689 Commits (5989ef8e902ca40eb718d080cefc8811aa8d2fac)

Author	SHA1	Message	Date
Rene Krenn	d10becf4b0	TT#151751 refactor persisting subscriber webpassword ... a multitude of issues popped after introducing bcrypted webpasswords in the database. most recently the PATCH /api/susbcribers rail was reported to reset the webpassword unintentionally. subscriber login fails afterwards, which is a severe issue. the bugs are adressed by this refactorings. the change also introduces a global variable $NGCP::Panel::Utils::Auth::ENCRYPT_SUBSCRIBER_WEBPASSWORDS to control encrypting webpasswords. it is still enabled as of now, but it's worth to consider disabling it. there other ways to have a "cost" for an authentication request, eg. adding a simple sleep(1sec). (cherry picked from commit 5e9066c4fb) Change-Id: Ice74ebe40b305a50b81624077d39524fd14adbe1	3 years ago
Marco Capetta	0c6dcf0757	MT#57469 Fix kamailio lcr reload on PATCH/PUT APIs ... When calling a PATCH or PUT API on a peering group or outbound rule the reload of the kamailio lcr module was triggered before the update of the database, thus the kamailio status was not updated. Change-Id: I59ed863c85219e62d6f5b5a2af80db8ef952844c (cherry picked from commit be7193e75b)	3 years ago
Oleksandr Duts	498aeec978	TT#158252 API/UI cfmappings improve performance ... * Optimize cfmappings DBI - better performance for subscriber preferences API/UI. Change-Id: I6d73ecbe657ee84a43f6cc8f3b048aa011370603 (cherry picked from commit f0a5c38874)	3 years ago
Flaviu Mates	5688877c5b	TT#117153 Improve /api/cfmappings performance ... * switch to 'populate' instead of using 'insert' for each destinations, sources, times, bnumbers, mappings and CF preferences * add API->check_patch_op_add_only - to check if the patch contains only "add" operations * improve /api/cfmappings, if all PATCH operations are "add" then the existing records are not fetched and not recreated, enabling very new mapping inserts Change-Id: I0b4e71565c11771026dbbc000aa57b2a613409fa (cherry picked from commit 9bb622a2bc)	3 years ago
Rene Krenn	015fe2e7f9	TT#147151 finish refactoring of avoiding JOIN billing.product ... follow up on TT#147151 (fast loading/paging/searching panel datatables), which broke restapi tests. Change-Id: I799cb9087b9405c71dec4c690e7a7bab5dfdbdde (cherry picked from commit d786af1591)	4 years ago
Rene Krenn	d6f8a89a79	TT#147151 fast loading/paging/searching panel datatables ... query refactoring an rowcount clipping for UI datatables that are slow when using millions of subscribers: contacts customers contracts subscribers billing profiles billing networks billing profile packages Change-Id: Ia50e3aa52684772548569b6908f0cbc08395a5a7 (cherry picked from commit 133bd43df4)	4 years ago
Oleksandr Duts	84df3c256b	TT#167900 /api/subscribers improve number duplicate checks ... * primary and alias numbers are now validated that they do not belong to another subscriber * aliases are now validated that they are not already set as the primary number * reduce amount of related sql queries Change-Id: I4397bbdc4bc9001b7feeef22cb8f85ee0b6ce8ff (cherry picked from commit afa9289b66)	4 years ago
Oleksandr Duts	fb18274647	TT#141101 UI/API fix custom_announcement upload ... * Ability to upload sound set file for custom_announcement. Change-Id: I51dbf3fd9b9820adfa8ebe186c63cf39383a76ee (cherry picked from commit 3b9f19b6c8)	4 years ago
Javier Rodriguez	f2f0091b69	TT#146900 correction for time format via /api/voicemails/ ... Change-Id: I8f74c24560e1bfc9e7fe77b54d48e26d393e4dc8 (cherry picked from commit 7d8f3a98e2b1ab868d64b4ab20ab4f62ac1c5f6a)	4 years ago
Kirill Solomko	bdbb3fba6d	TT#139550 improve vmnotify behaviour ... * vmnotify() now accepts cli and uuid arguments * API handling of voicemails is now improved to: - send a notify if the item's INBOX/Old has been changed - correctly process DELETE to send vmnotify after the item's removal Change-Id: Ic00ae825cf091bce273e55aa37cd0a7ac80d8b0f	4 years ago
Kirill Solomko	476f93778b	TT#133800 fix webpassword, change subadmin expose password ... * webpassword is not correctly removed based on length, and remain visible when in plain-text or empty (unset) * config->security->password_(sip|web)_expose_subadmin now only affects subscribers under the same customer that are not this subscriber admin Change-Id: I329e0f1ad97dd513a33e3652ed03b4a43a95ed04 (cherry picked from commit 535c38cd93)	4 years ago
Kirill Solomko	d1e119445b	TT#129162 Admins fix password field transformation ... * password field is virtual and needs to be transformed into saltedpass, restored the removed logic that does that in process_form_resource() Change-Id: I8baabbef2bdb46db850e12b6e0c638ca5c3deddf (cherry picked from commit 992c9f1e48)	4 years ago
Kirill Solomko	9838121715	TT#129162 fix subscriber webpassword field validation ... * 'webpassword' field is now also validated for invalid (non-ascii) characters * Fix multiple APP input field validation erros to comma joined. * Adjust 'webpassword' field validation errors to have better readability when there are multiple validation errors Change-Id: I21536f97a4da78cc5192a3abd8cd5adef1b819ec (cherry picked from commit cc10506b2e)	4 years ago
Kirill Solomko	2a438339ef	TT#133901 fix administrative flag for subscriberadmin ... * 'administrative' field is read only for susbcriberadmin role and that caused it to be removed from the final update 'resource', setting it to 0 if not existed. now the 'administrative' field is only changed in the database if it's defined in the 'resource'. Change-Id: I50738a77052c2163b19b2a42293c7a00e2780bc3 (cherry picked from commit 3ef167575c)	4 years ago
Kirill Solomko	2c5e4d5ab8	TT#133800 fix password fields behaviour in API ... * PATCH: password fields are not removed when resource is created for apply_patch(), they are removed under the same condititions later when hal is generated, that is to ensure that admin users without the 'show_passwords' flag as well as subscribers will not run into situation when they use PATCH and cannot apply it for "path": "/password" or/and "path": "/webpassword", as they were removed before apply_patch() * rework encrypted webpassword detection. webpasword is detected as encrypted if its length is 54 or 56 and it contains at least one '$' char, there is a chance for false positive detection when a user provides with a plain-text password with the same pattern but it's very unlikely, as well as since mr8.5 webpasswords are expected to be encrypted, and moreover worth case scenario is that the plain-text password will not be returned to the user Change-Id: I8ea739cbf728b2134f3ce00cee29da42ab3fb4a3 (cherry picked from commit c50b49db96)	5 years ago
Kirill Solomko	ab4d8e22f1	TT#130450 use uuid in /api/cfdestinationsets /api/cfmappings ... * unify the logic and use uuid in /api/cfdestinationsets and /api/cfmappings if the subscriber's primary number is empty Change-Id: Ibdb7e2a2bcd33165be5ec1d92c4f1df24f59405a (cherry picked from commit 1dfdad0a8f)	5 years ago
Flaviu Mates	db8f0feff6	TT#126601 Implement /api/authtokens endpoint ... * the endpoint will receive "type" (expires|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8 (cherry picked from commit 9b422ddabf)	5 years ago
Rene Krenn	5c5047a070	TT#121500 fix missing mos_data in /api/callists ... Change-Id: I4e958dd6ec05042c6ee18bbd7ed7186792a6be50 (cherry picked from commit 2b751b139d612d20964e7ba236c60a2a1b316d86)	5 years ago
Kirill Solomko	6df13ee59e	TT#127805 remove temp transcoded files ... * temp files created for transcoding operations are now correctly removed Change-Id: Ie95fccd2ed2a533060e4abc2fa3593c9f951225a (cherry picked from commit d3566d0aa8)	5 years ago
Flaviu Mates	f4cb6933b4	TT#119550 Allow subscribers to manage their registrations ... * give access to subscribers roles to see, create and update own registrations * subscriberadmins can manage all registrations of subscribers under same customer Change-Id: I643121da901b0ed99fc718106a1632da4e1e1936	5 years ago
Flaviu Mates	35d9c3598a	TT#122001 Allow subscribers to access /api/subscriberprofiles ... * subscribers are now allowed to fetch their own subscriber profile, they can't modify them Change-Id: Iabf1244020d0f453257993cf24d4c9036a125397	5 years ago
Flaviu Mates	e66a8689ac	TT#119900 Expose slots id in /api/autoattendants ... Change-Id: I613eca8309cd4f446ca957d6a944cd7e21d87bfb	5 years ago
Flaviu Mates	232cf704c0	TT#119200 Expose subscriber object on /api/autoattendants ... * implement support for 'expand' param which, when used with the api call, will modify the response to contain the subscriber object Change-Id: Id25dc0bb258bc777d698e043ea8ddc785e12f68a	5 years ago
Flaviu Mates	67ca4d5a00	TT#114703 Use config flags password_(sip|web)_expose_subadmin in api ... Change-Id: I289a3683c09c098d52c1ddb5a489c8c2093f9c99	5 years ago
Rene Krenn	a916bd3c4f	TT#116703 prevent entering duplicate alias numbers ... Change-Id: I3d35f87738bb6d73f62b300e487a113b45223ad1	5 years ago
Flaviu Mates	221572d606	TT#113767 Fix 500 error on /api/customerpreferences ... * ccare role was ommited because of a typo when fetching the result set for customer preferences; changing ccareadmin to ccare in the reseller condition fixes the issue Change-Id: Id387953901295b772c6d57e9a925cff85847ad68	5 years ago
Flaviu Mates	bbc5468fa2	TT#108854 Implement /api/userinfo endpoint ... * it will return user's username, role and a structure where information about the user's permitted operations on all api endpoints and permitted operations on the fields of that entity can be found Change-Id: I11d2f5b60d24ca7b70ffc6dcf8ea94f9a3a221d1	5 years ago
Flaviu Mates	8bc9a3974c	TT#108162 Reseller branding primary and secondary colors ... * add color pickers and store the hex code of the colors inside the branding table in panel UI * implement /api/resellerbrandings endpoint, where all things related to reseller branding can be managed; the branding logo will still be retrieved using /api/resellerrandinglogos Change-Id: Ib7ed364811acf67ffd62252d9799a0af8b91e9bc	5 years ago
Rene Krenn	645231c274	TT#109402 fix PATCHing fraud notification status ... Change-Id: I04dcef51641102314cfc034222e6696c69f110e8	5 years ago
Rene Krenn	00f0614ef9	TT#107051 fix PATCH /billingprofiles/x - peaktimes ... Change-Id: I3d074976f15618d84cfd8ee4694a0fd4250fe091	5 years ago
Flaviu Mates	b79d68e865	TT#104760 Fix non-master admin privileges managing in API ... * Forbid non-master admin to change own is_master, read_only, and is_acitve flags; we have this logic in old UI already in place Change-Id: I81ab266d942e32dfb560ba488e9fd471ebc923f4	5 years ago
Rene Krenn	8238204682	TT#105100 fix update case for webpasswd db encrytion ... Change-Id: I91de91430434edef744c6b3791749ea81053d1cb	5 years ago
Flaviu Mates	233be55b9f	TT#104174 Add last_secret_key_modify readonly field on /api/mailtofaxsettings ... Change-Id: I7ebd3b46e0c7e1cbce34e921d0703bcbbdd9f42d	5 years ago
Flaviu Mates	551c8b39f9	TT#103401 Allow subscriber access to /api/mailtofaxsettings/{id} ... * Add subscriber roles to MailToFaxSettingsItem and allow them to only access their settings * Don't return the 'active' field on subsciber requests; instead, return 403 if mail2fax is not active Change-Id: I773df0c21fcba29f9e7b5172160178ff99482964	5 years ago
Flaviu Mates	733f4ac68f	TT#101108 Expose panel branding logo via API ... * create /api/resellerbrandinglogos/ endpoint which will return the reseller's branding logo * the endpoint can be used directly with /{reseller_id} or with /?subscriber_id={subscriber_id} to get the logo of subscriber's customer contact reseller Change-Id: I5db19e208ae21cf7c685d46aa77b5032c26554de	5 years ago
Flaviu Mates	ded942b740	TT#96502 Introduce duplicate check for /api/cfsourcesets ... * Due to DB unique name constraint, enpoint was returning 500 on duplicate source sets * Proper 422 is now returned Change-Id: I883fbe71aa77364645467941206ea6b272523c03	5 years ago
Flaviu Mates	c50153b1f7	TT#99561 Introduce extension range preference for Customers ... * Limit subscriber's extension to a predefined customer extension range preference (both AP and api) Change-Id: I0b6ac5c24b3838f07cc561e7ee6b7cfabe69385e	5 years ago
Kirill Solomko	96ce7b1143	TT#101300 remove devid_alias field ... * dbaliases->devid_alias field is no longer in use and available via the UI/API Change-Id: I3ec1a82ef76822595aa37e94ec002d11a0cce58c	5 years ago
Kirill Solomko	822d3fed46	Revert "TT#102056 terminate subscriber on customer termination" ... This reverts commit ce7b9e84b38e3d4079c12326259534e5450add19. Change-Id: I039629e7484d3e5fbceb9e8caf8be99f738580ed	5 years ago
Kirill Solomko	ce7b9e84b3	TT#102056 terminate subscriber on customer termination ... * When a customer is terminated all != terminated subscribers are set to terminated using the common Utils::Subscriber::terminate() call, so it's on par when each subscriber is selectively terminated. Change-Id: I77394804194ecdb352560047cc8d5b26e3eabc53	5 years ago
Kirill Solomko	50d985c666	TT#101300 add susbcriber location mappings ... * subscrieber location mappings UI/API endpoints * enables terminating incoming calls to a subscriber at another locations (registration entries) Change-Id: I2ba19e55d715a8ac9c6b84b0f7dc055f1621f170	5 years ago
Flaviu Mates	815baf1a8e	TT#100954 Show device id registrations in panel UI and API ... * Modify registrations query to include dbaliases together with subscriber's username Change-Id: I898c433fd690dc207b1969c43a85b37f942f0a50	5 years ago
Flaviu Mates	2741e9ec79	TT#98650 Fix /api/subscriberregistration gateway timeout ... *Introduce pagination in redis scanning; previously all the registrations where dumped in an array and then spliced by page/rows; this was causing huge loading time for big redis DB's hence the timeout Change-Id: I1409c48b520d8d860cd8c11aea1a543286aa0334	5 years ago
Rene Krenn	186ddabb17	TT#98650 ?suppress_flush=1 parameter ... suppress executing "ul.flush" kamailio xmlrpc after "ul.add" or "ul.rm", as it seems to be another source of timeouts. Change-Id: I8faf907c4cbfd6adbe3e3645f5c32069df2eb999	5 years ago
Rene Krenn	b4281d4ee8	TT#98650 speedup redis locaction search by id ... instantiation a redis location resultset can cause a scan if no filter args are provided. Change-Id: I398398115011774c20fdecbc675223a22b9e1917	5 years ago
Flaviu Mates	1b1199e28f	TT#92002 - Add reseller_id to admins with role 'reseller' ... * The reseller_id will be present only for own admin Change-Id: I545a4e1d076a442f996b68b7d0f99167a5cbf6e9	5 years ago
Flaviu Mates	654bb1aabe	TT#92550 - Implement /api/passwordrecovery ... * The new endpoint will only accept POSTs * The request body should have two parameters called 'new_password' and 'token' * First, look for the token in redis (for admins), if not found, look for it in DB (for subscribers), if neither is found, return Change-Id: I4163a0d5bd886961317b21aeca20c8ccfdeab0dd	5 years ago
Flaviu Mates	5f20ca592d	TT#91506 - Return administrator's 'role' in /api/admins ... Change-Id: I1a3dce853bb9d79e70352b08967fb59d0032316c	5 years ago
Flaviu Mates	be14a9242e	TT#84337 - Implement /api/passwordreset ... * The new endpoint will only accept POSTs * The request body should have two parameters called 'type', 'username' and 'domain' * 'type' will accept either 'administrator', in which case only 'username' is needed, or 'subscriber', in which case 'username' and 'domain' will be needed * The regular password reset email will be sent to either the admin or the subscriber Change-Id: If1457c8c625a95295e5e93b6637927e3905698d9	5 years ago
Flaviu Mates	444a0d35b3	TT#88901 - Add GET and DELETE method for /api/admincerts ... * the GET request will show whether an admin has or has not a certificate * the DELETE request will remove an admin's certificate Change-Id: I2b233a76a4436a4d3a95749410e74aabd9fca531	6 years ago