ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Kirill Solomko	bbd44f16fa	MT#60858 add /api/passwordchange endpoint * the new endpoint accepts new_password fields and enables for authenticated user a mechanism to quickly change their password * the global password validation rules are enabled * returns 204 No Content * if user's password is expired, the endpoint is the only accessible for the user to change the password and unlock other endpoints. * a few fixes in validate_password() to correctly fetch provisioning subscriber for password change scenarios and webpassword field Change-Id: I906fcfe5c780b850d322b46b445b54c054767673	9 months ago
Kirill Solomko	b041888807	MT#60656 add max_age password validation support * UI: password are now validated against $c->config->{security}{password}{web_max_age_days} (unless it's 0) and if the password is expired the user is redirected automatically to /changepassword page, and after successful password change back to the original page. * API: if password is expired all API requests will be returning 403 Forbidden "Password expired", except PUT/PATCH to /api/admins or /api/subscribers with the new password in place. * successful login on the UI now redirects to /dashboard instead of / (to prevent unintended redirect to v2) Change-Id: I075f8e17cc9b0658d6b3b3d526ca5b379d050ce4	10 months ago
Kirill Solomko	e6b29d3e7b	MT#59449 fix password validation enabled/disabled, admins * correctly detect and skip password validation when sip_validatation or web_validation is not enabled respectively * better detect web password for admin users * /api/admins PUT/PATCH now also correctly checks last used passwords Change-Id: I9a6fa9b8e30ae2b81d2852dec0e1f9d858be13ef	10 months ago
Kirill Solomko	d9f283cbc8	MT#59449 enhance password validation and handling * passwords are now validated based on - minlen - maxlen - min lower case chars - min uppper case chars - min digits - min special chars * Data::Password::zxcvbn is used to calculate password score and reject passwords with score < 3 as weak (this library is ported from the Dropbox password validation) * Add password journals and check last used passwords in the journals * Improve password generator javascript function to generate a password with at least 4 of each of the char group types. * Currently affected are subcriber and admin entry creation or modification via UI/API * NGCP::Utils::Auth add optional bcrypt_cost support as last argument for generate_salted_hash and get_usr_salted_pass Change-Id: I100c25107d91741d5101bc58d29a3fa558b0b017	10 months ago
Kirill Solomko	cc10506b2e	TT#129162 fix subscriber webpassword field validation * 'webpassword' field is now also validated for invalid (non-ascii) characters * Fix multiple APP input field validation erros to comma joined. * Adjust 'webpassword' field validation errors to have better readability when there are multiple validation errors Change-Id: I21536f97a4da78cc5192a3abd8cd5adef1b819ec	4 years ago
Flaviu Mates	c0638b5a71	TT#103400 Change uri validation to be in accordance with RFC in the Call Routing Verification form Change-Id: I4db5fa304d003bdf0a5f7f2fb021e9ffb9e1c89b	5 years ago
Gerhard Jungwirth	6e8dd1a2a1	TT#37221 fix perlcritic error Subroutines::ProhibitExplicitReturnUndef this is to clean the Sipwise TAP tests for this repo the critical places where undef is really the intended return value (because a scalar should always be returned) the rule has been overridden Change-Id: I66e217a03a00e0f366db9c0cbc5007dd15cd9f96	7 years ago
Andreas Granig	373dd4c202	TT#21818 Check passwords against libcrack and user * When enabling password_sip/web_validate, panel checks password against username (web and sip, respectively), and runs it through cracklib to enforce a reasonably strong password. * Add auto-generate buttons next to web/sip password. Change-Id: I11f5f6c2d69dc5658f298094f7d17d26d0a26ee1	8 years ago
Kirill Solomko	185320375a	MT#22229 CallRoutingVerify accept chars in input numbers Change-Id: Ia2d7a2f924746800d7fd476695d06e4fa06bfed3	9 years ago
Kirill Solomko	ecc390c618	MT#19263 add optional "sip:" prefix for caller/callee input Change-Id: I65b6229aab8de6a6763580757327979365945121	9 years ago
Kirill Solomko	63dd55e97b	MT#19113 CallRoutingVerify: add number/uri validation for caller/callee Change-Id: I190cceceaa66ab00d44e5a273582001fd1fff1b9	9 years ago
Rene Krenn	c378681a24	MT#13903 balance interval catchup and resize WIP + synchronized contract balance catchup + balance interval resizing upon profile package transitions + dynamic interval length, interval start, carry-over propagation, .. + end-of-month 'preserve' mode correction for strictly aligned month intervals for start_mode=customer "create" timestamp + new api/balanceintervals resource to inspect contracts' balance interval histories + updated affected panel UI controllers + test case with time warps using Time::Fake caveats: - creating an invoice for a given 'period' (month) has to be refactored to select a disitnct balance interval. right now it takes the last interval in the month specified. - generate_invoice.pl is broken and needs a major refactoring Change-Id: I7bb54a83b76e510b1baa573a986d05400a7fec1e	10 years ago
Rene Krenn	2537819f0d	MT#12643 billing networks and multi bill prof WIP -properly validate billing mapping intervals -api/contracts and api/customers complete +the problem with updating the "prepaid" preference remains at the moment +billing_mappings field contains future (editable) mappings only, the full schedule is given in a separate field +hal-links to all occurring billing profiles and networks -extended tests: api-customer.t and api-contract.t -api-billingnetworks.t test -billing networks panel controller +search by enclosed IP address -panel UIs for billing networks, customers, contracts +past billing mapping intervals that cannot be edited are displayed by a seperate hfh "block" part of the billing_profiles repeatable -profile packages api, UI +terminating billing profiles (MT#8645) will be broken +fixed now: profile cannot be terminated unless there are: -zero non-terminated customers, whose mappings contain the profile with future or open end -zero profile packages, that link to the profile in either one of their initial-, underrun- or topup profile sets +panel edit should work, termination wip +topup_profiles w/o amounts +contracts/customers API profile_package_id field: +apply the package's initial profiles +api/customer and api/contract profile definition modes (id/profiles/package) +api OK, api-customer.t tests +customer and contract panel UI with selector to specify actual billing mapping, schedule or profile package (same as api) +terminate logic harmonized: profiles, networks, packages +api tests updated +prepare for merging: cleanup, enable tests Change-Id: I6c0dec72f490b5731fc673cd393d6aeb08dd8143	10 years ago
Andreas Granig	a431f6bf79	MT#10309 Allow passwords with less than chars.	11 years ago
Andreas Granig	2bf4fe1e92	MT#6831 Implement global password policy.	11 years ago

15 Commits (cca1477f9a81f2c65f220e367cbbf8112da014d9)