Commit graph

55 commits

Author SHA1 Message Date
Timothée Jaussoin
d9b0f83e5d Fix FLEXIAPI-394 Apply SpaceCheck on all the pages and URLs, backport from 2.1 2025-09-29 15:26:25 +02:00
Timothée Jaussoin
aa2051d281 Fix FLEXIAPI-348 Add a fallback 404 page for URLs that are pointing to no configured Spaces 2025-07-03 15:42:15 +02:00
Timothée Jaussoin
52eadf91ce Fix FLEXIAPI-328 Set realm on Space creation, limit the update if some accounts are present 2025-06-11 11:11:23 +02:00
Timothée Jaussoin
801b8bd047 Fix FLEXIAPI-305 Add specific error page for Space Expiration 2025-05-20 16:26:11 +02:00
Timothée Jaussoin
682b0ae67b Fix FLEXIAPI-287 Refactor the emails templates 2025-04-29 09:12:59 +00:00
Timothée Jaussoin
672d6291b7 Fix FLEXIAPI-272 Add Space based email server integration 2025-04-08 09:02:35 +00:00
Timothée Jaussoin
f566bc0c7c Fix FLEXIAPI-237 Add internationalisation support in the app 2025-02-26 10:06:55 +01:00
Timothée Jaussoin
9006bc1d0d Fix FLEXIAPI-258 Move DotEnv instance configurations in the Spaces table 2025-02-17 14:02:06 +00:00
Timothée Jaussoin
1b1df7eef8 Fix FLEXIAPI-262 Bypass the JWT auth if we have an API 2025-01-30 10:23:06 +00:00
Timothée Jaussoin
0dcb74ef19 Fix FLEXIAPI-254 Allow no data on POST requests to not trigger the ValidateJSON middleware 2024-12-30 17:22:03 +01:00
Timothée Jaussoin
4add0d7daa Fix FLEXIAPI-250 Allow Spaces to be declared without a subdomain 2024-12-16 13:56:14 +00:00
Timothée Jaussoin
3d715afc23 Fix FLEXIAPI-228 Add reset password email flow 2024-12-04 16:25:13 +01:00
Timothée Jaussoin
93c98ae73f Fix FLEXIAPI-220 Migrate SIP Domains to Spaces 2024-12-02 13:04:49 +00:00
Timothée Jaussoin
9b3d3cd2f2 Fix FLEXIAPI-239 Add missing WWW-Authenticate header bearer parameter if present 2024-11-07 11:06:55 +01:00
Timothée Jaussoin
8fd273f4c0 Fix FLEXIAPI-239 Add missing WWW-Authenticate header key parameter 2024-11-06 17:00:54 +01:00
Timothée Jaussoin
86715d6048 Fix FLEXIAPI-239 Ensure to return the correct error codes as stated in the RFC6750 section 3.1 2024-11-06 11:29:25 +01:00
Timothée Jaussoin
197705d872 Fix FLEXIAPI-219 Allow complete Bearer value to be set in the setting to... 2024-10-28 09:40:52 +00:00
Timothée Jaussoin
61bc04da02 Fix FLEXIAPI-216 Implement the RFC 8898 partially... for HTTP 2024-10-23 14:31:29 +02:00
Timothée Jaussoin
23e61fdc38 Fix FLEXIAPI-211 Add a JSON validation middleware + test 2024-09-11 17:03:10 +02:00
Timothée Jaussoin
2ed4f02c11 Fix FLEXIAPI-182 Replace APP_SUPER_ADMINS_SIP_DOMAINS with a proper sip_domains table, API endpoints, UI panels, tests and documentation 2024-07-01 14:11:47 +00:00
Timothée Jaussoin
0f3454fb68 Fix FLEXIAPI-179 Add Localization support as a Middleware that handles Accept-Language HTTP header 2024-06-03 13:52:17 +00:00
Timothée Jaussoin
4f79ddca2b Fix FLEXIAPI-167 Add the handling of a custom identifier for the JWT tokens on top of the email one 2024-04-30 10:10:19 +00:00
Timothée Jaussoin
7418d79b41 Fix FLEXIAPI-152 API Key usage clarification 2024-04-09 09:10:08 +00:00
Timothée Jaussoin
d2316251d5 Fix FLEXIAPI-143 Implement JWT authentification in the API 2024-03-25 11:08:41 +00:00
Timothée Jaussoin
248fce60fe Fix FLEXIAPI-139 2024-02-21 14:37:29 +00:00
Timothée Jaussoin
4035cbd0ab Fix FLEXIAPI-134 Add a system to detect and block abusive accounts 2024-01-29 11:36:41 +01:00
Timothée Jaussoin
9fd4b56066 Fix FLEXIAPI-136 Refactor the Web Panel toggle mechanism and move it to a proper Middleware 2024-01-23 17:11:55 +01:00
Timothée Jaussoin
c2ebe29d77 Fix #135 Refactor the password algorithms code 2023-12-19 09:30:21 +00:00
Timothée Jaussoin
171f55e42e Fix #95 PUT /accounts admin endpoint implementation 2023-05-25 17:16:36 +02:00
Timothée Jaussoin
f05df1529d Fix #91 Update to Laravel 9 2023-04-12 11:35:46 +02:00
Timothée Jaussoin
8c598df151 Fix #72 Disable the accounts scope when loading the ApiKey and related account 2023-02-08 12:04:28 +01:00
Timothée Jaussoin
f93e9c0634 Fix #30 Remove APP_EVERYONE_IS_ADMIN 2023-02-08 10:34:17 +01:00
Timothée Jaussoin
0d513197b4 Fix #55 Return 401 and not 404 when the wrong algorithm is picked in the Digest flow 2022-12-13 15:16:14 +01:00
Timothée Jaussoin
10d601b95c Fix #42 add PHPMD to the GitlabCI
Update the dependencies
2022-09-21 15:29:27 +02:00
Timothée Jaussoin
a0dd7e17ce Add a PHP CodeSniffer to the CI 2022-09-21 12:28:59 +02:00
Timothée Jaussoin
a85088c7a4 Fix #40 Drop the From requirement in the API Key authentication mechanism
Small fixes and adjustements in tests
2022-09-13 16:20:42 +02:00
Timothée Jaussoin
487755acba Catch the mail exceptions in public registration
Remove validity check for confirmed accounts
2022-09-01 17:13:05 +02:00
Timothée Jaussoin
7a17897193 Add ExternalAccounts and related features
- Consume an ExternalAccount on Account creation
- Add a tombstone to an ExternalAccount to ensure non re-usage
- Add related tests
- Generalize Utils
- Stop public registration when there is no ExternalAccounts left
- Add GenerateExternalAccounts, ExportToExternalAccounts and ImportExternalAccounts console scripts
- Provision the ExternalAccount using the depends_on/idkey pair
2022-07-12 17:05:17 +02:00
Timothée Jaussoin
20f8fb4c45 Add a send message endpoint, passing by the linphone-daemon unix pipe
Import ReactPHP Socket and required dependencies
Add a new configuration variable to define the unix pipe path
Generalize the API Key to all the users, add a new endpoint to retrieve it, update the documentation
Update the dependencies
Update the documentation
Complete the tests
2022-02-08 18:04:25 +01:00
Timothée Jaussoin
d2328e9580 Fix the application key retrieval (and opaque DIGEST authentication parameter)
Update the dependencies
Bump the package version
2021-06-09 15:20:27 +02:00
Timothée Jaussoin
3fdedda515 Bring back the confirmation_key in Account but only in Admin endpoints (for security reason)
Authenticate on the resolvedRealm and not the configured domain
Bump package
2021-02-11 17:59:41 +01:00
Timothée Jaussoin
4fc6aaa824 Resolve properly the domain/realm when hashing the password
Add aliases support through two new endpoints, allowing user to set a phone number on his account
Hide the confirmation_key from the returned account JSON
Bump version number
2021-02-11 16:06:20 +01:00
Timothée Jaussoin
b6959cc5dd Add support of realms in the authentication process through a global configuration variable 2021-02-03 15:33:07 +01:00
Timothée Jaussoin
539cf21269 Complete the documentation
Return a validation code on the admin account creation endpoint if the validation is set to false
Move some endpoints to be more consistant
Enforce validated accounts for authenticated endpoints
Bump the package version
2021-01-14 14:29:16 +01:00
Timothée Jaussoin
3bb1b48d43 Comment the check on the URI for Digest Auth as it is difficult to handle for clients when the API is setup in a subdirectory
Bump RPM version
2021-01-06 15:39:06 +01:00
Timothée Jaussoin
d0e7d10014 Update the dependencies
Add a everyone_is_admin config parameter for tests purpose
Fix DIGEST with liblinphone (split "email" in username + realm) and other adjustments
2021-01-05 15:35:51 +01:00
Timothée Jaussoin
603f1a6686 Add the activated parameter in the API accounts creation command
Complete the README documentation to add the artisan commands
Add an API key authentication mechanism
Update the dependencies
2020-10-19 11:53:07 +02:00
Timothée Jaussoin
f77846b676 Update from Laravel 6 to Laravel 8
Fix the related tests
Add the Belledonne Communications copyright
2020-09-16 12:44:26 +02:00
Timothée Jaussoin
c65f1a804c UI and feature adjustments
- Add a toggle for the phone SMS registration/auth related features
- Add the newsletter email registration toggle
- Rename and move around views and controllers
- Refactor the login and registration forms
- Split the registration form in two, email and phone
2020-09-14 11:24:59 +02:00
Timothée Jaussoin
5b34fc623e Add configuration for admins
Redirect when the user is logued out
Update the dependencies
2020-09-14 11:24:59 +02:00