Jian Qiu
|
9cc78f1463
|
fix: keystoen cronman use uninitialized admin token (#14441)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
|
2022-06-13 02:27:11 +08:00 |
|
Qiu Jian
|
93de681d5b
|
fix: user create user nil pointer error
|
2022-02-21 12:18:09 +08:00 |
|
ioito
|
8d2b1fffff
|
fix(keyston): add sync log for ldap
|
2022-02-15 15:48:25 +08:00 |
|
Qiu Jian
|
084dc9a486
|
feature: local user add need_reset_password field
|
2022-02-12 02:21:55 +08:00 |
|
Qu Xuan
|
f68567e28c
|
fix(region): optimized validate delete condition query
|
2021-09-23 10:00:05 +08:00 |
|
Qiu Jian
|
020092cc4d
|
fix: verify token with expired_at field instead of options.TokenExpirationSeconds
|
2021-09-22 15:35:21 +08:00 |
|
Qu Xuan
|
fa5d5a6eb9
|
fix(region): update swagger api
|
2021-07-27 11:46:31 +08:00 |
|
Qu Xuan
|
7ec42db3ca
|
fix(keystone): policy filter by role
|
2021-07-20 14:32:28 +08:00 |
|
Qu Xuan
|
4fe0e8e5be
|
fix(keystone): avoid sql error
|
2021-07-19 14:03:29 +08:00 |
|
Zexi Li
|
527f5c498c
|
Merge pull request #9933 from ioito/hotfix/qx-task-info-dump
fix(common): dump task info when stucking
|
2021-04-26 11:38:24 +08:00 |
|
Qu Xuan
|
7b845d17c7
|
fix(common): dump task info when stucking
|
2021-04-26 10:45:38 +08:00 |
|
ioito
|
f9f0c8f3cb
|
fix: 优化同步,避免长时间加锁
|
2021-04-23 18:55:02 +08:00 |
|
Qiu Jian
|
e9a4a659f0
|
fix(keystone): role_assignment effective list ignore groups without user
|
2021-04-05 17:18:51 +08:00 |
|
Qiu Jian
|
6c66f89131
|
fix: adjust primary key length when sqlchemy utf8 default to utf8mb4
|
2021-04-02 15:05:27 +08:00 |
|
Qiu Jian
|
bf1aed7a14
|
fix(keystone): allow joint projects across domains by default
|
2021-03-18 23:56:36 +08:00 |
|
Qiu Jian
|
c68c3f17a2
|
fix(keystone): ensure comparing id with non-utf8 string
|
2021-02-25 02:28:50 +08:00 |
|
rainzm
|
334a47e383
|
feat(keystone): support filter 'project_domain_id' in role_assignments
|
2021-02-18 11:21:25 +08:00 |
|
rainzm
|
650e25560c
|
fix(notify): get the receiver corresponding to the role correctly
|
2021-02-18 11:21:25 +08:00 |
|
Jian Qiu
|
9ba3709b31
|
fix(keystone): policy name duplication (#10199)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
|
2021-02-14 19:13:51 +08:00 |
|
Jian Qiu
|
010049e5e3
|
fix(keystone): hide system scope policies in domain scope view (#10194)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
|
2021-02-08 12:16:45 -03:00 |
|
Zexi Li
|
16e7c86a16
|
Merge pull request #10173 from swordqiu/hotfix/qj-cas-sso-create-duplicate-projects
fix(keystone): cas sso may create new project whenever user login
|
2021-02-06 10:35:46 +08:00 |
|
Qiu Jian
|
515a4de9bc
|
fix(keystone): cas sso may create new project whenever user login
|
2021-02-06 03:12:02 +08:00 |
|
Qiu Jian
|
01abd8997c
|
fix(keystone): idp filter by sso_domain returns domain's idp only
|
2021-02-06 02:54:00 +08:00 |
|
Qiu Jian
|
209ba5d549
|
fix(keystone): SSO created user name may be duplicated
|
2021-01-28 23:34:52 +08:00 |
|
rainzm
|
1c325f747d
|
feat(keystone): more specific error return during authentication
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
|
2021-01-28 10:07:36 +08:00 |
|
Qiu Jian
|
65096570a5
|
fix(keystone): user create without password can login with any password
|
2021-01-23 23:47:07 +08:00 |
|
Qiu Jian
|
84f776069f
|
fix(keystone): allow delete sso imported non-local user
allow delete SSO imported non-local users
|
2021-01-21 23:48:53 +08:00 |
|
Zexi Li
|
54823a67ca
|
Merge pull request #9948 from rainzm/keystone/user_lock
feat(keystone,apigateway): return a readable message when the user is locked or disabled
|
2021-01-20 20:05:44 +08:00 |
|
Qiu Jian
|
0886e60928
|
fix(keystone): allow filter identity_providers with name of ssoDomain
allow filter identity_providers with name of ssoDomain
|
2021-01-20 00:53:15 +08:00 |
|
rainzm
|
c5223f9131
|
feat(keystone,apigateway): return a readable message when the user is locked or disabled
|
2021-01-19 17:32:21 +08:00 |
|
rainzm
|
2c1eeb89e8
|
fix(keystone): clear failed auth when enable user
|
2021-01-14 17:13:43 +08:00 |
|
rainzm
|
274729eb5f
|
feat(keystone): support alertNotify when abnormal login occur
|
2021-01-13 20:00:39 +08:00 |
|
rainzm
|
41139dc72e
|
feat(keystone): add GetDefaultAdminSession
|
2021-01-13 20:00:37 +08:00 |
|
rainzm
|
2a0e36a437
|
feat(keystone): support projectDomainId in SAssignmentManager.FetchAll
|
2021-01-13 19:55:17 +08:00 |
|
Yousong Zhou
|
a71c875470
|
keystone: reword error messages
|
2021-01-11 15:52:51 +08:00 |
|
Qiu Jian
|
7c84554587
|
fix(keystone): add i18n description for policy and role
Add i18n support for descriptions of system policy and role
|
2020-12-23 23:34:21 +08:00 |
|
Qiu Jian
|
234c37c490
|
fix(keystone): ignore deleted policies when matching policies
ignore deleted policies when matching policies
|
2020-12-20 14:12:59 +08:00 |
|
Zexi Li
|
0ce19160d0
|
Merge pull request #9501 from swordqiu/feature/qj-user-add-lang-attribute
feature(keystone): user add language attribute
|
2020-12-19 20:05:21 +08:00 |
|
Qiu Jian
|
5cf5576e09
|
feature(keystone): user add language attribute
User add language attribute, notify and alarm will use this attribute to
send message in proper language
|
2020-12-19 09:18:17 +08:00 |
|
Qiu Jian
|
80229fa1e0
|
fix(keystone): always upload&refresh service config whenever service restart
Always upload&refresh service config whenever service restart
|
2020-12-19 00:49:32 +08:00 |
|
Qiu Jian
|
a0350d0537
|
fix(keystone): update user attributes whenever user login
update user attribtues whenever user login
|
2020-12-14 18:15:48 +08:00 |
|
Zexi Li
|
95d67b040b
|
Merge pull request #9361 from swordqiu/hotfix/qj-domain-unlink-action
fix(keystone): allow unlink a domain from an IDP
|
2020-12-12 00:16:22 +08:00 |
|
Qiu Jian
|
1d7b7057a7
|
fix(keystone): ignore service config update without changes
ignore service config updates that no changes happen. prevent service
config change infomrer messages from flushing the log.
|
2020-12-11 22:10:49 +08:00 |
|
Qiu Jian
|
076fa5498a
|
fix(keystone): allow unlink a domain from an IDP
allow unlink a domain from an IDP
|
2020-12-11 21:50:15 +08:00 |
|
Qiu Jian
|
0a7513cce4
|
fix(cloudcommon): disable quota check by default
1. add enable_quota_check common option
2. disable quota check by default
3. specify scope of quota limit in OutOfQuota error message
|
2020-12-10 01:19:06 +08:00 |
|
Qiu Jian
|
4411c4e5bb
|
fix(keystone): rolepolicies list panic if filter by domain scope
rolepolicies list panic if filter by scope=domain
|
2020-12-08 03:12:42 +08:00 |
|
Qiu Jian
|
ef648b5b87
|
fix(keystone): not allow to disable sql driver
not allow to disable default SQL identity_provider driver
|
2020-12-02 16:39:23 +08:00 |
|
Qiu Jian
|
b27b086cce
|
feat(keystone): filter domain/user by idp_entity_id
filter domain/user by idp_entity_id
|
2020-11-23 12:19:37 +08:00 |
|
Qiu Jian
|
2a1b5f8a75
|
fix: mcclient panic when keystone init empty service catalog
|
2020-11-14 00:17:18 +08:00 |
|
Qiu Jian
|
f10267b0fe
|
feature: allow join project across domain
|
2020-11-12 19:40:23 +08:00 |
|