147 Commits

Author SHA1 Message Date
0b6c5bef76 Merge branch 'main' into feat/692-webhooks 2024-02-12 10:04:28 +01:00
5238d1877f feat: extend third-party account linking
Introduce a per provider configuration option that allows users to
define whether automatic linking of accounts on sign-up/sign-in is enabled
or disabled.
2024-02-09 11:07:32 +01:00
a35725c69c Merge branch 'main' into fix/1027-improve-passkey-naming 2024-01-31 14:00:58 +01:00
0e5b5f7e35 Merge remote-tracking branch 'hanko/feat/692-webhooks' into feat/692-webhooks 2024-01-30 14:58:25 +01:00
e028af8e5b fix(webhook): check for user email count BEFORE adding a new email to user 2024-01-30 14:56:45 +01:00
38209aa1bd Merge branch 'main' into feat/692-webhooks 2024-01-30 11:36:44 +01:00
03bfef9d19 fix(email webhook): check if user already has an email
if user already has an email -> send EmailCreate Event
if user has no email -> send UserCreate Event
2024-01-30 11:18:59 +01:00
97ba5cff99 1030 - Refactor SMTP settings to be outside of passcode config (#1121)
* 1030 - Refactor SMTP settings to be outside of passcode config

* Backwards compatibility of SMTP settings

* Do not error if root smtp and passcode smtp are defined. Log warning instead

* Update warning message
2024-01-30 09:34:10 +01:00
097569ad8b chore(passkeys): change naming of aaguid map to authenticator metadata
Closes: #1027
2024-01-29 09:43:21 +01:00
fc55df9a8b fix(tests): fix missing constructor extension for aaguid map
Closes: #1027
2024-01-29 09:43:21 +01:00
ce7a6f1971 improve(passkeys): improve passkey naming
* add cmd flag for loading aaguid-map file
* add aaguid mapper for better passkey naming
* bundle aaguid file in docker container
* refactor file loading to reuse in multiple occasions

Closes: #1027
2024-01-29 09:43:21 +01:00
c9994bdc3a fix(review): fix review findings
* admin api: make email primary when user has no emails
* utils: move get updated user and webhook trigger to utils to reduce duplicated code
* events: remove unused user and email event - Check is replaced with string variant
* remove unused dtos
* fix tests after changes
* webhook tests: switch to test.Suite instead of TestPersister -> added deprecation annotation to test.NewPersister
* Email Verification: Fix trigger of webhook when email verification is enabled and a email is created but not validated

Closes: #692, #1051
2024-01-25 13:20:56 +01:00
85a5383f67 feat(admin api): add user update endpoints
* implement endpoint for adding an email
* implement endpoint for changing an email to primary
* implement endpoint for removing an email
* fix some bugs and oversights in webhooks
* update config json schema
* update OpenAPI file for admin API

Closes #1051
Fixes #692
2024-01-19 14:35:08 +01:00
917e66660c fix(webhooks): add removed ID to CreateUserResponse
Closes #692
2024-01-17 15:53:56 +01:00
3cafb66754 feat(webhooks): add tests and fix review issues
* add tests for webhooks
* improve error handling when context does not contain webhook manager
* add logging to worker and fix nesting error overwrite
* remove enable and disable methods in favor for update method
* move data in jwt from subject claim to custom `data` claim
* add event in jwt to custom `evt` claim
* change webhook trigger to only fire once per hook (was once per subscribed event in hook before)

Closes #692
2024-01-17 14:19:10 +01:00
45cbd74314 feat(webhooks): add webhooks
* add webhooks settings to config
* add webhooks entity for database
* add endpoints for webhooks
* add worker for asynchronously executing webhooks
* add trigger for events to user change/create/delete users/emails

Closes #692
2024-01-12 16:04:31 +01:00
4f3adb1634 fix: get session token from header for passcode finalization (#1124) 2023-11-01 10:15:27 +01:00
459f6a95d6 fix: allow multiple email servers for test suites 2023-10-20 14:10:06 +02:00
724013e56d feat(saml): implement enterprise saml feature
Co-authored-by: Stefan Jacobi <stefan.jacobi@adesso.de>
2023-10-18 10:50:58 +02:00
81847cb389 test: backfill unit tests for email handler create 2023-10-09 09:34:25 +02:00
dd4fa7c80b fix: public router adhere to LogHealthAndMetrics option
In contrast to the admin routes, the public router does not disable logging on the health endpoints.
This change alters the behaviour of the public router to be in line with the admin router.
2023-09-12 13:41:59 +02:00
6c9dad3d42 Merge pull request #966 from teamhanko/feat-add-user-admin-endpoint
Feat add create user admin endpoint
2023-08-14 10:24:31 +02:00
1ba2ab1d89 feat: add status page 2023-08-14 10:17:23 +02:00
7b861ae6fa chore: move data structs to dto package 2023-08-14 10:08:42 +02:00
912dac2030 feat: add create user admin endpoint 2023-08-11 10:46:38 +02:00
fe034c1fcc feat: add configuration to disable user registration 2023-08-07 17:43:15 +02:00
d81c8f9a74 feat: check webauthn session data expiry 2023-08-04 09:30:48 +02:00
7ae10a4c4d fix: don't set cookie when jwt is set in header 2023-07-26 11:45:11 +02:00
e7dc097baf feat: make user verification configurable, preferred as default 2023-07-20 17:53:24 +02:00
69d8ec1244 Merge pull request #885 from teamhanko/feat-let-cookie-name-be-changed
Feat let cookie name be changed
2023-07-10 09:30:44 +02:00
ad6ac82ada Merge branch 'main' into feat-let-cookie-name-be-changed
# Conflicts:
#	frontend/elements/README.md
#	frontend/elements/src/Elements.tsx
2023-07-06 13:56:50 +02:00
00a5de727b Merge branch 'main' into fix-audit-logger-improvements
# Conflicts:
#	backend/handler/webauthn.go
2023-07-05 14:28:49 +02:00
8ff8d9beea Merge pull request #873 from teamhanko/test-improve-passcode-handler-tests
test: improve passcode handler tests
2023-07-05 12:16:33 +02:00
6daa774fce Merge pull request #884 from teamhanko/feat-add-cache-control-to-jwks
feat: add cache control header when returning jwks.json
2023-07-05 12:15:22 +02:00
bfd073013a fix: create audit logs with transaction where useful 2023-07-04 10:48:59 +02:00
f944abcd63 feat(backend): let cookie name be configurable through config 2023-07-03 15:14:57 +02:00
744d5fddc8 test: update well-known handler test 2023-07-03 09:51:34 +02:00
a07b130347 feat: add cache control header when returning jwks.json 2023-07-03 09:45:59 +02:00
f762393cc3 fix: return shadowed error 2023-07-03 09:16:08 +02:00
e05b2291e9 test: improve passcode handler tests 2023-06-28 10:23:09 +02:00
0953d6a65f test: use test suite for well known tests 2023-06-27 10:20:28 +02:00
fd0444af46 Merge pull request #842 from teamhanko/test-improve-password-tests
test: improve password handler test
2023-06-20 16:36:58 +02:00
2e7b80b188 test: run password handler test in parallel
Co-authored-by: Felix B. Bause <felix.bause@hanko.io>
2023-06-20 15:51:03 +02:00
086333d7f3 refactor: speed up tests, maybe? 2023-06-19 14:57:16 +02:00
b59709d369 refactor: use echo.HTTPError instead of redundant own type. This way the prometheus mw shoul register the correct error codes. 2023-06-19 14:48:45 +02:00
db7c79c3da test: improve password handler test 2023-06-13 14:09:07 +02:00
d292bdac46 test: fix test 2023-06-12 15:11:36 +02:00
683957c4a8 Merge branch 'main' into dependabot/go_modules/backend/github.com/labstack/echo-contrib-0.15.0 2023-06-12 08:17:21 +02:00
78c8067299 feat: switch deprecated prometheus middleware with new echoprometheus middleware 2023-06-12 08:16:38 +02:00
17fd70a7e8 test: fix webauthn test 2023-06-05 16:28:52 +02:00