deblan/PowerDNS-Admin
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
1033 commits 4 branches 6 tags 35 MiB
Commit graph

221 commits

Author SHA1 Message Date
Steffen Schwebel d23a57da50 handle decode error, output warning 2021-05-25 12:35:53 +02:00
Steffen Schwebel 4180882fb7 show traceback 2021-05-21 15:10:17 +02:00
root bbbcf271fe remove otp token from login page, depending on Setting 2021-05-20 15:21:56 +02:00
jyoung15 32983635c6
Delete blank comments. Fix for ngoduykhanh/PowerDNS-Admin#919 (#920) 2021-05-07 23:43:44 +02:00
Ian Bobbitt 39cddd3b34
SAML improvements for Docker (#929) 
* Fix typo in managing user account membership with SAML assertion

* Support more config options from Docker env.

* Improve support for SAML key and cert from Docker secrets

Co-authored-by: Ian Bobbitt <ibobbitt@globalnoc.iu.edu>
 2021-05-07 23:36:55 +02:00
jodygilbert b66b37ecfd
delete history records when a domain is deleted (#916) 
Co-authored-by: Jody <jody.gilbert@edftrading.com>
 2021-05-07 22:55:45 +02:00
jodygilbert 98db953820
Allow user role to view history (#890) 2021-03-27 19:33:11 +01:00
jbe-dw 86700f8fd7
upd: improve user api (#878) 2021-03-16 19:39:53 +01:00
R. Daneel Olivaw 46993e08c0
Add punycode (IDN) support (#879) 2021-03-16 19:37:05 +01:00
jodygilbert 4c19f95928
Improve account creation/permission handling based on Azure oAuth group membership (#877) 2021-01-31 11:31:56 +01:00
jbe-dw 3a4efebf95
enh: display b64 encoded apikey on creation through the API (#870) 2021-01-24 09:43:51 +01:00
jodygilbert 7f86730909
allow-server-side-sessions (#855) 2021-01-24 09:09:53 +01:00
jbe-dw 8f6a800836
fix: account API output^ (#874) 2021-01-24 09:08:32 +01:00
jbe-dw 3cd98251b3
fix: API (apikeys) behaviour does not match swagger definition (#868) 2021-01-24 09:06:51 +01:00
jbe-dw 54b257768f
feat: Implement apikeys/<id> endpoint from swagger spec. (#864) 2021-01-16 20:49:41 +01:00
jbe-dw 718b41e3d1
feat: limit zone list for users on servers endpoint (#862) 2021-01-16 20:45:02 +01:00
jbe-dw dd0a5f6326
feat: Allow sync domain with basic auth (#861) 2021-01-16 20:37:11 +01:00
jbe-dw c3d438842f
fix: user jsonify to set response headers to json (#863) 2021-01-16 20:29:40 +01:00
jbe-dw 33e7ffb747
fix: Follow PDNS Api return format (#858) 2021-01-07 23:26:48 +01:00
jbe-dw 2c18e5c88f
fix: User role was not assigned upon creation (#860) 2021-01-07 23:07:20 +01:00
WhatshallIbreaktoday c6e0293177
Tweaks to allow user apikey usage with powerdns terraform provider (#845) 2020-12-07 22:06:37 +01:00
Andrew Nimmo 680e4cf431
Avoid Safari telephone number detection 
Using PowerDNS-Admin on an iPad with Safari can cause incorrect identification of some record data as a telephone number. When submitted, the record with the incorrectly identified data causes an error because of the additional markup present on the submitted data. This was noted in particular with the SOA record. 

The proposed change is to add the Safari meta tag to disable format detection:
https://developer.apple.com/library/archive/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html#//apple_ref/doc/uid/TP40008193-SW5
 2020-10-14 17:21:59 +02:00
Khanh Ngo 70b1accaa0
Merge pull request #801 from cyso/pr/sync-accounts 
Implement account update method
 2020-10-12 12:48:22 +02:00
Khanh Ngo 7254a94497
Merge pull request #825 from ngoduykhanh/adjustment 
Add index on history table
 2020-10-11 13:11:09 +02:00
Khanh Ngo 3034630bc0
Merge pull request #761 from ngoduykhanh/record_rollback 
Fix #752 - Rollback the removed record if apply operation failed
 2020-10-11 13:01:26 +02:00
Khanh Ngo d72709e0f4
Add index on history table 2020-10-11 12:49:28 +02:00
Khanh Ngo 76562f8a46
Fix typo 
Remove space from oidc_oauth_last_name default value
 2020-10-10 21:03:34 +02:00
Khanh Ngo 0dfced4968
Upgrade pip packages 2020-10-10 20:27:09 +02:00
Khanh Ngo 55ad73d92e
Merge pull request #800 from cyso/pr/oidc-account 
OIDC User and Account management during login
 2020-10-10 14:32:14 +02:00
Khanh Ngo a679073928
Merge pull request #773 from terbolous/azure-oauth 
Add Account creation/permission handling based on Azure oAuth group membership
 2020-10-10 14:20:26 +02:00
Khanh Ngo b5fc9045f2
Merge pull request #766 from frei-style/sort_accounts 
Sort accounts by name on 'New Domain' and domain 'Admin'
 2020-10-10 14:18:02 +02:00
Khanh Ngo f3bcf1b834
Merge pull request #763 from RoeiGanor/fix_gravatar 
Fix gravatar offline mode
 2020-10-10 14:16:57 +02:00
Khanh Ngo b8ffb1dae9
Merge pull request #804 from RoeiGanor/api_key 
Add API Key to the UI
 2020-10-10 14:11:09 +02:00
Tom Hetmer cf62658e19
do not fail with wildcard PTRs 2020-09-10 01:18:07 +07:00
root 74b89b1b7e Add API Key to the UI 2020-08-08 13:41:18 +00:00
Nick Douma 70c2744f29 Log amount of accounts found in PowerDNS 2020-08-06 17:45:05 +02:00
Nick Douma 3c59ba6f84 Account does not have username 2020-08-06 17:44:54 +02:00
Nick Douma b4d7f66e29 Use Account.delete_account to also handle unlinking of Users 2020-08-06 16:33:00 +02:00
Nick Douma f9f966df75 Allow for configuration of logout url 2020-08-06 15:29:02 +02:00
Nick Douma 27f5c89f70 Manage Account membership on oidc login 2020-08-06 15:28:54 +02:00
Nick Douma 7ef6f5db4e Check if plain_text_password is falsish instead of empty string 2020-08-06 15:28:45 +02:00
Nick Douma ab6480a4b4 Update user with info from oidc during login 2020-08-06 15:28:27 +02:00
Nick Douma 0ef57b2f9f Implement account update method 
Allow syncing of all known accounts from PowerDNS, in the same
way that Domain().update() does for domains.
 2020-08-06 15:22:28 +02:00
Erik Weber 22eabef06a
Use the correct matching group 2020-07-03 11:01:17 +02:00
Erik Weber e993422106
Add regex matching for group/account description 2020-07-03 10:55:06 +02:00
Erik Weber 25db119d02
Add Account creation/permission handling based on Azure oAuth group membership 2020-07-03 08:55:31 +02:00
Manuel Frei 9946f72a85 Order accounts by name on 'New Domain' and domain admin 2020-06-28 01:59:12 +02:00
Roei Ganor 0f9a5f8652 Fix gravatar offline mode 2020-06-24 11:17:45 +03:00
Khanh Ngo f3f91d56e2
Adjust html code 2020-06-20 11:08:14 +07:00
Khanh Ngo 1b4fe8935d Merge branch 'master' into record_rollback 2020-06-20 10:17:52 +07:00
Khanh Ngo 4e63f8380b
Merge pull request #756 from RoeiGanor/master 
Changed default TTL
 2020-06-20 09:55:41 +07:00
Khanh Ngo 1f4580a27a
Log failed domain apply operation 2020-06-20 09:51:30 +07:00
Khanh Ngo 5123d542e4
Fix #752 - Rollback the removed record if apply operation failed 2020-06-19 09:34:33 +07:00
Khanh Ngo a3fd856dd8
Code refactoring and bug fixes 2020-06-19 08:47:51 +07:00
Roei 84ae753db2 Changed default TTL 2020-06-14 09:13:01 +03:00
Ymage 4e39d5a461 Fix session clearing 2020-05-29 17:41:20 +02:00
Khanh Ngo cfc8567180
Merge pull request #742 from nfantone/feat/remote-user 
Support authenticating using REMOTE_USER environment variable
 2020-05-26 15:36:47 +07:00
Nicolás Fantone 39db31b5ae Add missing ensure_list util function 2020-05-25 14:16:33 +01:00
Khanh Ngo 831fbf3cb3
Merge pull request #738 from ymage/url_for_static_assets 
Add url_for() for static assets
 2020-05-24 21:22:33 +07:00
Khanh Ngo 125883330e Merge branch 'pull/679' 2020-05-24 21:19:04 +07:00
Khanh Ngo 73c267848c
Merge branch 'master' into url_for_static_assets 2020-05-24 21:16:00 +07:00
Khanh Ngo 5ac126f349
Merge pull request #739 from sshipway/sorting 
Sort rrset members by content before comparison to ensure correct compare
 2020-05-24 21:06:51 +07:00
Nicolás Fantone 52298f8289 Support login in through REMOTE_USER environment variable 
Support redirecting remote users to logout URL and clearing remote login cookies
 2020-05-22 15:31:24 +01:00
Khanh Ngo a598c52729
Fix base template 
current_user is Anonymous when we are not authenticated. Need to check if
email attribute is defined before using it
 2020-05-22 17:37:39 +07:00
Steve Shipway 3476c8a9ec SJS Sort rrset members by content before comparison to ensure correct compare. Also default comment to blank entry rather than missing entry, to allow sorting to work correctly. 2020-05-20 16:21:28 +12:00
Ymage 99f12df748 Add url_for() for static assets 2020-05-20 00:03:36 +02:00
Khanh Ngo 0ef132a7be
Update swagger yaml 2020-05-17 21:00:13 +07:00
Khanh Ngo fd0485d897 Merge remote-tracking branch 'keesbos/mgmt' 2020-05-17 19:43:45 +07:00
Khanh Ngo ab7e1eb71b
Fix email confirmation template 2020-05-17 16:11:52 +07:00
Khanh Ngo edb2a354d1
Merge pull request #725 from Monogramm/ui/favicon 
fix: Add favicon to fix #724
 2020-05-17 13:47:18 +07:00
Khanh Ngo 78245d339f
Merge pull request #717 from RoeiGanor/master 
OIDC custom claims
 2020-05-17 13:44:52 +07:00
mathieu.brunot 9f562714f2
fix: Add favicon to fix #724 
Signed-off-by: mathieu.brunot <mathieu.brunot@monogramm.io>
 2020-05-09 23:56:19 +02:00
root 2044ce4737 oidc custom claims 2020-05-04 07:12:48 +00:00
Khanh Ngo 33eff6313f
Fix loading zone with Slave type 2020-05-02 09:41:01 +07:00
Khanh Ngo 978c0b6c62
Merge pull request #711 from terbolous/azure_oauth 
Azure oauth fixes
 2020-05-01 10:25:27 +07:00
Roei Ganor 483c767d26 Offline installation and searchable inputs 2020-04-30 17:20:37 +00:00
Erik Weber b03cbdea65
Azure oauth: Graph api calls it mail, not email 2020-04-30 12:15:19 +02:00
Erik Weber b8442c4c5c
Azure oauth: remove preferredName from query 2020-04-30 12:14:32 +02:00
Khanh Ngo 9e8401ae46
Merge branch 'master' of github.com:ngoduykhanh/PowerDNS-Admin 2020-04-30 10:17:32 +07:00
Khanh Ngo 02692c7759
Code formating 2020-04-30 10:17:08 +07:00
Khanh Ngo bbd00865dc
Merge pull request #681 from eht16/fix_create_template_from_zone_url 
Remove $SCRIPT_ROOT from 'admin.create_template_from_zone' URL
 2020-04-30 09:12:04 +07:00
Marcus Knight 0e093d4eec Support only having one auth method enabled (which isn't ldap/local) 2020-04-16 16:04:10 +08:00
Attila DEBRECZENI def06bee41 set SAML wantAssertionsEncrypted from config 2020-04-03 13:44:03 +00:00
Attila DEBRECZENI cc26174a48
wantAssertionsEncrypted to false 2020-03-27 02:19:06 +01:00
Attila DEBRECZENI a581aa3cf2 add SAML_ASSERTION_ENCRYPTED envrionment 2020-03-25 21:35:20 +00:00
Attila DEBRECZENI e550b0a109 SAML debug attributes 2020-03-25 21:05:30 +00:00
Enrico Tröger bc2e7c9786 Remove $SCRIPT_ROOT from 'admin.create_template_from_zone' URL 
As the URL here is contructed from Flask's "url_for" which already
takes the script root into account, we do not need to add it here
explicitly. This would result in a duplicate script root otherwise.
 2020-03-09 17:08:27 +01:00
Scott Howard 417338d826 Remove blank comments from rrsets before sending for compatibility with some pdns backends 2020-03-07 02:07:41 -06:00
Khanh Ngo f2704649f1
Merge pull request #668 from pprietosanchez/fix_search_API_request 
Correct request method
 2020-03-06 14:08:39 +07:00
Khanh Ngo 026dcead7f
Merge pull request #671 from eht16/add_missing_format_arguments 
Add missing format arguments for error message
 2020-03-06 13:58:10 +07:00
Khanh Ngo 7024404f73
Merge pull request #674 from sshipway/patch-1 
Corrections to Azure auth service definition after refactor
 2020-03-06 13:57:09 +07:00
Enrico Tröger b421b9b38a Fix token name in session for OIDC and GitHub authentication 2020-03-05 17:07:13 +01:00
Steve Shipway 7ac6529e0a
Corrections to Azure auth service definition after refactor 2020-03-04 17:34:01 +13:00
Enrico Tröger 2d55832729 Add missing format arguments for error message 2020-03-04 00:27:48 +01:00
pprietosanchez a2d98d38e2 Correct request method 2020-02-28 16:25:19 +01:00
Khanh Ngo 52eb62a911
Fix unit tests 
The python float number formatting causes unit tests failed
 2020-02-13 16:22:07 +07:00
Khanh Ngo d497fdee8e
Merge pull request #655 from eht16/issue428_sync_performance 
Perform domain sync within a single transaction
 2020-02-12 09:56:41 +07:00
Khanh Ngo 13aab7f6ee
Merge pull request #645 from eht16/outgoing_request_logging 
Add log message after remote server request
 2020-02-12 09:45:12 +07:00
Enrico Tröger 81bfde5a79 Add log message after remote server request 
This might be handy to detect remote server problems or debugging
timeouts and the like.
 2020-02-02 15:23:00 +01:00
Enrico Tröger eabbcedf08 Perform domain sync within a single transaction 
This increases data inconsistency and also performance of the whole
update process: SqlAlchemy can use its own caching better with a single
transaction as it does not need to mark already fetched objects as dirty
and so re-fetch them again on later use. So after deleting a domain,
we can still use the previously fetched domain objects for the update
operations afterwards. Otherwise SqlAlchemy had to fetch each domain
object again with single SELECT statements which leads to bad
performance with many domains (>> 1000).

The introduced "do_commit" variable controls whether the database
changes are to be committed by the caller or in the called method
itself. So we can use a single transaction for the Domain.update()
method while still preserving the previous behavior for other callers.

Closes #428.
 2020-02-02 15:15:20 +01:00