ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Rene Krenn	599dd0613b	TT#151751 fix plaintext sippassword no longer returned this fix addresses regression reported by dominik: * $resource{_password}/{_webpassword} cannot be set before the form validation as they are effectively removed by it, causing /api/susbcribers returning no passwords at all for 'subscriber' roles * Having them after the patch makes no sense either as next resource_from_item call will effectively remove them again (in PATCH) (cherry picked from commit `5e9066c4fb`) Change-Id: I88c9ec40843f1e9a6983952b96c0b0e70fbb1bb1	3 years ago
Kirill Solomko	81ebdb8dcf	Revert "TT#151751 refactor persisting subscriber webpassword" This reverts commit `5e9066c4fb`. This implementation breaks: * $resource{_password}/{_webpassword} cannot be set before the form validation as they are effectively removed by it, causing /api/susbcribers returning no passwords at all for 'subscriber' roles * Having them after the patch makes no sense either as next resource_from_item call will effectively remove them again (in PATCH) Change-Id: I0e8389e8ab34ad72f1b87a684daba77f1030f8ba	4 years ago
Rene Krenn	5e9066c4fb	TT#151751 refactor persisting subscriber webpassword a multitude of issues popped after introducing bcrypted webpasswords in the database. most recently the PATCH /api/susbcribers rail was reported to reset the webpassword unintentionally. subscriber login fails afterwards, which is a severe issue. the bugs are adressed by this refactorings. the change also introduces a global variable $NGCP::Panel::Utils::Auth::ENCRYPT_SUBSCRIBER_WEBPASSWORDS to control encrypting webpasswords. it is still enabled as of now, but it's worth to consider disabling it. there other ways to have a "cost" for an authentication request, eg. adding a simple sleep(1sec). Change-Id: I2d47d54a2d83568546ffdd2b211337a5f56be3a2	4 years ago
Kirill Solomko	8c556bbe36	TT#149459 improve and automate expand functionality * add dictionary support for fields that are expanded if encountered in all endpoints, with a possibility to override it, if defined on the endpoint's field level * move expand definitions from form fields into the Expand dictionary * simplify the expand usage, it now operates only with the <x>_id fields that are returned and visible in the response (e.g. if reseller_id is returned, then ?expand=reseller_id), the returned expand object name is <expand_field_name>_expand the, so in case of ?expand=reseller_id, the returned object will be reseller_id_expand * adapt Role/SystemContacts to work correctly with the expand functionality * expanded fields are returned as <expanded_field_name>_expand Change-Id: I4cab44ede9b40c70a95bbcedc81f58dd1f4e3b67	4 years ago
Kirill Solomko	cc10506b2e	TT#129162 fix subscriber webpassword field validation * 'webpassword' field is now also validated for invalid (non-ascii) characters * Fix multiple APP input field validation erros to comma joined. * Adjust 'webpassword' field validation errors to have better readability when there are multiple validation errors Change-Id: I21536f97a4da78cc5192a3abd8cd5adef1b819ec	4 years ago
Kirill Solomko	2b144caf2c	TT#128605 implement dynamic fields expand * add API functionality to request additional data and expand fields in GET methods * syntax: - /api/resource/?expand=all - expands all expandable fields e.g.: customer_id field is expanded and customer internally is queried and returned under "customer" => {...} (the returned data is identical to what /api/customers/id would return) - /api/resource/?expand=reseller_id,customer_id - expands only reseller_id and customer_id fields, if they are expandable - /api/resource/?expand=reseller_id,invalidfield_id - returns the data and expands only fields that are expandable (reseller_id in this case) but if it finds either unknown fields or non-expandable fields, changes HTTP status code to "409 Conflict" * adapt all API endpoints to support dynamic expand fields expanding functionality, however the actual expand for them requires modifying the form fields in the following format: has_field 'contact_id' => ( element_attr => { expand => { class => 'NGCP::Panel::Role::API::CustomerContacts', id_field => 'contact_id', alias => 'contact', fetch => 0, }, }, ); - class - represents the class that should be used by the logic to fetch the relevant data - id_field - which field from the resource needs to be expanded, it should be the "id" field (subscriber_id, domain_id, etc.) - alias - (optional), under which key the fetched data is stored. the field name is used as the key if the option is omitted. - fetch - (optional), if the returned data is under $data->{contract_id} then it will be fetched from there and stored under the key (field name or alias), otherwise the whole retreived data is stored under the key (field name or alias) * adapt /api/autoattendants to use the new approach (old one was expand=1) * currently supported endpoints with expand: - admins - autoattendants - domains - customers - customercontacts - resellers - subscribers Change-Id: Iac53409dad944ed4794039a48dc3a9f6dce25bc1	4 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	5 years ago
Irina Peshinskaya	200ffa1970	TT#44275 Fix fields adjustment in cached forms Change-Id: I57ddab428805f4fc8a464508a4bfb5a6d917e749	7 years ago
Alexander Lutay	cdbc01978c	TT#29620 Clean TAP test warning: Missing AUTHOR/DESCRIPTION/LICENSE section in POD Change-Id: I522f20e6966253933d98766d0b3a51f43768be82	7 years ago
Irina Peshinskaya	61bf07b038	TT#28510 Remove "domain" from resource for subscriberadmin For subscriberadmin domain is taken from the pilot Change-Id: I6aa8da07014c18732df4ffc66bd5c2744fc0e81f	7 years ago
Yaroslav Fedorina	d3d1e9e3f1	TT#26107 Clarify external_id field description Change-Id: I6054b579bb713454dc70d456e3b4d62c666f13fb	8 years ago
Irina Peshinskaya	77ae84e215	TT#23282 Replace customer field with customer_id for the API subscribers form Change-Id: I50eb7b11e520db1509e68f50744b5ee0dab2193c	8 years ago
Irina Peshinskaya	1c4b8285fb	TT#19656 Add lock level fields to the subscriber forms with status Change-Id: Ie041125174257cb62e210c007fa471c113fae70e	8 years ago
Kirill Solomko	3308b5fb83	TT#5826 introduce timezone representation * timezone view/edit with inheritance subscriber \|= contract \|= reseller Change-Id: Ia6492a8342e48e86642c61f20ecb48721ce28ad4	8 years ago
Gerhard Jungwirth	24cacabd53	MT#20655 fix subscribercreate form values is the correct datastructure to be used to update the db when using HTML::Formhandler. the reason is, it does de-/inflation such as trim, which removes whitespaces at the beginning and end. Change-Id: I5570e64b69fd9e8ed1bbbbc9cd880a381ac3cf68	9 years ago
Guillem Jover	a6d859ca8f	MT#21193 Remove unused dependencies and imports The codebase does not use autodie directly, it does indirectly via Sipwise::Base, and the autodie module is part of the standard perl distribution anyway. TryCatch is imported via Sipwise::Base, and that depends on it. The rest are not used anymore in the codebase. Change-Id: Ic08e246cc60d7d151381dff39e0eba517a492e06	9 years ago
Andreas Granig	04a64e1493	MT#16465 partly remove namespace::sweep and others Remove namespace::sweep Remove MooseX stuff Remove perl5i Remove Moose where possible Change-Id: I4f873afb466f4e58a04c3304ff74df2185470b03	10 years ago
Irina Peshinskaya	5ecf84a41a	MT#14267 Make possible documentation for api fields of the DataTable type We rename DataType fields from "name" to "name_id", but still often allow to pass field as "name". So we need to document both possible params. In the same time, we can't add "name" field again with required title or other params. Change-Id: I63acd6d175517b7f0bba3aedaaff079597e9f7c5	10 years ago
Andreas Granig	a431f6bf79	MT#10309 Allow passwords with less than chars.	11 years ago
Andreas Granig	4341a39cf6	MT#6871 Fix subscriber editing. - Migrate from custom subscriber struct to normal resultset. - Properly handle boolean input in form processing (convert to int, otherwise formhandler fails while cloning when doing the processing). - Properly handle profile set editing in API - Cleanup of log messages	11 years ago
Andreas Granig	aed5d7ef09	MT#6843 Implement password auto-generation.	11 years ago
Andreas Granig	2bf4fe1e92	MT#6831 Implement global password policy.	11 years ago
Andreas Granig	bf5ec092bb	MT#6789 Add subscriber email and password recovery - subscribers can hold an email address - implement process for web password recovery	11 years ago
Andreas Granig	a3f944e777	MT#6693 Show extension vs number for customer subs	11 years ago
Andreas Granig	8c867420e8	MT#6693 Rename profile categories to profile sets.	11 years ago
Andreas Granig	4cf62bc8cd	MT#6693 Assign profiles to subscribers - WIP. TODO: - Subadmins must not see a "Create" button in profile selection - Can sub(admins) unset a profile? What's the default?	11 years ago
Andreas Granig	c61b9eec5d	MT#3933 API: Handle subscriber lock/termination	11 years ago
Andreas Granig	1f9e407377	MT#3925 API: more doc and description fixes.	11 years ago
Andreas Granig	2c49abb49e	MT#3925 Add more field descriptions to forms.	11 years ago
Andreas Granig	d508a519c8	MT#3933 API: tighten subscriber creation.	11 years ago
Gerhard Jungwirth	d238758abc	MT#4967 Refactor Subscriber Forms Move Field e164 (Compound) and alias_number (Repeatable) to own Files because of multiple occurence.	12 years ago
Gerhard Jungwirth	ccd46c145e	Validate SIP username Mantis: 3891	12 years ago
Gerhard Jungwirth	1ab63eff83	Fix e164 validation on subscriber creation push_errors resulted in failing validation even when there was no error	12 years ago
Gerhard Jungwirth	c6362639f6	Suppress superfluous error messages "Value must be an integer" and reduce the number of error messages of e164 Subfields, by merging them into their parent Mantis: 3723	12 years ago
Andreas Granig	d1deb327c2	Reorder subscriber fields to have DT on top.	12 years ago
Andreas Granig	6d38442876	Filter terminated elements; visual cleanups. Don't show terminated resellers and contracts. Wrap customer details into accordion.	12 years ago
Andreas Granig	d9ff6d5555	Enforce minimum password lengths.	12 years ago
Andreas Granig	4b3d1caab6	Streamline forms in regards to submitid.	12 years ago
Andreas Granig	d111caee98	Implement editing of subscriber master data.	12 years ago
Andreas Granig	cc99beed76	Add usr_preferences on subscriber creation.	12 years ago
Andreas Granig	394595cd48	Implement subscriber creation.	12 years ago
Andreas Granig	0dfd3d3f54	Add tooltip support.	12 years ago
Andreas Granig	baa377581e	Some more layout cleanups.	12 years ago
Andreas Granig	8eabbecde9	Implement subscriber creation mock.	12 years ago

44 Commits (85be902c72bbddac24d2f70abb94e4a328c614e7)