catborise
cf1cde376b
fix: require POST for user block/unblock and OTP email, flag console cookie
...
- user_block, user_unblock and admin_email_otp changed state on GET, so an
<img> tag could lock a user out or trigger OTP emails through an
admin's session. They now require POST; the buttons are CSRF forms.
- The console token cookie is set with httponly, SameSite=Lax and, on
HTTPS, secure. Only novncd reads it; the page gets the token directly.
2026-10-02 22:44:00 +03:00
catborise
708b986e8e
feat(security): apply Codex review hardening to console tokens and superuser authorization
2026-09-27 11:30:03 +03:00
catborise
c31ed28042
test: expand unit test coverage across admin, accounts, vrtManager, logs, appsettings, and datasource
2026-09-25 11:26:53 +03:00
catborise
58e215f755
Merge pull request #609 from catborise/master
...
show last login info for users
2023-10-06 16:31:10 +03:00
catborise
e47d909e41
show last login time of users
2023-10-06 16:15:35 +03:00
Amélie Krejčí
1b2b3a3bce
Get UserAttributes object using get_or_create
...
This is done to automatically create the UserAttributes object in case LDAP User Backend didn't create it.
2023-09-23 09:52:48 +02:00
catborise
b47ec2e8f9
bootstrap icon conversion fixes
2023-08-11 09:40:38 +03:00
Emre Serdengeçti
1cbdf76df6
logger updates ( #31 )
...
* Log for failed login attempts
* Logger configuration for logging to file
* interface fixes
* login log fix, added logged in too
* bootstrap icons setup
* font-awesome icons replaced with bootstrap icons
* replaced i-tags with django_bootstrap_icons
* removed icons library from project
* bug fix
---------
Co-authored-by: catborise <catborise@gmail.com>
2023-08-09 09:20:18 +03:00
cserma
ad9f1db643
added filter for logs
2023-04-13 12:25:42 +03:00
catborise
a1eab70e2d
reorg imports and black format
2022-11-02 16:05:41 +03:00
catborise
217e106c8b
format python code with black
2022-11-02 08:54:35 +03:00
catborise
97acbd9843
fix typo error
2022-09-05 15:36:37 +03:00
Info-IIG
de2dce7573
Added Technicians group
2022-06-14 15:10:33 +02:00
catborise
073b7b6717
Bootstrap5 ( #17 )
...
* Bootstrap5 migration
2021-07-07 14:12:38 +03:00
catborise
d9c23291de
rearrange search functionality
2021-06-10 15:17:53 +03:00
catborise
610efd5520
add host name for logs beside others
2021-05-31 11:39:09 +03:00
catborise
508e3609be
lint with black python. convert f style strings to old one. some small fixes
2020-11-05 12:34:31 +03:00
Real-Gecko
5a19f0c949
OTP improvements
2020-10-19 14:26:08 +06:00
Real-Gecko
01043ba8a8
Templates cleanup
2020-10-15 20:18:45 +06:00
Real-Gecko
1b3fd9d05e
replaced ugettext_lazy with gettext_lazy
2020-10-14 18:27:57 +06:00
Real-Gecko
5172a9f619
Accounts app improvements and tests
2020-10-14 14:25:05 +03:00
catborise
922a8e62d1
fix some linter warnings
2020-09-25 15:57:17 +03:00
catborise
372ba5a0f2
fix create user error
2020-08-21 20:53:16 +03:00
catborise
de63d9746d
add change other user password ability to superusers
2020-07-23 13:16:39 +03:00
Real-Gecko
1a3cc36ada
Moved admin/common/form.html to project templates
2020-06-16 18:04:37 +06:00
Real-Gecko
2951d0b035
Cleaned up UserAttributes model
2020-06-16 11:26:58 +06:00
Real-Gecko
68f7376d15
Moved confirm_delete.html to project templates
2020-06-15 16:30:27 +06:00
Real-Gecko
354163fa1d
Added pagination to logs list template
2020-06-15 15:48:32 +06:00
Real-Gecko
e4e86ed576
replaced django-fa with django-icons
2020-06-15 14:46:13 +06:00
catborise
b7fc8a5fea
Language change activation. Fix typos and add new translations
2020-06-10 15:16:58 +03:00
catborise
7bb6bd310b
update locale files and TR translations.
2020-06-10 11:15:14 +03:00
catborise
21fcb8cd64
workaround for django 2.2 bug related with '0011_update_proxy_permissions' migration
2020-06-09 11:44:29 +03:00
catborise
e46bb99b3b
fix typos and rearrange imports & add new lines EOF
2020-06-04 15:22:55 +03:00
catborise
e21f423bcf
Convert LOGS_PER_PAGE from static settings to appsettings
2020-06-04 14:35:34 +03:00
catborise
8bafaa8720
add scope to th tags for screen readers
2020-06-04 12:04:46 +03:00
catborise
0e5840498e
bootstrap 4.5 & Bootswatch Themes
2020-06-04 11:33:25 +03:00
Real-Gecko
10b6f88dbb
Added coverage.py support
2020-05-29 19:37:49 +06:00
Real-Gecko
5ab22ba947
Added accounts test(moved from admin)
...
Actuall added admin tests
2020-05-29 15:47:13 +06:00
Real-Gecko
7b0016c0b2
Some test for computes
2020-05-29 14:00:51 +06:00
Real-Gecko
83b1dde673
Added admin app unit tests
2020-05-29 12:46:25 +06:00
Real-Gecko
85929b5327
Fixe migrations for new deployments
2020-05-28 18:19:25 +06:00
Real-Gecko
3d0493537f
Added 'instances:clone_instances' permission
...
Replaces 'can_clone_instances' user attribute
2020-05-28 11:20:23 +06:00
Real-Gecko
27f62dff6c
Added admin application
...
- Manage users
- Manage groups
- Manage logs
2020-05-27 18:24:06 +06:00