Commit graph

34 commits

Author SHA1 Message Date
Timothée Jaussoin
4f79ddca2b Fix FLEXIAPI-167 Add the handling of a custom identifier for the JWT tokens on top of the email one 2024-04-30 10:10:19 +00:00
Timothée Jaussoin
7418d79b41 Fix FLEXIAPI-152 API Key usage clarification 2024-04-09 09:10:08 +00:00
Timothée Jaussoin
d2316251d5 Fix FLEXIAPI-143 Implement JWT authentification in the API 2024-03-25 11:08:41 +00:00
Timothée Jaussoin
248fce60fe Fix FLEXIAPI-139 2024-02-21 14:37:29 +00:00
Timothée Jaussoin
4035cbd0ab Fix FLEXIAPI-134 Add a system to detect and block abusive accounts 2024-01-29 11:36:41 +01:00
Timothée Jaussoin
9fd4b56066 Fix FLEXIAPI-136 Refactor the Web Panel toggle mechanism and move it to a proper Middleware 2024-01-23 17:11:55 +01:00
Timothée Jaussoin
c2ebe29d77 Fix #135 Refactor the password algorithms code 2023-12-19 09:30:21 +00:00
Timothée Jaussoin
171f55e42e Fix #95 PUT /accounts admin endpoint implementation 2023-05-25 17:16:36 +02:00
Timothée Jaussoin
f05df1529d Fix #91 Update to Laravel 9 2023-04-12 11:35:46 +02:00
Timothée Jaussoin
8c598df151 Fix #72 Disable the accounts scope when loading the ApiKey and related account 2023-02-08 12:04:28 +01:00
Timothée Jaussoin
f93e9c0634 Fix #30 Remove APP_EVERYONE_IS_ADMIN 2023-02-08 10:34:17 +01:00
Timothée Jaussoin
0d513197b4 Fix #55 Return 401 and not 404 when the wrong algorithm is picked in the Digest flow 2022-12-13 15:16:14 +01:00
Timothée Jaussoin
10d601b95c Fix #42 add PHPMD to the GitlabCI
Update the dependencies
2022-09-21 15:29:27 +02:00
Timothée Jaussoin
a0dd7e17ce Add a PHP CodeSniffer to the CI 2022-09-21 12:28:59 +02:00
Timothée Jaussoin
a85088c7a4 Fix #40 Drop the From requirement in the API Key authentication mechanism
Small fixes and adjustements in tests
2022-09-13 16:20:42 +02:00
Timothée Jaussoin
487755acba Catch the mail exceptions in public registration
Remove validity check for confirmed accounts
2022-09-01 17:13:05 +02:00
Timothée Jaussoin
7a17897193 Add ExternalAccounts and related features
- Consume an ExternalAccount on Account creation
- Add a tombstone to an ExternalAccount to ensure non re-usage
- Add related tests
- Generalize Utils
- Stop public registration when there is no ExternalAccounts left
- Add GenerateExternalAccounts, ExportToExternalAccounts and ImportExternalAccounts console scripts
- Provision the ExternalAccount using the depends_on/idkey pair
2022-07-12 17:05:17 +02:00
Timothée Jaussoin
20f8fb4c45 Add a send message endpoint, passing by the linphone-daemon unix pipe
Import ReactPHP Socket and required dependencies
Add a new configuration variable to define the unix pipe path
Generalize the API Key to all the users, add a new endpoint to retrieve it, update the documentation
Update the dependencies
Update the documentation
Complete the tests
2022-02-08 18:04:25 +01:00
Timothée Jaussoin
d2328e9580 Fix the application key retrieval (and opaque DIGEST authentication parameter)
Update the dependencies
Bump the package version
2021-06-09 15:20:27 +02:00
Timothée Jaussoin
3fdedda515 Bring back the confirmation_key in Account but only in Admin endpoints (for security reason)
Authenticate on the resolvedRealm and not the configured domain
Bump package
2021-02-11 17:59:41 +01:00
Timothée Jaussoin
4fc6aaa824 Resolve properly the domain/realm when hashing the password
Add aliases support through two new endpoints, allowing user to set a phone number on his account
Hide the confirmation_key from the returned account JSON
Bump version number
2021-02-11 16:06:20 +01:00
Timothée Jaussoin
b6959cc5dd Add support of realms in the authentication process through a global configuration variable 2021-02-03 15:33:07 +01:00
Timothée Jaussoin
539cf21269 Complete the documentation
Return a validation code on the admin account creation endpoint if the validation is set to false
Move some endpoints to be more consistant
Enforce validated accounts for authenticated endpoints
Bump the package version
2021-01-14 14:29:16 +01:00
Timothée Jaussoin
3bb1b48d43 Comment the check on the URI for Digest Auth as it is difficult to handle for clients when the API is setup in a subdirectory
Bump RPM version
2021-01-06 15:39:06 +01:00
Timothée Jaussoin
d0e7d10014 Update the dependencies
Add a everyone_is_admin config parameter for tests purpose
Fix DIGEST with liblinphone (split "email" in username + realm) and other adjustments
2021-01-05 15:35:51 +01:00
Timothée Jaussoin
603f1a6686 Add the activated parameter in the API accounts creation command
Complete the README documentation to add the artisan commands
Add an API key authentication mechanism
Update the dependencies
2020-10-19 11:53:07 +02:00
Timothée Jaussoin
f77846b676 Update from Laravel 6 to Laravel 8
Fix the related tests
Add the Belledonne Communications copyright
2020-09-16 12:44:26 +02:00
Timothée Jaussoin
c65f1a804c UI and feature adjustments
- Add a toggle for the phone SMS registration/auth related features
- Add the newsletter email registration toggle
- Rename and move around views and controllers
- Refactor the login and registration forms
- Split the registration form in two, email and phone
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
5b34fc623e Add configuration for admins
Redirect when the user is logued out
Update the dependencies
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
f98df3f830 Add admin panel system
Add two commands RemoveUnconfirmedAccount and SetAccountAdmin
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
44ee674480 Add COPYING
Add Terms + checkbox
Fix navigation and improve some forms
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
d73c952c76 Change the routes
Implement email and password change + password when it's not set
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
e9e9d09b37 Base authentication system + layout 2020-09-14 11:24:59 +02:00
Timothée Jaussoin
17fcaf02d3 Import a new API, build with Laravel
- Authentication handled by DIGEST (MD5 and SHA-256)
- Support of CLRTXT passwords in the DB
- Expose sip account devices through the API
- Tests, with databases running in memory
- Documents for the deployment and API usage
2020-02-03 15:20:48 +01:00