Commit Graph

561 Commits

Author SHA1 Message Date
Eduardo Silva
ea32dc8297 update QR code generation by implementing POST request handling and validating input fields in the authentication method forms 2026-03-16 21:16:31 -03:00
Eduardo Silva
8418beb482 enhance policy validation by ensuring protected policies have authentication methods and defaulting to HTTPS in external URL construction 2026-03-16 21:05:16 -03:00
Eduardo Silva
cf4674b933 enhance validation in forms by checking hostname and path prefix for invalid characters and reserved prefixes 2026-03-16 20:48:44 -03:00
Eduardo Silva
fb17394099 enhance security by adding cache control headers, validating password length, and rejecting encoded slashes in path processing 2026-03-16 20:36:49 -03:00
Eduardo Silva
ca63b87123 implement CSRF protection by adding token generation, validation, and cookie management in login flows 2026-03-16 20:23:18 -03:00
Eduardo Silva
ebbffca21d validate path prefix in form cleaning process to ensure proper formatting and prevent invalid characters 2026-03-16 20:23:05 -03:00
Eduardo Silva
a9bfcac771 enhance security by sanitizing headers and preventing open redirects 2026-03-16 19:53:05 -03:00
Eduardo Silva
4c109957e9 enhance security by adding HTTP security headers and disabling OpenAPI documentation 2026-03-16 19:49:11 -03:00
Eduardo Silva
76048593f1 refactor login flow to use context path for redirects and enhance path normalization to prevent traversal bypasses 2026-03-16 19:47:48 -03:00
Eduardo Silva
bf1991457a enhance security by enforcing strict SameSite cookies, validating OIDC callback host, and improving path matching logic 2026-03-16 19:35:24 -03:00
Eduardo Silva
3a8d807665 remove exclusion of reserved application names from route data 2026-03-16 17:37:51 -03:00
Eduardo Silva
058086c943 add support for displaying Django hostnames in application details 2026-03-16 17:29:39 -03:00
Eduardo Silva
ceb9c2395a add validation to prevent deletion of authentication methods in use by access policies 2026-03-16 17:24:57 -03:00
Eduardo Silva
29d1621152 add reserved application checks to prevent modification and deletion 2026-03-16 17:24:20 -03:00
Eduardo Silva
9e4da484fe add default entries creation on post-migrate signal and refactor application model logic 2026-03-16 17:08:50 -03:00
Eduardo Silva
a496ba2c63 add django admin views 2026-03-16 16:37:03 -03:00
Eduardo Silva
51a2535e87 add display_name field to models and update related forms and templates 2026-03-16 16:33:12 -03:00
Eduardo Silva
c912e7bb5f remove TOTP selection rule requiring combination with Local Password or OIDC authentication 2026-03-16 15:59:19 -03:00
Eduardo Silva
c02abf335e add temporary error message for unavailable OIDC authentication in forms 2026-03-16 15:59:05 -03:00
Eduardo Silva
4c57f43f4b run caddy in wireguard network namespace to access VPN routes 2026-03-16 14:51:36 -03:00
Eduardo Silva
5cadfba3b7 add allow_invalid_cert field to application model and update related forms and config processing 2026-03-16 14:27:03 -03:00
Eduardo Silva
c707d278f3 add error handling for policy configuration issues in authentication 2026-03-16 14:16:28 -03:00
Eduardo Silva
e1f128f217 implement rate limiting for authentication routes and add custom error handling page 2026-03-16 13:42:20 -03:00
Eduardo Silva
685b4eb971 refactor templates to extend base layout and improve styling 2026-03-16 11:58:48 -03:00
Eduardo Silva
66a3895eff enhance logging and error handling in authentication process 2026-03-16 11:26:16 -03:00
Eduardo Silva
a68820fd98 add session management routes and session page template 2026-03-16 10:34:10 -03:00
Eduardo Silva
59ca60c642 update libs 2026-03-16 10:18:46 -03:00
Eduardo Silva
76326aded7 update libs 2026-03-16 10:14:52 -03:00
Eduardo Silva
684c416049 adminlte cleanup 2026-03-16 09:58:29 -03:00
Eduardo Silva
27311e5ce9 remove package-lock.json from adminlte 2026-03-16 09:54:12 -03:00
Eduardo Silva
6591eca65b add session expiration fields to auth method form and model 2026-03-16 09:49:29 -03:00
Eduardo Silva
491e78efdb move from authelia implementation to custom authentication gateway 2026-03-16 09:49:17 -03:00
Eduardo Silva
d84cf0a174 add initial implementation of auth gateway with models, routes, and session management 2026-03-16 09:47:02 -03:00
Eduardo Silva
963ed54c86 update translations 2026-03-15 17:31:19 -03:00
Eduardo Silva
a6de7fb3d0 update translations 2026-03-15 17:21:24 -03:00
Eduardo Silva
14bd4e8ccc add TOTP authentication method rules and display in user list 2026-03-15 17:20:18 -03:00
Eduardo Silva
01da3c9de0 update user list link activation logic in sidebar 2026-03-15 17:11:29 -03:00
Eduardo Silva
2386d8fbb3 add password and TOTP PIN fields to user form with validation and QR code generation 2026-03-15 17:08:58 -03:00
Eduardo Silva
75d4fb022b add TOTP secret generation button and update help text for TOTP authentication 2026-03-15 16:49:54 -03:00
Eduardo Silva
218bd32e93 refactor session cookie handling for Authelia integration 2026-03-15 16:30:28 -03:00
Eduardo Silva
e8622f84a8 add argon2-cffi and PyYAML to requirements 2026-03-15 16:30:16 -03:00
Eduardo Silva
517bd14bdb remove unused TOTP field and update user model constraints 2026-03-15 16:29:20 -03:00
Eduardo Silva
6b70701c9c refactor Caddyfile generation to improve policy handling and cookie collection 2026-03-15 11:37:25 -03:00
Eduardo Silva
8d5e80758d improved debug export for caddy 2026-03-15 11:12:58 -03:00
Eduardo Silva
1a71dc4eb3 add conditional export of Caddy config for DEBUG mode 2026-03-15 11:08:09 -03:00
Eduardo Silva
a5ab2f65e8 update Authelia internal URL 2026-03-15 10:57:56 -03:00
Eduardo Silva
c9c7355ab5 update ignore rules 2026-03-15 10:57:31 -03:00
Eduardo Silva
715332f384 refactor Authelia setup and configuration handling 2026-03-15 10:16:26 -03:00
Eduardo Silva
f2c00d59ee increase wait interval for Authelia configuration file check 2026-03-14 23:01:32 -03:00
Eduardo Silva
b02f7fcc87 add Caddy and Authelia support with configuration scripts and Docker setup 2026-03-14 22:56:47 -03:00