Commit Graph

215 Commits

Author SHA1 Message Date
Jian Qiu
9cc78f1463 fix: keystoen cronman use uninitialized admin token (#14441)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-06-13 02:27:11 +08:00
Qiu Jian
93de681d5b fix: user create user nil pointer error 2022-02-21 12:18:09 +08:00
ioito
8d2b1fffff fix(keyston): add sync log for ldap 2022-02-15 15:48:25 +08:00
Qiu Jian
084dc9a486 feature: local user add need_reset_password field 2022-02-12 02:21:55 +08:00
Qu Xuan
f68567e28c fix(region): optimized validate delete condition query 2021-09-23 10:00:05 +08:00
Qiu Jian
020092cc4d fix: verify token with expired_at field instead of options.TokenExpirationSeconds 2021-09-22 15:35:21 +08:00
Qu Xuan
fa5d5a6eb9 fix(region): update swagger api 2021-07-27 11:46:31 +08:00
Qu Xuan
7ec42db3ca fix(keystone): policy filter by role 2021-07-20 14:32:28 +08:00
Qu Xuan
4fe0e8e5be fix(keystone): avoid sql error 2021-07-19 14:03:29 +08:00
Zexi Li
527f5c498c Merge pull request #9933 from ioito/hotfix/qx-task-info-dump
fix(common): dump task info when stucking
2021-04-26 11:38:24 +08:00
Qu Xuan
7b845d17c7 fix(common): dump task info when stucking 2021-04-26 10:45:38 +08:00
ioito
f9f0c8f3cb fix: 优化同步,避免长时间加锁 2021-04-23 18:55:02 +08:00
Qiu Jian
e9a4a659f0 fix(keystone): role_assignment effective list ignore groups without user 2021-04-05 17:18:51 +08:00
Qiu Jian
6c66f89131 fix: adjust primary key length when sqlchemy utf8 default to utf8mb4 2021-04-02 15:05:27 +08:00
Qiu Jian
bf1aed7a14 fix(keystone): allow joint projects across domains by default 2021-03-18 23:56:36 +08:00
Qiu Jian
c68c3f17a2 fix(keystone): ensure comparing id with non-utf8 string 2021-02-25 02:28:50 +08:00
rainzm
334a47e383 feat(keystone): support filter 'project_domain_id' in role_assignments 2021-02-18 11:21:25 +08:00
rainzm
650e25560c fix(notify): get the receiver corresponding to the role correctly 2021-02-18 11:21:25 +08:00
Jian Qiu
9ba3709b31 fix(keystone): policy name duplication (#10199)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2021-02-14 19:13:51 +08:00
Jian Qiu
010049e5e3 fix(keystone): hide system scope policies in domain scope view (#10194)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2021-02-08 12:16:45 -03:00
Zexi Li
16e7c86a16 Merge pull request #10173 from swordqiu/hotfix/qj-cas-sso-create-duplicate-projects
fix(keystone): cas sso may create new project whenever user login
2021-02-06 10:35:46 +08:00
Qiu Jian
515a4de9bc fix(keystone): cas sso may create new project whenever user login 2021-02-06 03:12:02 +08:00
Qiu Jian
01abd8997c fix(keystone): idp filter by sso_domain returns domain's idp only 2021-02-06 02:54:00 +08:00
Qiu Jian
209ba5d549 fix(keystone): SSO created user name may be duplicated 2021-01-28 23:34:52 +08:00
rainzm
1c325f747d feat(keystone): more specific error return during authentication
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
2021-01-28 10:07:36 +08:00
Qiu Jian
65096570a5 fix(keystone): user create without password can login with any password 2021-01-23 23:47:07 +08:00
Qiu Jian
84f776069f fix(keystone): allow delete sso imported non-local user
allow delete SSO imported non-local users
2021-01-21 23:48:53 +08:00
Zexi Li
54823a67ca Merge pull request #9948 from rainzm/keystone/user_lock
feat(keystone,apigateway): return a readable message when the user is locked or disabled
2021-01-20 20:05:44 +08:00
Qiu Jian
0886e60928 fix(keystone): allow filter identity_providers with name of ssoDomain
allow filter identity_providers with name of ssoDomain
2021-01-20 00:53:15 +08:00
rainzm
c5223f9131 feat(keystone,apigateway): return a readable message when the user is locked or disabled 2021-01-19 17:32:21 +08:00
rainzm
2c1eeb89e8 fix(keystone): clear failed auth when enable user 2021-01-14 17:13:43 +08:00
rainzm
274729eb5f feat(keystone): support alertNotify when abnormal login occur 2021-01-13 20:00:39 +08:00
rainzm
41139dc72e feat(keystone): add GetDefaultAdminSession 2021-01-13 20:00:37 +08:00
rainzm
2a0e36a437 feat(keystone): support projectDomainId in SAssignmentManager.FetchAll 2021-01-13 19:55:17 +08:00
Yousong Zhou
a71c875470 keystone: reword error messages 2021-01-11 15:52:51 +08:00
Qiu Jian
7c84554587 fix(keystone): add i18n description for policy and role
Add i18n support for descriptions of system policy and role
2020-12-23 23:34:21 +08:00
Qiu Jian
234c37c490 fix(keystone): ignore deleted policies when matching policies
ignore deleted policies when matching policies
2020-12-20 14:12:59 +08:00
Zexi Li
0ce19160d0 Merge pull request #9501 from swordqiu/feature/qj-user-add-lang-attribute
feature(keystone): user add language attribute
2020-12-19 20:05:21 +08:00
Qiu Jian
5cf5576e09 feature(keystone): user add language attribute
User add language attribute, notify and alarm will use this attribute to
send message in proper language
2020-12-19 09:18:17 +08:00
Qiu Jian
80229fa1e0 fix(keystone): always upload&refresh service config whenever service restart
Always upload&refresh service config whenever service restart
2020-12-19 00:49:32 +08:00
Qiu Jian
a0350d0537 fix(keystone): update user attributes whenever user login
update user attribtues whenever user login
2020-12-14 18:15:48 +08:00
Zexi Li
95d67b040b Merge pull request #9361 from swordqiu/hotfix/qj-domain-unlink-action
fix(keystone): allow unlink a domain from an IDP
2020-12-12 00:16:22 +08:00
Qiu Jian
1d7b7057a7 fix(keystone): ignore service config update without changes
ignore service config updates that no changes happen. prevent service
config change infomrer messages from flushing the log.
2020-12-11 22:10:49 +08:00
Qiu Jian
076fa5498a fix(keystone): allow unlink a domain from an IDP
allow unlink a domain from an IDP
2020-12-11 21:50:15 +08:00
Qiu Jian
0a7513cce4 fix(cloudcommon): disable quota check by default
1. add enable_quota_check common option
2. disable quota check by default
3. specify scope of quota limit in OutOfQuota error message
2020-12-10 01:19:06 +08:00
Qiu Jian
4411c4e5bb fix(keystone): rolepolicies list panic if filter by domain scope
rolepolicies list panic if filter by scope=domain
2020-12-08 03:12:42 +08:00
Qiu Jian
ef648b5b87 fix(keystone): not allow to disable sql driver
not allow to disable default SQL identity_provider driver
2020-12-02 16:39:23 +08:00
Qiu Jian
b27b086cce feat(keystone): filter domain/user by idp_entity_id
filter domain/user by idp_entity_id
2020-11-23 12:19:37 +08:00
Qiu Jian
2a1b5f8a75 fix: mcclient panic when keystone init empty service catalog 2020-11-14 00:17:18 +08:00
Qiu Jian
f10267b0fe feature: allow join project across domain 2020-11-12 19:40:23 +08:00