Commit graph

34 commits

Author SHA1 Message Date
Mantas Masalskis
a1b9ef2bbb Maintenance: Update copyright information. 2026-01-02 15:41:09 +02:00
Tobias Schäfer
773f912a3b Fixes #4858 - Calendar non functional with activated 2fa authentication
Co-authored-by: Florian Liebe <fl@zammad.com>
2025-03-04 12:27:46 +01:00
Dusan Vuckovic
f554b7e928 Maintenance: Improve 2FA endpoints.
Co-authored-by: Mantas Masalskis <mm@zammad.com>
Co-authored-by: Dusan Vuckovic <dv@zammad.com>
2025-02-14 09:36:02 +01:00
Mantas Masalskis
10f627cb69 Maintenance: Update copyright information 2025-01-01 17:39:43 +02:00
Dominik Klein
e054d6ca79 Maintenance: Update copyright information. 2024-01-02 11:55:19 +01:00
Florian Liebe
54f06204fd Fixes #4595 - 2FA: Authenticator App
Co-authored-by: Dominik Klein <dk@zammad.com>
Co-authored-by: Dusan Vuckovic <dv@zammad.com>
Co-authored-by: Florian Liebe <fl@zammad.com>
Co-authored-by: Mantas Masalskis <mm@zammad.com>
Co-authored-by: Martin Gruner <mg@zammad.com>
Co-authored-by: Rolf Schmidt <rolf.schmidt@zammad.com>
Co-authored-by: Tobias Schäfer <ts@zammad.com>
Co-authored-by: Vladimir Sheremet <vs@zammad.com>
2023-05-19 16:29:47 +02:00
Martin Gruner
fc2491aabf Maintenance: Renamed confusing fields in the tokens table.
The Token model is used to store access tokens and had field names which may have caused confusion for developers using them. Therefore, the field previously called name: now has the correct identifier token: (as it stores the actual token value), and the field previously called label: is now called name: for better consistency with other models.
2023-04-11 12:50:56 +02:00
Martin Gruner
ac64d768aa Maintenance: Removed deprecated backwards compatibility methods.
This removes several legacy compatibility layers that have been deprecated for Zammad 6.0:
- `ApplicationController::Authenticates.permission_check` unused method removed
- `ApplicationController::Authenticates.authentication_check_only` removed unused parameter `auth_params`
- `ApplicationController::Authenticates.authentication_check_prerequesits ` removed unused parameter `auth_params`
- `HasObjectManagerAttributesValidation` unused concern removed
- `Ticket::Escalation.rebuild_all` unused method removed
- `Store.add` unused method removed
- Deprecated redirect rake Tasks `searchindex:*` removed
- Deprecated legacy wrapper `Cache` removed
2023-04-11 10:36:34 +02:00
Mantas
3b29835d4a Fixes #3119 - Clarify authentication_check and authorize! before_actions 2023-03-21 20:14:54 +00:00
Florian Liebe
9dfc232536 Maintenance: Update copyright information. 2023-01-02 16:19:55 +01:00
Martin Gruner
34b2bbaf36 Maintenance: Improve handling of front end tests. 2022-06-08 08:16:28 +02:00
Martin Gruner
3042cfcff7 Feature: Mobile - Added Selenium testing helper for the new mobile app. 2022-05-06 08:59:07 +00:00
Martin Gruner
85cbfc6851
Maintenance: Improved translatable source strings. 2022-04-25 15:37:05 +02:00
Martin Gruner
24c3bdfd87 Maintenance: Update copyright header. 2022-01-01 14:38:12 +01:00
Martin Gruner
64a87b1c67 Fixes #2709, fixes #2666, fixes #2665, fixes #556, fixes #3275 - Refactoring: Implement new translation toolchain based on gettext.
- Translations are no longer fetched from the cloud.
- Instead, they are extracted from the codebase and stored in i18n/zammad.pot.
- Translations will be managed via a public Weblate instance soon.
- The translated .po files are fed to the database as before.
- It is now possible to change "translation" strings for en-us locally via the admin GUI.
- It is no longer possible to submit local changes.
2021-11-15 16:58:19 +01:00
Dominik Klein
2b58a97c68 Maintenance: Simulate login instead of using the real login form all the time. 2021-11-04 14:40:58 +01:00
Dominik Klein
467bc03224 Fixes #2389 - Enhance LDAP login to not affect "failed logins". 2021-08-16 08:49:32 +02:00
Thorsten Eckel
b8b57781b7 Maintenance: Activated rubocop Layout/LeadingCommentSpace. 2021-07-19 15:43:33 +02:00
Martin Gruner
5df98684da Maintenance: Update copyright information and add a new rubocop cop to watch over it. 2021-06-01 12:20:20 +00:00
Thorsten Eckel
876c0b18fd Fixes issue #2983 - HTTP 401 responses causing issues with Basic Authentication. 2021-02-04 09:28:41 +01:00
Marcel Herrguth
8d140037e4 Fixes #3128 - Add SSO login button to login page. 2020-09-22 15:55:25 +02:00
Mantas Masalskis
9dd2b59037 Maintenance: Show less error details to non-admin users 2020-09-22 15:55:25 +02:00
Martin Edenhofer
8a3be0488d Improved error message for SSO if REMOTE_USER is blank. 2020-08-13 12:46:27 +02:00
Ryan Lue
95de420a35 Fixes #3064: Double-render error on HTTP Basic auth
This commit fixes a regression[0]
introduced in becbdb1ba (the Pundit migration).

Specifically, `CalendarSubscriptionsController` appears to be
the only controller that supports HTTP Basic authentication
(for calendar clients like Thunderbird Lightning or Calendar.app),
and the migration changed the control flow
for HTTP Basic authentication + authorization:

    # before
    authentication_check({ basic_auth_promt: true, permission: 'user_preferences.calendar' })

    # after
    authentication_check(basic_auth_promt: true) && authorize!

After this change, `#authentication_check` is expected
to communicate success or failure through its return value,
but prior to this bugfix, its return value was always truthy.
This led to a double-render error,
where a response code and message were set twice,
upon the failures of both authentication and authorization.

This fix adds a `return false` in the authorization failure case,
short-circuiting the `#authorize!` call and eliminating the error.

[0]: https://github.com/zammad/zammad/issues/3064
2020-05-26 16:33:11 +02:00
Ryan Lue
becbdb1baa Refactoring: Replaced home-rolled authorization logic in Controllers with Pundit. 2020-03-19 10:39:51 +01:00
Thorsten Eckel
d1ed72a071 Existing user session when requesting SSO session create endpoint will fail device check because of missing fingerprint param (which is required as soon as a user/session is present). 2019-09-30 19:34:13 +02:00
Ryan Lue
33bef7123d Feature: Single sign-on (SSO). 2019-09-05 16:02:31 +02:00
Jens Pfeifer
e48256c130 Refactoring: Removed use of unnecessary exception wrapper method response_access_deny. 2019-02-26 11:37:31 +01:00
Thorsten Eckel
e8a57517f4 Updated rubocop - applied custom Layout/AlignHash style. 2018-12-19 18:33:22 +01:00
Thorsten Eckel
9af50f2a4e Updated rubocop to latest version (0.59.2) and applied required changes. 2018-10-09 08:17:41 +02:00
Thorsten Eckel
bf6192113a Improved overall performance by using logger.debug { ... } instead of logger.debug(...). This decreases the LDAP import dry runtime by ~33%. 2018-03-22 10:39:32 +01:00
Thorsten Eckel
705487154c Applied changes for Rubocop 0.51. 2017-11-23 09:09:44 +01:00
Jens Pfeifer
533b44af8f Updated to rails 5.0. 2017-09-08 08:28:34 +00:00
Thorsten Eckel
5eb49443dd Refactoring: Splitted ApplicationController functionality into separat modules and concerns. 2017-03-09 15:31:26 +01:00