 maziggy
|
770c6bfdf9
fix: firmware upload only for idle printers (dialog, server, re-check after download, queue waits during upload); AMS Reset Slot asks first and is refused while printing; confirms for shopping list Clear all, Git history Clear and SSO unlink (last SSO link of an account without password stays); LDAP/SMTP test use the form's values; emptying a user's email removes it; local backup delete errors are shown; removed the unreachable printer-card Spoolman link/unlink
|
1 день назад |
|
maziggy
|
ac4806f029
fix: a failed first run no longer leaves the archive at its partial cost (built-in inventory); completion stops the start cost estimate before writing the real cost; 2FA/SSO logins report LDAP/OIDC users' auth source; a fault in both print_error and HMS is listed once; a refused H2D load's tray target expires; refused K-profile re-applies are logged; the cloud filament-name map is fetched once per account without holding a DB connection; the library edit route refuses folder changes across the external boundary; a slow slice-progress answer is not reported as an unreachable sidecar
|
2 дней назад |
|
maziggy
|
473cdf3f0e
Security hardening (maziggy/bambuddy-security #41)
|
5 дней назад |
|
maziggy
|
9fe528d9a3
fix(users): admins can remove a locked-out user's 2FA from Edit user
|
5 дней назад |
|
maziggy
|
1bb5e49d6a
Security hardening (maziggy/bambuddy-security #40)
|
5 дней назад |
|
maziggy
|
877b5e3afe
Security hardening (maziggy/bambuddy-security #14)
|
1 неделя назад |
|
maziggy
|
df8053cc1d
Security hardening (maziggy/bambuddy-security #14)
|
1 неделя назад |
|
maziggy
|
26ea39eb31
fix(auth): ending a user's sessions also closes their open dashboards
|
1 неделя назад |
|
maziggy
|
83594da2ee
Security hardening (maziggy/bambuddy-security #11)
|
1 неделя назад |
|
maziggy
|
10ed899130
test: count only the racing test's own archive folders (#2957)
|
2 недель назад |
 William Faircloth
|
d04514c842
Sync OIDC provider groups to BamBuddy groups on every login (issue #3107) (#3122)
|
3 недель назад |
 Marian
|
c9ee259807
feat(oidc): refuse API writes to the env-managed provider
|
3 месяцев назад |
|
maziggy
|
70857af393
feat(auth): SSO autologin + disable local username/password login (#1589)
|
3 месяцев назад |
|
maziggy
|
ceb0616c82
chore(deps): backend security floor bumps + 422 constant rename
|
4 месяцев назад |
|
maziggy
|
2940fbdcf7
feat(auth): admin-configurable session lifetime ceiling (#1706)
|
4 месяцев назад |
|
maziggy
|
be15a375a6
fix(oidc): #1569 populate User.email from standard 'email' claim when email_claim is preferred_username
|
4 месяцев назад |
 Sn0rrii
|
8a7598f6b5
feat(auth): proxy OIDC provider icons server-side (#1333) (#1342)
|
5 месяцев назад |
|
Sn0rrii
|
4d8dbc8336
fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)
|
5 месяцев назад |
|
Sn0rrii
|
90743cfa39
feat(encryption): MFA at-rest encryption auto-bootstrap with status UI (#1219) (#1231)
|
5 месяцев назад |
|
Sn0rrii
|
d0d0be89ea
fix(oidc): use preferred_username/name claim for auto-created username (#1173) (#1176)
|
5 месяцев назад |
|
Sn0rrii
|
78408856cd
fix(oidc): Allow `auto_link_existing_accounts` with custom email claims (Azure Entra ID) (#1142)
|
5 месяцев назад |
|
Sn0rrii
|
fdaec47378
feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1126)
|
6 месяцев назад |
|
maziggy
|
12c01f029d
Revert "feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1118)"
|
6 месяцев назад |
|
Sn0rrii
|
50382006b3
feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1118)
|
6 месяцев назад |
|
maziggy
|
7f11618e1e
Revert "feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1103)"
|
6 месяцев назад |
|
Sn0rrii
|
365c38483b
feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1103)
|
6 месяцев назад |
|
Sn0rrii
|
e958b10f75
fix(oidc): raise callback code/state max_length from 512 to 2048 (#1024)
|
6 месяцев назад |
|
Sn0rrii
|
071570f754
fix(oidc): normalise trailing slash on both sides of issuer comparison (#995)
|
6 месяцев назад |
|
Sn0rrii
|
a5c3941ef1
fix(oidc): strip trailing slash from issuer URL before building discovery URL (#985)
|
6 месяцев назад |
|
Sn0rrii
|
ba1c97c808
feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)
|
6 месяцев назад |
