 Akhil Mohan
|
7c698e755a
|
feat(rbac): added frontend permission validation for missing pages and merged new features
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
520a553ea1
|
feat(rbac): implemented project based permission loading and role management
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
aac3168c80
|
feat(rbac): implemented granular blocking of actions based on permissions on org level ui
|
2023-09-08 21:21:43 +05:30 |
|
|
Akhil Mohan
|
1167b1bc60
|
feat(rbac): ui components and hooks for rbac
|
2023-09-08 21:20:29 +05:30 |
|
|
Tuan Dang
|
e770bdde24
|
Update low entropy password error message
|
2023-08-30 21:27:31 +01:00 |
|
|
Tuan Dang
|
2ba6a65da4
|
Change order of password check
|
2023-08-28 11:43:40 +01:00 |
|
|
BlackMagiq
|
76cf79d201
|
Merge pull request #885 from ragnarbull/ragnarbull-auth-pwd-fixes
Password fixes - enforce max length, add checks (pwd breach, PII, low entropy), improved UX, deprecate common-passwords api
|
2023-08-28 11:33:57 +01:00 |
|
|
Tuan Dang
|
a79c6227b1
|
Fix frontend lint issues
|
2023-08-28 11:25:50 +01:00 |
|
|
Tuan Dang
|
f1f64e6ff5
|
Fix flaky regex g flag causing unexpected validation password validation issue
|
2023-08-28 11:08:00 +01:00 |
|
|
Joel Biddle
|
a99751eb72
|
Moved pwd checks into a subfolder
|
2023-08-25 12:36:53 +10:00 |
|
|
Akhil Mohan
|
fccec083a9
|
fix(multi-line): resolved breaking ui when secret value contains < or >
|
2023-08-24 23:07:58 +05:30 |
|
|
Joel Biddle
|
4d6a8f0476
|
Fixed form (error messages too long). Consolidated tests & errors. Moved regexes to another file. Added regex to check for PII & reject pwd if true. Confirmed hashing & encryption/decryption works with top 50 languages, emojis etc (screen videos & unit tests to come).
|
2023-08-25 01:44:02 +10:00 |
|
|
Joel Biddle
|
14fc78eaaf
|
Switched to crypto.subtle, cleaned up code, added types & properly cleared sensitive data from memory (even if error)
|
2023-08-24 14:01:26 +10:00 |
|
|
Joel Biddle
|
368855a44e
|
>>> yup for email & url validation, fixed minor err in error msgs
|
2023-08-24 12:59:24 +10:00 |
|
|
Ebezer Igbinoba
|
ac66834daa
|
chore: fixed error with typings
|
2023-08-23 16:36:48 +01:00 |
|
|
Joel Biddle
|
7ec00475c6
|
+maxRetryAttempts, padding & safer error handling. Improved readability & comments.
|
2023-08-23 12:59:00 +10:00 |
|
|
Joel Biddle
|
25fc508d5e
|
Fixed spelling
|
2023-08-23 02:56:03 +10:00 |
|
|
Joel Biddle
|
ea262da505
|
Added check that password is not an email address
|
2023-08-23 02:14:22 +10:00 |
|
|
Joel Biddle
|
2960f86647
|
Fix comments explaining "international" password requirements
|
2023-08-23 01:41:37 +10:00 |
|
|
Joel Biddle
|
b2888272f2
|
Added password criterion support for multiple languages and emojis
|
2023-08-23 01:27:30 +10:00 |
|
|
Joel Biddle
|
e5c87442e5
|
Changed to use ES2018 rather than load scripts
|
2023-08-23 01:04:52 +10:00 |
|
|
Joel Biddle
|
be08417c8b
|
internationalize password requirements
|
2023-08-23 00:48:45 +10:00 |
|
|
Joel Biddle
|
61e44e152c
|
optimised import
|
2023-08-22 23:47:33 +10:00 |
|
|
Joel Biddle
|
52c4f64655
|
Removed log and fixed comments
|
2023-08-22 23:36:24 +10:00 |
|
|
Joel Biddle
|
3e36adcf5c
|
Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria.
|
2023-08-22 23:30:24 +10:00 |
|
|
Joel Biddle
|
1f60a3d73e
|
fixed more error handling for password checks & translations
|
2023-08-22 22:42:02 +10:00 |
|
|
Joel Biddle
|
026ea29847
|
further fixes to password check logic
|
2023-08-22 20:42:07 +10:00 |
|
|
Joel Biddle
|
1242d88acb
|
Fixed breached pwd error messages
|
2023-08-22 20:20:54 +10:00 |
|
|
Joel Biddle
|
0b359cd797
|
Made breached pwd API comments clearer
|
2023-08-22 19:45:35 +10:00 |
|
|
Joel Biddle
|
c5ae402787
|
Added comments to explain breach passwords API
|
2023-08-22 18:14:03 +10:00 |
|
|
Joel Biddle
|
196beb8355
|
removed logs & added pwndpasswords.com api to CSP
|
2023-08-22 17:50:43 +10:00 |
|
|
Joel Biddle
|
d6222d5cee
|
attempt to fix crypto.subtle issue
|
2023-08-22 17:33:35 +10:00 |
|
|
Joel Biddle
|
e855d4a0ba
|
added types for crypto
|
2023-08-22 17:26:00 +10:00 |
|
|
Joel Biddle
|
20f34b4764
|
removed async in crypto.subtle
|
2023-08-22 17:14:18 +10:00 |
|
|
Joel Biddle
|
0eb21919fb
|
Password breach check
|
2023-08-22 16:49:17 +10:00 |
|
|
Ebezer Igbinoba
|
9a1b453c86
|
Feat: added tag color widgt and changed tag popover design
|
2023-08-22 05:12:23 +01:00 |
|
|
Joel Biddle
|
534d96ffb6
|
Set max password length (100 chars) to help prevent DDOS attack
|
2023-08-22 14:05:00 +10:00 |
|
|
Ebezer Igbinoba
|
66ea3ba172
|
feat: added custom design for tags
|
2023-08-20 10:02:40 +01:00 |
|
|
Vladyslav Matsiiako
|
ab72eb1178
|
added scrollbar to modal
|
2023-08-17 14:03:56 -07:00 |
|
|
Tuan Dang
|
69605a1a54
|
Fast forward
|
2023-08-11 12:46:30 +07:00 |
|
|
Tuan Dang
|
a4edf6bd0c
|
Remove remaining SecurityClient auth calls in favor of hooks, keep RouteGuard
|
2023-08-11 11:27:33 +07:00 |
|
|
Tuan Dang
|
2dba7847b6
|
Convert all SecurityClient API calls to hooks except auth
|
2023-08-10 17:19:23 +07:00 |
|
|
Tuan Dang
|
9963724a6a
|
Continue removing unused frontend components/logic, improve querying in select pages
|
2023-08-10 12:18:17 +07:00 |
|
|
Tuan Dang
|
b47f61f1ad
|
Delete more deprecated frontend calls
|
2023-08-09 17:55:57 +07:00 |
|
|
Tuan Dang
|
2a1665a2c3
|
Begin marking endpoints for deprecation, clean unused frontend code
|
2023-08-09 16:45:52 +07:00 |
|
|
Vladyslav Matsiiako
|
ff6e07bdcf
|
minor style changes
|
2023-08-08 11:03:28 -04:00 |
|
|
Tuan Dang
|
6cb8cf53f8
|
Add date filter and pagination component to audit log v2
|
2023-08-08 12:52:34 +07:00 |
|
|
Akhil Mohan
|
be86e4176c
|
feat(ui): added datepicker component
|
2023-08-07 16:22:15 +05:30 |
|
|
Akhil Mohan
|
2067c021ed
|
feat(ui): added pagination component
|
2023-08-07 16:21:51 +05:30 |
|
|
Sheen Capadngan
|
5604232aea
|
added user controller and modified auth method page
|
2023-08-06 19:09:38 +08:00 |
|