Vincent Salucci
66e44759f0
[Require SSO] Enterprise policy enforcement ( #970 )
...
* Initial commit of require sso authentication policy enforcement
* Updated sproc to send UseSso flag // Updated base validator to send back error message // Added changes to EntityFramework (just so its there for the future
* Update policy name // adjusted conditional to demorgan's
* Updated sproc // Added migrator script
* Added .sql file extension to DeleteOrgUserWithOrg migrator script
* Added policy // edit // strings // validation to business portal
* Change requests from review // Added Owner & Admin exemption
* Updated repository function used to get org user's type
* Updated with requested changes
2020-10-26 11:56:16 -05:00
Kyle Spearrin
0d0c6c7167
sso integrations ( #822 )
...
* stub out hybrid sso
* support for PKCE authorization_code clients
* sso service urls
* sso client key
* abstract request validator
* support for verifying password
* custom AuthorizationCodeStore that does not remove codes
* cleanup
* comment
* created master password
* ResetMasterPassword
* rename Sso client to OidcIdentity
* update env builder
* bitwarden sso project in docker-compose
* sso path in nginx config
2020-07-16 08:01:39 -04:00
Chad Scharf
9800b752c0
Changed all C# control flow block statements to include space between keyword and open paren
2020-03-27 14:36:37 -04:00
Kyle Spearrin
a5b809f477
update rolling file settings for LogRollBySizeLimit
2019-11-25 11:40:04 -05:00
Kyle Spearrin
2693ffeab0
include ip in log message. only for self host
2019-11-22 10:23:11 -05:00
Kyle Spearrin
d022517762
login failed log message
2019-11-22 07:30:32 -05:00
Kyle Spearrin
7d47dac65f
DisableEmailNewDevice
2019-04-01 08:28:36 -04:00
Kyle Spearrin
6c86996ab3
disable new device emails env variable.
2019-04-01 08:27:37 -04:00
Kyle Spearrin
b19628c6f8
new device logged in email notification
2019-01-24 22:37:49 -05:00
Kyle Spearrin
951e8f562e
email token provider
2018-12-19 22:27:45 -05:00
Kyle Spearrin
ac7c7b5077
move some 2fa logic functions to userService
2018-12-19 10:47:53 -05:00
Kyle Spearrin
d10d25afea
add null check
2018-10-13 16:06:54 -04:00
Kyle Spearrin
006cfffab3
new "Challenge" token for U2f
2018-10-10 17:51:38 -04:00
Kyle Spearrin
2562d5a40d
reference OrganizationMembership instead
2018-08-31 17:05:27 -04:00
Kyle Spearrin
c41a1e0936
CanAccessPremium checks instead of User.Premium
2018-08-28 16:23:58 -04:00
Kyle Spearrin
e350ef650a
dont cycle security token on re-hash
2018-04-17 08:10:17 -04:00
Kyle Spearrin
389512d51e
added org duo to 2fa flow
2018-04-03 14:31:33 -04:00
Kyle Spearrin
0662fc2163
log events to various organization indexes as well
2017-12-01 12:14:46 -05:00
Kyle Spearrin
d94c2a8f50
log user events
2017-12-01 10:07:14 -05:00
Kyle Spearrin
a9b9094b9c
refactored logic around remember me token
2017-08-15 08:19:20 -04:00
Kyle Spearrin
2492491f32
dont check if remember 2fa is enabled
2017-07-27 09:58:00 -04:00
Kyle Spearrin
295d6510a9
premium checks on 2fa providers
2017-07-06 16:56:12 -04:00
Kyle Spearrin
a1008353fd
added nfc flag for yubikey config
2017-06-29 12:34:10 -04:00
Kyle Spearrin
f4fa990cb1
send redacted email on 2fa login
2017-06-24 11:50:20 -04:00
Kyle Spearrin
59b8438a0f
update u2f lib. send 2fa login email
2017-06-24 09:20:12 -04:00
Kyle Spearrin
64189067cd
handle two factor remember failed case
2017-06-23 10:46:04 -04:00
Kyle Spearrin
15dcb43f44
remember two factor token
2017-06-23 10:08:53 -04:00
Kyle Spearrin
3ae96bd510
u2f token provider
2017-06-22 09:09:51 -04:00
Kyle Spearrin
fd5e2c9466
stubbing out api setup for u2f
2017-06-21 21:46:52 -04:00
Kyle Spearrin
2ce47edadf
two factor params on login
2017-06-21 12:13:18 -04:00
Kyle Spearrin
c13ba70ab4
verify all 2fa methods
2017-06-20 14:50:12 -04:00
Kyle Spearrin
314d591f36
Duo API and token provider
2017-06-12 21:23:02 -04:00
Kyle Spearrin
d8c0994ed3
remove deprecated jwt bearer authentication method
2017-06-06 23:19:42 -04:00
Kyle Spearrin
9abc16504b
typo
2017-05-31 10:11:12 -04:00
Kyle Spearrin
9ed677532c
add key to login response from identity
2017-05-31 10:10:08 -04:00
Kyle Spearrin
c95d39f563
notification hub push registration service
2017-05-26 00:50:27 -04:00
Kyle Spearrin
49bee6935a
move identityserver libs into core
2017-05-05 16:11:50 -04:00