inconsistency for css <> png) and blue.png to public folder
* php 7.3 collect() fix (undefined variable)
* change LDAP implementation from model to (singleton) service
* Re-apply check for content in ldap_server variable before parsing
* Update LDAP implementation
* Switch iCheck to minimal as referenced in js
* Don't init on load but on first access via init (returns ldap enabled status)
* Re-Enable notifications
* Re-add missing test target php versions
* Only init() once (singleton class, so ldap variable is already set)
2019-01-10 13:20:43 -08:00
Wes Hulette
34246ee4ef
[WIP] v5 Develop: New LDAP implementation ( #6352 )
...
* Fixed missing oauth tables during setup.
* WIP New LDAP implementation
* WIP New LDAP implementation
* WIP New LDAP implementation
Merge remote-tracking branch 'origin/WIP_LDAP' into WIP_LDAP
* WIP New LDAP implementation
Added Adldap2 to handle ldap intergration.
* Updated per PR quality review
* Added specific LDAP settings method
* Corrected version number
* Added return documentation
* Added imports
* Changed class to be injected into controller
* Updated with PR suggestions
2018-12-06 14:05:43 -08:00
snipe
ea91d59ffc
Use username instead of email address in password reset ( #6382 )
...
* Switch to use username instead of email
* Fixed indenting
* Updated password language
* Updated blades to reflect username instead of email
* Changed password/reset controllers to use username instead of email
* Redirect to login page instead of repeating the password reset form
2018-10-31 18:03:24 -07:00
snipe
55846cc717
Changed LOG:: to Log::
2018-09-26 19:06:31 -07:00
snipe
db907815ff
Removed check for active in password reset form
2018-08-21 18:40:27 -07:00
snipe
aed769c0be
Honor active status for forgotten password request forms
2018-08-14 20:05:57 -07:00
snipe
ae6abdddad
Check the user is active before displaying password reset
...
This would only come into play if an inactive user already received a password reset email and then the system was upgraded to prevent those emails from being sent to inactive users
2018-08-14 19:04:47 -07:00
snipe
05b2b8fb59
Tweaked code/language for password reset
2018-08-14 18:09:33 -07:00
snipe
25097bce31
Only allow activated users to reset their password
2018-08-14 18:04:27 -07:00
snipe
0100c56046
Only allow password reset if user is active
2018-08-14 17:46:29 -07:00
snipe
7bb50a61a7
Applying @dmeltzer’s changes from afc8ac5e72
2018-07-24 21:13:02 -07:00
snipe
d45e90e358
One more fix for #5893
2018-07-19 14:45:28 -07:00
snipe
a0c0b7b1eb
Fixed #5893 - activated typo
2018-07-19 10:22:08 -07:00
snipe
bcd988bb81
Merge branch 'develop' of https://github.com/DeusMaximus/snipe-it into develop
...
# Conflicts:
# app/Http/Controllers/Auth/LoginController.php
2018-07-17 01:11:15 -07:00
snipe
bf761946da
Fix activated check for login
2018-07-16 23:48:46 -07:00
DeusMaximus
7c2da81700
Fix REMOTE_USER Header with IIS and AD
...
Remove DOMAIN\ portion of DOMAIN\user when using Windows Authentication and IIS with REMOTE_USER.
2018-07-17 14:03:19 +10:00
David Kaatz
a43b31400f
Authentication via REMOTE_USER ( #5142 )
...
* Added authentication via Remote User
* - Removed nullable from remote_user settings fileds and used just default values instead
- Removed german translations
- Removed 401 error page and replaced usage with 403 error page as 401 was actual a duplicate of 403
- Replaced usage of $_SERVER['REMOTE_USER'] with Laravels API Request::server('REMOVE_USER')
* - Fixed request usage
2018-03-13 20:07:52 -07:00
snipe
d2e2c1c05f
Stub and 404 registration routes
2017-12-19 22:14:51 -08:00
snipe
8a7abba427
Slash url
2017-10-02 17:21:18 -07:00
snipe
9df648b428
Fix Session path
2017-10-02 17:19:22 -07:00
snipe
59225701b5
Redirect to previous after login
2017-10-02 16:00:42 -07:00
snipe
fc96fa756e
Fix redirect default on password reset
2017-09-27 16:23:21 -07:00
snipe
ea9a502152
Added empty regsitration controller
...
When using the default Laravel auth routes, it expects a registration controller, even though we don’t have a concept of registration. This blank controller just prevents route caching from throwing errors.
2017-09-27 16:23:01 -07:00
snipe
14f3868b46
Update all controllers to use laravel 5 return view method
2017-06-09 16:44:03 -07:00
snipe
51fccbdda4
Added last login to user menu
2017-03-03 18:28:13 -08:00
snipe
d19cc9d9c1
Added legacy redirector
2017-02-02 18:14:25 -08:00
snipe
d9d048f90d
Fixed #2303 - redirect correctly after login
2017-01-12 07:09:44 -08:00
snipe
51ceaedfaf
Small phpcbf cleanup
2016-12-29 14:02:18 -08:00
snipe
0cf5ad120b
Removed todo
2016-12-22 21:09:01 -08:00
snipe
68ac4abe2c
Updated throttling override for 5.3
2016-12-14 06:30:51 -08:00
snipe
433adb1dcb
Updated traits and method names for 5.3
2016-12-14 05:06:51 -08:00
snipe
5cd7e84d98
Renamed Password controllers to new 5.3 versions
2016-12-14 05:06:15 -08:00
snipe
65db55908a
Rename to AuthController to LoginController
2016-12-14 04:30:56 -08:00
snipe
7ccef51a4f
Removed some dumb comments
2016-12-01 02:25:53 -08:00
snipe
4c418bf622
Remove unused $request variable
2016-12-01 02:13:00 -08:00
snipe
16cfdbaa93
Redirect the lost password success back to login
2016-12-01 02:04:43 -08:00
snipe
3f8f6ad981
Fixes #2995 - adds max login attempts/duration as .env option
2016-12-01 02:04:15 -08:00
snipe
68b9ffb908
Only allow login via LDAP if the user was already imported or created via LDAP
2016-12-01 00:29:45 -08:00
snipe
6c366eb112
Fixes potential login issue if password syncing is set to true
2016-11-30 20:39:43 -08:00
snipe
b854689d3d
Urlencode username in case it has spaces
2016-11-11 20:09:22 -08:00
snipe
4747a4c03f
Added urlencode to site name
2016-10-31 22:34:57 -07:00
Frank
10ea5daabd
Harden PragmaRX secret to 32 bytes ( #2859 )
...
This is needed at all but that extra security is always good.
2016-10-31 11:20:31 -07:00
snipe
cea255995c
Fixes #106 - adds Google Authenticator support ( #2842 )
...
* refactor to clean up LDAP login, and make the login method easier to handle.
* Login refactor cleanup
* Google 2FA package
* Adds Google Authenticator two-factor
* Removed unused blade
* Added optin setting in profile
* Removed dumb comments
* Made lock_passwords check more consistent
* Additional two factor strings
* Lock passwords check
* Display feature disabled text if in demo mode
* Two factor admin reset options
* Translation strings
2016-10-29 05:50:55 -07:00
Andrés Núñez
40f00665b3
Translate emails ( #2652 )
...
* commit temporal
* final translation commit -- added email translations
* final translation commit -- removed file for spanish translations
* final translation commit -- removed file for spanish translations
* added missing translations
* method overrided and config files back to default
* config files back to default
* config files back to default
2016-09-26 14:13:07 -07:00
snipe
1d3255a00b
Allow admin to turn LDAP password sync off.
...
This is added to handle customers/users with a security policy that prohibits third-parties or external databases from storing LDAP passwords.
2016-08-04 14:29:28 -07:00
snipe
92175eb700
Few more LDAP/AD tweaks
2016-07-14 23:49:32 -07:00
snipe
4233c781ac
Reworked LDAP login. Fixes #2218
...
LDAP no longer fails completely when the connection settings are wrong, or when app key is messed up. Rather than auth as the admin user and search, we auth as the user themselves. Admin auth is only for LDAP sync now.
This should mean much fewer problems with donked LDAP settings and login.
2016-07-13 05:50:24 -07:00
snipe
c8351ae01b
Reverting back to or die
2016-07-11 18:25:29 -07:00
snipe
4e38f96f97
Switched or and and to || and && for code quality
2016-07-10 20:55:44 -07:00
snipe
a9f060e768
Removed extraneous comments
2016-07-09 18:19:19 -07:00
snipe
ba01b20ad4
Use updated redirect() reference
2016-04-28 21:06:41 -07:00
snipe
a62859dc6d
Updated docblocks
2016-04-07 13:21:09 -07:00
snipe
90d4a8b2e3
Cleanup namespaces a bit
2016-03-25 19:26:22 -07:00
snipe
fe00b0e401
Version 3 - hold onto your butts
2016-03-25 01:18:05 -07:00