fb8cd18f93
feat: password age policy ( #8132 )
...
# Which Problems Are Solved
Some organizations / customers have the requirement, that there users
regularly need to change their password.
ZITADEL already had the possibility to manage a `password age policy` (
thought the API) with the maximum amount of days a password should be
valid, resp. days after with the user should be warned of the upcoming
expiration.
The policy could not be managed though the Console UI and was not
checked in the Login UI.
# How the Problems Are Solved
- The policy can be managed in the Console UI's settings sections on an
instance and organization level.
- During an authentication in the Login UI, if a policy is set with an
expiry (>0) and the user's last password change exceeds the amount of
days set, the user will be prompted to change their password.
- The prompt message of the Login UI can be customized in the Custom
Login Texts though the Console and API on the instance and each
organization.
- The information when the user last changed their password is returned
in the Auth, Management and User V2 API.
- The policy can be retrieved in the settings service as `password
expiry settings`.
# Additional Changes
None.
# Additional Context
- closes #8081
---------
Co-authored-by: Tim Möhlmann <[email protected]
2024-06-18 11:27:44 +00:00
c9445227c5
fix(console): angular 15 ( #4809 )
...
* cli core
* update material
* imports
* schematics
* lint
* rm ng-qrcode, ngx-quicklink
* replace qr code lib
* rm shared module as quicklink is removed
* lazy loading imports
* rm public
* chore(deps): bump @grpc/grpc-js from 1.7.1 to 1.8.0 in /console (#4857 )
Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node ) from 1.7.1 to 1.8.0.
- [Release notes](https://github.com/grpc/grpc-node/releases )
- [Commits](https://github.com/grpc/grpc-node/compare/v1.7.1...@grpc/[email protected] )
---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4861 )
Bumps [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js ) from 1.10.13 to 1.10.15.
- [Release notes](https://gitlab.com/catamphetamine/libphonenumber-js/tags )
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md )
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.10.13...v1.10.15 )
---
updated-dependencies:
- dependency-name: libphonenumber-js
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4734 )
Bumps [engine.io](https://github.com/socketio/engine.io ) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/socketio/engine.io/releases )
- [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md )
- [Commits](https://github.com/socketio/engine.io/compare/6.2.0...6.2.1 )
---
updated-dependencies:
- dependency-name: engine.io
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected] [email protected]
2023-01-11 13:23:16 +00:00
c0f8f4e5f2
fix(console): update dependencies, use prettier as default linter, refresh on policy change ( #4375 )
...
* privatelabeling refresh, org context color
* chore(deps): bump @grpc/grpc-js from 1.6.10 to 1.7.0 in /console (#4358 )
Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node ) from 1.6.10 to 1.7.0.
- [Release notes](https://github.com/grpc/grpc-node/releases )
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected] ...@grpc/[email protected] )
---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4357 )
Bumps [ngx-color](https://github.com/scttcper/ngx-color ) from 8.0.2 to 8.0.3.
- [Release notes](https://github.com/scttcper/ngx-color/releases )
- [Commits](https://github.com/scttcper/ngx-color/compare/v8.0.2...v8.0.3 )
---
updated-dependencies:
- dependency-name: ngx-color
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4341 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 17.0.45 to 18.7.16.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4317 )
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v4.2.0...v4.4.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] #4279 )
Bumps [@types/jasmine](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jasmine ) from 4.0.3 to 4.3.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jasmine )
---
updated-dependencies:
- dependency-name: "@types/jasmine"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected]
2022-09-19 13:35:52 +02:00
08ae39ae19
feat: rehauled console ( #3525 )
...
* new console
* move npm ci to angular build
* rel path for assets
* local grpc copy
* login policy, rm clear views, features rel path
* lock
Co-authored-by: Livio Amstutz <[email protected]
2022-04-28 10:35:02 +00:00
b1caef81da
fix(console): migrate from tslint to eslint, project delete from table ( #2490 )
...
* es lint
* modify tsconfig, auto lint some stuff
* lint
* lint
* lint
* lint
* html ts lint
* lint
* lint, tsconfig
* fix project delete, state table
* eslint config, remove cnslHint directive
* mfa selector, info row fixes
* lint
* fix login policy, granted orgs table state, lint
Co-authored-by: Florian Forster <[email protected]
2021-10-22 10:47:06 +02:00
Max Peintner and GitHub
8b88a0ab86
fix(console): policy routes ( #1065 )
...
* fix: policy routes
* role fix
2020-12-07 09:15:10 +01:00
Max Peintner and GitHub
e7514998bf
feat(console): email label policy, cleanup policy grid module ( #890 )
...
* add primitive label policy component, routing
* label policy, i18n
* refactor policy grid
* i18n
* lint
* cleanup i19n policy
* rm failed events styling
* fix detail layout padding, de i18n
* remove unused translations
2020-10-24 20:28:48 +02:00
Max Peintner and GitHub
40b8d3ffa4
fix(console): policy reset for custom, header org filter, idp add dialog ( #865 )
...
* remove reset button if not default, rem load
* dirty focus fix
* use idptype in dialog
* remove logs
* lint
* revert idp add changes
* log error
* lint
2020-10-16 16:42:22 +02:00
b1d61afc8f
feat(console): seo metatags, fix policy bugs, project options ( #844 )
...
* add seo service, index meta info
* fix policy buttons, refresh
* refresh after timeout
* loading spinner for login policy, complexity
* fix user form, add project role options
* authtoken options
* seo service lint
* style lint
* remove duplicate authmethod
* en i18n
* Update console/src/assets/i18n/en.json
Co-authored-by: Fabi <[email protected] [email protected]
2020-10-16 13:51:52 +02:00
fbb30840f1
feat: policies on aggregates ( #799 )
...
* feat: move pw policy
* feat: default pw complexity policy
* fix: org password complexity policy
* fix: org password complexity policy
* fix: pw complexity policy with setup
* fix: age and lockout policies on aggregates
* fix: migration
* fix: org iam policy
* fix: org iam policy
* fix: org iam policy
* fix: tests
* fix: policy request
* fix: merge master
* fix(console): policies frontend (#817 )
* fix policy build
* fix: age, complexity, lockout policies
* fix: ready return err of setup not done
* fix: fix remove policies in spoolers
* fix: fix remove policies in spoolers
* feat(console): policy settings for iam and org (#824 )
* fix policy build
* fix: age, complexity, lockout policies
* fix pwd complexity
* policy remove action
* add imports
* fix accounts card, enable mgmt login policy
* lint
* add iam policy to admin
* toasts, i18n, show default
* routing, i18n
* reset policy, toast i18n, cleanup, routing
* policy delete permission
* lint style
* delete iam policy
* delete non project from grid list, i18n
* lint ts, style
* fix: remove instead delete
* feat(console): delete external idp from user (#835 )
* dialog i18n, delete column and function
* dialog i18n
* fix rm button
* Update console/src/assets/i18n/de.json
Co-authored-by: Fabi <[email protected] [email protected] [email protected] #839 )
* fix: nil pointer on get userdata (#815 )
* fix: external login (#818 )
* fix: external login
* fix: external login
* feat(console): delete user (#819 )
* add action col to user table, i18n
* delete user from detail component
* lint
* fix(console): cleanup user detail and member components, user/me redirect, permission guards, filter, org policy guard, user table, scss cleanup (#808 )
* fix: remove user.write guard for filtering
* border color
* fix user routing from member tables
* idp detail layout
* generic contact component
* fix redirect to auth user, user grant disable
* disable policy action without permission, i18n
* user-create flex fix, contact ng-content
* rm unused styles
* sidenav divider
* lint
* chore(deps-dev): bump @angular/cli from 10.1.3 to 10.1.4 in /console (#806 )
* fix: user session with external login (#797 )
* fix: user session with external login
* fix: tests
* fix: tests
* fix: change idp config name
* fix(container): stop copying / and instead only copy zitadel (#691 )
* chore: stop copying / and instead only copy zitadel
* Update Dockerfile
* Update release.yml
* enable anchors debug
* fix(container): don't copy alpine content into scratch execpt pwd
* chore: remove need step
* merge master
* chore(deps-dev): bump @angular/cli from 10.1.3 to 10.1.4 in /console
Bumps [@angular/cli](https://github.com/angular/angular-cli ) from 10.1.3 to 10.1.4.
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Commits](https://github.com/angular/angular-cli/compare/v10.1.3...v10.1.4 )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] #805 )
* fix: user session with external login (#797 )
* fix: user session with external login
* fix: tests
* fix: tests
* fix: change idp config name
* fix(container): stop copying / and instead only copy zitadel (#691 )
* chore: stop copying / and instead only copy zitadel
* Update Dockerfile
* Update release.yml
* enable anchors debug
* fix(container): don't copy alpine content into scratch execpt pwd
* chore: remove need step
* merge master
* chore(deps-dev): bump @angular/language-service in /console
Bumps [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service ) from 10.1.3 to 10.1.4.
- [Release notes](https://github.com/angular/angular/releases )
- [Changelog](https://github.com/angular/angular/blob/master/CHANGELOG.md )
- [Commits](https://github.com/angular/angular/commits/10.1.4/packages/language-service )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] #804 )
* fix: user session with external login (#797 )
* fix: user session with external login
* fix: tests
* fix: tests
* fix: change idp config name
* fix(container): stop copying / and instead only copy zitadel (#691 )
* chore: stop copying / and instead only copy zitadel
* Update Dockerfile
* Update release.yml
* enable anchors debug
* fix(container): don't copy alpine content into scratch execpt pwd
* chore: remove need step
* merge master
* chore(deps-dev): bump codelyzer from 6.0.0 to 6.0.1 in /console
Bumps [codelyzer](https://github.com/mgechev/codelyzer ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/mgechev/codelyzer/releases )
- [Changelog](https://github.com/mgechev/codelyzer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mgechev/codelyzer/commits/6.0.1 )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] #803 )
* fix: user session with external login (#797 )
* fix: user session with external login
* fix: tests
* fix: tests
* fix: change idp config name
* fix(container): stop copying / and instead only copy zitadel (#691 )
* chore: stop copying / and instead only copy zitadel
* Update Dockerfile
* Update release.yml
* enable anchors debug
* fix(container): don't copy alpine content into scratch execpt pwd
* chore: remove need step
* merge master
* chore(deps-dev): bump @angular-devkit/build-angular in /console
Bumps [@angular-devkit/build-angular](https://github.com/angular/angular-cli ) from 0.1000.8 to 0.1001.4.
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Commits](https://github.com/angular/angular-cli/commits )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected] #802 )
* fix: user session with external login (#797 )
* fix: user session with external login
* fix: tests
* fix: tests
* fix: change idp config name
* fix(container): stop copying / and instead only copy zitadel (#691 )
* chore: stop copying / and instead only copy zitadel
* Update Dockerfile
* Update release.yml
* enable anchors debug
* fix(container): don't copy alpine content into scratch execpt pwd
* chore: remove need step
* merge master
* chore(deps): bump uuid from 8.3.0 to 8.3.1 in /console
Bumps [uuid](https://github.com/uuidjs/uuid ) from 8.3.0 to 8.3.1.
- [Release notes](https://github.com/uuidjs/uuid/releases )
- [Changelog](https://github.com/uuidjs/uuid/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uuidjs/uuid/compare/v8.3.0...v8.3.1 )
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected] [email protected] [email protected] #820 )
* i18n interceptor, set language to browser lang
* nullcheck
* rm external idp log
* fix module imports, rm user displayname from i18n
* Update console/src/assets/i18n/de.json
Co-authored-by: Fabi <[email protected] #822 )
* fix(console): permission regex, account switcher null check, restrict app and member create access (#821 )
* fix member table disable, gerneal regexp
* fix user session card, app disable
* memberships max count
* fix policy permissions
* permission check for member add dialog
* lint
* rm accounts log
* rm id regex
* fix: handle usermemberships on project and project grant delete (#825 )
* fix: go handler
Co-authored-by: Fabi <[email protected] [email protected] [email protected] [email protected] [email protected]
2020-10-15 10:27:13 +02:00
58b01cdf3f
feat(console): identity providers and login policies ( #722 )
...
* idp list, idp create route
* idp modules, lazy import, i18n, routing
* generic service, i18n
* seperate lockout, age policy component
* seperate component modules
* routing
* enum class
* login policy
* iam policy grid
* login policy providers
* idps login policy
* add idp dialog component
* add idp to loginpolicy
* delete idp config, iam policy grid
* remove idp from loginpolicy
* idp detail component, generic idp create
* lint
* idp detail clientid-secrets, issuer, scopes
* hide clientsecret on update
* rm background style, idp config
* app tooltip fix
* lint
* dont refresh on idp select
* Update console/src/app/modules/idp-create/idp-create.component.html
Co-authored-by: Fabiennne <[email protected] [email protected]
2020-09-17 10:22:41 +02:00
