 Akhil Mohan
|
c3ca992777
|
feat(onboarding): added backup key generation for admin account
|
2023-11-12 23:30:41 +05:30 |
|
|
Akhil Mohan
|
29fa85e499
|
feat(onboarding): frontend for onboarding users
|
2023-11-10 13:12:58 +05:30 |
|
|
Maidul Islam
|
fb7c7045e9
|
set telemetry post frontend build in standalone docker img
|
2023-10-17 12:22:08 +01:00 |
|
|
Tuan Dang
|
9fcecc9c92
|
Finish preliminary delete user, organization, refactor delete project, create org page
|
2023-10-09 07:47:20 +01:00 |
|
|
Serion Jeon
|
444aca0070
|
fix hyphen env variable import bug
|
2023-09-15 14:52:30 +01:00 |
|
|
Tuan Dang
|
e770bdde24
|
Update low entropy password error message
|
2023-08-30 21:27:31 +01:00 |
|
|
BlackMagiq
|
76cf79d201
|
Merge pull request #885 from ragnarbull/ragnarbull-auth-pwd-fixes
Password fixes - enforce max length, add checks (pwd breach, PII, low entropy), improved UX, deprecate common-passwords api
|
2023-08-28 11:33:57 +01:00 |
|
|
Tuan Dang
|
a79c6227b1
|
Fix frontend lint issues
|
2023-08-28 11:25:50 +01:00 |
|
|
Tuan Dang
|
f1f64e6ff5
|
Fix flaky regex g flag causing unexpected validation password validation issue
|
2023-08-28 11:08:00 +01:00 |
|
|
Joel Biddle
|
a99751eb72
|
Moved pwd checks into a subfolder
|
2023-08-25 12:36:53 +10:00 |
|
|
Joel Biddle
|
4d6a8f0476
|
Fixed form (error messages too long). Consolidated tests & errors. Moved regexes to another file. Added regex to check for PII & reject pwd if true. Confirmed hashing & encryption/decryption works with top 50 languages, emojis etc (screen videos & unit tests to come).
|
2023-08-25 01:44:02 +10:00 |
|
|
Joel Biddle
|
14fc78eaaf
|
Switched to crypto.subtle, cleaned up code, added types & properly cleared sensitive data from memory (even if error)
|
2023-08-24 14:01:26 +10:00 |
|
|
Joel Biddle
|
368855a44e
|
>>> yup for email & url validation, fixed minor err in error msgs
|
2023-08-24 12:59:24 +10:00 |
|
|
Joel Biddle
|
7ec00475c6
|
+maxRetryAttempts, padding & safer error handling. Improved readability & comments.
|
2023-08-23 12:59:00 +10:00 |
|
|
Joel Biddle
|
25fc508d5e
|
Fixed spelling
|
2023-08-23 02:56:03 +10:00 |
|
|
Joel Biddle
|
ea262da505
|
Added check that password is not an email address
|
2023-08-23 02:14:22 +10:00 |
|
|
Joel Biddle
|
2960f86647
|
Fix comments explaining "international" password requirements
|
2023-08-23 01:41:37 +10:00 |
|
|
Joel Biddle
|
b2888272f2
|
Added password criterion support for multiple languages and emojis
|
2023-08-23 01:27:30 +10:00 |
|
|
Joel Biddle
|
e5c87442e5
|
Changed to use ES2018 rather than load scripts
|
2023-08-23 01:04:52 +10:00 |
|
|
Joel Biddle
|
be08417c8b
|
internationalize password requirements
|
2023-08-23 00:48:45 +10:00 |
|
|
Joel Biddle
|
61e44e152c
|
optimised import
|
2023-08-22 23:47:33 +10:00 |
|
|
Joel Biddle
|
52c4f64655
|
Removed log and fixed comments
|
2023-08-22 23:36:24 +10:00 |
|
|
Joel Biddle
|
3e36adcf5c
|
Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria.
|
2023-08-22 23:30:24 +10:00 |
|
|
Joel Biddle
|
1f60a3d73e
|
fixed more error handling for password checks & translations
|
2023-08-22 22:42:02 +10:00 |
|
|
Joel Biddle
|
026ea29847
|
further fixes to password check logic
|
2023-08-22 20:42:07 +10:00 |
|
|
Joel Biddle
|
1242d88acb
|
Fixed breached pwd error messages
|
2023-08-22 20:20:54 +10:00 |
|
|
Joel Biddle
|
0b359cd797
|
Made breached pwd API comments clearer
|
2023-08-22 19:45:35 +10:00 |
|
|
Joel Biddle
|
c5ae402787
|
Added comments to explain breach passwords API
|
2023-08-22 18:14:03 +10:00 |
|
|
Joel Biddle
|
196beb8355
|
removed logs & added pwndpasswords.com api to CSP
|
2023-08-22 17:50:43 +10:00 |
|
|
Joel Biddle
|
d6222d5cee
|
attempt to fix crypto.subtle issue
|
2023-08-22 17:33:35 +10:00 |
|
|
Joel Biddle
|
e855d4a0ba
|
added types for crypto
|
2023-08-22 17:26:00 +10:00 |
|
|
Joel Biddle
|
20f34b4764
|
removed async in crypto.subtle
|
2023-08-22 17:14:18 +10:00 |
|
|
Joel Biddle
|
0eb21919fb
|
Password breach check
|
2023-08-22 16:49:17 +10:00 |
|
|
Ebezer Igbinoba
|
9a1b453c86
|
Feat: added tag color widgt and changed tag popover design
|
2023-08-22 05:12:23 +01:00 |
|
|
Joel Biddle
|
534d96ffb6
|
Set max password length (100 chars) to help prevent DDOS attack
|
2023-08-22 14:05:00 +10:00 |
|
|
Tuan Dang
|
a4edf6bd0c
|
Remove remaining SecurityClient auth calls in favor of hooks, keep RouteGuard
|
2023-08-11 11:27:33 +07:00 |
|
|
Tuan Dang
|
2dba7847b6
|
Convert all SecurityClient API calls to hooks except auth
|
2023-08-10 17:19:23 +07:00 |
|
|
Tuan Dang
|
b47f61f1ad
|
Delete more deprecated frontend calls
|
2023-08-09 17:55:57 +07:00 |
|
|
Tuan Dang
|
2a1665a2c3
|
Begin marking endpoints for deprecation, clean unused frontend code
|
2023-08-09 16:45:52 +07:00 |
|
|
Tuan Dang
|
b78150e78d
|
Updated membership logic for SAML auth
|
2023-07-31 17:36:42 +07:00 |
|
|
Vladyslav Matsiiako
|
5ab218f1f8
|
fixed parsing .env with :
|
2023-07-27 19:40:39 -07:00 |
|
|
Vladyslav Matsiiako
|
bdf4ebd1bc
|
second iteration of the new sidebar
|
2023-07-09 23:58:27 -07:00 |
|
|
Tuan Dang
|
056f5a4555
|
Finish preliminary making user settings, org settings styling similar to usage and billing page
|
2023-06-29 17:47:23 +07:00 |
|
|
Vladyslav Matsiiako
|
12d0916625
|
casting to date
|
2023-06-22 16:25:21 -07:00 |
|
|
Vladyslav Matsiiako
|
e0976d6bd6
|
added ? to getTime
|
2023-06-22 16:16:46 -07:00 |
|
|
Vladyslav Matsiiako
|
a31f364361
|
converted date to unix
|
2023-06-22 16:10:54 -07:00 |
|
|
Vladyslav Matsiiako
|
8efa17928c
|
intercom date fix
|
2023-06-22 15:57:20 -07:00 |
|
|
Vladyslav Matsiiako
|
48bfdd500d
|
date format intercom
|
2023-06-22 15:30:21 -07:00 |
|
|
Vladyslav Matsiiako
|
4621122cfb
|
added created timestamp to intercom
|
2023-06-22 15:17:11 -07:00 |
|
|
Vladyslav Matsiiako
|
62fb048cce
|
intercom debugging
|
2023-06-22 15:09:02 -07:00 |
|