Commit Graph

551 Commits (b91b9ef39ee02a1e3f0d9273bef5d790dc38361f)

Author SHA1 Message Date
fit2bot af9248ef7c
fix: 还原connection token 逻辑 (#8101)
3 years ago
feng626 611a00a5fa fix: 修复super user perm bug
3 years ago
Jiangjie.Bai 5f370c1c04 perf: 优化内置系统用户角色权限
3 years ago
ibuler 3e3835dc28 perf: 修改用户权限
3 years ago
ibuler f4ed4e1176 perf: 添加 temp token 排序
3 years ago
fit2bot a647e73c02
feat: 设置SessionCookieNamePrefix (#8071)
3 years ago
Jiangjie.Bai 97e59384e0 fix: connection token API 返回有效时间
3 years ago
fit2bot b610d71e11
feat: 添加 临时 password (#8035)
3 years ago
fit2bot c630b11bd5
fix: port str (#8055)
3 years ago
fit2bot f481463c64
feat: 添加Endpoint (#8041)
3 years ago
ibuler ffd98c6e3f fix: 修改 import
3 years ago
fit2bot 1f8ded49fa
feat: 工作台区分组织 (#8040)
3 years ago
ibuler d418c28e98 perf: 修改 base
3 years ago
Jiangjie.Bai 54d1996507 feat: 支持续期Connection Token
3 years ago
feng626 d856f1364a feat: 拉起ssh api
3 years ago
fit2bot 52709d2efa
feat: 企业微信、钉钉 工作台免密登录(飞书已实现) (#7855)
3 years ago
jiangweidong 03fdaa03e4 feat: 支持日语
3 years ago
Eric fc06295d04 perf: 优化 windows rdp 窗口显示
3 years ago
fit2bot ec9e5da653
fix: 修复apikey perm (#7918)
3 years ago
fit2bot 08ff8fa285
fix: login confirm bug (#7914)
3 years ago
fit2bot 34e75099a3
perf: 设置默认的角色,系统用户角色添加权限 (#7898)
3 years ago
fit2bot aa022a02c1
fix: 修复用户认证失败的详细信息显示 (#7886)
3 years ago
Jiangjie.Bai efb26132f6 fix: 修复sso用户登录失败的问题
3 years ago
ibuler 8839e6293b perf: 修改 mfa 地址
3 years ago
feng626 ca5708988a fix: 修复saml2 auth
3 years ago
Jiangjie.Bai b017e68a56
Perf: 优化RBAC权限树 (#7782)
3 years ago
ibuler 5081fb5fe7 perf: 优化perm tree, 并添加缓存
3 years ago
fit2bot a20884e2ad
perf: 修改 rbac tree (#7743)
3 years ago
Jiangjie.Bai 8a8ed90eef fix: 保留之前的jms_oidc_rp包
3 years ago
Jiangjie.Bai 75825f5baa fix: 删除jms_oidc_rp包中的表jms_oidc_rp_oidcuser
3 years ago
fit2bot dafc416783
Fix rbac (#7728)
3 years ago
Jiangjie.Bai 03afa4f974
Fix rbac (#7713)
3 years ago
Jiangjie.Bai edfca5eb24
Fix rbac (#7699)
3 years ago
fit2bot 63de4e1806
perf: 添加 is_org_admin (#7644)
3 years ago
ibuler 20cc8a124f perf: 修改connection token domain
3 years ago
ibuler db050e405d fix: 修改 migrations
3 years ago
fit2bot e259d2a9e9
fix: fix rbac to dev (#7636)
3 years ago
xinwen 35c6b581e2 feat: 远程应用支持磁盘挂载
3 years ago
ibuler 824d10ce93 pref: connection token 添加 secret
3 years ago
jiangweidong ab34b9906e perf: 切割一次就可以了
3 years ago
jiangweidong 755fa8efa8 perf: 兼容不同版本间JumpServer获取的SAML2协议用户属性
3 years ago
Michael Bai 8085db7acc feat: 增加系统设置(安全)控制第三方认证用户是否进行MFA认证
3 years ago
xinwen 1faba95a48 fix: 修复 xrdp 连接资产时会生成用户登录日志
3 years ago
fit2bot c43ad981bd
perf: 优化写法 (#7498)
3 years ago
jiangweidong 106bb9b63d perf: SAML2属性映射去掉域名前缀
3 years ago
xinwen cce34f4939 fix: 用户登录失败时,登陆日志中的认证方式不准确
3 years ago
fit2bot 4343b6487d
fix: 修复登录页输入 mfa 时不支持 某 mfa 的错误提示 (#7495)
3 years ago
xinwen 414137cd73 fix: 三方认证绑定发通知文案
3 years ago
xinwen 1e3a15a3d0 feat: 三方认证绑定发通知
3 years ago
Michael Bai de9516dee5 feat: 应用授权增加Action动作控制
3 years ago
xinwen 89cad224c5 fix: SSO 限制用户删除
3 years ago
Michael Bai 5aed04d58b fix: 修改SAML2.0 Logo
3 years ago
ibuler b92530f0b9 perf: 优化通知,对支持 markdown 的发 markdown
3 years ago
ibuler eb3165f8e7 perf: 优化 saml
3 years ago
Michael Bai 4cbf6dd5e6 fix: 修复获取系统用户认证信息API
3 years ago
jiangweidong 5139f9c4b9 feat: saml2认证支持https协议
3 years ago
ibuler 330917df4c fix: 修复 saml2 登陆的问题
3 years ago
ibuler 5024d0d739 perf: 优化 saml2 log
3 years ago
jiangweidong c5013dcbd6
feat: saml2协议单点登录支持在页面上配置saml2协议的高级配置 (#7362)
3 years ago
ibuler b6249e9a63 fix: 修复登录时跳转问题
3 years ago
ibuler ade3f3ae6c fix: 修复需要设置 mfa 的 bug
3 years ago
fit2bot 3962af7c4f
feat: 支持saml2协议的单点登录,合并代码 (#7347)
3 years ago
xinwen 16fae00e0e feat: xrdp 远程应用
3 years ago
ibuler 84bce19a92 perf: 去掉登录页面更好
3 years ago
ibuler 7f0ad7e27f fix: 修复 oidc cas 登录时跳转问题
3 years ago
ibuler 5ace5a752e fix: 修复 cas/oidc 登录 MFA 产生的bug
3 years ago
ibuler 1132c6a4e4 fix: 修复 mfa radius 登录的bug
3 years ago
feng626 24d0d52a0a perf: 优化ip黑白名单
3 years ago
fit2bot 086ecfc046
perf: 优化全局ip限制逻辑 (#7220)
3 years ago
fit2bot 8af88cd2c6
fix: 修复otp verify msg引起的500 (#7210)
3 years ago
ibuler cc2d47e6dc perf: 修复首页登录mfa错误提示
3 years ago
fit2bot ed01f2f1fb
fix: 修复xrdp连接时报错 (#7202)
3 years ago
ibuler cb1c906db4 fix: 修复登录时没有绑定mfa,没有跳转的问题
3 years ago
xinwen 9a7919f3ac fix: 更新公钥消息不对
3 years ago
feng626 90477146ed feat: 添加全局ip黑名单
3 years ago
ibuler 353b66bf8f fix: 修复创建token的问题
3 years ago
xinwen b28ce9de7a feat: xrdp session bpp 读取环境变量
3 years ago
fit2bot 17303c0550
pref: 优化MFA (#7153)
3 years ago
xinwen bac974b4f2 feat: 异地登录提醒可配置是否启用
3 years ago
feng626 55775f0deb perf: 异地登陆去掉本地判断
3 years ago
feng626 2e4b6d150a fix: 登录复合浏览器不兼容
3 years ago
feng626 380226a7d2 fix: 用户登陆mfa code为空限制
3 years ago
xinwen 7d56678a8e fix: 修复登录次数出现 0
3 years ago
ibuler cd5094f10d perf: 优化通知中的连接点击
3 years ago
fit2bot c244cf5f43
pref: 修改使用的消息内容 (#7061)
3 years ago
feng626 d1a3d31d3f feat: 客户端协议内容添加rdp文件名
3 years ago
ibuler 10f4ff4eec fix: 修复工单通知内容bug
3 years ago
ibuler 25ea3ba01d perf: 修改sdk位置
3 years ago
ibuler 072865f3e5 perf: 优化修改 sdk 位置
3 years ago
fit2bot 00d434ceea
perf: 优化消息通知 (#7024)
3 years ago
fit2bot 9acfd461b4
feat: user login acl (#6963)
3 years ago
feng626 9424929dde fix: sms bug
3 years ago
Michael Bai af2a9bb1e6 fix: 修复用户登录失败未记录日志的问题
3 years ago
fit2bot 63638ed1ce
feat: 首页的 chanlege 和 MFA 统一 (#6989)
3 years ago
fit2bot fa68389028
perf: 去掉单独的flash msg (#7013)
3 years ago
fit2bot 5d8818e69e
feat: 添加资产授权用户API、资产授权用户的授权规则API (#7008)
3 years ago
xinwen 77521119b9 fix: 修改 oauth 认证提示信息
3 years ago
xinwen 63ca2ab182 fix: 修复 traceback 问题
3 years ago
xinwen 6e0341b7b1 feat: xrdp挂载受授权的上传下载控制
3 years ago
halo 87dcd2dcb7 feat: 增加关闭第三方登录跳转配置参数
3 years ago
feng626 5588eab57e feat: 用户异地登陆
3 years ago
ibuler cafbd08986 perf: 修改啊
3 years ago
ibuler b436fc9b44 perf: 优化登录
3 years ago
ibuler 26fc56b4be perf: 优化登录html
3 years ago
ibuler da2dea5003 perf: 登录错误提示颜色
3 years ago
ibuler 2c46072db2 fix: 修复serializer问题
3 years ago
xinwen a784a33203 fix: 去掉手动系统用户提示输入密码
3 years ago
ibuler ef7b2b7980 perf: 优化登录错误提示
3 years ago
feng626 0f7c8c2570 fix: 工单复核bug
3 years ago
xinwen b30123054b fix: xrdp 手动登录系统用户仍然不需要输入密码
3 years ago
xinwen 1c4b4951dc fix: 一些提示
3 years ago
feng626 6507f0982c fix: 登陆复核返回后 删除工单
3 years ago
feng626 f762fe73ff fix: 工单拒绝清除mfa
3 years ago
xinwen d49d1ba055 perf: oauth2 登录不再限制只能本地用户
3 years ago
ibuler 8ac7d4b682 perf: 优化登录backends
3 years ago
xinwen 29645768a0 fix: 登录复核没有日志
3 years ago
feng626 17a5e919d5 fix: ticket bug
3 years ago
xinwen 09d51fd5be fix: OTP_IN_RADIUS 与 mfa 冲突
3 years ago
xinwen 58a10778cd fix: 修复短信问题
3 years ago
feng626 345c0fcf4f fix: 修复工单流bug 添加登陆审核配置
3 years ago
Michael Bai 42c3c85863 fix: 修改翻译
3 years ago
fit2bot 81000953e2
fix: 修改消息订阅 (#6789)
3 years ago
xinwen b1fceca8a6 feat: 添加短信服务和用户消息通知
3 years ago
xinwen dac3f7fc71 refactor: 修改 xrdp 挂载磁盘参数名称
3 years ago
fit2bot 07179a4d22
feat: 页面配置serializer版 (#6750)
3 years ago
xinwen 3fb368c741 fix: 修复 xrdp domain 不生效
3 years ago
fit2bot fca3a8fbca
perf: 绑定MFA认证密码时对密码进行加密传输 (#6776)
3 years ago
xinwen c1375ed7cb feat: xrdp 支持挂载本地磁盘(仅适用于 win)
3 years ago
健健 0b1a1591f8
从 __all__ 中删除 RDPFileSerializer (#6727)
3 years ago
ibuler 6241238b45 feat: sso支持验证mfa
3 years ago
fit2bot 0f87f05b3f
feat: 工单多级审批 + 模版创建 (#6640)
3 years ago
xinwen 7d123ff8c5 fix: 登录时验证码卡住
3 years ago
xinwen 7b4faccf05 fix: 飞书没有翻译
3 years ago
fit2bot 54751a715c
feat: 添加 飞书 (#6602)
3 years ago
xinwen cf3df951a9 fix: xrdp 连接可以指定是否全屏
3 years ago
ibuler d93f3aca51 perf: 修改支持客户端拉起
3 years ago
fit2bot 905d0d5131
perf: 统一应用树 (#6535)
3 years ago
feng626 d347ed9862 perf: 优化代码
3 years ago
feng626 8611f765a3 feat: 增加rdp 云端唤醒 api
3 years ago
Bai c21217d50c perf: 添加配置项 LOGIN_REDIRECT_TO_BACKEND
3 years ago
Bai e44c8ae940 perf: 优化登录跳转flash时间间隔可配置;0表示直接跳转
3 years ago
xinwen 36ad42beb2 fix: xrdp 设置分辨率不生效
3 years ago
xinwen 8375008cfa fix: 用户无效时,企业微信&钉钉扫码 500
3 years ago
fit2bot ec8dca90d6
refactor: 整合系统用户和管理用户 (#6236)
3 years ago
xinwen a9f814a515 fix: 过期用户登录提示不明确
3 years ago
xinwen c4bbeaaccc feat: rdp 添加授权过期自动断开
3 years ago
ibuler 71a7eea8ad perf: 修复next为空可能会导致的bug
3 years ago
ibuler 2b927caa60 fix: 修复oidc登录的问题
3 years ago
ibuler 053d958f9a fix: 修复app无法下载xrdp文件
3 years ago
ibuler 8d25d0a653 fix: 修复登录页面的 i18n 问题
3 years ago
ibuler 8d3c1bd783 perf: 优化获取token secret, 重新校验权限
4 years ago
ibuler db99ab80db perf(auth): 授权token形式登录,支持记录登录日志
4 years ago
fit2bot 891a5157a7
perf: 优化token时间 (#6252)
4 years ago
ibuler 34b2a5fe0b perf: 修复上次引起的小bug
4 years ago
ibuler de6908e5a6 perf: rdp file添加domain
4 years ago
ibuler 33a29ae788 perf: 优化 xrdp setting
4 years ago
ibuler a2eb431015 perf: 优化自动分辨率
4 years ago
ibuler e8b3ee4565 perf: 优化系统用户,支持用户设置临时密码
4 years ago
xinwen 3eba92548b fix: 修改企业微信&钉钉一些小问题和翻译
4 years ago
xinwen ba28f3263d fix: 企业微信&钉钉解绑报错
4 years ago
xinwen 2e118665f5 fix: 过期用户退出登录
4 years ago
xinwen 3743761024 fix: 修复绑定企业微信&钉钉的一些问题
4 years ago
Bai 6a4bc1f8b3 perf: 修改翻译
4 years ago
xinwen b37c8b09bf refactor: 添加一些翻译&修正字段WECOM_SECRET
4 years ago
xinwen c16319ec48 feat: 添加企业微信,钉钉扫码登录
4 years ago
ibuler 4d6d4cbc22 perf: 优化登录,cas, openid 自动登录
4 years ago
ibuler 8ca2522c71 fix: 修改tokent中信息中没有返回 Protocols 的问题
4 years ago
ibuler 5e5cd80bc2 perf: 优化登录前修改密码
4 years ago
fit2cloud-jiangweidong e3511df4f8
feat: 管理员可以设置用户是否下次登录需修改密码 (#6006)
4 years ago
老广 4a4d5f3243
Merge pull request #5999 from jumpserver/pr@dev@fix_rdp_file_addr
4 years ago
ibuler 4563743f00 fix: 修复下载rdp文件失败的问题
4 years ago
ibuler 7b679f3e82 fix(task): 修复推送过期的问题
4 years ago
xinwen f11d3c1cf2 fix: 过期用户登录提示无效
4 years ago
xinwen f0bad5f107 fix: 登录页面测试 cookie 失败
4 years ago
xinwen 607b7fd29f feat: MFA 登录次数限制
4 years ago
xinwen b4ef7bef55 fix: 授权资产列表 platform 应该显示名称
4 years ago
xinwen f34fb5d9d5 fix: 访问 tokens 接口更新用户最后登录时间
4 years ago
ibuler 06ed358fbc perf: 优化acl提示
4 years ago
xinwen 2562386fe0 perf: delete_test_cookie
4 years ago
xinwen adf5c4a7b9 fix: LDAP 自动创建的用户有多余的空格
4 years ago
Bai dfa2f7d6c9 fix: 修复用户登录复核工单org_id为ROOT
4 years ago
ibuler ea325f6e52 perf(users): 优化用户认证来源
4 years ago
Bai bd8a1a7d0e fix: 修复MFA绑定失败的问题(通过修改session中auth_backend的key实现;django.auth.get_user时校验backends路径失败返回AnonymousUser)
4 years ago
Jiangjie.Bai 64641a18e6
feat: ACL (#5696)
4 years ago
ibuler 25dfce621b perf: 优化,添加登录页面图片链接到 github
4 years ago
fit2bot 7b2f813e7f
feat: 支持修改忘记密码重置密码的连接 (#5700)
4 years ago
ibuler 81170b4b7b perf: 优化登录页面,非常给力
4 years ago
fit2bot 0aa2c2016f
perf(project): 优化命名的风格 (#5693)
4 years ago
fit2bot a7ab7da61c
feat: 添加限制用户只能从source登录的功能 (#5592)
4 years ago
fit2bot a4e635bff0
feat: 添加下载rdp文件的api (#5637)
4 years ago
ibuler bb9790a50f feat: 为rdp 添加一个api
4 years ago
ibuler 93474766f6 perf(permission): 优化权限控制,显式的声明权限
4 years ago
ibuler 23afe81ff5 perf(authentication): 优化connection token的使用
4 years ago
Bai efb9f48c6f perf: 删除`pycryptodome`依赖包安装(因为`pycryptodome`和`pycrypto`安装包目录冲突);只安装 `pycryptodomex`依赖包; 修改 `from crypto` 为 `from cryptodome`
4 years ago
Bai 7c55d462cd fix: 修复工单翻译和登录确认工单开启问题
4 years ago
ibuler 7b8f932dcd perf: 去掉几个不用的api
4 years ago
fit2bot be7a93d81a
feat: 在登录页面添加CAS/OpenID等第三方登录链接;不再自动跳转登录地址;统一开源/企业版登录页面; (#5389)
4 years ago
ibuler f04e2fa090 fix: bug
4 years ago
fit2bot 430e20a49c
feat: 优化工单模块 (#5361)
4 years ago
Jiangjie.Bai 3b056ff953
reactor&feat: 重构工单模块 & 支持申请应用工单 (#5352)
4 years ago
Bai b3642f3ff4 fix: 修复LDAP用户登录(未找到)时循环调用问题
4 years ago
xinwen 8e12eebceb fix: 获得 oidc acs 等认证方式失败
4 years ago
Bai e056430fce fix: 修复只配置DC域时,LDAP用户认证失败的问题
4 years ago
fit2bot d4feaf1e08
fix: 修复由于更新django captch版本引起的css丢失问题 (#5204)
4 years ago
xinwen 79a371eb6c perf(auth): 密码过期后,走重置密码流程 #530
4 years ago
fit2bot 7c7de96158
feat(login): 登录日志要体现用哪个backend登录的 #4472 (#5199)
4 years ago
fit2bot 6d39a51c36
[fix]: 兼容django 3 (#5038)
4 years ago
fit2bot f04544e8df
feat(MFA): 修改文案Google Authenticator为手机验证器 (#4964)
4 years ago
xinwen 38f7c123e5 fix(audits): sso 登录日志没有 type
4 years ago
xinwen 7031b7f28b fix(auth): 修复用户登录失败次数出现0次
4 years ago
Bai 6e91217303 perf(authentication): 修改用户登录页面,使用其他方式认证时点击忘记密码提示联系管理员
4 years ago
xinwen f596b65ed7 feat(auth): sso 生成的地址重复访问的时候,重定向到用户指定的 next 地址
4 years ago
ibuler b8ff3b38bf fix: 修复middleware引起的bug
4 years ago
fit2bot d4037998c8
perf: 优化middleware的使用 (#4707)
4 years ago
xinwen 9f6540afe3 fix(tickets): 调整登录确认工单 title
4 years ago
ibuler 832bb832ce fix(authentication): 修复cas退出的bug
4 years ago
ibuler 501329a8db fix: 再次修复
4 years ago
ibuler 8913aacd1e fix(authentication): 修复同时开启radius, openid引起的问题
4 years ago
peijianbo 3941539408 fix(authentication):修复开启二次认证时,地址跳转出错问题
4 years ago
xinwen 605db2d905 fix(auth): 调整登录复核工单 title
4 years ago
peijianbo 4090a0b123 feat(uathentication):登录表单回车可直接提交表单
4 years ago
peijianbo 516e2309c0 bug(authentication): 登录表单仅提交时加密(xpack)
4 years ago
peijianbo 4688e46f97 feat(authentication):将cas认证通过的登录日志记录到系统
4 years ago
peijianbo 1299f3da75 feat(authentication):登录表单仅提交时加密
4 years ago
fit2bot 172b6edd28
feat(user):同一个账号仅允许在一台终端设备登录 (#4590)
4 years ago
fit2bot 9cb5985947
fix(orgs): 创建组织用户不必填 (#4515)
4 years ago
ibuler 0fd2f18240 fix(authentication): 修复登录时有时解密失败
4 years ago
xinwen 9ca8ab218c fix(authentication): 登录复核Not found
4 years ago
xinwen 5a9c91d9dd fix(authentication): 组织成员禁用再激活,登录报错 #239
4 years ago
xinwen 962ea67b84 refactor(authentication): 密码解密抽取成方法
4 years ago
xinwen 54fe4835f6 fix(authentication): `SSO`登录添加 `next_url`
4 years ago
xinwen a25da8d479 feat(authentication): 超级管理员密码不能是`admin`
4 years ago
xinwen f6a4253936 feat(ticket): 工单关闭生成 Comment
4 years ago
ibuler 8ee7230ead fix(auth): 修复radius decode error的问题
4 years ago
xinwen 90f03dda62 feat(authentication): 类似腾讯企业邮单点登录功能
4 years ago
xinwen 2ed0927b18 fix(login): 用户登录堡垒机的时候偶尔会出现“密码解密失败”,导致无法正常登录。 #4408
4 years ago
OrangeM21 2f11a70341 fix(authentication): 调整登录页面样式
4 years ago
xinwen c277aec561 feat(authenticaion): 添加登录页面验证码与MFA开关
4 years ago
Bai 3e541162e3 fix(authentication): 修复用户认证Radius认证中参数传递错误问题 *kwargs -> **kwargs
4 years ago
BaiJiangJie 0fca33d874
fix(radius): 修复radius认证失败问题 (#4342)
4 years ago
Bai b46e772d09 feat(login password ecrypt): 登录密码加密传输 4
4 years ago
Bai 183df82a75 feat(login password ecrypt): 登录密码加密传输 3
4 years ago
Bai e17d875206 feat(login password ecrypt): 登录密码加密传输2
4 years ago
Bai 71ee33e3be feat(login password ecrypt): 登录密码加密传输
4 years ago
Bai f4fa011714 [Update] 修改mfa校验code无效翻译
5 years ago
ibuler 27d906a877 feat: 去掉js i18n catalog
5 years ago
ibuler 5bacab7475 fix: 重置密钥到auth中
5 years ago
ibuler 68ccaf0cb3 feat: 去掉第一次登录的那个导航
5 years ago
ibuler 96551856a2 [Update] 部分view放到auth中
5 years ago
ibuler a0e6d09770 Merge branch 'lina' of github.com:jumpserver/jumpserver into lina
5 years ago