 nafees nazik
|
3be3867579
|
fix: font size
|
2023-09-20 17:05:57 +05:30 |
|
|
nafees nazik
|
7f753b23f8
|
fix: secret input
|
2023-09-20 17:05:57 +05:30 |
|
|
nafees nazik
|
6f57ef03d1
|
feat: add alert component
|
2023-09-19 17:24:33 +05:30 |
|
|
vmatsiiako
|
9cc220e51f
|
Merge branch 'main' into update-use-secret-path-across-app
|
2023-09-18 21:31:34 -07:00 |
|
|
vmatsiiako
|
717b831e94
|
Merge pull request #992 from serin0837/parse-env-file
fix hyphen env variable import bug
|
2023-09-15 11:45:36 -07:00 |
|
|
Serion Jeon
|
444aca0070
|
fix hyphen env variable import bug
|
2023-09-15 14:52:30 +01:00 |
|
|
JanetEne
|
1c5e80e68a
|
update file naming
|
2023-09-14 02:33:08 +01:00 |
|
|
JanetEne
|
2554ad2b3c
|
update and use secret path examples where applicable across app
|
2023-09-14 01:51:05 +01:00 |
|
|
vmatsiiako
|
4ce0eccfa1
|
Merge pull request #959 from JanetEne/helper-text-for-secret-path
Add helper text and tooltip for secret path
|
2023-09-09 18:17:24 -07:00 |
|
|
Vladyslav Matsiiako
|
ad710f4860
|
fixed the style of the webhook tooltip
|
2023-09-09 18:10:02 -07:00 |
|
|
JanetEne
|
dc91615b43
|
add helper text and tooltip for secret path
|
2023-09-09 04:06:16 +01:00 |
|
|
Vladyslav Matsiiako
|
110153385b
|
permissioning style update
|
2023-09-08 20:05:02 -07:00 |
|
|
Maidul Islam
|
0f46f53a7d
|
update denied text
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
a4ef829046
|
feat(rbac): added glob support in permission and revealed settings
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
98893a40f1
|
feat(rbac): made changes from testing with maidul
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
7c698e755a
|
feat(rbac): added frontend permission validation for missing pages and merged new features
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
520a553ea1
|
feat(rbac): implemented project based permission loading and role management
|
2023-09-08 21:22:36 +05:30 |
|
|
Akhil Mohan
|
aac3168c80
|
feat(rbac): implemented granular blocking of actions based on permissions on org level ui
|
2023-09-08 21:21:43 +05:30 |
|
|
Akhil Mohan
|
1167b1bc60
|
feat(rbac): ui components and hooks for rbac
|
2023-09-08 21:20:29 +05:30 |
|
|
Tuan Dang
|
e770bdde24
|
Update low entropy password error message
|
2023-08-30 21:27:31 +01:00 |
|
|
Tuan Dang
|
2ba6a65da4
|
Change order of password check
|
2023-08-28 11:43:40 +01:00 |
|
|
BlackMagiq
|
76cf79d201
|
Merge pull request #885 from ragnarbull/ragnarbull-auth-pwd-fixes
Password fixes - enforce max length, add checks (pwd breach, PII, low entropy), improved UX, deprecate common-passwords api
|
2023-08-28 11:33:57 +01:00 |
|
|
Tuan Dang
|
a79c6227b1
|
Fix frontend lint issues
|
2023-08-28 11:25:50 +01:00 |
|
|
Tuan Dang
|
f1f64e6ff5
|
Fix flaky regex g flag causing unexpected validation password validation issue
|
2023-08-28 11:08:00 +01:00 |
|
|
Joel Biddle
|
a99751eb72
|
Moved pwd checks into a subfolder
|
2023-08-25 12:36:53 +10:00 |
|
|
Akhil Mohan
|
fccec083a9
|
fix(multi-line): resolved breaking ui when secret value contains < or >
|
2023-08-24 23:07:58 +05:30 |
|
|
Joel Biddle
|
4d6a8f0476
|
Fixed form (error messages too long). Consolidated tests & errors. Moved regexes to another file. Added regex to check for PII & reject pwd if true. Confirmed hashing & encryption/decryption works with top 50 languages, emojis etc (screen videos & unit tests to come).
|
2023-08-25 01:44:02 +10:00 |
|
|
Joel Biddle
|
14fc78eaaf
|
Switched to crypto.subtle, cleaned up code, added types & properly cleared sensitive data from memory (even if error)
|
2023-08-24 14:01:26 +10:00 |
|
|
Joel Biddle
|
368855a44e
|
>>> yup for email & url validation, fixed minor err in error msgs
|
2023-08-24 12:59:24 +10:00 |
|
|
Ebezer Igbinoba
|
ac66834daa
|
chore: fixed error with typings
|
2023-08-23 16:36:48 +01:00 |
|
|
Joel Biddle
|
7ec00475c6
|
+maxRetryAttempts, padding & safer error handling. Improved readability & comments.
|
2023-08-23 12:59:00 +10:00 |
|
|
Joel Biddle
|
25fc508d5e
|
Fixed spelling
|
2023-08-23 02:56:03 +10:00 |
|
|
Joel Biddle
|
ea262da505
|
Added check that password is not an email address
|
2023-08-23 02:14:22 +10:00 |
|
|
Joel Biddle
|
2960f86647
|
Fix comments explaining "international" password requirements
|
2023-08-23 01:41:37 +10:00 |
|
|
Joel Biddle
|
b2888272f2
|
Added password criterion support for multiple languages and emojis
|
2023-08-23 01:27:30 +10:00 |
|
|
Joel Biddle
|
e5c87442e5
|
Changed to use ES2018 rather than load scripts
|
2023-08-23 01:04:52 +10:00 |
|
|
Joel Biddle
|
be08417c8b
|
internationalize password requirements
|
2023-08-23 00:48:45 +10:00 |
|
|
Joel Biddle
|
61e44e152c
|
optimised import
|
2023-08-22 23:47:33 +10:00 |
|
|
Joel Biddle
|
52c4f64655
|
Removed log and fixed comments
|
2023-08-22 23:36:24 +10:00 |
|
|
Joel Biddle
|
3e36adcf5c
|
Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria.
|
2023-08-22 23:30:24 +10:00 |
|
|
Joel Biddle
|
1f60a3d73e
|
fixed more error handling for password checks & translations
|
2023-08-22 22:42:02 +10:00 |
|
|
Joel Biddle
|
026ea29847
|
further fixes to password check logic
|
2023-08-22 20:42:07 +10:00 |
|
|
Joel Biddle
|
1242d88acb
|
Fixed breached pwd error messages
|
2023-08-22 20:20:54 +10:00 |
|
|
Joel Biddle
|
0b359cd797
|
Made breached pwd API comments clearer
|
2023-08-22 19:45:35 +10:00 |
|
|
Joel Biddle
|
c5ae402787
|
Added comments to explain breach passwords API
|
2023-08-22 18:14:03 +10:00 |
|
|
Joel Biddle
|
196beb8355
|
removed logs & added pwndpasswords.com api to CSP
|
2023-08-22 17:50:43 +10:00 |
|
|
Joel Biddle
|
d6222d5cee
|
attempt to fix crypto.subtle issue
|
2023-08-22 17:33:35 +10:00 |
|
|
Joel Biddle
|
e855d4a0ba
|
added types for crypto
|
2023-08-22 17:26:00 +10:00 |
|
|
Joel Biddle
|
20f34b4764
|
removed async in crypto.subtle
|
2023-08-22 17:14:18 +10:00 |
|
|
Joel Biddle
|
0eb21919fb
|
Password breach check
|
2023-08-22 16:49:17 +10:00 |
|