Commit Graph

348 Commits

Author SHA1 Message Date
Aina Sitraka
0e0b8d2536 fix secure cookie (#4566) 2024-12-20 18:03:04 +01:00
Aina Sitraka
59342a6975 PHRAS-3857 : Check CSRF token on account (#4556)
* fix csrf account

* fix

* csrf new application

* fix
2024-10-23 17:46:31 +02:00
Aina Sitraka
5769be7799 keycloak expose refresh token (#4512) 2024-06-06 10:04:29 +02:00
Aina Sitraka
d6849fd580 PHRAS-4007: Auth provider - add keycloak provider - openid (#4462)
* keycloak provider

* add readme

* comment regenarete password

* add exclusive option to provider an column can_renew_passwor to user

* default exclusive false

* always compatible with psauth

* bump image tag .env

* bump Version to 4.1.8-rc9

* bump version to rc12

* add autoconnect
2024-04-30 14:15:56 +02:00
Aina Sitraka
f02e5b8e5f PHRAS-4023 hcaptcha in Phraseanet (#4473)
* use hcaptcha

* add conf

* use captcha-provider key instead of captchas-enabled in configuration

* fix test

* test

* bump back version to rc9
2024-02-29 14:59:46 +01:00
Aina Sitraka
c39659630a fix js error on change password (#4475) 2024-02-16 18:15:04 +01:00
Aina Sitraka
8d60402a68 secure locale cookie (#4333) 2023-07-12 11:14:09 +02:00
Aina Sitraka
9902457c42 PHRAS-1718 add google recaptcha (#4224)
* PHRAS-1718 Add google recaptcha lib - Dont merge some quick fixes remaining

* PHRAS-1718 Add error on registration form if captcha is not filled

* Update dependencies

* PHRAS-1718 Add trials-before-display var on admin setup form. Add integer constraint on this field

* fix

* test

* test

* fix

* test

* test

* fix

* test

* fix

* test

* add captcha on forgotten password

* fix

* add patch

* add locale on captcha

* bump version

Co-authored-by: Xavier Rousset <xrousset78800@gmail.com>
2023-01-25 18:30:46 +01:00
Aina Sitraka
12d58cb5c2 PHRAS-3802 forgotten password change string (#4218)
* forgotten password change string

* fix test

* fix test
2023-01-20 11:00:49 +01:00
jygaulier
7e7435469d PHRAS-2995_phr-as-auth-idp-BIS (#4180)
* WIP ; allow multiple instances of some auth clients (migrate conf) ; add ps-oauth ; remove google+

* WIP ; fix ps-oauth ; fix tests

* WIP ; add api-auth to extra_hosts

* WIP ; fix yaml syntax error

* WIP ; fix yaml syntax error ; better conf sample

* WIP ; add "everyone-group"

* WIP ; add the provider-id in session

* WIP ; add getOptions() to providers (so phr/expose can filter providers)

* WIP ; add auto-logout option so logout from phr also logouts from ps-auth

* connect to expose using IDP from connected user

* WIP ; auto-logout redirects to phr home

* unnecessary session var

* unused

* fix

* catch some error

* fix navigation in train thumbnail

* update file version

* pass params in session to have constant redirect_uri ; add debug

* invalidate session --> parade test ok

* cleanup
2022-12-01 16:27:54 +01:00
jygaulier
fbccec009e PHRAS-3602_shared-baskets-step1 WIP DO NOT MERGE (#3929)
* PHRAS-3602 : migrate validations to baskets
WIP [skip ci]

* PHRAS-3602 : migrate validations code to baskets code (wip)
WIP [skip ci]

* PHRAS-3602 : migrate validations to baskets
WIP [skip ci]

* PHRAS-3602 : migrate validations to baskets
WIP [skip ci]

* PHRAS-3602 : fake commit to run tests

* PHRAS-3602 : migrate validations to baskets
fix typo

* PHRAS-3602 : migrate validations to baskets
fixed (some) tests

* PHRAS-3602 : migrate validations to baskets
fixed (some) tests

* PHRAS-3602 : migrate validations to baskets
fixed (some) tests. need to remove method():return_type signature because of old phpunit which does not mock it

* PHRAS-3602 : migrate validations to baskets
fix

* PHRAS-3602 : migrate validations to baskets
fix err 500 when a "vote" (feedback) is deployed in wz

* PHRAS-3602 : migrate validations to baskets
fix missing votes for element+participant
fix update vote dates on basket

* PHRAS-3602 : ux
bump production-client to 34
WIP [skip ci]

* PHRAS-3602 : rebase (bump production-client to 37)
WIP [skip ci]

* PHRAS-3602 : refacto css/twig/templates/... ; replace many png's by fonts
WIP [skip ci]

* PHRAS-3602 : fix icon / css
WIP

* PHRAS-3602 : better icon align ; back button color
fix : save button after adding a user
WIP [skip ci]

* PHRAS-3602 : restore sharebasket controller
todo : implement modification right ; owner is participant ?
WIP [skip ci]

* PHRAS-3602 : set "canModifiy" ; cleanup
WIP [skip ci]

* PHRAS-3602 : respect "can_modify" on shared basket
WIP [skip ci]

* PHRAS-3602 : fix badge icon bg ; fix button css
WIP [skip ci]

* PHRAS-3602 : fix css & cleanup
WIP [skip ci]

* PHRAS-3602 : fix 500 on preview/feedback tab
WIP [skip ci]

* PHRAS-3602 : fix allow to display dlg without selection

* PHRAS-3602 : bump version to 4.1.6-rc1 ; prodclient=38
WIP [skip ci]

* PHRAS-3602 : factorize baskets menu (wip)
WIP [skip ci]

* PHRAS-3602 : modify already shared or feedback basket (general menu)
4th icon on badges (vote != modify)
quitshare option (todo back)
allow fa-icons in toolbar

WIP [skip ci]

* PHRAS-3602 : add share end-date (todo:db write)
add 4th general toggle button
fix badge selection bug
fix css badges zone (form position)
WIP [skip ci]

* PHRAS-3602 : big refacto to use "sharebasket" vocab.
fusion "feedback/sharebasket" removed "feedback"
adaptative ux: 1 "can_agree" ==> feedback display
bump production-client to v50
todo: save shr/fbk end-dates
todo: rename "pushXXX" to pushAndShare ?
WIP [skip ci]

* PHRAS-3602 : share / feedback expiration dates are saved in db
date pickers with delta menu
better adaptive ux
todo: move select general togglers
WIP [skip ci]

* PHRAS-3602 : revert validation* tables (remove "dead" rename)
drop all foreign keys from validation*
WIP [skip ci]

* PHRAS-3602 : restore deleted fields in validation, regenerate proxies
WIP [skip ci]

* PHRAS-3602 : fix initiator_id
WIP [skip ci]

* fix initiator_id-bis

* PHRAS-3602 : css for input-text with glued button
dynamic load of users-lists (left zone) = less duplicated code
fix : users-lists  works after refresh
WIP [skip ci]

* PHRAS-3602 : fix users-lists manager (orange) : go flex !

* PHRAS-3602 : empty dist to ease rebase
WIP [skip ci]

* PHRAS-3602 : rebase
WIP [skip ci]

* PHRAS-3602 : new ux for "owner"
feedback mode is an independent toggle
fix "missing mandatory parameter"
WIP [skip ci]

* PHRAS-3602 : fix css of owner badge
WIP [skip ci]

* PHRAS-3602 : fix handling of feedback initiator
WIP [skip ci]

* PHRAS-3602 : better wss to follow "skins"
full roboto
removed useless class "with-button"
WIP [skip ci]

* PHRAS-3602 : fix "a token require a validation"
temporary fix 500 due to send email to (null) vote-initiator for simple share
todo: send a specific email for simple share
WIP [skip ci]

* PHRAS-3602 : different emails depending if user can vote or not
WIP [skip ci]

* PHRAS-3602 : expired shared baskets removed from wz
WIP [skip ci]

* PHRAS-3602 : fix logic error on last sql
WIP [skip ci]

* PHRAS-3602 : fix missing shared baskets on wz
WIP [skip ci]

* PHRAS-3602 : fix blinking of wz/basket detail
now only the title:hover displays detail
WIP [skip ci]

* PHRAS-3602 : rebase
WIP [skip ci]

* PHRAS-3602 : update basket proxy
WIP [skip ci]

* PHRAS-3602 : fix forever "unread" basket
WIP [skip ci]

* PHRAS-3602 : fix display of unread basket ; sync "eye" icon with css change
WIP [skip ci]

* PHRAS-3602 : "quitshare" action works
WIP [skip ci]

* PHRAS-3602 : missing dist files
WIP [skip ci]

* PHRAS-3602 : cleanup & run ci

* PHRAS-3602 : disable failing unit test ; remove blue on onread basket

* PHRAS-3602 : separate "vote" & "share" emails templates & u-tests

* PHRAS-3602 : add 2 icons "stack" to icomoon set
WIP [skip ci]

* PHRAS-3602 : fix test

* PHRAS-3602 : fix test ; add test for simple share email notification

* PHRAS-3602 : changed proxy

* PHRAS-3602 : colored basket icons
WIP [skip ci]

* PHRAS-3602 : circle basket icons
WIP [skip ci]

* PHRAS-3602 : fix wz filters, add "share" filter.
todo: fix fr writing (new string)
WIP [skip ci]

* PHRAS-3602 : fix "share" dichotomy : use "shared" for wz filter
WIP [skip ci]

* PHRAS-3602 : fix PHRAS-3624 ; PHRAS-3623 ; now adding/removing a user from user list is immediate (no more save button)
WIP [skip ci]

* PHRAS-3602 : fix PHRAS-3647 ; shared basket are listed in api (for list and related record)

* PHRAS-3602 : fix due to failing test

* PHRAS-3602 : fix: can load a 1000 users list
todo : move slow code to worker

* PHRAS-3602 : fix due to failing test

* PHRAS-3468 : (fixed in 3602) fix basket content still visible when baskets are hidden (wz-filter)

* PHRAS-3602 : add "wip" baskets with notification & lock
todo : move slow code from message to worker

* PHRAS-3602 : fix tests due to accidental rename

* PHRAS-3602 : fix : menu closes when mouse out : bump to 4.1.6-rc3
todo : fast move to another basket makes the menu appear on top ?

* add shareBasket worker

* fix test

* PHRAS-3602 : fix : rights buttons on badges now works for users added from search (did work only from loading list)

* PHRAS-3590

Co-authored-by: aynsix <asr@esokia-webagency.com>
Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2022-04-07 17:07:43 +02:00
aynsix
a14e15972b PHRAS-3598 taking account webhook active 2021-12-06 18:00:27 +03:00
aynsix
62f751d886 add user.created webhook, merge user type 2021-11-17 17:55:10 +03:00
aynsix
074920353a PHRAS-3555 add more webhook events 2021-11-16 17:15:49 +03:00
aynsix
b4a70c2b0c send password setup after mail confirmation 2021-07-28 16:14:38 +03:00
jygaulier
0c58dd2af2 PHRAS-3442_optimize-list-notifications_4.1-bis
WIP
restore /session/update route to pass tests, THIS ROUTE IS UNUSED
2021-06-21 18:07:47 +02:00
jygaulier
f8cfd08f4f PHRAS-3442_optimize-list-notifications_4.1-bis
WIP : pushed to run all tests on circle
move "session/notifications" controller to "user/notifications"
use twig to render notifs + dropdown + dlg
fixed some tests
still todo : mark "read"
2021-06-21 18:07:47 +02:00
jygaulier
6472ce360f PHRAS-3442_optimize-list-notifications_4.1-bis
WIP
fix tests
todo : mark read notifications (button ? click ?)
2021-06-21 18:07:47 +02:00
jygaulier
22c3b273f7 PHRAS-3442_optimize-list-notifications_4.1-bis
WIP
poll only from menubar (Aina)
back : only one method/route to fetch notifs
front : fix exponential pagination
big refacto
todo : mark read notifications (button ? click ?)
2021-06-21 18:07:46 +02:00
jygaulier
eec8a92ce9 PHRAS-3442_optimize-list-notifications_4.1-bis
add timers
2021-06-21 18:07:46 +02:00
jygaulier
d6a7749b5a [skip ci]
PHRAS-3442_optimize-list-notifications_4.1
WIP
2021-06-21 18:07:46 +02:00
aina esokia
e49e1546a4 fix 2021-02-03 16:12:21 +03:00
aina esokia
cc73d6aeb5 PHRAS-3256 update user locale when changing locale seting 2021-02-03 15:37:32 +03:00
aina esokia
215562ab74 PHRAS-3256 take in account langage in mail 2021-02-03 11:44:42 +03:00
aina esokia
427216ec43 PHRAS-3277 validation reminder in percent 2020-12-02 17:31:05 +03:00
aina esokia
11777445f9 PHRAS-3236 update 2020-11-17 10:29:59 +03:00
jygaulier
f7ca61f36b - add : command bin/console validation:remind (experimental)
- removed : internal handling of "VALIDATION_REMINDER" event
- fixed : duration formatting
2020-09-16 10:28:17 +02:00
jygaulier
0ec33829df - fix : "validate" token is created for every user (participant) of a validation
the expiration date of tokens is same as validation session
- fix : changing the exp. date of a validation session updates the tokens exp. dates
- fix : remind is done even for validation sessions with force-auth (no tokens)
- change : no more 'null' user for basket validation (never used)
2020-09-14 16:57:53 +02:00
aynsix
2545d41e8d trim email from form 2020-04-23 12:14:40 +03:00
Nicolas Maillat
4714f7b95d Merge branch 'master' into PHRAS-2680-webhook-privacy-and-security 2020-02-26 20:15:37 +01:00
gjacobjn
b18ef09661 Update AccountController.php 2020-02-07 17:17:54 +01:00
Nicolas Maillat
8019cc3bd0 Merge branch 'master' into PHRAS-2680-webhook-privacy-and-security 2019-09-30 15:49:33 +02:00
jygaulier
704e119f6b Merge branch 'master' into PHRAS-2666_slow-notifications_4.1 2019-09-23 12:04:11 +02:00
aynsix
5d8132b08d user webhook: registration and delete 2019-09-20 18:01:23 +04:00
Xavier Rousset
80b4c9a6a6 PHRAS-2127 | Add https in default geoname server url, remove url formatter in register controller 2019-08-14 15:49:25 +02:00
Jean-Yves Gaulier
568268a918 PHRAS-2666_slow-notifications_4.1
revert to fix unit test (?)
!!! WIP !!!
2019-07-25 18:16:43 +02:00
Jean-Yves Gaulier
2fcbd7e6d7 PHRAS-2666_slow-notifications_4.1
removed join on basket_elements where useless
code style + type hints
!!! WIP !!!
2019-07-25 17:23:10 +02:00
aina-esokia
eff72083ba update delete account config structure
#time 0.5h
2019-04-25 17:27:33 +04:00
aynsix
5cdf473c7f PHRAS-1972: Account Page, Allow a Phraseanet User to delete his account and associated datas (#2918)
* allow user to delete account

* generate translation and add checkbox in the windows confirmation

* change text an configuration key

* update delete account fonctionality

* rename variable

* write in explicite condition

* merge yarn.lock

* regenerate translation
2019-04-08 14:25:17 +02:00
Xavier Rousset
a8ebe5fc43 Update access page design 2018-10-19 19:10:39 +02:00
aina-esokia
4f996f3ccc masquing some native Api application in user porfil -> Application tab 2018-07-23 11:53:18 +04:00
aynsix
9809e8f176 modify create guest account and filter guest user (#2534) 2018-06-14 19:16:10 +02:00
Thibaud Fabre
e77178d757 Add delivery results to application settings page 2016-10-13 14:05:53 +02:00
Thibaud Fabre
010b7b7be2 Restrict application settings access to application owner 2016-05-24 17:45:38 +02:00
Florian BLOUET
fdc2129c22 PHRAS-1010 - fix maintenance message display 2016-02-26 11:48:01 +01:00
Benoît Burnichon
de590a60ea PHPCS Fixes some unused class imports 2016-02-12 17:29:21 +01:00
Benoît Burnichon
f6f6feb4e9 Group generation of Email confirmation 2016-02-12 16:41:17 +01:00
Benoît Burnichon
0ef9b668c2 Remove use of gettext shortcut method. 2016-02-01 14:03:29 +01:00
Thibaud Fabre
c92d5da9fe Merge branch 'clean-boxes' into merge-clean-boxes 2016-01-06 19:53:43 +01:00
Benoît Burnichon
51023c5533 bump copyright year 2016-01-05 13:38:14 +01:00